$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/f6064a69-8e2a-30ff-a4e0-a91669f30752.roa File: f6064a69-8e2a-30ff-a4e0-a91669f30752.roa (raw, json) Hash identifier: pryl+B6AjkViqIBpGCvhdjDXDrSlr9p2t/abzIY50bE= Subject key identifier: 17:74:98:A3:EB:4F:D0:EE:3A:21:14:0E:12:85:45:BE:85:BB:55:E9 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584925B3ABF90F98C4F93EBB0480 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/f6064a69-8e2a-30ff-a4e0-a91669f30752.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 398156 IP address blocks: 158.120.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:ab:f9:0f:98:c4:f9:3e:bb:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=0d7b7df3-8328-48ed-ad46-678de01b9aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b9:f4:84:4a:e5:a9:8b:68:05:c1:f1:f8:56: ca:f8:7f:10:df:fa:c8:bd:fa:db:91:de:fa:c6:d9: 60:af:65:62:88:9e:96:75:41:4e:fa:50:53:6f:a1: 5d:f0:bb:e5:ed:ad:36:5f:2f:01:dc:11:80:fb:c2: 44:63:36:20:43:e7:cf:87:b4:71:29:83:c3:6b:da: 1f:db:a6:be:1b:0f:9d:df:f0:43:14:5c:54:de:bf: 01:ac:fa:e8:1c:d1:4a:5a:5e:60:28:38:99:70:aa: 6e:fa:c6:5f:2e:b0:4a:ed:60:3d:64:3d:35:9c:4e: b6:d0:97:90:be:88:67:4d:6e:f2:90:d9:f1:6e:ec: e2:f8:b5:db:34:85:2e:cb:46:23:a8:16:db:37:53: 70:17:cc:0c:c8:d1:5b:5a:e5:73:9c:49:78:eb:e9: 59:40:58:d9:a3:a6:95:24:e3:8b:01:47:7c:2f:6a: 87:03:33:51:c9:25:8e:6c:cc:fd:5e:dd:bb:a9:4b: a7:0a:b2:58:bb:2e:22:4d:a2:e4:3c:4e:6b:9f:20: fa:91:d0:7c:6d:83:1b:a5:7a:6e:27:92:1a:e1:33: ae:6f:6e:bd:ab:45:c1:f3:7e:ab:00:88:37:dc:d0: c7:9b:08:fa:2b:9c:7b:d8:93:d4:79:d4:1c:bb:fb: 18:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:74:98:A3:EB:4F:D0:EE:3A:21:14:0E:12:85:45:BE:85:BB:55:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/f6064a69-8e2a-30ff-a4e0-a91669f30752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:3c:17:6e:60:dc:6e:1c:28:eb:7d:14:7b:fa:92:22:e6:6a: c2:47:22:db:0f:9a:80:bd:8f:74:55:16:49:01:4b:00:ad:a6: a0:fa:1a:db:37:74:37:2f:c7:01:b9:e0:98:3e:61:dd:de:e5: 96:e7:d6:55:28:a5:14:03:f5:3c:21:79:cf:e0:b5:5a:40:b9: cd:3b:cb:b9:70:b1:35:29:2a:16:1a:a2:66:5a:a6:c4:55:34: 56:e4:b4:7e:fa:20:07:f2:00:90:a3:55:a9:b7:03:90:8f:c4: 03:5b:8a:ba:af:a4:cf:67:36:55:80:f2:5b:25:c5:4c:68:a0: ca:ab:9a:00:bf:e0:6e:9d:7d:3c:8a:02:61:c4:eb:a4:06:d1: e1:2e:51:43:9b:8c:9d:56:7e:42:2d:47:08:a6:34:94:8e:1d: 48:46:ab:09:14:37:f3:2f:c7:62:67:e5:25:9c:e3:71:36:ea: c4:e1:74:f7:69:09:f7:cd:52:6c:da:a2:5b:0d:07:67:e2:8b: c7:00:e9:5c:e9:31:3a:ba:bd:9d:bb:1f:23:98:ac:b2:6d:15: df:70:e9:d4:c4:94:d7:b7:41:19:47:29:55:2d:7e:18:43:1b: ad:9f:93:7e:c2:cf:1c:d3:68:9c:6a:07:7c:38:e7:19:0a:5b: 5c:39:98:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkls6v5D5jE+T67BIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk MGQ3YjdkZjMtODMyOC00OGVkLWFkNDYtNjc4ZGUwMWI5YWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbn0hErlqYtoBcHx+FbK+H8Q3/rIvfrbkd76 xtlgr2ViiJ6WdUFO+lBTb6Fd8Lvl7a02Xy8B3BGA+8JEYzYgQ+fPh7RxKYPDa9of 26a+Gw+d3/BDFFxU3r8BrProHNFKWl5gKDiZcKpu+sZfLrBK7WA9ZD01nE620JeQ vohnTW7ykNnxbuzi+LXbNIUuy0YjqBbbN1NwF8wMyNFbWuVznEl46+lZQFjZo6aV JOOLAUd8L2qHAzNRySWObMz9Xt27qUunCrJYuy4iTaLkPE5rnyD6kdB8bYMbpXpu J5Ia4TOub269q0XB836rAIg33NDHmwj6K5x72JPUedQcu/sYnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBd0mKPrT9DuOiEUDhKFRb6Fu1XpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvZjYwNjRhNjktOGUyYS0z MGZmLWE0ZTAtYTkxNjY5ZjMwNzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADU8F25g3G4cKOt9FHv6kiLmasJHItsPmoC9j3RVFkkBSwCtpqD6Gts3 dDcvxwG54Jg+Yd3e5Zbn1lUopRQD9Twhec/gtVpAuc07y7lwsTUpKhYaomZapsRV NFbktH76IAfyAJCjVam3A5CPxANbirqvpM9nNlWA8lslxUxooMqrmgC/4G6dfTyK AmHE66QG0eEuUUObjJ1WfkItRwimNJSOHUhGqwkUN/Mvx2Jn5SWc43E26sThdPdp CffNUmzaolsNB2fii8cA6VzpMTq6vZ27HyOYrLJtFd9w6dTElNe3QRlHKVUtfhhD G62fk37CzxzTaJxqB3w45xkKW1w5mLo= -----END CERTIFICATE-----Generated at Mon Apr 28 02:17:19 2025 by rpki-client