$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/24a49588-d1d6-3ad7-bcf5-deb044ad01d1.roa File: 24a49588-d1d6-3ad7-bcf5-deb044ad01d1.roa (raw, json) Hash identifier: e/OAd6dIi/vpf8QJji+rDXsYVNeP2MHeoTYjmf4A/dI= Subject key identifier: CB:02:B7:E4:0C:5C:47:14:21:DA:71:E2:95:F1:9D:AF:67:7D:B5:01 Certificate issuer: /CN=1ccfe266-0609-49cd-b2ba-671a64efdc7c Certificate serial: 010D0C9F4328584A10353C811E848197545B0080 Authority key identifier: D2:F9:69:B3:D5:80:E9:D5:A6:9F:39:9B:27:89:E8:E2:73:69:11:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/24a49588-d1d6-3ad7-bcf5-deb044ad01d1.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 14618 IP address blocks: 142.202.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/1ccfe266-0609-49cd-b2ba-671a64efdc7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/1ccfe266-0609-49cd-b2ba-671a64efdc7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:3c:81:1e:84:81:97:54:5b:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ccfe266-0609-49cd-b2ba-671a64efdc7c Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=bde41ea3-660e-469d-b0dc-56effe6043cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ab:93:79:3a:bf:73:d3:99:dc:0e:67:c7:e9: 26:5b:36:fd:09:d0:55:fe:d0:95:37:93:ab:8a:3b: af:65:c9:7c:7c:64:fc:e0:67:23:75:4a:30:18:b4: b8:2d:e3:2a:5b:28:30:6b:bb:6f:90:d0:f8:47:a2: d5:6e:ba:90:a7:ee:fc:c0:50:02:4f:36:57:62:db: b4:51:8e:f5:f4:6c:1a:c1:06:20:07:a1:a5:03:83: 41:ef:5f:7d:6c:8e:10:c8:67:e7:97:76:f4:a7:ac: c2:ea:1a:02:9f:dd:7d:c9:bf:76:ad:39:2f:8a:4e: a5:60:3c:19:d0:83:e2:0e:b9:fc:a5:1c:35:59:63: 81:64:9e:0e:44:97:5a:70:74:56:94:0b:a7:35:92: 01:cc:68:63:d1:98:70:86:2e:04:28:49:9b:48:7c: 21:d2:42:46:45:a8:8e:cb:03:c5:9e:0a:67:67:27: da:69:43:04:94:e9:36:a2:02:ac:da:d1:28:a8:4a: 10:03:f4:2d:08:0b:27:87:7a:ff:3d:de:e6:24:e3: 4b:14:ec:5a:7b:2d:8e:14:27:8f:62:20:16:a5:7d: 11:58:d8:d1:86:b5:28:1f:2c:38:41:4d:b1:10:7f: 6e:b8:46:2b:27:72:e8:88:d3:7f:6e:26:bc:0a:45: b5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:02:B7:E4:0C:5C:47:14:21:DA:71:E2:95:F1:9D:AF:67:7D:B5:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/24a49588-d1d6-3ad7-bcf5-deb044ad01d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/1ccfe266-0609-49cd-b2ba-671a64efdc7c.crl X509v3 Authority Key Identifier: keyid:D2:F9:69:B3:D5:80:E9:D5:A6:9F:39:9B:27:89:E8:E2:73:69:11:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c.cer sbgp-ipAddrBlock: critical IPv4: 142.202.