$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/3c70d43d-85bd-39c4-974b-b26dc07b9073.roa File: 3c70d43d-85bd-39c4-974b-b26dc07b9073.roa (raw, json) Hash identifier: oXzMi0gUCeifoBd8VS9Y58WU4zdhj8FIhl+bGJPkH8w= Subject key identifier: F6:81:0D:BC:5F:07:B5:F5:7C:90:5C:8D:1C:DD:ED:90:71:9B:74:F7 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584925B3AE8760FB256DE23F1400 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/3c70d43d-85bd-39c4-974b-b26dc07b9073.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 398156 IP address blocks: 168.220.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:ae:87:60:fb:25:6d:e2:3f:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=2d5ce87b-d288-409f-8b81-b199855bddc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8a:8e:1e:5c:5f:93:90:6e:a8:7c:63:88:c0: 8f:d6:68:02:eb:5e:46:e5:e9:22:c1:d6:4b:2b:8f: 2f:f9:9b:d1:a4:a9:ad:07:14:1a:c0:28:51:81:80: ee:65:f5:2c:16:90:ca:57:79:bd:3d:da:c1:88:71: f7:60:6c:61:7b:26:5d:29:a7:f8:bc:4c:52:36:57: c7:cd:8a:92:30:7e:c5:65:90:32:4a:27:90:86:87: 11:5f:d0:7c:5a:d3:8f:a6:89:f2:16:e4:76:ca:75: fc:5a:e1:ca:0f:2d:24:f0:f6:97:b5:18:5e:a6:73: 99:4c:3f:4a:7b:75:4d:10:94:84:64:70:14:36:08: 39:e7:71:f6:de:cc:5b:b8:3b:f3:5a:55:9d:e1:65: fe:f7:9d:1d:54:33:86:65:b6:b5:06:a8:6e:37:d0: 67:4d:b6:16:9d:bd:54:e7:d8:4e:47:21:86:68:77: 95:de:d9:dd:72:37:08:98:61:73:25:7f:58:91:1e: f1:e3:f9:8e:ab:70:5f:9b:ea:87:07:23:bf:07:e9: 1a:47:c6:18:5d:44:4f:13:d1:fe:49:54:bc:fd:dc: 7a:21:4b:dd:e1:01:65:eb:bd:86:14:25:8d:d8:33: ee:21:f6:d6:83:f3:f7:10:22:d6:3f:9c:19:be:12: 34:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:81:0D:BC:5F:07:B5:F5:7C:90:5C:8D:1C:DD:ED:90:71:9B:74:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/3c70d43d-85bd-39c4-974b-b26dc07b9073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 168.220.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ac:ae:50:cf:b2:74:84:11:f7:28:b5:3d:29:90:49:df:23: 86:33:1c:49:0d:20:cd:ae:35:78:c9:c7:be:ad:34:91:7c:bf: 5b:8f:41:11:2a:8d:4f:46:9f:9b:ab:fb:1e:d0:a3:c1:e2:ba: 6c:41:7f:d6:be:7e:2a:7e:c8:30:39:eb:f3:ce:cb:32:30:3a: c1:82:1a:9d:c0:b7:45:7f:18:86:cb:c5:ae:b9:9b:72:1c:cb: 10:c5:9f:7e:d6:22:09:00:fd:f7:97:31:a1:3b:1d:63:ce:09: 79:45:73:51:e6:71:aa:e2:0c:b0:04:51:31:74:df:14:27:87: d3:49:14:4a:7b:03:b8:0d:36:ba:61:5b:ff:11:ec:97:2b:cf: 3e:57:eb:10:fa:8a:b2:fc:69:0a:92:17:23:62:c1:2e:2c:72: b2:f9:94:ac:47:bb:bb:9f:47:3d:e4:65:40:ec:47:0a:b9:4f: 88:fb:a1:f8:3e:13:84:49:18:31:3f:59:35:19:e8:72:e8:8a: 9d:49:5e:ca:f0:c9:a8:9e:ba:03:1e:16:bc:d3:05:86:32:00: 03:9e:d4:52:71:9a:51:56:bf:89:de:2d:95:3f:75:07:f5:e3: 99:7a:4c:89:7e:fb:26:89:92:cf:07:4c:cb:15:d7:eb:98:ac: ab:ad:86:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkls66HYPslbeI/FAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk MmQ1Y2U4N2ItZDI4OC00MDlmLThiODEtYjE5OTg1NWJkZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIqOHlxfk5BuqHxjiMCP1mgC615G5ekiwdZL K48v+ZvRpKmtBxQawChRgYDuZfUsFpDKV3m9PdrBiHH3YGxheyZdKaf4vExSNlfH zYqSMH7FZZAySieQhocRX9B8WtOPponyFuR2ynX8WuHKDy0k8PaXtRhepnOZTD9K e3VNEJSEZHAUNgg553H23sxbuDvzWlWd4WX+950dVDOGZba1BqhuN9BnTbYWnb1U 59hORyGGaHeV3tndcjcImGFzJX9YkR7x4/mOq3Bfm+qHByO/B+kaR8YYXURPE9H+ SVS8/dx6IUvd4QFl672GFCWN2DPuIfbWg/P3ECLWP5wZvhI0OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaBDbxfB7X1fJBcjRzd7ZBxm3T3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvM2M3MGQ0M2QtODViZC0z OWM0LTk3NGItYjI2ZGMwN2I5MDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASsrlDPsnSEEfcotT0pkEnfI4YzHEkNIM2uNXjJx76tNJF8v1uPQREq jU9Gn5ur+x7Qo8HiumxBf9a+fip+yDA56/POyzIwOsGCGp3At0V/GIbLxa65m3Ic yxDFn37WIgkA/feXMaE7HWPOCXlFc1HmcariDLAEUTF03xQnh9NJFEp7A7gNNrph W/8R7Jcrzz5X6xD6irL8aQqSFyNiwS4scrL5lKxHu7ufRz3kZUDsRwq5T4j7ofg+ E4RJGDE/WTUZ6HLoip1JXsrwyaieugMeFrzTBYYyAAOe1FJxmlFWv4neLZU/dQf1 45l6TIl++yaJks8HTMsV1+uYrKuthr0= -----END CERTIFICATE-----Generated at Sun Apr 27 21:30:47 2025 by rpki-client