$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/0eaabc44-9d97-35ce-9f53-f44a2784b1ea.roa File: 0eaabc44-9d97-35ce-9f53-f44a2784b1ea.roa (raw, json) Hash identifier: nz1/sSO8aNWpUa12Kjj+AizxCfsBd6J9brtWbJuxbBc= Subject key identifier: BF:03:4B:56:85:89:CC:B9:38:0E:EF:E4:CD:77:37:8C:37:8F:CD:0D Certificate issuer: /CN=e94dafbf-328e-40f2-ab0d-4718f1177861 Certificate serial: 010D0C9F43285849203C0ABBEAAE31633723B2C0 Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/0eaabc44-9d97-35ce-9f53-f44a2784b1ea.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 63296 IP address blocks: 142.214.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:0a:bb:ea:ae:31:63:37:23:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=ce1e2abb-d148-4b18-9d88-689c1be034be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dd:13:c7:37:0a:69:0b:bd:32:d5:34:e2:9b: e8:dc:11:63:3d:91:91:0f:ed:1b:81:05:b7:74:29: e2:5e:7b:39:3f:9f:c2:ab:dd:02:e9:da:46:ea:8e: 67:c7:07:7f:c9:f4:89:ce:e3:e4:f2:b9:84:36:1c: 37:23:a9:0b:14:7a:c3:7b:af:8d:1e:93:d9:b9:75: 99:19:41:2a:37:6f:1a:7c:03:33:2c:25:bf:b4:cf: df:6b:ac:6d:76:58:4b:46:0f:f5:0a:87:d5:5e:ea: f2:91:09:21:87:a1:c8:53:97:26:19:21:d2:5b:49: 3e:05:44:d2:25:02:69:0b:b6:a4:45:29:0f:b4:b4: 93:f0:4c:0b:09:77:27:5a:3e:36:4b:c8:4f:7b:d6: 14:0f:0f:9e:e3:e0:93:9e:5c:84:94:8f:4e:c4:8a: 80:77:12:f9:e3:73:89:8a:a0:7b:a8:70:a4:fb:00: 23:f5:aa:c3:79:9b:fb:46:8c:ac:4e:aa:8c:c6:cf: 5f:e6:b6:70:a3:75:dd:e8:4a:ed:69:17:6b:9c:c1: e7:3f:bf:80:35:39:66:18:f1:79:3c:43:45:a6:5d: b6:3a:d6:29:4c:da:25:51:45:79:21:5e:82:3c:5a: 30:79:d1:18:b9:db:cc:14:26:f9:5e:b5:54:03:c2: 52:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:03:4B:56:85:89:CC:B9:38:0E:EF:E4:CD:77:37:8C:37:8F:CD:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/0eaabc44-9d97-35ce-9f53-f44a2784b1ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl X509v3 Authority Key Identifier: keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer sbgp-ipAddrBlock: critical IPv4: 142.214.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:c7:e0:7f:38:26:e7:8c:1d:b3:a7:10:9c:b7:df:49:48:80: 1f:ea:ac:a0:95:a9:f3:c9:01:e5:ee:af:44:08:18:b9:71:95: 4e:81:07:18:40:19:c4:ab:48:f8:9a:fc:7d:56:47:56:23:12: 78:a2:a1:6b:84:cb:14:21:0e:6b:0c:7b:d9:4c:5f:67:fb:40: 9c:6f:2c:d9:e1:7b:7c:cc:72:f3:e5:26:5b:06:a0:cf:a8:2c: 9b:1f:79:66:a1:73:84:53:be:05:67:1b:c4:ba:51:46:da:29: b2:71:75:4b:68:f8:71:0e:30:55:ca:e0:88:b8:64:05:3a:ce: 17:e6:68:5b:a0:7d:09:04:d0:45:a0:40:55:58:df:38:7b:92: 68:4c:49:f6:f7:32:af:95:e5:99:90:34:6e:69:5e:9f:df:00: e4:b1:15:b7:82:01:b0:64:ca:d5:19:9f:c2:98:37:e1:9c:3e: 95:b1:68:54:b2:73:63:bd:36:3a:ad:88:6e:0d:ce:d1:f1:0c: 96:53:d6:c4:e9:d2:97:58:c2:7f:b5:67:2e:de:7e:b6:1f:40: 65:b0:6a:c6:53:d5:17:1b:c3:cf:4f:64:55:94:f1:14:6e:19: 03:39:b2:b3:ef:92:37:9e:db:64:cb:dd:0c:cb:3e:d9:a5:34: 4a:76:a4:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPAq76q4xYzcjssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk0ZGFmYmYtMzI4ZS00MGYyLWFiMGQtNDcxOGYxMTc3 ODYxMB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk Y2UxZTJhYmItZDE0OC00YjE4LTlkODgtNjg5YzFiZTAzNGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr90TxzcKaQu9MtU04pvo3BFjPZGRD+0bgQW3 dCniXns5P5/Cq90C6dpG6o5nxwd/yfSJzuPk8rmENhw3I6kLFHrDe6+NHpPZuXWZ GUEqN28afAMzLCW/tM/fa6xtdlhLRg/1CofVXurykQkhh6HIU5cmGSHSW0k+BUTS JQJpC7akRSkPtLST8EwLCXcnWj42S8hPe9YUDw+e4+CTnlyElI9OxIqAdxL543OJ iqB7qHCk+wAj9arDeZv7RoysTqqMxs9f5rZwo3Xd6ErtaRdrnMHnP7+ANTlmGPF5 PENFpl22OtYpTNolUUV5IV6CPFowedEYudvMFCb5XrVUA8JSMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8DS1aFicy5OA7v5M13N4w3j80NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lOTRk YWZiZi0zMjhlLTQwZjItYWIwZC00NzE4ZjExNzc4NjEvMGVhYWJjNDQtOWQ5Ny0z NWNlLTlmNTMtZjQ0YTI3ODRiMWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTk0ZGFmYmYtMzI4ZS00MGYyLWFi MGQtNDcxOGYxMTc3ODYxL2U5NGRhZmJmLTMyOGUtNDBmMi1hYjBkLTQ3MThmMTE3 Nzg2MS5jcmwwHwYDVR0jBBgwFoAUHpbW+MBWSeEWvtPCmYRooLx45zkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lOTRkYWZiZi0zMjhlLTQwZjItYWIwZC00NzE4 ZjExNzc4NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjtbtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnH4H84JueMHbOnEJy330lIgB/qrKCVqfPJAeXur0QIGLlxlU6BBxhA GcSrSPia/H1WR1YjEniioWuEyxQhDmsMe9lMX2f7QJxvLNnhe3zMcvPlJlsGoM+o LJsfeWahc4RTvgVnG8S6UUbaKbJxdUto+HEOMFXK4Ii4ZAU6zhfmaFugfQkE0EWg QFVY3zh7kmhMSfb3Mq+V5ZmQNG5pXp/fAOSxFbeCAbBkytUZn8KYN+GcPpWxaFSy c2O9NjqtiG4NztHxDJZT1sTp0pdYwn+1Zy7efrYfQGWwasZT1Rcbw89PZFWU8RRu GQM5srPvkjee22TL3QzLPtmlNEp2pCE= -----END CERTIFICATE-----Generated at Sun Apr 27 09:38:17 2025 by rpki-client