$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/82a704e9-14d7-3191-818c-a9caf66bc542.roa File: 82a704e9-14d7-3191-818c-a9caf66bc542.roa (raw, json) Hash identifier: znQKNwpQQ7ZIusGsZ9k4U1L6dtZyXdcjbROk0WUWrW4= Subject key identifier: 74:AA:0F:5C:36:1C:23:D9:B8:8A:82:22:DD:49:28:E6:5E:A0:17:67 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B642FEC080C41EEC80A9440 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/82a704e9-14d7-3191-818c-a9caf66bc542.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 63.142.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:2f:ec:08:0c:41:ee:c8:0a:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=f4568a77-a769-4ba4-8bc6-c7a621d9556f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4e:02:76:64:4c:6b:fb:2d:67:d8:e4:0d:bb: 4a:a5:40:35:c4:8a:bb:72:cf:ad:09:12:b6:3b:73: 21:cc:49:ea:ee:25:14:89:06:d5:ba:a0:74:1a:6e: f0:27:18:4a:c4:7c:d6:b6:28:9a:65:84:35:92:81: e2:26:ad:76:77:2c:ff:fc:24:14:59:53:98:57:73: ef:d3:ed:09:de:e6:a2:88:e7:06:c6:e1:74:c8:d1: f8:4c:55:ca:ce:22:32:e1:81:53:64:41:35:e2:bc: 6b:06:89:53:b0:e9:4c:fe:12:fe:f0:fc:40:69:6f: 9e:99:06:85:ae:ba:29:d9:93:64:90:4a:76:ab:bb: cd:cf:2b:8d:27:25:7a:c6:ba:a9:d1:af:ca:21:f5: f9:20:7f:18:4f:8a:11:5f:b7:16:46:fc:ab:11:fe: 03:9e:8a:25:15:38:24:8f:5a:b2:9f:91:26:f8:00: 47:08:a2:7e:56:f7:00:f7:38:71:2f:99:d8:b3:d7: 56:86:d3:7e:ae:d7:ce:1c:a7:32:57:35:b1:43:37: 1e:0e:1b:5f:70:94:69:26:09:5e:69:23:30:20:c3: da:9d:f2:2a:a4:61:99:e1:2c:18:92:00:80:c9:92: d2:ed:ae:37:6b:d0:59:d0:c5:51:15:b2:9c:22:01: f6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AA:0F:5C:36:1C:23:D9:B8:8A:82:22:DD:49:28:E6:5E:A0:17:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/82a704e9-14d7-3191-818c-a9caf66bc542.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 63.142.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:af:40:f7:11:ec:40:89:9e:c5:56:63:fa:78:c8:96:bc:34: 15:dd:92:21:7d:14:1e:32:43:38:22:a6:d6:c1:f2:ba:97:52: f4:f3:d4:ef:a0:30:5e:6a:f9:07:10:82:4a:f8:35:f4:03:2d: 91:d6:89:32:72:4f:92:ca:b2:7d:1a:97:e5:01:82:07:80:6b: 4f:68:f2:ba:8c:e1:91:7b:da:bf:67:58:4c:ac:b5:08:a8:06: fa:f9:85:29:32:6b:eb:3a:41:76:18:d3:d2:ef:b2:30:09:a8: c6:83:8c:a6:76:7b:a9:87:0a:44:37:ac:e5:61:09:4c:33:08: 11:ae:e6:1d:23:bd:f4:97:66:5c:0c:7b:f2:d2:54:a8:87:11: 54:40:f4:72:8f:ce:11:93:41:9a:8b:af:3c:13:c1:11:fb:9f: 41:d4:1f:0c:7f:8c:50:27:d3:06:18:f2:bc:a4:e1:ed:06:40: 45:c4:ba:e3:fd:80:b4:1e:a4:08:ed:26:69:f9:af:a3:34:0e: cf:27:16:54:0a:fb:a5:1b:ab:0b:62:cc:f3:38:2e:99:dc:a5: d0:ff:cb:f9:92:55:69:64:b1:11:c8:db:29:78:ae:fb:cf:dc: ce:7a:7c:3a:ba:95:8d:a0:e7:3a:35:75:65:4c:a6:c0:61:f1: 30:94:c6:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZC/sCAxB7sgKlEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ZjQ1NjhhNzctYTc2OS00YmE0LThiYzYtYzdhNjIxZDk1NTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA104CdmRMa/stZ9jkDbtKpUA1xIq7cs+tCRK2 O3MhzEnq7iUUiQbVuqB0Gm7wJxhKxHzWtiiaZYQ1koHiJq12dyz//CQUWVOYV3Pv 0+0J3uaiiOcGxuF0yNH4TFXKziIy4YFTZEE14rxrBolTsOlM/hL+8PxAaW+emQaF rrop2ZNkkEp2q7vNzyuNJyV6xrqp0a/KIfX5IH8YT4oRX7cWRvyrEf4DnoolFTgk j1qyn5Em+ABHCKJ+VvcA9zhxL5nYs9dWhtN+rtfOHKcyVzWxQzceDhtfcJRpJgle aSMwIMPanfIqpGGZ4SwYkgCAyZLS7a43a9BZ0MVRFbKcIgH2vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSqD1w2HCPZuIqCIt1JKOZeoBdnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvODJhNzA0ZTktMTRkNy0z MTkxLTgxOGMtYTljYWY2NmJjNTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEP46QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWvQPcR7ECJnsVWY/p4yJa8NBXdkiF9FB4yQzgiptbB8rqXUvTz1O+g MF5q+QcQgkr4NfQDLZHWiTJyT5LKsn0al+UBggeAa09o8rqM4ZF72r9nWEystQio Bvr5hSkya+s6QXYY09LvsjAJqMaDjKZ2e6mHCkQ3rOVhCUwzCBGu5h0jvfSXZlwM e/LSVKiHEVRA9HKPzhGTQZqLrzwTwRH7n0HUHwx/jFAn0wYY8ryk4e0GQEXEuuP9 gLQepAjtJmn5r6M0Ds8nFlQK+6UbqwtizPM4LpncpdD/y/mSVWlksRHI2yl4rvvP 3M56fDq6lY2g5zo1dWVMpsBh8TCUxiQ= -----END CERTIFICATE-----Generated at Mon Apr 28 00:22:54 2025 by rpki-client