$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/df6ffceb-3664-34d8-8a96-01aafc7628e4.roa File: df6ffceb-3664-34d8-8a96-01aafc7628e4.roa (raw, json) Hash identifier: riYjma+OHGl/tTtTNXGB4HjKhGHHf0etm9KmU719ss8= Subject key identifier: 1D:BA:D4:8D:E2:B7:7A:16:EE:62:8E:66:18:1A:D8:AB:E0:B1:FE:C0 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A0D6A95CD98D062BCD521C000 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/df6ffceb-3664-34d8-8a96-01aafc7628e4.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 7029 IP address blocks: 142.173.0.0/20 maxlen: 20 142.173.16.0/20 maxlen: 20 142.173.64.0/20 maxlen: 20 142.173.80.0/20 maxlen: 20 142.173.112.0/20 maxlen: 20 142.173.128.0/20 maxlen: 20 142.173.144.0/20 maxlen: 20 142.173.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:95:cd:98:d0:62:bc:d5:21:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=a9b0c0c5-20e8-4876-89d9-0f7cd9a0c0b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:03:db:a6:77:cc:73:dd:a9:b9:92:dc:19:f6: 43:a5:2d:42:bf:5d:cc:c7:f6:f6:0b:46:b5:dd:f9: 7c:84:84:cc:4c:e3:4a:73:89:51:72:b3:c0:72:89: 03:d8:db:e8:a1:90:32:3b:ed:06:2d:35:85:57:2e: 49:5c:eb:a9:84:2d:35:c0:99:4e:51:01:d4:0a:f6: d6:c8:61:b3:37:72:71:84:4f:16:38:7f:0c:ce:bf: 89:55:11:e3:92:58:76:ba:d0:54:e5:0e:d3:bc:02: 42:e0:0a:b8:81:ce:cc:4b:e6:d8:f1:10:ac:3e:c6: 43:b0:f2:dd:24:fe:9d:0d:f2:26:57:a0:bf:ac:66: e8:c7:71:82:2c:d8:d3:b8:67:14:d1:1f:46:bb:d1: aa:5b:ad:4f:f4:2b:6f:4e:24:91:34:29:40:7b:42: fb:32:00:14:df:aa:62:f6:71:66:33:02:74:fa:4e: f9:72:e6:81:88:29:92:18:8f:a8:8e:be:0b:cb:97: 64:77:eb:83:57:38:b2:a4:e7:d7:b7:bb:c7:e9:82: c4:59:18:c6:80:33:4e:1e:57:d4:9c:d5:71:bc:8d: 65:8d:92:60:19:1d:90:32:6a:e4:2f:e0:bc:60:d9: 31:70:f5:4b:ac:56:ab:d4:17:d7:72:55:ec:21:e9: 5a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BA:D4:8D:E2:B7:7A:16:EE:62:8E:66:18:1A:D8:AB:E0:B1:FE:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/df6ffceb-3664-34d8-8a96-01aafc7628e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 142.173.0.0/19 142.173.64.0/19 142.173.112.0-142.173.159.255 142.173.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:fe:57:05:4a:af:d1:dc:6b:b9:c2:bb:1c:8e:2c:b4:57:9a: 15:df:79:fb:90:19:46:cb:99:48:2d:6c:85:c4:fd:b9:93:30: c7:e5:82:4e:c5:b5:0a:84:be:97:5b:98:72:ed:ab:e4:98:f7: 28:f9:d0:8a:58:b5:0e:29:9d:98:c6:d4:9f:56:f0:59:86:86: 3c:c9:bf:c3:45:f8:fe:7e:4d:b5:0f:d8:e0:f4:d3:0c:8b:22: a8:2d:b6:ee:ca:4d:ce:35:f1:4e:bc:23:bd:5c:8f:98:98:d5: 37:e1:f6:9a:f2:93:96:57:16:b8:0b:f3:fc:fe:db:30:3a:4c: 3c:a7:ae:5d:1a:b7:6c:36:4a:ce:70:bf:4f:57:a5:b3:9f:ef: 35:27:1c:a5:24:98:8f:12:14:9f:87:fc:b3:38:18:b5:f4:a2: 64:5f:c2:72:dd:f2:63:84:82:f1:5d:54:43:1a:f7:3c:63:48: 13:a9:9d:71:c7:a8:a4:90:0b:ba:aa:19:03:6d:03:1d:39:39: fc:8a:f3:a2:64:d1:62:36:55:95:5b:ce:34:b1:97:8b:a8:0e: b9:69:32:ac:6f:ca:5f:90:ec:ee:c2:e2:67:ee:60:82:c3:da: 6a:6b:b9:3e:43:ac:a2:6f:19:0b:ab:e6:de:a8:27:d6:89:39: a0:fb:56:1d -----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWEoNapXNmNBivNUhwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk YTliMGMwYzUtMjBlOC00ODc2LTg5ZDktMGY3Y2Q5YTBjMGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wPbpnfMc92puZLcGfZDpS1Cv13Mx/b2C0a1 3fl8hITMTONKc4lRcrPAcokD2NvooZAyO+0GLTWFVy5JXOuphC01wJlOUQHUCvbW yGGzN3JxhE8WOH8Mzr+JVRHjklh2utBU5Q7TvAJC4Aq4gc7MS+bY8RCsPsZDsPLd JP6dDfImV6C/rGbox3GCLNjTuGcU0R9Gu9GqW61P9CtvTiSRNClAe0L7MgAU36pi 9nFmMwJ0+k75cuaBiCmSGI+ojr4Ly5dkd+uDVziypOfXt7vH6YLEWRjGgDNOHlfU nNVxvI1ljZJgGR2QMmrkL+C8YNkxcPVLrFar1BfXclXsIelaXQIDAQABo4IDbzCC A2swHQYDVR0OBBYEFB261I3it3oW7mKOZhga2Kvgsf7AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZGY2ZmZjZWItMzY2NC0z NGQ4LThhOTYtMDFhYWZjNzYyOGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQFjq0AAwQF jq1AMAwDBASOrXADBAWOrYADBASOrcAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOP5XBUqv0dxrucK7HI4s tFeaFd95+5AZRsuZSC1shcT9uZMwx+WCTsW1CoS+l1uYcu2r5Jj3KPnQili1Dimd mMbUn1bwWYaGPMm/w0X4/n5NtQ/Y4PTTDIsiqC227spNzjXxTrwjvVyPmJjVN+H2 mvKTllcWuAvz/P7bMDpMPKeuXRq3bDZKznC/T1els5/vNSccpSSYjxIUn4f8szgY tfSiZF/Cct3yY4SC8V1UQxr3PGNIE6mdcceopJALuqoZA20DHTk5/IrzomTRYjZV lVvONLGXi6gOuWkyrG/KX5Ds7sLiZ+5ggsPaamu5PkOsom8ZC6vm3qgn1ok5oPtW HQ== -----END CERTIFICATE-----Generated at Sun Jun 15 20:42:56 2025 by rpki-client