$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/4c98dce5-add4-335b-a761-7da8dfe9330d.roa File: 4c98dce5-add4-335b-a761-7da8dfe9330d.roa (raw, json) Hash identifier: ZHFircFsKexTQqBOZ4XgP64r+qu4RU2GAN+Vfn5LGoI= Subject key identifier: 02:35:12:66:1B:6A:FE:6A:6C:EF:F1:F4:F5:2D:E2:E4:35:70:C7:7B Certificate issuer: /CN=55640631-1b52-4455-ab16-7633a452f342 Certificate serial: 010D0C9F432858496A19A0524F4BBC419D363980 Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/4c98dce5-add4-335b-a761-7da8dfe9330d.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 13760 IP address blocks: 142.190.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:a0:52:4f:4b:bc:41:9d:36:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55640631-1b52-4455-ab16-7633a452f342 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=c0e9aae9-0c10-4fb6-aad3-44de0e3c0d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:40:e5:e8:f9:90:50:8f:a2:79:8f:28:e7:f5: 28:3a:32:c9:8c:7c:00:d1:23:66:7d:ab:92:83:7a: 16:65:b8:81:bf:7f:62:aa:5d:c8:3b:15:57:0a:f4: 2e:01:27:01:e7:51:f0:b2:b7:04:aa:15:5e:19:9d: b7:fa:29:86:f8:f9:22:3a:fa:e6:be:28:92:f9:db: e4:19:31:9d:48:d2:45:5f:0b:b4:fa:2c:0e:db:c0: c0:b9:30:b4:44:19:d7:a0:24:74:78:46:0a:02:aa: aa:86:e5:28:40:c9:97:2f:4c:cb:1b:e0:54:ab:11: 01:4c:de:2a:01:b1:f7:3d:8e:e2:02:85:a7:f6:38: df:11:9d:85:66:9c:2b:a3:5a:6c:89:b7:68:0b:28: 9b:91:91:6f:96:0b:43:c8:f2:e0:03:31:fa:7d:a4: 9e:8b:e0:66:a3:69:02:8c:59:98:60:c4:15:23:92: 93:91:29:c9:6c:58:13:70:2d:94:82:0b:ca:14:47: 14:ca:55:95:18:8f:99:1f:65:33:01:6e:53:d0:2d: 63:19:ea:e4:fd:79:70:52:dd:61:74:fd:0b:05:ab: 6d:d4:c5:b5:52:e4:c4:f2:c3:f4:70:91:4d:54:f7: a6:d9:2d:4d:a5:69:1e:b6:9f:cf:53:01:79:e1:9a: df:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:35:12:66:1B:6A:FE:6A:6C:EF:F1:F4:F5:2D:E2:E4:35:70:C7:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/4c98dce5-add4-335b-a761-7da8dfe9330d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl X509v3 Authority Key Identifier: keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer sbgp-ipAddrBlock: critical IPv4: 142.190.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:88:a5:64:8f:e9:07:76:43:b9:a0:d1:57:9c:b4:87:9d:69: 66:af:1d:90:fc:35:1a:7e:66:c5:34:96:e3:de:28:8b:72:af: 71:fb:fa:d0:ae:7f:63:52:41:87:fd:0d:ed:83:a7:8d:d4:9e: 40:39:32:5c:e9:0e:06:18:62:d1:b1:84:30:5d:b7:ac:da:ea: a8:47:9b:78:45:2f:79:cb:73:be:e4:b7:b7:9f:b1:cb:60:21: ee:5b:c7:1b:0d:09:0e:15:3f:15:17:0f:a1:65:fe:c7:d6:f8: 53:26:5e:2f:a5:1a:ac:93:aa:0d:2c:4e:11:ab:e8:07:8d:c0: 3b:bc:20:8f:5e:2c:cd:87:4c:a8:80:2e:01:e5:66:04:a7:a7: 47:ac:5d:b5:04:7d:44:fb:fa:c4:76:9b:70:54:54:3e:3e:be: a3:dd:06:77:7f:97:eb:23:e3:d9:8b:fa:f7:83:29:84:00:98: 1a:b5:2b:52:e9:ec:fb:ed:b2:75:7b:e7:d8:0e:07:ef:d3:f1: 71:67:da:e2:19:0c:a9:26:95:a4:5b:1f:ab:fb:41:b8:7c:22: 5b:9f:20:b8:5d:0c:56:04:8a:d0:55:33:c8:6b:b1:c9:1b:9c: 76:b7:c1:64:54:9b:1d:5c:bf:c3:b7:8a:e6:43:13:59:0f:4a: 27:ca:24:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGaBST0u8QZ02OYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU2NDA2MzEtMWI1Mi00NDU1LWFiMTYtNzYzM2E0NTJm MzQyMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk YzBlOWFhZTktMGMxMC00ZmI2LWFhZDMtNDRkZTBlM2MwZDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEDl6PmQUI+ieY8o5/UoOjLJjHwA0SNmfauS g3oWZbiBv39iql3IOxVXCvQuAScB51HwsrcEqhVeGZ23+imG+PkiOvrmviiS+dvk GTGdSNJFXwu0+iwO28DAuTC0RBnXoCR0eEYKAqqqhuUoQMmXL0zLG+BUqxEBTN4q AbH3PY7iAoWn9jjfEZ2FZpwro1psibdoCyibkZFvlgtDyPLgAzH6faSei+Bmo2kC jFmYYMQVI5KTkSnJbFgTcC2UggvKFEcUylWVGI+ZH2UzAW5T0C1jGerk/XlwUt1h dP0LBatt1MW1UuTE8sP0cJFNVPem2S1NpWketp/PUwF54ZrfuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAI1EmYbav5qbO/x9PUt4uQ1cMd7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0 MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMzYTQ1MmYzNDIvNGM5OGRjZTUtYWRkNC0z MzViLWE3NjEtN2RhOGRmZTkzMzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU2NDA2MzEtMWI1Mi00NDU1LWFi MTYtNzYzM2E0NTJmMzQyLzU1NjQwNjMxLTFiNTItNDQ1NS1hYjE2LTc2MzNhNDUy ZjM0Mi5jcmwwHwYDVR0jBBgwFoAUUFWo2WFkn0lVufdBNbv9C6u3l7wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMz YTQ1MmYzNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjr4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL+IpWSP6Qd2Q7mg0VectIedaWavHZD8NRp+ZsU0luPeKItyr3H7+tCu f2NSQYf9De2Dp43UnkA5MlzpDgYYYtGxhDBdt6za6qhHm3hFL3nLc77kt7efsctg Ie5bxxsNCQ4VPxUXD6Fl/sfW+FMmXi+lGqyTqg0sThGr6AeNwDu8II9eLM2HTKiA LgHlZgSnp0esXbUEfUT7+sR2m3BUVD4+vqPdBnd/l+sj49mL+veDKYQAmBq1K1Lp 7PvtsnV759gOB+/T8XFn2uIZDKkmlaRbH6v7Qbh8IlufILhdDFYEitBVM8hrsckb nHa3wWRUmx1cv8O3iuZDE1kPSifKJEA= -----END CERTIFICATE-----Generated at Mon Apr 28 17:12:59 2025 by rpki-client