$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b214acd2-07b1-360e-a1cc-31f9d400eba6.roa File: b214acd2-07b1-360e-a1cc-31f9d400eba6.roa (raw, json) Hash identifier: QDFC47GWPYxbCA9A8B54Y9ncz61np/tBrq9Fhq3HzE8= Subject key identifier: 10:9C:53:71:AF:07:53:7D:72:C9:27:3A:5E:9F:2E:B4:84:C4:E8:62 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584925B3AB6CA3102572CC05AF40 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b214acd2-07b1-360e-a1cc-31f9d400eba6.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 398156 IP address blocks: 168.220.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:ab:6c:a3:10:25:72:cc:05:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=651e7120-d941-4fe1-ab3f-f6587ee766ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:19:d9:17:0b:6c:f5:45:7a:91:00:18:0f:c9: 68:70:3f:b2:70:5c:a1:66:ca:45:e7:8b:94:eb:19: b0:e0:f8:10:86:fb:4b:9a:db:95:3a:de:5b:b0:fc: dd:15:0c:52:51:4a:0d:cc:43:db:41:b2:ab:b9:02: 96:41:82:79:d8:ce:94:1c:c1:84:d7:89:c5:a0:6c: 77:cf:86:56:96:a5:6c:ac:25:c0:64:d7:26:af:d4: 3b:ed:2c:8f:ff:f8:e2:ab:a2:8c:d9:b9:c9:a7:7d: b0:f0:d7:06:f4:13:be:ca:a5:ec:c1:83:98:c8:c5: b3:dc:78:9c:8d:f5:1a:27:d1:6a:e8:f6:0c:51:3c: 80:c1:60:e8:92:3d:99:a9:24:d5:9d:49:7b:d3:a6: 08:b9:b9:3e:6f:1e:81:bf:1d:da:d1:61:e2:23:78: a4:6b:34:e8:70:2a:73:14:b2:5b:5d:dc:17:d3:55: c7:c7:4f:a5:94:c7:34:43:b3:97:a6:43:13:95:32: f0:a4:13:b0:7c:83:5c:09:02:ba:00:bc:89:0e:52: b1:70:71:48:32:a5:f1:40:67:f3:2d:da:26:0d:af: a3:02:41:c2:ca:65:69:2d:05:c7:f1:54:e1:ba:15: c8:6f:dc:ba:e7:13:03:e4:d8:76:fa:b7:0c:39:75: 0b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:9C:53:71:AF:07:53:7D:72:C9:27:3A:5E:9F:2E:B4:84:C4:E8:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b214acd2-07b1-360e-a1cc-31f9d400eba6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 168.220.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:6c:e1:04:b1:e7:fc:f4:44:17:61:24:6b:aa:06:11:d5:54: 7b:a1:fc:a0:c9:0e:91:a8:1b:4f:a1:21:ae:17:52:d6:35:3b: 5f:94:86:2b:91:fd:03:e7:25:b5:35:17:2c:e0:aa:6d:ac:d4: 90:bb:cc:79:4d:c9:e5:c9:ac:3a:73:cf:36:e2:77:42:be:67: 2f:86:dc:f9:fb:24:00:45:78:41:2e:d0:c4:e6:fc:c9:eb:14: 3b:ff:04:6b:68:a5:49:ac:b9:01:61:7a:86:b7:90:00:f8:72: 45:01:cf:fe:6f:23:75:26:6d:7a:6e:7a:da:6a:e8:e4:a4:70: 41:fe:ac:34:d4:06:7c:68:cd:bb:88:e6:16:fa:68:ea:51:a4: bb:e5:12:9c:66:b6:44:22:4c:60:e5:5f:28:27:5b:3e:9e:98: 61:a7:41:83:05:25:27:1c:27:8d:00:e1:11:f0:c8:a3:f2:d1: 96:90:fd:44:38:08:d0:64:e9:a4:7d:3c:e7:d9:87:77:75:46: cf:da:03:30:05:28:62:31:2c:5d:d3:4c:91:3d:c5:a1:02:7f: e1:30:e4:45:9c:a4:38:94:c5:f8:d2:f1:36:20:ec:01:a5:c2: 9c:c8:a6:c2:6a:be:37:d1:93:c0:65:e6:d5:d3:be:b5:b1:2c: 51:c4:0b:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkls6tsoxAlcswFr0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk NjUxZTcxMjAtZDk0MS00ZmUxLWFiM2YtZjY1ODdlZTc2NmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBnZFwts9UV6kQAYD8locD+ycFyhZspF54uU 6xmw4PgQhvtLmtuVOt5bsPzdFQxSUUoNzEPbQbKruQKWQYJ52M6UHMGE14nFoGx3 z4ZWlqVsrCXAZNcmr9Q77SyP//jiq6KM2bnJp32w8NcG9BO+yqXswYOYyMWz3Hic jfUaJ9Fq6PYMUTyAwWDokj2ZqSTVnUl706YIubk+bx6Bvx3a0WHiI3ikazTocCpz FLJbXdwX01XHx0+llMc0Q7OXpkMTlTLwpBOwfINcCQK6ALyJDlKxcHFIMqXxQGfz LdomDa+jAkHCymVpLQXH8VThuhXIb9y65xMD5Nh2+rcMOXULhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCcU3GvB1N9csknOl6fLrSExOhiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvYjIxNGFjZDItMDdiMS0z NjBlLWExY2MtMzFmOWQ0MDBlYmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqNzeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxs4QSx5/z0RBdhJGuqBhHVVHuh/KDJDpGoG0+hIa4XUtY1O1+UhiuR /QPnJbU1Fyzgqm2s1JC7zHlNyeXJrDpzzzbid0K+Zy+G3Pn7JABFeEEu0MTm/Mnr FDv/BGtopUmsuQFheoa3kAD4ckUBz/5vI3UmbXpuetpq6OSkcEH+rDTUBnxozbuI 5hb6aOpRpLvlEpxmtkQiTGDlXygnWz6emGGnQYMFJSccJ40A4RHwyKPy0ZaQ/UQ4 CNBk6aR9POfZh3d1Rs/aAzAFKGIxLF3TTJE9xaECf+Ew5EWcpDiUxfjS8TYg7AGl wpzIpsJqvjfRk8Bl5tXTvrWxLFHEC9Y= -----END CERTIFICATE-----Generated at Mon Apr 28 01:58:41 2025 by rpki-client