$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/4ecf45e8-e3cf-3c4a-9a68-749778a99f1b.roa File: 4ecf45e8-e3cf-3c4a-9a68-749778a99f1b.roa (raw, json) Hash identifier: wNAVRD5IH1YKF4EQ5/Z2PnM8VVZcLY4qFAztAjb9qaY= Subject key identifier: E7:FB:76:C6:60:A2:66:A4:01:D4:51:5E:0F:28:62:8C:C7:1C:39:29 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F43285849DC8FA9DD3C7814D82D47E480 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/4ecf45e8-e3cf-3c4a-9a68-749778a99f1b.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 14618 IP address blocks: 142.147.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:a9:dd:3c:78:14:d8:2d:47:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=8a881af0-a590-4718-a535-c224bc9772bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f2:8e:a5:15:48:72:4c:bf:cb:87:2f:bc:08: 5b:e7:03:e2:4f:ba:f6:dd:99:e4:13:28:e5:56:17: 00:6e:b6:89:7e:6e:0c:9b:78:38:b8:31:99:cc:0f: 76:3b:d2:78:03:14:97:b9:14:d2:d7:f4:17:14:d3: 60:c3:53:7a:f5:41:b2:ae:4c:2c:e0:9e:c4:ce:20: ee:ee:83:b7:9b:b7:35:b3:af:1e:ea:21:91:43:68: 0f:38:6a:76:a2:8a:74:1b:e7:cd:49:f9:90:34:60: e7:01:27:82:c0:d9:cc:9c:09:8f:0a:5d:64:e6:ec: 0b:52:fc:62:b2:ac:6c:48:96:19:92:0c:7f:84:3f: 85:37:50:db:67:73:d2:7e:23:86:39:1a:e4:53:b6: 53:5d:ad:56:5d:0b:b4:2a:ae:b3:21:38:ed:8d:24: 76:8d:8f:19:cc:8c:d9:ce:24:48:da:23:bf:4b:5b: 89:84:31:96:5b:d9:c8:48:5c:d6:8a:9c:1b:5d:83: f4:bf:c7:e6:ab:76:80:76:33:61:d7:52:83:fb:01: cd:84:e8:20:92:ae:f9:01:40:ae:1d:43:d7:ba:96: cf:35:e6:59:17:98:8b:8f:d8:cb:16:b4:03:25:b2: 79:ba:1d:48:b3:00:e2:32:26:1f:a9:25:be:2a:2c: 53:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FB:76:C6:60:A2:66:A4:01:D4:51:5E:0F:28:62:8C:C7:1C:39:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/4ecf45e8-e3cf-3c4a-9a68-749778a99f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 142.147.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:19:3a:66:66:64:b5:50:a5:5e:05:b6:e1:eb:84:8b:45:41: c5:91:d0:b2:08:2b:a2:8b:0a:ea:ed:6d:c1:d4:4d:56:ec:78: b0:8f:d8:ce:f2:cd:60:b6:9c:b5:54:9a:7f:6a:51:9b:0a:62: e8:b5:e3:17:f2:6b:71:13:1a:5a:81:55:ae:b5:bd:94:f9:ea: 67:d5:3b:e9:89:c8:ba:51:69:3f:0d:24:c8:3c:dc:49:b5:ec: 3e:98:61:a0:15:a8:6a:57:55:7d:f8:0c:a7:a6:22:31:9b:78: 5a:a6:43:0e:a2:dd:40:2c:18:2d:06:89:20:ce:70:3f:f5:21: aa:72:f8:80:33:64:62:30:f4:81:22:fc:73:2a:6a:ce:fa:bc: 79:85:5b:39:17:da:ec:52:fd:7b:44:8a:ac:cd:58:e4:22:96: 33:72:6c:fd:2e:d7:12:f3:d6:3b:d1:4a:56:b8:99:62:aa:cd: b7:e6:2b:5b:73:25:d5:60:bc:56:25:9c:56:c6:95:ec:18:50: 00:3e:06:0a:5e:17:4b:ff:e6:01:65:8f:bc:2a:c2:19:93:80: 55:55:bf:c9:64:23:c3:b2:6f:4a:1f:83:b3:27:ed:bb:21:85: 9f:1b:aa:db:e9:ce:9c:24:37:96:26:77:52:db:86:7f:2b:03: 4d:63:72:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj6ndPHgU2C1H5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk OGE4ODFhZjAtYTU5MC00NzE4LWE1MzUtYzIyNGJjOTc3MmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvKOpRVIcky/y4cvvAhb5wPiT7r23ZnkEyjl VhcAbraJfm4Mm3g4uDGZzA92O9J4AxSXuRTS1/QXFNNgw1N69UGyrkws4J7EziDu 7oO3m7c1s68e6iGRQ2gPOGp2oop0G+fNSfmQNGDnASeCwNnMnAmPCl1k5uwLUvxi sqxsSJYZkgx/hD+FN1DbZ3PSfiOGORrkU7ZTXa1WXQu0Kq6zITjtjSR2jY8ZzIzZ ziRI2iO/S1uJhDGWW9nISFzWipwbXYP0v8fmq3aAdjNh11KD+wHNhOggkq75AUCu HUPXupbPNeZZF5iLj9jLFrQDJbJ5uh1IswDiMiYfqSW+KixTawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOf7dsZgomakAdRRXg8oYozHHDkpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvNGVjZjQ1ZTgtZTNjZi0z YzRhLTlhNjgtNzQ5Nzc4YTk5ZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjpMLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMZOmZmZLVQpV4FtuHrhItFQcWR0LIIK6KLCurtbcHUTVbseLCP2M7y zWC2nLVUmn9qUZsKYui14xfya3ETGlqBVa61vZT56mfVO+mJyLpRaT8NJMg83Em1 7D6YYaAVqGpXVX34DKemIjGbeFqmQw6i3UAsGC0GiSDOcD/1Iapy+IAzZGIw9IEi /HMqas76vHmFWzkX2uxS/XtEiqzNWOQiljNybP0u1xLz1jvRSla4mWKqzbfmK1tz JdVgvFYlnFbGlewYUAA+BgpeF0v/5gFlj7wqwhmTgFVVv8lkI8Oyb0ofg7Mn7bsh hZ8bqtvpzpwkN5Ymd1Lbhn8rA01jchA= -----END CERTIFICATE-----Generated at Sun Jun 15 09:09:18 2025 by rpki-client