$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/e422d3a4-7ed0-30a2-b306-a0e19fdd800b.roa File: e422d3a4-7ed0-30a2-b306-a0e19fdd800b.roa (raw, json) Hash identifier: XuBl2IVxeq6T8fsfWgHdX09KTaK5hmM2lU/DHsicLM8= Subject key identifier: 5A:1A:4C:1D:DC:3D:3B:71:18:29:2D:96:E4:13:16:47:23:D5:19:DD Certificate issuer: /CN=abf1f0ec-0f56-4356-9ce5-9c637405f386 Certificate serial: 010D0C9F43285848A70C4013DEDB1ABE72477BC0 Authority key identifier: 97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/e422d3a4-7ed0-30a2-b306-a0e19fdd800b.roa Signing time: Fri 24 Jan 2025 16:11:34 +0000 ROA not before: Fri 24 Jan 2025 16:11:34 +0000 ROA not after: Thu 24 Apr 2025 15:11:34 +0000 asID: 22423 IP address blocks: 144.208.96.0/22 maxlen: 22 144.208.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a7:0c:40:13:de:db:1a:be:72:47:7b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf1f0ec-0f56-4356-9ce5-9c637405f386 Validity Not Before: Jan 24 16:11:34 2025 GMT Not After : Apr 24 15:11:34 2025 GMT Subject: CN=7fa278b0-d64f-483c-9c53-40ebbde5e46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d6:be:6f:74:2d:91:2b:5c:7b:82:a8:0d:08: e1:a8:ad:f9:e8:5f:4b:2c:6b:16:60:c1:5e:7e:0c: af:32:3a:51:f1:3e:01:04:af:b0:e1:a9:f1:e1:82: 49:bd:70:3c:46:64:62:9d:6c:ba:78:65:3e:5f:51: b8:64:7f:61:34:27:97:52:8d:15:f6:ff:65:ed:be: d3:ac:8c:e2:b3:2d:9a:88:f2:d5:63:80:06:04:6e: 79:38:35:e4:ca:33:7e:63:df:14:e9:8e:6a:e5:86: 7e:c7:b3:57:fc:3e:a6:e3:3c:8a:3e:d1:08:48:0c: c1:9c:d7:fa:69:4b:21:70:4b:53:01:bc:0a:ba:06: 3f:35:d6:48:46:26:8c:e8:42:13:8a:01:50:f8:4d: 22:9c:75:52:92:0a:48:d4:f2:30:ee:24:8c:6e:32: 4d:46:c7:ef:93:f6:c3:d0:89:ee:a0:53:76:73:de: 17:80:7d:74:98:2e:cd:e3:ec:05:30:d9:38:3c:3e: a6:0a:16:ff:fa:d6:ac:04:9e:fb:c7:f4:e8:1e:ef: d2:ca:ca:d0:fd:61:46:c0:76:eb:bb:90:de:c7:79: ec:19:2c:f7:6c:59:54:fb:d4:8b:05:dc:8b:9d:d2: 7a:d1:f7:01:a0:c1:4f:7a:f9:7f:fe:c1:3f:68:17: 3c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1A:4C:1D:DC:3D:3B:71:18:29:2D:96:E4:13:16:47:23:D5:19:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/e422d3a4-7ed0-30a2-b306-a0e19fdd800b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl X509v3 Authority Key Identifier: keyid:97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer sbgp-ipAddrBlock: critical IPv4: 144.208.