$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/38e8dd53-d61a-3a02-9e01-0813ec535a48.roa File: 38e8dd53-d61a-3a02-9e01-0813ec535a48.roa (raw, json) Hash identifier: Cxux4yJvTRakX9O5rNOFRSbQVmKNbWSmghRESgqJCFs= Subject key identifier: D2:2E:A4:D6:54:B3:D1:4E:87:88:86:76:59:FD:1E:85:53:EA:E8:F5 Certificate issuer: /CN=a6206bd0-e97f-4bc4-9e06-e1bb9b383624 Certificate serial: 010D0C9F432858495C24392641502534252D0640 Authority key identifier: 03:14:81:13:BC:3C:4E:71:F2:9D:DD:63:06:82:F4:78:1F:61:EF:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/38e8dd53-d61a-3a02-9e01-0813ec535a48.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 6145 IP address blocks: 172.110.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:39:26:41:50:25:34:25:2d:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6206bd0-e97f-4bc4-9e06-e1bb9b383624 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=b457490b-e6dc-40b8-9692-2a8b8307e05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3c:91:46:8c:4c:17:86:8e:70:3b:6a:7e:49: 6b:e9:4a:82:d4:99:6e:a5:60:ed:46:07:77:06:f5: ce:c3:28:98:1f:16:9b:dd:ac:41:39:16:ca:a9:1b: 8d:cf:be:b7:c7:8e:11:cc:0b:58:85:c4:e4:10:88: 3f:9a:27:13:4d:ee:11:59:84:2d:71:01:28:4d:ee: 71:06:e6:bc:ee:3d:54:a4:e1:be:8c:a2:72:68:34: 62:8d:fb:bf:0a:54:55:2e:1b:72:4f:3d:53:7e:de: 16:e0:27:e5:5c:dc:14:b4:fb:62:80:45:27:47:a8: 9a:26:da:aa:3f:cc:d9:54:97:aa:de:ee:13:0e:17: 00:33:b8:b1:69:94:ce:56:ac:89:0b:ec:97:cb:e7: 74:80:d5:ad:05:0d:9d:d7:aa:3f:d9:e0:c8:29:3e: b3:b4:d0:0e:51:b1:9a:ca:1f:eb:3e:33:b1:18:74: c1:d0:f5:c5:61:e2:72:fb:8e:82:81:8c:b4:da:d9: 83:16:7a:c6:88:86:de:33:9b:c9:54:23:c3:52:f2: c6:4e:9a:8f:f6:2c:e1:e9:af:8d:15:c7:c3:32:27: 8c:1a:fb:38:c8:f3:db:d2:04:71:1d:ef:6e:84:74: ca:71:cc:3c:98:7c:02:f5:b6:17:66:82:dc:03:97: c0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2E:A4:D6:54:B3:D1:4E:87:88:86:76:59:FD:1E:85:53:EA:E8:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/38e8dd53-d61a-3a02-9e01-0813ec535a48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.crl X509v3 Authority Key Identifier: keyid:03:14:81:13:BC:3C:4E:71:F2:9D:DD:63:06:82:F4:78:1F:61:EF:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer sbgp-ipAddrBlock: critical IPv4: 172.110.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:7b:e0:05:60:06:ed:73:d5:70:d3:2e:92:0d:24:f5:b8:34: 2d:54:9f:a1:52:3d:e4:83:b8:61:53:ad:16:e3:7a:6f:21:3d: f9:57:04:2e:a8:b4:a8:23:35:ea:de:cb:9e:25:c3:c9:9b:b5: a5:ef:08:72:c0:26:1d:f3:2b:c4:7c:82:24:5e:3f:3b:49:bc: 59:c2:c3:48:de:fd:e1:df:2d:69:7a:2b:fa:63:6a:54:be:07: 04:e2:6e:b8:c9:e0:31:9e:0a:6d:4e:5e:1d:f3:cf:de:e6:36: 9c:b1:08:ec:d1:48:2c:ea:b4:a1:2e:05:0e:56:a1:bd:d5:b3: c6:de:1d:e8:6d:5a:e9:2b:04:46:71:0a:9d:e0:d0:e8:0e:c5: 08:7b:3a:68:ef:28:85:60:23:4e:e3:68:f0:3b:f3:37:e5:12: db:89:da:3f:b8:2c:e6:a7:76:d8:32:39:c3:e4:14:15:6f:97: 51:10:0c:45:ff:ce:9f:1d:61:60:ed:68:f6:9c:16:5a:79:0e: 56:9e:cc:10:60:64:0c:19:0e:70:33:96:0d:c7:a9:66:3d:a4: b5:f9:9a:aa:96:1c:d8:ad:09:29:9a:11:eb:ee:11:77:5d:1f: 15:e0:5b:34:14:84:a5:49:2a:67:79:73:74:85:fb:c3:7f:cd: 1a:92:12:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJDkmQVAlNCUtBkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYyMDZiZDAtZTk3Zi00YmM0LTllMDYtZTFiYjliMzgz NjI0MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk YjQ1NzQ5MGItZTZkYy00MGI4LTk2OTItMmE4YjgzMDdlMDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzyRRoxMF4aOcDtqfklr6UqC1JlupWDtRgd3 BvXOwyiYHxab3axBORbKqRuNz763x44RzAtYhcTkEIg/micTTe4RWYQtcQEoTe5x Bua87j1UpOG+jKJyaDRijfu/ClRVLhtyTz1Tft4W4CflXNwUtPtigEUnR6iaJtqq P8zZVJeq3u4TDhcAM7ixaZTOVqyJC+yXy+d0gNWtBQ2d16o/2eDIKT6ztNAOUbGa yh/rPjOxGHTB0PXFYeJy+46CgYy02tmDFnrGiIbeM5vJVCPDUvLGTpqP9izh6a+N FcfDMieMGvs4yPPb0gRxHe9uhHTKccw8mHwC9bYXZoLcA5fAmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIupNZUs9FOh4iGdln9HoVT6uj1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNjIw NmJkMC1lOTdmLTRiYzQtOWUwNi1lMWJiOWIzODM2MjQvMzhlOGRkNTMtZDYxYS0z YTAyLTllMDEtMDgxM2VjNTM1YTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTYyMDZiZDAtZTk3Zi00YmM0LTll MDYtZTFiYjliMzgzNjI0L2E2MjA2YmQwLWU5N2YtNGJjNC05ZTA2LWUxYmI5YjM4 MzYyNC5jcmwwHwYDVR0jBBgwFoAUAxSBE7w8TnHynd1jBoL0eB9h75swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNjIwNmJkMC1lOTdmLTRiYzQtOWUwNi1lMWJi OWIzODM2MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG6PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHd74AVgBu1z1XDTLpINJPW4NC1Un6FSPeSDuGFTrRbjem8hPflXBC6o tKgjNerey54lw8mbtaXvCHLAJh3zK8R8giRePztJvFnCw0je/eHfLWl6K/pjalS+ BwTibrjJ4DGeCm1OXh3zz97mNpyxCOzRSCzqtKEuBQ5Wob3Vs8beHehtWukrBEZx Cp3g0OgOxQh7OmjvKIVgI07jaPA78zflEtuJ2j+4LOandtgyOcPkFBVvl1EQDEX/ zp8dYWDtaPacFlp5DlaezBBgZAwZDnAzlg3HqWY9pLX5mqqWHNitCSmaEevuEXdd HxXgWzQUhKVJKmd5c3SF+8N/zRqSEtM= -----END CERTIFICATE-----Generated at Mon Apr 28 21:50:39 2025 by rpki-client