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:30:80:7e:18:df:8f:86:a5:52:b7:50:07:5e:85:35:49:86: 80:d7:54:02:66:10:2f:79:a0:6d:09:7a:73:4c:7d:1d:20:61: 92:94:7c:02:63:c3:eb:f3:e2:cf:d5:8a:b0:0f:0b:b8:a4:71: cc:a4:07:5e:8a:94:bc:a5:20:dc:79:53:4a:40:77:3d:51:14: 59:61:18:31:f3:b7:30:69:a5:d3:db:dd:20:84:ed:28:66:27: 0b:d9:bc:5b:aa:cd:b4:b5:f9:8e:43:e2:9c:76:16:79:c6:ae: 1b:7b:12:da:cc:1c:87:54:6a:e9:0b:e2:c2:a8:06:df:79:2f: 8a:62:f8:38:7f:29:f2:e5:ea:fb:85:20:35:7d:f2:74:d0:c0: 09:62:db:82:d2:59:75:48:5c:59:48:b1:d9:2a:38:c8:a0:52: 62:50:26:5f:e4:d9:28:8a:9a:ef:83:3a:e0:3b:ea:01:9a:59: 5e:57:98:c8:70:3c:a5:01:a3:ff:df:70:29:0c:0f:f3:45:f1: ed:fe:dd:cb:da:83:2c:3e:b6:c7:bd:70:fa:64:a9:d2:60:5e: d0:e8:19:3a:ee:44:c5:34:01:07:6f:82:36:6e:02:7e:ee:ad: 4a:56:d0:70:ff:53:2a:47:64:eb:e3:93:3a:26:42:82:78:05: f9:4b:d0:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNTyBHoSBl1RbAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNjZmUyNjYtMDYwOS00OWNkLWIyYmEtNjcxYTY0ZWZk YzdjMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk YmRlNDFlYTMtNjYwZS00NjlkLWIwZGMtNTZlZmZlNjA0M2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxauTeTq/c9OZ3A5nx+kmWzb9CdBV/tCVN5Or ijuvZcl8fGT84GcjdUowGLS4LeMqWygwa7tvkND4R6LVbrqQp+78wFACTzZXYtu0 UY719GwawQYgB6GlA4NB7199bI4QyGfnl3b0p6zC6hoCn919yb92rTkvik6lYDwZ 0IPiDrn8pRw1WWOBZJ4ORJdacHRWlAunNZIBzGhj0Zhwhi4EKEmbSHwh0kJGRaiO ywPFngpnZyfaaUMElOk2ogKs2tEoqEoQA/QtCAsnh3r/Pd7mJONLFOxaey2OFCeP YiAWpX0RWNjRhrUoHyw4QU2xEH9uuEYrJ3LoiNN/bia8CkW1owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsCt+QMXEcUIdpx4pXxna9nfbUBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xY2Nm ZTI2Ni0wNjA5LTQ5Y2QtYjJiYS02NzFhNjRlZmRjN2MvMjRhNDk1ODgtZDFkNi0z YWQ3LWJjZjUtZGViMDQ0YWQwMWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWNjZmUyNjYtMDYwOS00OWNkLWIy YmEtNjcxYTY0ZWZkYzdjLzFjY2ZlMjY2LTA2MDktNDljZC1iMmJhLTY3MWE2NGVm ZGM3Yy5jcmwwHwYDVR0jBBgwFoAU0vlps9WA6dWmnzmbJ4no4nNpERkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xY2NmZTI2Ni0wNjA5LTQ5Y2QtYjJiYS02NzFh NjRlZmRjN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjsqBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFowgH4Y34+GpVK3UAdehTVJhoDXVAJmEC95oG0JenNMfR0gYZKUfAJj w+vz4s/VirAPC7ikccykB16KlLylINx5U0pAdz1RFFlhGDHztzBppdPb3SCE7Shm JwvZvFuqzbS1+Y5D4px2FnnGrht7EtrMHIdUaukL4sKoBt95L4pi+Dh/KfLl6vuF IDV98nTQwAli24LSWXVIXFlIsdkqOMigUmJQJl/k2SiKmu+DOuA76gGaWV5XmMhw PKUBo//fcCkMD/NF8e3+3cvagyw+tse9cPpkqdJgXtDoGTruRMU0AQdvgjZuAn7u rUpW0HD/UypHZOvjkzomQoJ4BflL0NA= -----END CERTIFICATE-----Generated at Sun Jun 15 12:26:28 2025 by rpki-client