$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/641289ff-4442-3d1e-9fea-b77b6846946e.roa File: 641289ff-4442-3d1e-9fea-b77b6846946e.roa (raw, json) Hash identifier: bsBFq36w6vHiNhRqLq9HOAGRBH+553QeaGWZCrgma6w= Subject key identifier: 6B:AD:D3:28:42:5F:6F:23:A1:C9:49:71:73:16:A7:F9:1A:49:CC:79 Certificate issuer: /CN=f9c367c2-ae39-45af-aac9-ca536571d493 Certificate serial: 010D0C9F4328584964844AE90252E8E9B2608080 Authority key identifier: 32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/641289ff-4442-3d1e-9fea-b77b6846946e.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 8075 IP address blocks: 142.0.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:4a:e9:02:52:e8:e9:b2:60:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c367c2-ae39-45af-aac9-ca536571d493 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=93ad33cc-be43-4b09-93da-0e376b03dfb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d1:15:07:e4:9d:dc:21:db:b5:71:13:d7:cd: 89:3c:fa:02:ff:55:5f:bb:88:57:73:42:19:f2:38: 91:b4:ef:d4:b5:62:9a:c2:ba:b6:96:5b:8c:c2:bb: f8:14:17:b4:52:2d:1b:11:92:a2:7a:0b:8d:3c:e2: 15:47:0f:bb:dc:57:96:98:38:ff:c6:e5:9a:39:6c: 80:6a:9e:23:2f:2d:6a:3d:6e:17:5c:86:80:27:d7: 17:70:da:6d:65:a8:ac:04:b0:cf:69:16:8d:91:2f: 2a:fc:0b:b0:14:47:b7:db:87:1d:b3:d5:9f:64:75: 4a:d8:ba:27:82:35:c4:e9:60:9f:43:ca:6a:10:ca: d6:a6:03:e8:c7:5d:76:aa:65:5d:cc:57:81:2f:3a: db:6b:f4:59:1a:e3:f0:c3:00:86:ea:8a:fd:f3:95: 44:e6:83:2d:bb:62:01:08:fb:42:83:d4:8d:b5:6a: 4c:d6:06:13:76:da:5d:19:8d:4a:2d:9a:66:6d:df: fa:fd:de:fa:0e:91:ee:63:f8:11:8a:fd:ea:5c:56: 0b:e4:58:e2:d3:e5:9d:34:d7:75:8b:1a:91:bd:bb: 0f:d8:d4:cf:a2:a0:79:94:a6:4d:e5:39:e5:f4:0d: 55:97:d5:c6:b7:21:02:9c:17:1b:0e:86:71:74:ef: c2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:AD:D3:28:42:5F:6F:23:A1:C9:49:71:73:16:A7:F9:1A:49:CC:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/641289ff-4442-3d1e-9fea-b77b6846946e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl X509v3 Authority Key Identifier: keyid:32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer sbgp-ipAddrBlock: critical IPv4: 142.0.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:8b:1b:2e:db:b2:d8:32:d6:e2:dc:16:c3:0a:6d:0e:b7:f7: 49:b2:48:b9:ce:dc:7c:5a:c5:2d:87:01:39:16:33:54:1e:47: 21:8a:3a:84:5d:7e:e2:1f:94:9b:ac:f4:5a:d2:ac:e7:1b:ea: be:dd:c6:86:26:07:aa:fc:f4:4d:c5:71:fd:89:86:d3:18:e6: 60:25:1c:2b:f6:08:ea:62:b7:7d:6d:95:7c:76:b3:e8:73:92: 55:cb:4e:cc:85:94:08:85:37:17:86:55:bf:60:fd:a2:f2:52: da:93:b7:5a:f0:20:c4:a4:14:3b:e9:14:8f:bd:5b:c3:61:be: c0:7c:85:2e:d8:80:5a:d8:b2:f0:12:67:e2:f3:c9:9a:28:cd: ec:bf:7f:09:04:22:56:74:ba:4e:18:ac:29:6b:a1:0b:3b:0b: f6:0b:ab:14:81:66:29:cc:5b:10:8b:8f:f2:22:61:27:40:d2: b2:cd:ac:0b:f9:78:37:31:a1:ff:91:b1:22:91:5a:ca:f7:4f: 22:4c:06:78:14:8f:0c:5c:28:06:b1:54:15:fb:09:bf:20:eb: a6:0a:35:ac:12:88:d5:fc:53:45:03:c0:0c:da:34:d0:01:20: 73:a5:1e:34:f1:1b:64:6d:6c:f9:db:5a:db:1f:18:4f:8a:ef: 68:e7:f4:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhErpAlLo6bJggIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjljMzY3YzItYWUzOS00NWFmLWFhYzktY2E1MzY1NzFk NDkzMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk OTNhZDMzY2MtYmU0My00YjA5LTkzZGEtMGUzNzZiMDNkZmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdEVB+Sd3CHbtXET182JPPoC/1Vfu4hXc0IZ 8jiRtO/UtWKawrq2lluMwrv4FBe0Ui0bEZKieguNPOIVRw+73FeWmDj/xuWaOWyA ap4jLy1qPW4XXIaAJ9cXcNptZaisBLDPaRaNkS8q/AuwFEe324cds9WfZHVK2Lon gjXE6WCfQ8pqEMrWpgPox112qmVdzFeBLzrba/RZGuPwwwCG6or985VE5oMtu2IB CPtCg9SNtWpM1gYTdtpdGY1KLZpmbd/6/d76DpHuY/gRiv3qXFYL5Fji0+WdNNd1 ixqRvbsP2NTPoqB5lKZN5Tnl9A1Vl9XGtyECnBcbDoZxdO/CowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGut0yhCX28joclJcXMWp/kaScx5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMz NjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUzNjU3MWQ0OTMvNjQxMjg5ZmYtNDQ0Mi0z ZDFlLTlmZWEtYjc3YjY4NDY5NDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjljMzY3YzItYWUzOS00NWFmLWFh YzktY2E1MzY1NzFkNDkzL2Y5YzM2N2MyLWFlMzktNDVhZi1hYWM5LWNhNTM2NTcx ZDQ5My5jcmwwHwYDVR0jBBgwFoAUMplxZjowEaL2SVBbM9OH2n84vacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMzNjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUz NjU3MWQ0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjgC9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCLGy7bstgy1uLcFsMKbQ6390mySLnO3HxaxS2HATkWM1QeRyGKOoRd fuIflJus9FrSrOcb6r7dxoYmB6r89E3Fcf2JhtMY5mAlHCv2COpit31tlXx2s+hz klXLTsyFlAiFNxeGVb9g/aLyUtqTt1rwIMSkFDvpFI+9W8NhvsB8hS7YgFrYsvAS Z+LzyZoozey/fwkEIlZ0uk4YrClroQs7C/YLqxSBZinMWxCLj/IiYSdA0rLNrAv5 eDcxof+RsSKRWsr3TyJMBngUjwxcKAaxVBX7Cb8g66YKNawSiNX8U0UDwAzaNNAB IHOlHjTxG2RtbPnbWtsfGE+K72jn9Jc= -----END CERTIFICATE-----Generated at Fri Apr 4 16:45:29 2025 by rpki-client