$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/16150a42-1826-3f5b-9f2b-1dd9016eaca3.roa File: 16150a42-1826-3f5b-9f2b-1dd9016eaca3.roa (raw, json) Hash identifier: 5ylNgixvX2qxTQJI8JYmmGGzxfeF6L3b7F3ulCEUfOo= Subject key identifier: 2C:3C:B2:EC:61:E9:17:B4:2E:CD:ED:43:24:7A:05:50:0B:6F:6E:E6 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F43285849ABB4A5D8A53991DF7168EE40 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/16150a42-1826-3f5b-9f2b-1dd9016eaca3.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 271 IP address blocks: 142.231.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:a5:d8:a5:39:91:df:71:68:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=db718024-6859-404e-95c1-3f72c519d334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:40:1a:3c:7c:89:b6:4e:30:f1:44:24:bf:6b: f8:45:2c:65:8e:3a:c7:37:4d:78:83:d1:1c:9a:83: 29:a3:f9:30:c2:f4:18:18:71:87:37:e4:02:47:2a: f7:0c:bc:0e:2b:99:ee:d8:3f:55:7e:9a:7d:be:0b: 29:6a:3c:f4:8d:10:a2:65:a3:6f:ed:ec:d0:2e:02: f7:a8:ca:97:5c:96:ab:0d:c8:97:b3:95:47:4d:50: 87:5e:a8:dd:7b:0d:55:33:cb:c8:79:01:ca:ad:f3: 82:97:d9:b4:c2:3f:80:82:fe:29:92:76:9f:c7:0a: 33:b6:69:ba:e1:d5:79:ef:3d:e6:f6:7f:ba:27:c7: fd:9b:d1:10:6e:fe:f3:1a:2c:e9:5b:aa:0f:84:af: b6:4f:0d:5e:31:90:3c:98:33:02:1f:a8:4e:bc:17: c7:a8:32:7b:9c:77:1e:7c:28:14:c4:20:21:57:0d: 9a:5a:c3:f5:15:a0:2d:2b:5b:f2:26:f5:2e:03:cd: 89:e9:62:d8:da:c1:34:4e:7e:ac:fc:d9:e2:ec:22: 5b:62:62:b4:53:e7:0c:95:29:92:11:3c:ed:50:b0: 2c:70:1f:90:16:fd:65:a8:ec:7d:76:02:7c:b2:0c: 73:7e:69:e4:16:34:25:b2:7e:f5:3b:79:53:fe:d6: cf:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3C:B2:EC:61:E9:17:B4:2E:CD:ED:43:24:7A:05:50:0B:6F:6E:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/16150a42-1826-3f5b-9f2b-1dd9016eaca3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 142.231.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:bd:b7:50:7a:9d:18:9f:fb:49:8a:9d:38:71:b1:1a:f6:d8: a5:79:8a:c2:4d:a9:86:f7:26:c8:6c:66:8c:fc:8a:da:96:3a: 48:2f:35:39:4f:26:94:ef:7d:b4:94:84:f5:01:c0:ce:3a:fb: 07:4a:19:15:cd:98:6c:1b:ea:6e:b9:4a:f3:68:29:60:2e:28: c9:f2:eb:3e:8c:a9:41:a2:3b:54:96:78:b2:3b:8d:63:5c:ba: c3:59:5b:68:45:89:eb:15:46:06:88:c8:67:56:f8:67:39:39: c7:29:e1:b1:48:16:cb:13:77:f9:b6:49:6b:a3:a6:fc:3f:dd: 92:70:8a:8a:fc:08:bc:d6:f7:b1:f6:3b:28:3d:c6:02:41:67: e6:bb:b7:68:c5:8f:a9:30:39:f5:a4:4a:c4:1d:10:03:d4:9a: 79:5e:ea:cd:30:7d:c8:c4:26:50:90:61:70:60:21:ac:ad:4d: 1e:71:c3:4e:26:af:5e:5c:fb:e7:bf:44:a6:b4:4f:35:08:ee: d6:3f:d7:2b:39:5f:05:f0:d3:cc:6d:03:f7:04:14:c0:2a:fb: 52:9c:61:54:8c:f4:c4:a1:45:73:a5:9d:1d:17:b1:77:73:a0: 6d:aa:14:80:ec:03:69:e1:d6:24:07:a7:15:ce:bd:58:20:d8: 4f:c8:a9:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKXYpTmR33Fo7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk ZGI3MTgwMjQtNjg1OS00MDRlLTk1YzEtM2Y3MmM1MTlkMzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UAaPHyJtk4w8UQkv2v4RSxljjrHN014g9Ec moMpo/kwwvQYGHGHN+QCRyr3DLwOK5nu2D9Vfpp9vgspajz0jRCiZaNv7ezQLgL3 qMqXXJarDciXs5VHTVCHXqjdew1VM8vIeQHKrfOCl9m0wj+Agv4pknafxwoztmm6 4dV57z3m9n+6J8f9m9EQbv7zGizpW6oPhK+2Tw1eMZA8mDMCH6hOvBfHqDJ7nHce fCgUxCAhVw2aWsP1FaAtK1vyJvUuA82J6WLY2sE0Tn6s/Nni7CJbYmK0U+cMlSmS ETztULAscB+QFv1lqOx9dgJ8sgxzfmnkFjQlsn71O3lT/tbP7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCw8suxh6Re0Ls3tQyR6BVALb27mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvMTYxNTBhNDItMTgyNi0z ZjViLTlmMmItMWRkOTAxNmVhY2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjudtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKq9t1B6nRif+0mKnThxsRr22KV5isJNqYb3JshsZoz8itqWOkgvNTlP JpTvfbSUhPUBwM46+wdKGRXNmGwb6m65SvNoKWAuKMny6z6MqUGiO1SWeLI7jWNc usNZW2hFiesVRgaIyGdW+Gc5Occp4bFIFssTd/m2SWujpvw/3ZJwior8CLzW97H2 Oyg9xgJBZ+a7t2jFj6kwOfWkSsQdEAPUmnle6s0wfcjEJlCQYXBgIaytTR5xw04m r15c++e/RKa0TzUI7tY/1ys5XwXw08xtA/cEFMAq+1KcYVSM9MShRXOlnR0XsXdz oG2qFIDsA2nh1iQHpxXOvVgg2E/Iqdc= -----END CERTIFICATE-----Generated at Sat Jun 14 12:22:33 2025 by rpki-client