$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1aa09281-d649-31c6-be20-6305a6a3137d.roa File: 1aa09281-d649-31c6-be20-6305a6a3137d.roa (raw, json) Hash identifier: p+h6qKYd0odss76BadN0oEvKyHp+n+pfoyjD7VIZGZQ= Subject key identifier: 62:66:7F:D7:5F:AD:92:F2:2C:F1:A5:24:32:0D:0D:A3:2F:0F:31:92 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F43285848F926908B5A2A4E57942B9B80 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1aa09281-d649-31c6-be20-6305a6a3137d.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 14618 IP address blocks: 143.223.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:90:8b:5a:2a:4e:57:94:2b:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=62cdb421-3abf-4788-9b90-580447bb6bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:21:c5:bf:80:63:03:c4:47:0c:c2:9e:54:ea: e0:4e:1a:aa:95:dd:56:f5:96:a2:d0:00:fb:45:e7: 09:58:fc:68:2e:b8:74:68:32:10:d4:2c:d2:de:0c: 07:4e:f7:95:b9:b4:58:b7:c6:b9:ec:f7:57:44:90: d8:2f:06:dc:28:f0:60:47:13:06:a2:4a:cc:d8:e6: 10:f2:6f:f1:4f:0c:cc:ea:65:c9:c4:b1:40:16:92: 94:e1:a9:06:5a:1f:7b:8b:14:0e:98:91:3c:17:f3: 13:f8:c2:9a:ce:99:61:95:7a:27:d4:c9:46:95:1d: d0:38:2d:32:cc:7e:89:ee:84:20:32:2a:e9:cc:ab: 2d:fa:ce:c4:36:48:f9:0d:d9:a8:8d:83:95:75:c8: 41:05:49:bb:52:2e:ec:0c:e6:07:25:12:14:b7:21: 49:54:82:50:70:70:41:09:18:57:d9:41:b1:eb:1f: 30:c0:3c:f8:28:81:ea:bf:88:78:98:d1:05:af:3b: bf:8d:62:e0:ec:29:19:08:af:a7:65:68:14:3c:da: b3:25:53:5b:cb:84:7d:f1:c1:e6:eb:cc:51:7b:28: 2b:2a:c0:f7:8b:9a:02:8c:b3:dd:2b:a0:77:b8:df: 8c:51:d2:d2:e3:8e:20:9b:b3:a6:a3:a0:0c:05:f1: de:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:66:7F:D7:5F:AD:92:F2:2C:F1:A5:24:32:0D:0D:A3:2F:0F:31:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1aa09281-d649-31c6-be20-6305a6a3137d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 143.223.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:5e:c1:9f:97:32:83:7f:77:97:5a:aa:8f:01:80:c8:91:d4: 98:e6:e1:f4:39:81:b7:40:82:64:e0:75:8a:0d:4d:53:11:78: 40:ea:ad:99:f8:43:1a:2c:fb:c5:d1:a3:c1:8a:7d:6d:ec:ac: 91:40:c7:d5:59:a6:bf:29:f4:3a:65:47:41:3e:1b:cf:7c:7a: 95:4f:98:3e:b5:2d:57:17:dd:78:68:2c:e4:a7:f3:72:17:b1: 8d:72:18:23:7c:29:32:31:7a:d5:c5:27:9d:af:89:bb:18:71: 23:5c:8a:ae:b9:b4:eb:6c:0e:9d:c7:e9:3d:cd:f8:ac:f9:6f: 13:02:63:0f:ff:ed:26:67:8a:3e:0a:f8:f0:38:0f:90:5e:e3: 6b:2e:63:b5:e7:10:53:72:ca:a1:d6:73:5d:86:34:28:a2:2e: 25:c1:a6:90:1e:6b:9b:da:c6:df:be:10:b6:10:ed:52:14:db: 96:b1:d6:e9:ce:ff:88:79:97:f1:13:f3:07:5c:39:eb:a9:df: 52:be:b2:e3:2c:a4:e6:71:66:d9:bd:40:81:db:9a:10:c2:d5: 78:31:8a:f0:93:16:6f:36:8e:0c:0a:7f:74:5c:54:8f:fd:e0: 99:4e:f8:38:3b:a3:48:5a:96:81:bd:64:22:43:3b:c5:41:dc: 0a:53:3d:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JpCLWipOV5Qrm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NjJjZGI0MjEtM2FiZi00Nzg4LTliOTAtNTgwNDQ3YmI2YmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SHFv4BjA8RHDMKeVOrgThqqld1W9Zai0AD7 RecJWPxoLrh0aDIQ1CzS3gwHTveVubRYt8a57PdXRJDYLwbcKPBgRxMGokrM2OYQ 8m/xTwzM6mXJxLFAFpKU4akGWh97ixQOmJE8F/MT+MKazplhlXon1MlGlR3QOC0y zH6J7oQgMirpzKst+s7ENkj5DdmojYOVdchBBUm7Ui7sDOYHJRIUtyFJVIJQcHBB CRhX2UGx6x8wwDz4KIHqv4h4mNEFrzu/jWLg7CkZCK+nZWgUPNqzJVNby4R98cHm 68xReygrKsD3i5oCjLPdK6B3uN+MUdLS444gm7Omo6AMBfHeqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJmf9dfrZLyLPGlJDINDaMvDzGSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvMWFhMDkyODEtZDY0OS0z MWM2LWJlMjAtNjMwNWE2YTMxMzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj9+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJewZ+XMoN/d5daqo8BgMiR1Jjm4fQ5gbdAgmTgdYoNTVMReEDqrZn4 Qxos+8XRo8GKfW3srJFAx9VZpr8p9DplR0E+G898epVPmD61LVcX3XhoLOSn83IX sY1yGCN8KTIxetXFJ52vibsYcSNciq65tOtsDp3H6T3N+Kz5bxMCYw//7SZnij4K +PA4D5Be42suY7XnEFNyyqHWc12GNCiiLiXBppAea5vaxt++ELYQ7VIU25ax1unO /4h5l/ET8wdcOeup31K+suMspOZxZtm9QIHbmhDC1XgxivCTFm82jgwKf3RcVI/9 4JlO+Dg7o0haloG9ZCJDO8VB3ApTPdk= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:09 2025 by rpki-client