$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/60164611-a97d-3573-9338-fe964e7f3a2a.roa File: 60164611-a97d-3573-9338-fe964e7f3a2a.roa (raw, json) Hash identifier: coxB70nXdyjnaSJ99Y6qTbCiaR1Y8MD0fNTYDZDE2pU= Subject key identifier: 78:96:F3:32:B8:D2:8B:CC:E1:D0:0F:8E:09:C3:E1:A6:56:CD:E0:F3 Certificate issuer: /CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a Certificate serial: 010D0C9F43285849B2E51812BD09A301E06510B8 Authority key identifier: 11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/60164611-a97d-3573-9338-fe964e7f3a2a.roa Signing time: Wed 30 Apr 2025 14:49:18 +0000 ROA not before: Wed 30 Apr 2025 14:49:18 +0000 ROA not after: Tue 29 Jul 2025 14:49:18 +0000 asID: 1299 IP address blocks: 143.246.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:e5:18:12:bd:09:a3:01:e0:65:10:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a Validity Not Before: Apr 30 14:49:18 2025 GMT Not After : Jul 29 14:49:18 2025 GMT Subject: CN=c01efcb2-67ab-45e6-96b7-e531efd104bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ba:ac:4e:b1:d3:5d:0f:f4:17:a6:32:41:49: a0:67:16:a0:dc:15:0a:e1:7a:d3:51:30:c0:70:51: 5c:c7:52:b6:97:b3:99:5a:0d:c2:4f:45:14:03:ec: b8:6c:a3:3f:bb:22:cc:9f:4b:3e:4f:b0:9f:22:19: 36:fb:a9:50:34:7c:ac:1b:b6:1c:dc:08:06:c0:48: 00:2a:68:5f:bf:79:f0:b9:d3:df:fe:24:9b:5b:74: 92:ac:a2:09:97:dc:14:91:88:bb:f6:3c:85:51:f3: d2:e1:66:a9:f5:96:95:15:c9:0a:4d:2e:40:1a:75: ea:fc:f2:99:9c:80:e2:94:b9:36:60:30:06:4e:a5: d8:d1:fe:15:4f:63:32:af:3d:26:cd:08:93:6d:4a: 34:26:2b:fa:97:d0:e3:4d:40:73:e4:de:03:a5:37: 2d:88:b9:92:b9:93:50:97:d1:fa:71:c7:dd:a5:c5: 37:b2:ba:ee:49:17:a2:bb:f6:5b:79:f4:a9:cc:17: 8b:a6:43:5b:17:5c:05:f7:2e:fa:f1:04:11:99:3b: 45:fc:07:da:08:3b:65:63:98:d1:96:90:a9:8e:65: 14:3f:86:57:52:5c:bc:47:56:7d:2d:de:b5:4f:7b: 13:9d:bd:c1:c6:77:69:48:8b:f6:da:8f:cd:7f:20: 12:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:96:F3:32:B8:D2:8B:CC:E1:D0:0F:8E:09:C3:E1:A6:56:CD:E0:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/60164611-a97d-3573-9338-fe964e7f3a2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl X509v3 Authority Key Identifier: keyid:11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer sbgp-ipAddrBlock: critical IPv4: 143.246.