$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/e422d3a4-7ed0-30a2-b306-a0e19fdd800b.roa File: e422d3a4-7ed0-30a2-b306-a0e19fdd800b.roa (raw, json) Hash identifier: xNh3NgpTxYwJbX4qZlgvWALlEwwFAvfNq0/C2gpi908= Subject key identifier: E1:59:BB:3B:89:C4:77:D6:2B:20:FA:4F:CB:6F:BA:28:29:BA:06:AC Certificate issuer: /CN=abf1f0ec-0f56-4356-9ce5-9c637405f386 Certificate serial: 010D0C9F432858498769A5E5ACC8574F1750F180 Authority key identifier: 97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/e422d3a4-7ed0-30a2-b306-a0e19fdd800b.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 22423 IP address blocks: 144.208.96.0/22 maxlen: 22 144.208.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:a5:e5:ac:c8:57:4f:17:50:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf1f0ec-0f56-4356-9ce5-9c637405f386 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=d0e404df-30f0-462a-bfea-3622d54e9396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:64:63:a7:70:4b:52:54:94:1b:7c:5b:ea:c3: e1:d1:8f:f1:7d:5b:bd:0b:ab:56:60:cc:39:e3:7a: 26:54:94:e7:d5:99:d2:5f:70:ae:50:7b:2f:9a:c0: 10:67:d1:05:5f:08:00:7e:71:01:06:48:b3:61:c7: 83:4b:42:a8:2c:2f:dd:5e:91:29:cd:0d:77:3a:c2: 38:11:ae:eb:a7:48:03:d3:98:04:52:db:da:f3:66: b3:1f:a1:59:cf:85:c0:71:83:18:9b:f0:2d:7f:bd: c6:73:7d:22:09:e3:3d:c5:d3:f6:e8:b7:1d:b6:59: a3:0f:f4:11:48:51:b7:ac:6a:b3:31:1e:46:9d:2f: a5:22:f8:e8:9b:17:73:27:72:43:a2:5e:77:0d:2a: 04:d1:c4:f3:04:b9:78:e1:c1:d9:05:bf:d0:16:43: 4d:e3:de:3a:3d:fb:09:0e:b9:b2:4e:7f:37:1a:bf: 63:17:2b:05:83:21:84:7d:c2:45:00:ed:c9:43:e5: 69:6b:62:af:9d:e7:84:1f:3a:a6:62:be:e0:7e:11: 8a:98:bb:b7:0a:f1:e4:17:f5:b0:b6:f6:5f:78:67: 99:c0:a3:6d:6d:b4:6b:a6:0a:de:b5:8b:03:09:54: 4c:18:5b:d7:36:f0:6b:ea:a3:c0:ea:01:89:68:b7: 5f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:59:BB:3B:89:C4:77:D6:2B:20:FA:4F:CB:6F:BA:28:29:BA:06:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/e422d3a4-7ed0-30a2-b306-a0e19fdd800b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl X509v3 Authority Key Identifier: keyid:97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer sbgp-ipAddrBlock: critical IPv4: 144.208.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:a7:a8:0c:b8:54:2a:54:d0:47:31:31:14:54:c9:29:29:2d: 2d:51:dd:a7:41:39:90:c8:97:3e:a3:44:be:a3:e7:2b:77:a2: 93:bc:1a:be:8e:d2:25:6a:94:3a:91:e1:f0:08:b0:b6:2b:bf: df:5e:0e:77:5a:be:e2:e2:06:dd:7c:33:ec:dd:c6:bb:d0:65: 81:db:59:de:f1:af:34:00:bc:55:39:db:81:8e:96:b1:d4:e9: b7:c0:f5:51:71:9d:71:dc:63:81:50:42:22:53:48:0b:15:6a: f7:29:3f:fe:08:70:26:c2:5a:28:32:51:52:f9:10:65:7d:97: fc:36:b7:13:b3:bd:13:c1:f0:53:5a:66:9d:be:ad:03:7e:91: ed:d8:23:2e:a5:1d:79:78:bd:d0:4c:2d:e4:f7:9a:1f:cb:3f: 85:35:ff:5e:9c:fa:6a:25:7d:60:bf:62:88:f7:6c:08:af:dd: 4e:9b:86:cb:99:4f:fc:40:17:b6:57:bc:a5:cc:16:1e:94:95: 1c:d6:8d:e5:a3:ad:96:e9:86:10:00:a2:44:fb:7b:7d:43:b0: d2:01:85:0b:80:22:62:d9:7d:80:1b:20:4c:57:ea:4d:eb:06: a6:c2:48:73:97:f4:18:8d:33:17:03:2b:e7:e3:46:33:16:eb: 66:6a:c9:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHaaXlrMhXTxdQ8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmMWYwZWMtMGY1Ni00MzU2LTljZTUtOWM2Mzc0MDVm Mzg2MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk ZDBlNDA0ZGYtMzBmMC00NjJhLWJmZWEtMzYyMmQ1NGU5Mzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2Rjp3BLUlSUG3xb6sPh0Y/xfVu9C6tWYMw5 43omVJTn1ZnSX3CuUHsvmsAQZ9EFXwgAfnEBBkizYceDS0KoLC/dXpEpzQ13OsI4 Ea7rp0gD05gEUtva82azH6FZz4XAcYMYm/Atf73Gc30iCeM9xdP26LcdtlmjD/QR SFG3rGqzMR5GnS+lIvjomxdzJ3JDol53DSoE0cTzBLl44cHZBb/QFkNN4946PfsJ DrmyTn83Gr9jFysFgyGEfcJFAO3JQ+Vpa2KvneeEHzqmYr7gfhGKmLu3CvHkF/Ww tvZfeGeZwKNtbbRrpgretYsDCVRMGFvXNvBr6qPA6gGJaLdfnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFZuzuJxHfWKyD6T8tvuigpugasMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYmYx ZjBlYy0wZjU2LTQzNTYtOWNlNS05YzYzNzQwNWYzODYvZTQyMmQzYTQtN2VkMC0z MGEyLWIzMDYtYTBlMTlmZGQ4MDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWJmMWYwZWMtMGY1Ni00MzU2LTlj ZTUtOWM2Mzc0MDVmMzg2L2FiZjFmMGVjLTBmNTYtNDM1Ni05Y2U1LTljNjM3NDA1 ZjM4Ni5jcmwwHwYDVR0jBBgwFoAUl0vJRyT03QZQ3x0qkYl1JimQ2r4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYmYxZjBlYy0wZjU2LTQzNTYtOWNlNS05YzYz NzQwNWYzODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkNBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2nqAy4VCpU0EcxMRRUySkpLS1R3adBOZDIlz6jRL6j5yt3opO8Gr6O 0iVqlDqR4fAIsLYrv99eDndavuLiBt18M+zdxrvQZYHbWd7xrzQAvFU524GOlrHU 6bfA9VFxnXHcY4FQQiJTSAsVavcpP/4IcCbCWigyUVL5EGV9l/w2txOzvRPB8FNa Zp2+rQN+ke3YIy6lHXl4vdBMLeT3mh/LP4U1/16c+molfWC/Yoj3bAiv3U6bhsuZ T/xAF7ZXvKXMFh6UlRzWjeWjrZbphhAAokT7e31DsNIBhQuAImLZfYAbIExX6k3r BqbCSHOX9BiNMxcDK+fjRjMW62Zqyfg= -----END CERTIFICATE-----Generated at Mon Apr 28 09:26:58 2025 by rpki-client