$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/cfa7cf23-8b99-3993-9542-8d4224a4493e.roa File: cfa7cf23-8b99-3993-9542-8d4224a4493e.roa (raw, json) Hash identifier: 2HUjCPBE7ij3pUL5JX6X4+2N2OugOZVNnbWkRVfMyQc= Subject key identifier: A3:C8:23:AF:57:F2:CA:5A:11:F3:09:52:C7:86:F0:31:6C:B7:40:31 Certificate issuer: /CN=f5ae0cc6-b00f-4742-aadb-ab8ea354d895 Certificate serial: 010D0C9F4328584992949E27487DE35A21F13680 Authority key identifier: 8B:9B:62:95:30:5B:9F:57:9B:22:EA:3F:C8:93:30:B1:33:CE:F7:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/cfa7cf23-8b99-3993-9542-8d4224a4493e.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 8075 IP address blocks: 142.147.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:9e:27:48:7d:e3:5a:21:f1:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5ae0cc6-b00f-4742-aadb-ab8ea354d895 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=53d7ec60-3ab6-4b21-89c2-e8cefd7a76b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e5:1a:b4:ba:11:b2:db:6f:50:2b:91:75:ce: d7:16:2f:57:d3:fd:47:aa:f1:08:7e:bc:ec:7a:aa: c6:1c:72:79:d8:8a:b5:f0:37:46:c7:b5:c9:62:8c: 62:fd:2c:bd:6c:17:bc:1e:8c:4a:2b:2d:33:d9:7b: a7:87:2d:c0:41:ba:5b:f4:e9:20:17:0d:17:3a:5b: 72:31:d0:24:a5:e3:f8:21:fa:01:dc:f3:e4:58:c4: ad:03:a9:87:7b:2a:56:c0:10:13:ad:46:b0:76:d4: 65:11:9e:b8:71:13:8b:8f:bf:f8:36:b1:2b:74:6d: a9:b2:68:a0:00:ed:31:3d:4d:1a:06:1f:6c:62:9d: 6b:28:02:26:d6:e8:83:0b:b5:bb:27:33:36:20:be: ab:56:77:5a:0a:eb:1b:04:0d:20:49:c8:75:56:92: 17:18:73:02:e1:0a:a4:b8:1b:40:6b:f1:e7:f4:67: 6c:5e:d9:03:b4:b2:c1:a4:84:c5:1e:31:03:20:c6: 9c:1e:35:6d:f1:25:28:7f:d9:c5:cb:28:6f:6a:14: af:04:ec:3a:34:c4:66:0e:0d:87:e2:50:b9:7d:7b: 0b:ea:e5:ca:4b:c4:20:0f:5e:ca:4c:ac:91:a7:5f: 2e:11:b9:1c:4e:9b:d4:d7:59:b4:33:64:79:d9:d5: 2d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C8:23:AF:57:F2:CA:5A:11:F3:09:52:C7:86:F0:31:6C:B7:40:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/cfa7cf23-8b99-3993-9542-8d4224a4493e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.crl X509v3 Authority Key Identifier: keyid:8B:9B:62:95:30:5B:9F:57:9B:22:EA:3F:C8:93:30:B1:33:CE:F7:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.cer sbgp-ipAddrBlock: critical IPv4: 142.147.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:cf:f7:f3:7f:2e:87:12:4f:7e:64:5e:a6:4b:0a:ee:9e:92: 12:bd:be:61:79:c1:f7:22:25:74:00:08:ee:54:30:b3:f5:52: 3a:00:24:68:cd:6a:b1:25:86:44:d7:63:2c:d7:7e:3f:0d:e1: db:79:25:9a:a1:b5:80:e9:96:57:95:98:aa:e6:61:69:1b:e3: b8:0b:21:9b:a3:1e:86:91:82:88:de:f9:f0:cd:33:de:c4:62: 5d:4d:08:0b:13:eb:5b:d2:87:11:9c:57:34:4a:dc:4e:1b:7e: 12:21:05:9d:42:e0:e4:3d:2b:44:6f:a4:ae:75:3e:1c:79:41: b3:02:f2:e0:65:62:87:1c:80:ef:d5:77:16:8c:de:e2:19:7e: 07:57:ad:80:e0:cc:d7:f7:a2:65:11:df:27:28:6a:69:a5:c6: ec:a6:a2:9d:3f:c0:40:55:0f:db:54:77:49:6c:3c:1a:74:5f: 87:e0:0d:39:5f:57:b5:52:4b:c8:6e:a5:01:ce:94:fe:16:e8: 6c:6b:33:43:a3:93:a0:1d:47:7d:56:1a:62:cc:95:40:b5:84: 73:c0:aa:da:77:a9:5e:51:b2:54:64:a5:30:87:d1:65:6a:ee: fc:e7:74:ad:67:c3:d7:51:da:c0:72:6d:73:15:e7:82:95:66: 98:2a:4d:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlJ4nSH3jWiHxNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVhZTBjYzYtYjAwZi00NzQyLWFhZGItYWI4ZWEzNTRk ODk1MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk NTNkN2VjNjAtM2FiNi00YjIxLTg5YzItZThjZWZkN2E3NmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeUatLoRsttvUCuRdc7XFi9X0/1HqvEIfrzs eqrGHHJ52Iq18DdGx7XJYoxi/Sy9bBe8HoxKKy0z2Xunhy3AQbpb9OkgFw0XOlty MdAkpeP4IfoB3PPkWMStA6mHeypWwBATrUawdtRlEZ64cROLj7/4NrErdG2psmig AO0xPU0aBh9sYp1rKAIm1uiDC7W7JzM2IL6rVndaCusbBA0gSch1VpIXGHMC4Qqk uBtAa/Hn9GdsXtkDtLLBpITFHjEDIMacHjVt8SUof9nFyyhvahSvBOw6NMRmDg2H 4lC5fXsL6uXKS8QgD17KTKyRp18uEbkcTpvU11m0M2R52dUtpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPII69X8spaEfMJUseG8DFst0AxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWFl MGNjNi1iMDBmLTQ3NDItYWFkYi1hYjhlYTM1NGQ4OTUvY2ZhN2NmMjMtOGI5OS0z OTkzLTk1NDItOGQ0MjI0YTQ0OTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVhZTBjYzYtYjAwZi00NzQyLWFh ZGItYWI4ZWEzNTRkODk1L2Y1YWUwY2M2LWIwMGYtNDc0Mi1hYWRiLWFiOGVhMzU0 ZDg5NS5jcmwwHwYDVR0jBBgwFoAUi5tilTBbn1ebIuo/yJMwsTPO98UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWFlMGNjNi1iMDBmLTQ3NDItYWFkYi1hYjhl YTM1NGQ4OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjpM2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXP9/N/LocST35kXqZLCu6ekhK9vmF5wfciJXQACO5UMLP1UjoAJGjN arElhkTXYyzXfj8N4dt5JZqhtYDplleVmKrmYWkb47gLIZujHoaRgoje+fDNM97E Yl1NCAsT61vShxGcVzRK3E4bfhIhBZ1C4OQ9K0RvpK51Phx5QbMC8uBlYoccgO/V dxaM3uIZfgdXrYDgzNf3omUR3ycoammlxuymop0/wEBVD9tUd0lsPBp0X4fgDTlf V7VSS8hupQHOlP4W6GxrM0Ojk6AdR31WGmLMlUC1hHPAqtp3qV5RslRkpTCH0WVq 7vzndK1nw9dR2sBybXMV54KVZpgqTa4= -----END CERTIFICATE-----Generated at Mon Apr 28 06:48:07 2025 by rpki-client