$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/1409aa94-2531-37d3-b5ae-f6234514777e.roa File: 1409aa94-2531-37d3-b5ae-f6234514777e.roa (raw, json) Hash identifier: Y4JdzCdF1FrTbY6SCSPA2VR/Ond23h66z7qJPs3L8Pw= Subject key identifier: 1B:81:13:B9:BC:48:F4:06:52:1C:F5:44:8A:2F:28:12:D4:48:06:01 Certificate issuer: /CN=55640631-1b52-4455-ab16-7633a452f342 Certificate serial: 010D0C9F43285849780F012F753E9863E2D21D00 Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/1409aa94-2531-37d3-b5ae-f6234514777e.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 400269 IP address blocks: 142.190.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:01:2f:75:3e:98:63:e2:d2:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55640631-1b52-4455-ab16-7633a452f342 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=6abc296c-e116-419f-9936-14ce29edf7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:06:c8:f1:6d:52:67:e4:56:74:ec:f3:5b:39: f9:67:1e:60:61:f3:fa:ec:4e:a3:d2:dd:08:06:b8: a6:78:65:31:f8:83:24:c3:11:e6:d0:1c:ca:d1:bc: 7c:93:e5:de:52:ef:a9:b1:ad:2f:47:8b:45:38:cb: 4a:ec:90:44:1a:39:4b:7c:a9:15:49:fc:f0:84:c8: 1b:16:88:8b:29:e1:11:02:32:54:b5:b3:f6:ac:d4: 48:d2:68:bd:3d:07:92:49:2d:ea:d2:93:ca:32:b2: 0e:56:c6:c7:18:ce:db:7a:61:16:83:a9:a0:ae:ad: 05:f3:ec:ee:50:ad:c9:0d:88:f3:52:64:fe:c3:3e: 1b:e1:33:11:e5:fd:e2:96:1b:8e:ed:99:a4:44:6a: 8b:f1:d3:e9:f9:8d:9b:d6:08:84:02:7e:2d:05:d9: 82:69:cc:bf:37:89:09:71:d1:a5:2c:30:31:e9:77: a2:e3:12:c2:8d:a6:3d:de:b5:79:1d:1e:67:4d:30: 13:8b:d3:44:d2:14:68:57:a3:9d:08:d5:0a:36:fc: 87:2c:0a:f7:ea:26:a1:4a:c9:0f:e1:89:0a:f8:c8: f5:6a:bc:41:f9:14:af:89:ca:c7:f3:1b:85:67:b9: 88:5d:5f:79:77:fe:a2:67:a4:41:90:b5:d8:4a:99: aa:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:81:13:B9:BC:48:F4:06:52:1C:F5:44:8A:2F:28:12:D4:48:06:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/1409aa94-2531-37d3-b5ae-f6234514777e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl X509v3 Authority Key Identifier: keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer sbgp-ipAddrBlock: critical IPv4: 142.190.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:d9:f8:09:a3:39:0b:11:4b:a3:48:84:39:86:9d:a0:0b:88: 33:6c:f7:dd:94:fd:d0:10:78:1e:47:2b:0e:0c:f5:7c:47:86: eb:a5:50:00:3e:5e:69:5e:c2:8a:bb:68:65:d1:5f:df:1c:4e: 08:31:9e:1c:42:9f:ee:ca:18:45:8e:21:b7:79:1b:f2:56:73: 0d:ae:50:d0:ca:ad:f6:de:6d:d1:80:32:29:74:ef:96:ff:4f: 69:14:1e:bb:f1:b5:2d:e9:aa:1a:45:24:8a:42:4c:db:c8:28: 6f:ef:73:54:c6:ff:35:a5:26:96:f3:a7:a3:1c:e6:2f:c3:c5: 20:10:fc:8b:dd:f0:41:d0:35:52:08:b1:69:b1:ac:b0:f3:ce: 29:48:85:61:9c:41:08:7f:5e:ec:89:d1:cd:70:d0:a2:2c:12: 92:37:5d:57:d5:c6:b5:31:9f:fc:ad:68:03:a6:6c:92:a2:d1: 37:e5:57:c2:d7:a3:4f:04:b8:95:e3:62:0b:87:ee:18:40:53: 5d:c7:a2:18:b6:cc:65:0c:66:11:26:25:d4:01:c8:2e:ee:6e: 1b:b3:cf:ab:9a:89:09:3d:c4:f2:ad:da:70:fa:43:8e:e6:02: bc:e5:db:7e:42:2e:de:b9:7c:ea:34:d1:bd:96:20:b0:f1:e7: 37:62:81:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4DwEvdT6YY+LSHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU2NDA2MzEtMWI1Mi00NDU1LWFiMTYtNzYzM2E0NTJm MzQyMB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk NmFiYzI5NmMtZTExNi00MTlmLTk5MzYtMTRjZTI5ZWRmN2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QbI8W1SZ+RWdOzzWzn5Zx5gYfP67E6j0t0I BrimeGUx+IMkwxHm0BzK0bx8k+XeUu+psa0vR4tFOMtK7JBEGjlLfKkVSfzwhMgb FoiLKeERAjJUtbP2rNRI0mi9PQeSSS3q0pPKMrIOVsbHGM7bemEWg6mgrq0F8+zu UK3JDYjzUmT+wz4b4TMR5f3ilhuO7ZmkRGqL8dPp+Y2b1giEAn4tBdmCacy/N4kJ cdGlLDAx6Xei4xLCjaY93rV5HR5nTTATi9NE0hRoV6OdCNUKNvyHLAr36iahSskP 4YkK+Mj1arxB+RSvicrH8xuFZ7mIXV95d/6iZ6RBkLXYSpmqRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuBE7m8SPQGUhz1RIovKBLUSAYBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0 MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMzYTQ1MmYzNDIvMTQwOWFhOTQtMjUzMS0z N2QzLWI1YWUtZjYyMzQ1MTQ3NzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU2NDA2MzEtMWI1Mi00NDU1LWFi MTYtNzYzM2E0NTJmMzQyLzU1NjQwNjMxLTFiNTItNDQ1NS1hYjE2LTc2MzNhNDUy ZjM0Mi5jcmwwHwYDVR0jBBgwFoAUUFWo2WFkn0lVufdBNbv9C6u3l7wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMz YTQ1MmYzNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjr67MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvZ+AmjOQsRS6NIhDmGnaALiDNs992U/dAQeB5HKw4M9XxHhuulUAA+ Xmlewoq7aGXRX98cTggxnhxCn+7KGEWOIbd5G/JWcw2uUNDKrfbebdGAMil075b/ T2kUHrvxtS3pqhpFJIpCTNvIKG/vc1TG/zWlJpbzp6Mc5i/DxSAQ/Ivd8EHQNVII sWmxrLDzzilIhWGcQQh/XuyJ0c1w0KIsEpI3XVfVxrUxn/ytaAOmbJKi0TflV8LX o08EuJXjYguH7hhAU13Hohi2zGUMZhEmJdQByC7ubhuzz6uaiQk9xPKt2nD6Q47m Arzl235CLt65fOo00b2WILDx5zdigSI= -----END CERTIFICATE-----Generated at Thu May 1 14:27:17 2025 by rpki-client