$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/911d20e2-717b-38a9-8f3b-9e93a0e8d375.roa File: 911d20e2-717b-38a9-8f3b-9e93a0e8d375.roa (raw, json) Hash identifier: 7IYOzylAg1nqTbW7XjN2oY4wKvIoGs5PZJHDqH87XQM= Subject key identifier: 1A:32:5D:11:D8:A4:06:AB:BB:FD:B7:18:77:96:54:DB:75:3D:63:0E Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499AF47C8F8C9D1A851086A800 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/911d20e2-717b-38a9-8f3b-9e93a0e8d375.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 142.59.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:7c:8f:8c:9d:1a:85:10:86:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=8fad409a-e970-4b32-afaa-376f4c0d62ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fd:fe:3f:10:e8:b1:99:69:21:f6:fc:50:45: c7:82:43:bc:c9:e5:14:40:ee:3e:27:62:78:e7:ff: 7c:fe:bd:fe:6a:50:26:60:33:81:f7:0e:71:3c:4b: 99:6f:2c:f9:ca:b7:a9:b4:c1:99:0c:92:52:96:96: 97:8e:fd:ab:49:ca:94:7c:40:85:7d:1d:dc:74:67: bf:07:c9:99:ea:21:35:51:68:99:15:cc:18:43:e5: 51:df:3a:6d:f0:8c:9c:04:a1:2c:c4:73:f0:0f:a6: 50:a1:20:ce:7d:27:8a:ea:b2:b8:94:a1:5c:fc:c4: 8c:6e:22:31:0c:a2:1c:3f:da:86:db:e3:45:92:f3: 14:00:b1:dc:5e:8f:d5:a3:a3:6c:d4:52:84:a8:27: ff:84:22:eb:0a:64:91:c3:99:1d:1c:e2:20:5b:19: 2c:f0:36:2a:ea:c4:a2:1a:14:4c:60:ca:11:27:49: 3d:4e:1e:62:0c:95:39:34:26:58:4c:2b:a9:ec:c7: 03:67:53:d8:c6:70:05:17:c7:fb:6a:04:44:e2:3b: b1:38:65:07:d8:d5:0b:64:4b:de:9d:3e:5f:3b:13: a9:cb:71:66:3b:88:4b:06:d1:c7:69:84:65:25:2f: fb:64:f5:de:f7:7d:c0:b9:b1:3b:e5:17:6e:b7:26: ea:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:32:5D:11:D8:A4:06:AB:BB:FD:B7:18:77:96:54:DB:75:3D:63:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/911d20e2-717b-38a9-8f3b-9e93a0e8d375.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 142.59.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:3f:9a:9a:83:09:9f:73:00:e3:39:f2:5f:f9:c7:ab:ce:dc: fb:2e:84:a6:11:e1:03:a4:ab:17:86:d9:37:2a:f6:f2:ff:88: 33:95:08:be:28:78:56:3e:3b:27:4f:c8:69:01:88:46:06:e9: da:48:76:7c:88:94:5d:db:41:5a:bf:f9:14:0c:83:62:25:6e: d6:d0:cd:ca:62:2a:21:13:63:67:6d:5a:a1:e2:6a:a2:13:c8: e4:7f:ea:a2:fe:22:67:52:0e:62:43:8f:c3:73:b1:e2:92:4f: 5e:c9:88:e5:64:e2:d3:85:88:a6:2f:b9:23:1b:3a:d4:f4:4c: ee:ab:a6:af:ed:4c:4d:70:a0:73:50:33:71:9b:ba:63:1d:43: 2e:2f:24:36:7c:09:0f:1f:9c:91:53:2c:e1:d9:91:a3:85:65: b7:1f:06:b3:b7:20:65:e5:48:2c:07:56:de:f1:37:71:36:ef: f4:fd:f7:76:89:58:2a:b4:f7:4b:66:0c:da:d6:ef:c1:6d:23: 56:ed:af:48:08:92:79:26:67:85:65:5d:8d:78:25:82:17:ec: 7f:1a:ef:4c:4f:c7:d3:9a:2e:15:f8:73:41:96:62:b2:24:15: 5e:01:83:ee:bd:d2:91:f0:c4:5c:8b:29:cb:2d:06:50:30:a5: 9d:96:17:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9HyPjJ0ahRCGqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk OGZhZDQwOWEtZTk3MC00YjMyLWFmYWEtMzc2ZjRjMGQ2MmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf3+PxDosZlpIfb8UEXHgkO8yeUUQO4+J2J4 5/98/r3+alAmYDOB9w5xPEuZbyz5yreptMGZDJJSlpaXjv2rScqUfECFfR3cdGe/ B8mZ6iE1UWiZFcwYQ+VR3zpt8IycBKEsxHPwD6ZQoSDOfSeK6rK4lKFc/MSMbiIx DKIcP9qG2+NFkvMUALHcXo/Vo6Ns1FKEqCf/hCLrCmSRw5kdHOIgWxks8DYq6sSi GhRMYMoRJ0k9Th5iDJU5NCZYTCup7McDZ1PYxnAFF8f7agRE4juxOGUH2NULZEve nT5fOxOpy3FmO4hLBtHHaYRlJS/7ZPXe933AubE75RdutybqQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoyXRHYpAaru/23GHeWVNt1PWMOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOTExZDIwZTItNzE3Yi0z OGE5LThmM2ItOWU5M2EwZThkMzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjjuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAE/mpqDCZ9zAOM58l/5x6vO3PsuhKYR4QOkqxeG2Tcq9vL/iDOVCL4o eFY+OydPyGkBiEYG6dpIdnyIlF3bQVq/+RQMg2IlbtbQzcpiKiETY2dtWqHiaqIT yOR/6qL+ImdSDmJDj8NzseKST17JiOVk4tOFiKYvuSMbOtT0TO6rpq/tTE1woHNQ M3GbumMdQy4vJDZ8CQ8fnJFTLOHZkaOFZbcfBrO3IGXlSCwHVt7xN3E27/T993aJ WCq090tmDNrW78FtI1btr0gIknkmZ4VlXY14JYIX7H8a70xPx9OaLhX4c0GWYrIk FV4Bg+690pHwxFyLKcstBlAwpZ2WF1c= -----END CERTIFICATE-----Generated at Sun Apr 27 16:39:33 2025 by rpki-client