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:36:99:51:3c:81:04:21:13:e6:1e:f5:7e:ea:6c:18:ca:b5: e6:6d:c0:d4:aa:3b:42:a2:3b:70:fe:ad:61:75:c0:a1:c9:46: 03:b1:35:11:3a:5c:71:e0:fb:0a:1c:02:f7:20:3f:e8:ba:99: 9d:33:b3:81:22:75:85:7e:54:dc:07:7c:ea:c1:ae:c9:9d:cb: 57:b0:c6:61:4a:89:24:a8:cf:3a:99:3b:3a:4d:82:52:cf:bf: 8a:98:09:dd:7e:4b:87:8e:2d:67:5c:29:be:12:1b:68:d8:18: c8:8b:ad:73:b1:96:8c:4c:8f:cd:d4:e1:0b:6f:cf:ee:08:be: 2c:7f:a7:0c:4d:bf:29:3c:f4:2d:1a:13:0d:37:e3:e7:0f:ab: 95:59:ba:6b:27:02:55:9f:c4:bd:91:50:9c:41:7e:cc:b8:4b: 0c:f9:ce:5e:13:93:56:2c:8d:9d:0d:c0:06:89:2d:97:e7:00: 29:87:8c:40:3d:3a:b9:d6:4f:0a:9b:9b:47:06:38:3a:ca:05: ee:dd:3e:90:c6:84:18:e0:21:80:d5:28:89:87:a9:e9:b0:7b: a6:cc:60:03:35:d2:3b:05:ce:56:5e:66:88:50:7e:8c:82:a3: 1c:c0:90:71:08:14:7f:96:9e:49:93:f1:70:8b:4d:a9:0a:1a: 31:fb:6a:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEinDEAT3tsavnJHe8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmMWYwZWMtMGY1Ni00MzU2LTljZTUtOWM2Mzc0MDVm Mzg2MB4XDTI1MDEyNDE2MTEzNFoXDTI1MDQyNDE1MTEzNFowLzEtMCsGA1UEAxMk N2ZhMjc4YjAtZDY0Zi00ODNjLTljNTMtNDBlYmJkZTVlNDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnda+b3QtkStce4KoDQjhqK356F9LLGsWYMFe fgyvMjpR8T4BBK+w4anx4YJJvXA8RmRinWy6eGU+X1G4ZH9hNCeXUo0V9v9l7b7T rIzisy2aiPLVY4AGBG55ODXkyjN+Y98U6Y5q5YZ+x7NX/D6m4zyKPtEISAzBnNf6 aUshcEtTAbwKugY/NdZIRiaM6EITigFQ+E0inHVSkgpI1PIw7iSMbjJNRsfvk/bD 0InuoFN2c94XgH10mC7N4+wFMNk4PD6mChb/+tasBJ77x/ToHu/SysrQ/WFGwHbr u5Dex3nsGSz3bFlU+9SLBdyLndJ60fcBoMFPevl//sE/aBc8/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoaTB3cPTtxGCktluQTFkcj1RndMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYmYx ZjBlYy0wZjU2LTQzNTYtOWNlNS05YzYzNzQwNWYzODYvZTQyMmQzYTQtN2VkMC0z MGEyLWIzMDYtYTBlMTlmZGQ4MDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWJmMWYwZWMtMGY1Ni00MzU2LTlj ZTUtOWM2Mzc0MDVmMzg2L2FiZjFmMGVjLTBmNTYtNDM1Ni05Y2U1LTljNjM3NDA1 ZjM4Ni5jcmwwHwYDVR0jBBgwFoAUl0vJRyT03QZQ3x0qkYl1JimQ2r4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYmYxZjBlYy0wZjU2LTQzNTYtOWNlNS05YzYz NzQwNWYzODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkNBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQ2mVE8gQQhE+Ye9X7qbBjKteZtwNSqO0KiO3D+rWF1wKHJRgOxNRE6 XHHg+wocAvcgP+i6mZ0zs4EidYV+VNwHfOrBrsmdy1ewxmFKiSSozzqZOzpNglLP v4qYCd1+S4eOLWdcKb4SG2jYGMiLrXOxloxMj83U4Qtvz+4Ivix/pwxNvyk89C0a Ew034+cPq5VZumsnAlWfxL2RUJxBfsy4Swz5zl4Tk1YsjZ0NwAaJLZfnACmHjEA9 OrnWTwqbm0cGODrKBe7dPpDGhBjgIYDVKImHqemwe6bMYAM10jsFzlZeZohQfoyC oxzAkHEIFH+WnkmT8XCLTakKGjH7ahE= -----END CERTIFICATE-----Generated at Fri Apr 11 23:48:08 2025 by rpki-client