$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/9db45839-c1f2-3b49-8510-c6bdefaddcbc.roa File: 9db45839-c1f2-3b49-8510-c6bdefaddcbc.roa (raw, json) Hash identifier: 2bk2g8egKU1XzQXLyTbJl4/wUKy6/NjSJlVIxMIcLmU= Subject key identifier: 58:A8:CC:BC:B7:93:83:FA:AA:7C:00:FD:7C:4A:38:0B:C0:DC:FA:82 Certificate issuer: /CN=5b6fd262-94ea-4e33-af3e-212abe0fc628 Certificate serial: 010D0C9F432858499AF48CFE411F77E935935300 Authority key identifier: 36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/9db45839-c1f2-3b49-8510-c6bdefaddcbc.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 23341 IP address blocks: 143.55.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:8c:fe:41:1f:77:e9:35:93:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b6fd262-94ea-4e33-af3e-212abe0fc628 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=25c4f00e-0bf2-4042-a73c-4e84287b3e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:38:74:40:33:19:e1:f8:5c:28:0a:21:ae:f5: 1d:2b:6e:0e:d1:de:9b:ac:37:7c:6c:cf:91:f5:b5: 5a:03:07:d6:2f:fa:7c:c4:01:7b:c6:47:20:aa:7f: 06:eb:00:21:dc:0d:0a:33:72:82:0c:1d:2a:66:06: ca:55:8f:11:18:dd:4b:b6:b4:6e:3e:f9:b6:2c:95: b7:e9:47:57:34:26:6a:2a:90:87:09:0b:89:04:00: bd:2a:39:ac:be:49:86:ab:50:2a:8e:5c:ab:9a:2a: 46:73:59:18:6d:63:9c:4b:e8:1a:3e:da:0e:2d:fd: c6:f3:46:7c:31:fb:c9:2c:16:2b:79:7b:9f:7b:a2: 53:a9:59:aa:63:ce:25:eb:76:9e:67:82:c0:21:42: d8:6f:ab:6a:e4:71:6f:3b:19:6d:f7:cf:00:29:e2: e5:fe:f3:e5:d9:46:4c:d7:47:97:ea:7e:ae:9a:85: 79:28:74:b9:b9:f2:b2:b6:a3:54:01:d6:39:84:92: a9:3a:60:7a:e4:70:79:e8:54:c3:43:09:e6:af:f1: 01:09:61:9f:f5:8a:4e:7d:4e:b4:e8:e8:4a:1e:27: 3c:a3:aa:94:b2:ba:a8:a4:75:b3:eb:8e:2a:d9:07: 1e:ac:45:b8:1c:e8:00:a9:8a:38:d2:6f:c3:2b:a9: 0b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A8:CC:BC:B7:93:83:FA:AA:7C:00:FD:7C:4A:38:0B:C0:DC:FA:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/9db45839-c1f2-3b49-8510-c6bdefaddcbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl X509v3 Authority Key Identifier: keyid:36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer sbgp-ipAddrBlock: critical IPv4: 143.55.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:a7:a6:ca:66:ed:4f:8b:e5:af:8e:2a:e5:32:c6:92:9e:a9: 85:42:8d:ee:80:5b:3e:41:8e:17:31:7c:a5:d0:05:35:f3:fe: 27:ee:45:9a:cf:12:df:39:e2:c3:4e:3b:69:a3:fd:d8:c1:00: f7:e9:80:12:72:3b:30:cc:7a:fd:2e:7c:d5:71:8e:da:0a:e7: 33:9c:d4:2a:67:f0:5d:ed:06:88:93:fa:b3:41:14:d0:44:a2: bc:5e:b8:2d:4c:a3:4c:7d:9e:70:f6:b8:85:4d:33:f5:00:3b: a0:33:a3:db:0b:a4:d3:87:88:02:31:31:83:8c:7c:d2:25:74: 0a:23:0c:5f:36:f9:73:4d:1e:bc:e2:36:12:10:cf:67:e7:be: d9:e0:bf:37:5c:32:42:aa:ba:4d:ba:df:e4:b1:d5:ff:9e:96: fc:fc:a8:7c:8a:77:d3:c7:a5:30:1f:42:4d:93:93:66:c8:fd: 1d:b1:4d:ad:83:28:33:3a:fd:ea:ab:d6:44:b0:6a:71:4d:a7: 31:fc:e6:1e:d6:6d:83:8c:9e:18:35:a2:82:84:35:ad:d3:fb: 3d:1e:2a:6a:08:b5:33:a6:72:c8:42:58:31:a7:c6:86:f8:62: 1e:b9:0d:1d:66:2e:ce:30:e2:1f:a4:2e:fa:79:2b:5f:fa:0d: 8a:b1:e6:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9Iz+QR936TWTUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI2ZmQyNjItOTRlYS00ZTMzLWFmM2UtMjEyYWJlMGZj NjI4MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MjVjNGYwMGUtMGJmMi00MDQyLWE3M2MtNGU4NDI4N2IzZTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjh0QDMZ4fhcKAohrvUdK24O0d6brDd8bM+R 9bVaAwfWL/p8xAF7xkcgqn8G6wAh3A0KM3KCDB0qZgbKVY8RGN1LtrRuPvm2LJW3 6UdXNCZqKpCHCQuJBAC9KjmsvkmGq1AqjlyrmipGc1kYbWOcS+gaPtoOLf3G80Z8 MfvJLBYreXufe6JTqVmqY84l63aeZ4LAIULYb6tq5HFvOxlt988AKeLl/vPl2UZM 10eX6n6umoV5KHS5ufKytqNUAdY5hJKpOmB65HB56FTDQwnmr/EBCWGf9YpOfU60 6OhKHic8o6qUsrqopHWz644q2QcerEW4HOgAqYo40m/DK6kLQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiozLy3k4P6qnwA/XxKOAvA3PqCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81YjZm ZDI2Mi05NGVhLTRlMzMtYWYzZS0yMTJhYmUwZmM2MjgvOWRiNDU4MzktYzFmMi0z YjQ5LTg1MTAtYzZiZGVmYWRkY2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWI2ZmQyNjItOTRlYS00ZTMzLWFm M2UtMjEyYWJlMGZjNjI4LzViNmZkMjYyLTk0ZWEtNGUzMy1hZjNlLTIxMmFiZTBm YzYyOC5jcmwwHwYDVR0jBBgwFoAUNjzIUHmlbKUy9HhU//w8/Bj4M/cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81YjZmZDI2Mi05NGVhLTRlMzMtYWYzZS0yMTJh YmUwZmM2MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjzcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJunpspm7U+L5a+OKuUyxpKeqYVCje6AWz5BjhcxfKXQBTXz/ifuRZrP Et854sNOO2mj/djBAPfpgBJyOzDMev0ufNVxjtoK5zOc1Cpn8F3tBoiT+rNBFNBE orxeuC1Mo0x9nnD2uIVNM/UAO6Azo9sLpNOHiAIxMYOMfNIldAojDF82+XNNHrzi NhIQz2fnvtngvzdcMkKquk263+Sx1f+elvz8qHyKd9PHpTAfQk2Tk2bI/R2xTa2D KDM6/eqr1kSwanFNpzH85h7WbYOMnhg1ooKENa3T+z0eKmoItTOmcshCWDGnxob4 Yh65DR1mLs4w4h+kLvp5K1/6DYqx5hc= -----END CERTIFICATE-----Generated at Wed May 7 13:31:39 2025 by rpki-client