$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/05d2c68e-0c88-35a0-9960-1cccd79e23b3.roa File: 05d2c68e-0c88-35a0-9960-1cccd79e23b3.roa (raw, json) Hash identifier: c8fp76HcLdX2qZ9QvD4Vf4SoPHcIbwnohpECPEaMBuw= Subject key identifier: 22:F1:81:B4:62:A7:E4:EE:6B:F5:D4:32:1D:9B:2D:3A:80:AD:80:E6 Certificate issuer: /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b Certificate serial: 010D0C9F4328584937D93A1E8E98509ABDAEC200 Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/05d2c68e-0c88-35a0-9960-1cccd79e23b3.roa Signing time: Mon 17 Mar 2025 13:00:52 +0000 ROA not before: Mon 17 Mar 2025 13:00:52 +0000 ROA not after: Sun 15 Jun 2025 13:00:52 +0000 asID: 30045 IP address blocks: 142.224.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:37:d9:3a:1e:8e:98:50:9a:bd:ae:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b Validity Not Before: Mar 17 13:00:52 2025 GMT Not After : Jun 15 13:00:52 2025 GMT Subject: CN=ceff1e83-0e0e-439b-b745-4c169ccd8d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:95:93:69:dc:4a:ce:ff:c5:50:21:ee:94:08: 00:da:44:79:68:e7:52:22:e9:40:7d:ff:c7:f6:0e: 96:3c:8e:44:b1:79:40:ae:6c:66:57:54:c2:0e:d7: 72:91:7a:d9:80:30:51:b6:fd:84:2b:f9:25:0c:3d: 00:84:75:3e:62:79:23:5d:22:3c:08:0f:b8:f4:b7: ed:2c:84:2c:31:d2:47:0a:8b:11:cd:13:f2:ee:49: f4:da:bd:90:d0:a8:de:f6:76:ff:c2:88:34:de:ec: fe:a6:ac:8b:af:94:16:17:a7:07:1f:81:91:ec:46: c1:25:21:37:33:2c:97:84:d0:de:28:ed:c4:f5:55: 48:67:4d:f1:7d:dd:0d:67:93:4d:53:6d:fe:c9:7d: a8:79:80:be:93:81:05:71:5b:1b:b0:44:78:a3:20: 44:00:25:80:e1:c6:f4:f3:ae:fd:47:eb:ec:2f:52: 60:c3:cd:0f:0e:a7:c4:34:46:72:bd:1d:51:a2:a5: 04:6c:8b:d4:38:66:ae:0f:91:e1:f6:f0:61:df:72: c6:f0:c6:21:2d:a1:3f:27:b4:1f:f3:ed:be:b2:0b: 26:0d:ef:ec:7b:77:a8:99:c7:ca:f4:b0:f8:c3:a8: 28:75:d5:a3:4a:bf:8f:29:17:b2:d4:38:f8:c5:a2: cd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F1:81:B4:62:A7:E4:EE:6B:F5:D4:32:1D:9B:2D:3A:80:AD:80:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/05d2c68e-0c88-35a0-9960-1cccd79e23b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl X509v3 Authority Key Identifier: keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer sbgp-ipAddrBlock: critical IPv4: 142.224.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ab:c7:89:71:1c:ce:80:c1:72:ea:19:6f:f9:18:c7:cb:4e: 06:a1:6a:c2:ed:62:f0:01:75:3f:78:c6:35:55:87:6d:6b:86: b7:55:4c:bd:4c:2f:bc:38:79:ac:c1:25:17:85:00:ea:79:28: 7c:64:3d:1a:6d:af:c8:01:5b:d7:df:76:f6:70:f4:82:30:01: cc:a4:3a:f7:88:90:91:86:00:d1:bf:b0:e6:a2:af:72:4f:f1: 39:8a:41:8a:b6:e4:e4:f7:a3:87:3d:11:e9:73:0c:3b:26:45: 67:7e:be:6a:82:a3:9f:98:9a:4e:4d:15:f2:90:f9:a0:ee:9a: 7c:cc:0e:d3:db:58:2e:39:e4:c2:4e:29:e6:1e:dc:9b:aa:3f: 27:c5:32:cb:e6:2f:32:8b:c3:0c:a0:9c:99:55:20:c3:eb:ee: db:96:db:9a:31:cc:cc:9d:23:4e:0c:2f:b3:eb:64:36:85:e0: 0d:eb:4e:be:dc:d3:7a:00:96:ac:23:db:5d:55:94:d7:13:f3: f7:7c:ab:13:92:c2:95:b3:b8:05:a7:26:74:39:1d:d6:0b:89: 39:59:90:ce:0b:07:04:a1:d3:06:81:bb:2e:fe:45:a0:82:ab: 24:3a:09:fc:e2:72:9e:d4:09:a8:25:af:34:fc:29:bc:dc:c6: 91:e6:61:3d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEk32ToejphQmr2uwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFjMWE1NmItZWEzMy00YmQ2LTlkM2UtMDA4OTZhOTFk YjZiMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2VmZjFlODMtMGUwZS00MzliLWI3NDUtNGMxNjljY2Q4ZDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JWTadxKzv/FUCHulAgA2kR5aOdSIulAff/H 9g6WPI5EsXlArmxmV1TCDtdykXrZgDBRtv2EK/klDD0AhHU+YnkjXSI8CA+49Lft LIQsMdJHCosRzRPy7kn02r2Q0Kje9nb/wog03uz+pqyLr5QWF6cHH4GR7EbBJSE3 MyyXhNDeKO3E9VVIZ03xfd0NZ5NNU23+yX2oeYC+k4EFcVsbsER4oyBEACWA4cb0 8679R+vsL1Jgw80PDqfENEZyvR1RoqUEbIvUOGauD5Hh9vBh33LG8MYhLaE/J7Qf 8+2+sgsmDe/se3eomcfK9LD4w6goddWjSr+PKRey1Dj4xaLN6QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCLxgbRip+Tua/XUMh2bLTqArYDmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YWMx YTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5NmE5MWRiNmIvMDVkMmM2OGUtMGM4OC0z NWEwLTk5NjAtMWNjY2Q3OWUyM2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGFjMWE1NmItZWEzMy00YmQ2LTlk M2UtMDA4OTZhOTFkYjZiLzhhYzFhNTZiLWVhMzMtNGJkNi05ZDNlLTAwODk2YTkx ZGI2Yi5jcmwwHwYDVR0jBBgwFoAUg3U6Yyir4o99wKc7TDozymMHEyUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YWMxYTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5 NmE5MWRiNmIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjuAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEARavHiXEczoDBcuoZb/kYx8tOBqFqwu1i8AF1P3jGNVWHbWuGt1VMvUwv vDh5rMElF4UA6nkofGQ9Gm2vyAFb19929nD0gjABzKQ694iQkYYA0b+w5qKvck/x OYpBirbk5Pejhz0R6XMMOyZFZ36+aoKjn5iaTk0V8pD5oO6afMwO09tYLjnkwk4p 5h7cm6o/J8Uyy+YvMovDDKCcmVUgw+vu25bbmjHMzJ0jTgwvs+tkNoXgDetOvtzT egCWrCPbXVWU1xPz93yrE5LClbO4BacmdDkd1guJOVmQzgsHBKHTBoG7Lv5FoIKr JDoJ/OJyntQJqCWvNPwpvNzGkeZhPQ== -----END CERTIFICATE-----Generated at Mon Apr 28 21:31:09 2025 by rpki-client