$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/b5af53c5-a1c4-3da8-99c5-f5582ad0fd03.roa File: b5af53c5-a1c4-3da8-99c5-f5582ad0fd03.roa (raw, json) Hash identifier: iZNTSEX8JPaZQ1qGu8Q3NnemvrSxiF2ry9X5R4h2Zb8= Subject key identifier: 04:80:48:A3:65:61:BD:1D:78:81:15:25:AC:97:EC:21:F2:4C:68:82 Certificate issuer: /CN=f9c367c2-ae39-45af-aac9-ca536571d493 Certificate serial: 010D0C9F43285848F4F69A697EA01C4BA0392F80 Authority key identifier: 32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/b5af53c5-a1c4-3da8-99c5-f5582ad0fd03.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 53658 IP address blocks: 142.0.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:9a:69:7e:a0:1c:4b:a0:39:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c367c2-ae39-45af-aac9-ca536571d493 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=f6dce3b0-1086-421a-9361-af83fb6f76d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f2:35:b3:4a:66:bb:2c:ac:56:c5:7e:dd:87: 85:b1:70:5d:c1:a5:a1:57:9f:bc:35:b6:c8:63:36: 30:4b:f1:e1:77:e0:b5:f0:97:4e:17:36:70:93:82: 46:56:9d:ad:90:86:76:1b:eb:e2:11:50:8e:35:f9: 07:64:8b:85:59:45:36:c2:9e:d1:a3:82:43:54:d1: e9:47:03:67:e8:99:e0:42:fe:e5:d0:cb:ad:74:c9: aa:b3:2d:d9:81:a3:00:9b:c0:82:27:e1:9a:a8:b1: 14:1e:9d:e9:6b:bd:3e:41:d0:f0:a0:22:d5:59:7d: c8:71:74:78:30:37:d9:3c:6c:9d:bd:26:8d:45:5a: a9:60:ff:f5:f7:0e:ec:43:2e:d9:83:36:3b:5f:44: a2:82:5f:c0:26:5f:48:cb:2f:f2:8f:e2:69:85:22: a8:45:0e:fc:19:65:c0:61:40:13:9d:fd:a4:01:5d: 39:02:b2:5e:49:bd:e5:0e:94:4a:91:a8:fe:9b:21: 71:7d:09:6b:9d:79:f1:90:08:bd:b3:1e:68:5a:64: 5c:72:44:9f:87:96:5a:be:dd:0b:59:e1:09:0c:d1: 4f:67:eb:90:58:39:fd:04:7e:07:12:24:61:d1:02: 27:50:5e:b5:44:54:73:71:a0:b4:71:dc:94:0a:8f: b0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:80:48:A3:65:61:BD:1D:78:81:15:25:AC:97:EC:21:F2:4C:68:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/b5af53c5-a1c4-3da8-99c5-f5582ad0fd03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl X509v3 Authority Key Identifier: keyid:32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer sbgp-ipAddrBlock: critical IPv4: 142.0.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:34:4b:b6:e0:2c:4d:de:c4:93:50:7d:d4:1d:32:78:17:57: e1:c5:d0:2f:49:cb:9e:8b:de:f1:26:75:a9:cc:9e:89:63:9d: 4c:a6:b4:53:77:f0:1b:34:48:d6:65:c7:e9:e0:4f:4d:88:03: 9e:c0:90:01:1a:58:64:ac:57:ff:05:25:77:d3:89:34:de:71: ea:be:da:6c:66:ea:80:8f:ec:2c:b8:5f:c3:21:a6:cd:82:c2: c6:ed:ad:3e:7b:57:38:d8:d0:a6:17:54:4b:c5:5c:2f:e9:7c: 21:df:eb:6e:55:b9:a8:81:a6:85:16:69:91:67:d5:6c:6c:7e: d0:20:dd:3b:c7:ad:f7:16:0b:fc:66:b6:22:5e:aa:53:d8:db: 2d:d1:6e:60:13:84:53:90:5b:67:08:b5:6f:29:ed:0f:f2:58: 5c:c1:4e:84:8a:89:8d:be:cb:29:bc:51:27:d8:a8:6a:0f:54: 73:8e:a6:a6:8c:f6:18:9a:26:e8:e8:94:ad:77:4a:38:a1:a9: 2a:23:46:6e:1c:c5:70:5e:62:ee:a2:cd:17:de:ba:b6:d5:b4: 6e:e5:f5:fb:38:d3:db:28:82:42:ba:93:08:13:43:e5:19:19: 9e:83:66:4b:9e:10:f1:fd:3b:f0:4c:57:30:18:52:4e:02:4f: 99:63:60:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09pppfqAcS6A5L4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjljMzY3YzItYWUzOS00NWFmLWFhYzktY2E1MzY1NzFk NDkzMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZjZkY2UzYjAtMTA4Ni00MjFhLTkzNjEtYWY4M2ZiNmY3NmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPI1s0pmuyysVsV+3YeFsXBdwaWhV5+8NbbI YzYwS/Hhd+C18JdOFzZwk4JGVp2tkIZ2G+viEVCONfkHZIuFWUU2wp7Ro4JDVNHp RwNn6JngQv7l0MutdMmqsy3ZgaMAm8CCJ+GaqLEUHp3pa70+QdDwoCLVWX3IcXR4 MDfZPGydvSaNRVqpYP/19w7sQy7ZgzY7X0Sigl/AJl9Iyy/yj+JphSKoRQ78GWXA YUATnf2kAV05ArJeSb3lDpRKkaj+myFxfQlrnXnxkAi9sx5oWmRcckSfh5Zavt0L WeEJDNFPZ+uQWDn9BH4HEiRh0QInUF61RFRzcaC0cdyUCo+w/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASASKNlYb0deIEVJayX7CHyTGiCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMz NjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUzNjU3MWQ0OTMvYjVhZjUzYzUtYTFjNC0z ZGE4LTk5YzUtZjU1ODJhZDBmZDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjljMzY3YzItYWUzOS00NWFmLWFh YzktY2E1MzY1NzFkNDkzL2Y5YzM2N2MyLWFlMzktNDVhZi1hYWM5LWNhNTM2NTcx ZDQ5My5jcmwwHwYDVR0jBBgwFoAUMplxZjowEaL2SVBbM9OH2n84vacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMzNjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUz NjU3MWQ0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjgC0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABc0S7bgLE3exJNQfdQdMngXV+HF0C9Jy56L3vEmdanMnoljnUymtFN3 8Bs0SNZlx+ngT02IA57AkAEaWGSsV/8FJXfTiTTeceq+2mxm6oCP7Cy4X8Mhps2C wsbtrT57VzjY0KYXVEvFXC/pfCHf625VuaiBpoUWaZFn1WxsftAg3TvHrfcWC/xm tiJeqlPY2y3RbmAThFOQW2cItW8p7Q/yWFzBToSKiY2+yym8USfYqGoPVHOOpqaM 9hiaJujolK13SjihqSojRm4cxXBeYu6izRfeurbVtG7l9fs409sogkK6kwgTQ+UZ GZ6DZkueEPH9O/BMVzAYUk4CT5ljYBo= -----END CERTIFICATE-----Generated at Sat Apr 12 02:06:41 2025 by rpki-client