$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2d7fe67f-3732-3c11-b3e0-f3f2939be1c7.roa File: 2d7fe67f-3732-3c11-b3e0-f3f2939be1c7.roa (raw, json) Hash identifier: L+W79qhskHTrlMRQausYIT3+mlPaQRyflCM9cGmskMk= Subject key identifier: C9:54:8B:31:EA:8B:84:E5:91:7B:36:D3:1A:EF:8E:52:2F:E8:2E:B3 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F43285849B59A0AE7CEAA28E39C59F3C0 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2d7fe67f-3732-3c11-b3e0-f3f2939be1c7.roa Signing time: Thu 01 May 2025 14:05:31 +0000 ROA not before: Thu 01 May 2025 14:05:31 +0000 ROA not after: Wed 30 Jul 2025 14:05:31 +0000 asID: 398156 IP address blocks: 158.120.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:9a:0a:e7:ce:aa:28:e3:9c:59:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: May 1 14:05:31 2025 GMT Not After : Jul 30 14:05:31 2025 GMT Subject: CN=37197bc3-522c-4302-9428-3e2cab05856f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cf:f6:ba:10:7c:75:eb:8f:2d:7d:2e:e8:44: a2:28:08:41:a0:74:03:07:3d:cb:02:cf:54:76:b4: 4c:46:cb:50:3e:23:5e:39:9c:2e:b6:67:bf:2a:79: 6d:ae:a5:43:c6:f1:79:a1:57:9b:df:d4:dc:a0:29: 23:d0:c6:f7:3b:98:be:05:ec:d3:dd:e1:dd:7a:12: d5:b5:1b:e4:7d:df:8d:c0:59:4d:0f:c7:37:b4:a8: 75:82:b4:21:26:37:38:d8:f4:70:71:83:49:0c:46: 9c:51:69:bb:24:4d:46:8a:92:71:02:20:7e:91:e3: f2:bc:cb:a7:2f:ef:49:5b:e1:be:d0:36:e8:07:be: f9:00:b0:2f:8b:20:1c:68:b8:26:70:d8:db:f9:84: d5:33:55:3e:14:54:49:67:19:05:55:fc:90:46:26: 48:bd:74:98:12:a9:e1:01:cf:77:cc:65:df:62:f9: e3:6b:da:25:91:95:5b:d5:93:22:17:e2:75:50:e7: 5e:9a:be:58:13:a1:a9:1d:65:3f:bb:9c:c6:f9:82: d7:47:42:91:02:d9:20:ce:92:a1:49:d9:a4:26:e9: e0:6b:2c:d6:d2:b0:b5:1a:14:03:1b:f4:e9:9d:e5: 0f:d3:e2:db:d0:55:b2:a8:a6:f2:7d:c5:a1:a1:ba: ba:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:54:8B:31:EA:8B:84:E5:91:7B:36:D3:1A:EF:8E:52:2F:E8:2E:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2d7fe67f-3732-3c11-b3e0-f3f2939be1c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:b6:ff:de:6b:d6:80:76:bd:09:df:ee:b8:a7:e1:bd:da:e1: c5:02:71:70:f7:13:c9:4e:5e:9b:b1:fd:47:90:2b:01:8a:4e: c7:26:a8:ca:30:a7:b9:0f:31:1b:68:9a:1f:f4:68:61:1a:16: db:81:e3:24:0e:14:5f:2e:a0:8e:78:a8:40:34:a9:48:86:a8: bf:93:fa:7a:09:48:63:2f:4b:7e:ee:8a:e2:31:d9:b7:bc:fd: 0f:ed:d8:d8:79:d7:7a:7d:60:a0:b5:2c:e2:5d:c9:03:a0:15: 37:e5:77:f4:4f:1d:38:22:ab:e5:1f:a7:e1:41:90:6d:cc:83: 47:12:9d:70:16:39:3c:0b:13:38:c6:a5:db:e6:6e:99:80:79: f3:78:de:d7:9a:30:1e:a9:cf:92:a2:20:9d:f8:f5:6e:2d:70: 0f:b8:f7:07:82:6f:65:b7:01:fd:1d:e0:a1:b4:00:21:9b:95: 3a:43:43:88:25:13:02:c4:a8:74:5e:9d:78:eb:75:52:87:f1: 14:25:c4:2d:fe:69:26:c9:f8:cb:e4:a2:a2:91:02:09:45:96: 6d:d6:c7:99:94:e0:d6:26:c5:50:63:37:52:8e:27:7a:f4:36: 36:bc:f1:2f:c6:08:e2:fe:6e:d2:66:08:71:79:5d:49:0f:75: a3:d4:8d:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1mgrnzqoo45xZ88AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDUwMTE0MDUzMVoXDTI1MDczMDE0MDUzMVowLzEtMCsGA1UEAxMk MzcxOTdiYzMtNTIyYy00MzAyLTk0MjgtM2UyY2FiMDU4NTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM/2uhB8deuPLX0u6ESiKAhBoHQDBz3LAs9U drRMRstQPiNeOZwutme/KnltrqVDxvF5oVeb39TcoCkj0Mb3O5i+BezT3eHdehLV tRvkfd+NwFlND8c3tKh1grQhJjc42PRwcYNJDEacUWm7JE1GipJxAiB+kePyvMun L+9JW+G+0DboB775ALAviyAcaLgmcNjb+YTVM1U+FFRJZxkFVfyQRiZIvXSYEqnh Ac93zGXfYvnja9olkZVb1ZMiF+J1UOdemr5YE6GpHWU/u5zG+YLXR0KRAtkgzpKh SdmkJungayzW0rC1GhQDG/TpneUP0+Lb0FWyqKbyfcWhobq6yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlUizHqi4TlkXs20xrvjlIv6C6zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvMmQ3ZmU2N2YtMzczMi0z YzExLWIzZTAtZjNmMjkzOWJlMWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABi2/95r1oB2vQnf7rin4b3a4cUCcXD3E8lOXpux/UeQKwGKTscmqMow p7kPMRtomh/0aGEaFtuB4yQOFF8uoI54qEA0qUiGqL+T+noJSGMvS37uiuIx2be8 /Q/t2Nh513p9YKC1LOJdyQOgFTfld/RPHTgiq+Ufp+FBkG3Mg0cSnXAWOTwLEzjG pdvmbpmAefN43teaMB6pz5KiIJ349W4tcA+49weCb2W3Af0d4KG0ACGblTpDQ4gl EwLEqHRenXjrdVKH8RQlxC3+aSbJ+MvkoqKRAglFlm3Wx5mU4NYmxVBjN1KOJ3r0 Nja88S/GCOL+btJmCHF5XUkPdaPUjVY= -----END CERTIFICATE-----Generated at Wed May 7 22:13:21 2025 by rpki-client