$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/48c449b8-36b9-3e35-a8d4-23ac559186ef.roa File: 48c449b8-36b9-3e35-a8d4-23ac559186ef.roa (raw, json) Hash identifier: yZJ9SsVSAY3KvsMhVliCRYFp5zzVALvtZcV9rE+Cug8= Subject key identifier: AB:6D:68:2D:48:2D:6D:67:0A:10:84:9E:C6:FF:B8:78:EE:39:B2:23 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584925B3AABAD1A386384F8F4500 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/48c449b8-36b9-3e35-a8d4-23ac559186ef.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 398156 IP address blocks: 168.220.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:aa:ba:d1:a3:86:38:4f:8f:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=6c6ec50c-2fd9-411c-a56b-79e9bbb593ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a1:cc:ed:3c:af:41:d6:dc:4a:09:8e:b3:cc: fa:a1:ee:07:73:d2:1a:9f:74:f3:0b:73:3a:5b:03: 82:48:65:da:79:97:36:6f:14:c3:d2:92:52:d3:14: ab:f3:e0:fe:55:85:0d:54:2b:c7:3e:9b:ab:90:4f: 3e:dc:89:b4:34:2a:dc:d1:da:ac:a8:c6:18:10:70: ee:d4:ff:c0:cf:87:98:8b:de:6e:c2:9a:cf:99:08: 58:69:5d:64:dd:97:8e:e4:ae:fa:55:63:1e:43:7b: e1:c9:24:95:72:8c:72:ef:80:96:86:a6:e7:98:3a: 60:63:f0:f3:40:63:0b:07:92:dd:42:55:7c:c1:9a: ec:62:05:98:72:aa:7a:df:a0:19:a3:8f:c8:2a:5a: 31:07:2b:00:41:02:cb:f5:56:31:b2:8b:5c:48:64: ec:9d:c4:3b:f6:55:e8:3a:e8:84:80:d4:a8:03:ee: 3b:8b:55:a9:0c:11:21:62:c9:2b:7b:b7:3f:ac:78: 9d:d6:bd:34:d2:1a:d3:6c:b4:90:10:1b:0c:5b:b2: 82:5f:bc:a1:4b:d8:b0:10:a8:5b:10:57:d6:cc:71: 84:2c:66:0f:f4:26:0b:ed:76:b2:0a:54:a7:65:ca: 91:c8:f8:5d:2e:1a:c4:83:17:99:ec:ad:07:5a:82: 2e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6D:68:2D:48:2D:6D:67:0A:10:84:9E:C6:FF:B8:78:EE:39:B2:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/48c449b8-36b9-3e35-a8d4-23ac559186ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 168.220.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:e5:f7:7f:2a:1d:66:1f:82:93:b6:de:58:df:b7:5d:a3:f3: 3d:57:59:3c:c9:fb:33:36:66:59:e3:1b:b5:a0:fb:1e:8e:18: 87:b0:dc:e3:de:97:e4:a0:0e:83:8b:c8:c5:d5:cf:4c:f8:8a: c9:6d:c4:01:3a:bc:c6:c5:91:7d:20:ae:04:12:a7:fd:0c:63: 5f:e7:5e:d4:da:95:24:13:ca:ba:d0:34:5c:c5:e9:8f:55:cd: 41:0d:f6:01:df:c2:0d:0c:7a:7b:86:8b:2c:85:47:d5:f6:49: 48:41:64:8e:68:5b:9b:7e:16:03:d1:49:c6:d5:7d:e9:51:e3: ba:cd:b8:15:98:40:56:49:8f:bd:69:5a:ff:81:b4:cd:a2:35: 2e:da:61:be:0f:ba:8f:4e:e1:f7:99:2c:e1:88:6d:53:2b:38: 71:13:4b:e4:3d:a3:23:6a:29:43:42:66:57:b2:0d:d5:4f:56: 38:f3:e8:79:17:b2:ab:05:9a:ec:32:d4:ff:45:e1:de:72:9e: 4d:10:1d:51:67:f1:dd:cf:1d:94:63:ab:ed:59:e1:1a:ee:06: cb:03:db:e7:54:08:ac:46:98:cd:a5:bc:e1:12:52:a4:e5:89: 5a:44:23:83:21:10:d1:90:54:f5:66:a6:1f:d9:bb:2e:89:10: 3b:20:ca:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkls6q60aOGOE+PRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk NmM2ZWM1MGMtMmZkOS00MTFjLWE1NmItNzllOWJiYjU5M2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaHM7TyvQdbcSgmOs8z6oe4Hc9Ian3TzC3M6 WwOCSGXaeZc2bxTD0pJS0xSr8+D+VYUNVCvHPpurkE8+3Im0NCrc0dqsqMYYEHDu 1P/Az4eYi95uwprPmQhYaV1k3ZeO5K76VWMeQ3vhySSVcoxy74CWhqbnmDpgY/Dz QGMLB5LdQlV8wZrsYgWYcqp636AZo4/IKloxBysAQQLL9VYxsotcSGTsncQ79lXo OuiEgNSoA+47i1WpDBEhYskre7c/rHid1r000hrTbLSQEBsMW7KCX7yhS9iwEKhb EFfWzHGELGYP9CYL7XayClSnZcqRyPhdLhrEgxeZ7K0HWoIuqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKttaC1ILW1nChCEnsb/uHjuObIjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvNDhjNDQ5YjgtMzZiOS0z ZTM1LWE4ZDQtMjNhYzU1OTE4NmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTl938qHWYfgpO23ljft12j8z1XWTzJ+zM2ZlnjG7Wg+x6OGIew3OPe l+SgDoOLyMXVz0z4isltxAE6vMbFkX0grgQSp/0MY1/nXtTalSQTyrrQNFzF6Y9V zUEN9gHfwg0MenuGiyyFR9X2SUhBZI5oW5t+FgPRScbVfelR47rNuBWYQFZJj71p Wv+BtM2iNS7aYb4Puo9O4feZLOGIbVMrOHETS+Q9oyNqKUNCZleyDdVPVjjz6HkX sqsFmuwy1P9F4d5ynk0QHVFn8d3PHZRjq+1Z4RruBssD2+dUCKxGmM2lvOESUqTl iVpEI4MhENGQVPVmph/Zuy6JEDsgyi8= -----END CERTIFICATE-----Generated at Sun Apr 27 23:09:32 2025 by rpki-client