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:92:f0:ff:62:05:e5:e8:a9:15:58:cf:3c:5d:5e:ab:f3:58: 4d:a6:f8:af:d9:41:54:c7:94:12:72:33:82:aa:f2:70:2f:c5: 20:a4:46:0c:07:b7:d3:b1:67:b4:fc:8d:16:1a:e4:6d:4b:8d: 3d:eb:cb:45:b0:6b:63:57:01:76:c8:24:68:fb:65:dc:13:30: c0:bc:23:5c:0c:9c:b5:5b:a1:8e:67:e7:81:62:e3:68:a7:d7: f9:8f:34:d1:d6:ee:7d:a1:5d:fc:e4:9a:3a:7d:8b:27:84:7c: 5c:93:9f:dc:6d:09:06:1d:da:cf:ca:6a:84:f3:d1:5a:3a:da: 13:0a:ea:9e:06:a8:01:74:a8:7d:24:a9:f6:d1:44:c7:34:7b: 9b:70:9e:6b:c4:fa:5d:c3:5c:3d:5f:39:09:48:5a:e3:2a:30: 51:71:0f:7c:6b:24:b5:57:ce:f8:62:96:19:6a:42:48:1c:2b: 97:df:98:c4:95:2f:1b:46:e1:0f:d5:0e:eb:fe:3f:a3:83:4c: 77:f3:85:3e:48:e3:2f:92:2f:d8:ef:79:34:44:5f:76:53:43: 62:87:e0:ee:0b:ab:de:62:a1:52:bc:26:bc:f4:59:6d:23:7a: b6:4b:45:e9:9c:c4:b1:95:83:57:1d:b9:ed:b5:b3:7e:9d:7c: d8:dc:58:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmy5RgSvQmjAeBlELgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVkZGVmY2QtNmUwZS00OGFjLTg3MjgtYTFkODJlOTEx MjlhMB4XDTI1MDQzMDE0NDkxOFoXDTI1MDcyOTE0NDkxOFowLzEtMCsGA1UEAxMk YzAxZWZjYjItNjdhYi00NWU2LTk2YjctZTUzMWVmZDEwNGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbqsTrHTXQ/0F6YyQUmgZxag3BUK4XrTUTDA cFFcx1K2l7OZWg3CT0UUA+y4bKM/uyLMn0s+T7CfIhk2+6lQNHysG7Yc3AgGwEgA Kmhfv3nwudPf/iSbW3SSrKIJl9wUkYi79jyFUfPS4Wap9ZaVFckKTS5AGnXq/PKZ nIDilLk2YDAGTqXY0f4VT2Myrz0mzQiTbUo0Jiv6l9DjTUBz5N4DpTctiLmSuZNQ l9H6ccfdpcU3srruSReiu/ZbefSpzBeLpkNbF1wF9y768QQRmTtF/AfaCDtlY5jR lpCpjmUUP4ZXUly8R1Z9Ld61T3sTnb3BxndpSIv22o/NfyAS1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHiW8zK40ovM4dAPjgnD4aZWzeDzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNWRk ZWZjZC02ZTBlLTQ4YWMtODcyOC1hMWQ4MmU5MTEyOWEvNjAxNjQ2MTEtYTk3ZC0z NTczLTkzMzgtZmU5NjRlN2YzYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjVkZGVmY2QtNmUwZS00OGFjLTg3 MjgtYTFkODJlOTExMjlhLzI1ZGRlZmNkLTZlMGUtNDhhYy04NzI4LWExZDgyZTkx MTI5YS5jcmwwHwYDVR0jBBgwFoAUERE64R4SQWKGBHYPg+Iv7Tr5tgowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNWRkZWZjZC02ZTBlLTQ4YWMtODcyOC1hMWQ4 MmU5MTEyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDj/aYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWS8P9iBeXoqRVYzzxdXqvzWE2m+K/ZQVTHlBJyM4Kq8nAvxSCkRgwH t9OxZ7T8jRYa5G1LjT3ry0Wwa2NXAXbIJGj7ZdwTMMC8I1wMnLVboY5n54Fi42in 1/mPNNHW7n2hXfzkmjp9iyeEfFyTn9xtCQYd2s/KaoTz0Vo62hMK6p4GqAF0qH0k qfbRRMc0e5twnmvE+l3DXD1fOQlIWuMqMFFxD3xrJLVXzvhilhlqQkgcK5ffmMSV LxtG4Q/VDuv+P6ODTHfzhT5I4y+SL9jveTREX3ZTQ2KH4O4Lq95ioVK8Jrz0WW0j erZLRemcxLGVg1cdue21s36dfNjcWGk= -----END CERTIFICATE-----Generated at Mon May 12 16:46:09 2025 by rpki-client