$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/41ca8484-ee5e-3e68-86b3-0edd089e66b0.roa File: 41ca8484-ee5e-3e68-86b3-0edd089e66b0.roa (raw, json) Hash identifier: YA0cOiOpsgyBtm01BOVdd2pC7ls+bc5iBAZBK70YQs8= Subject key identifier: 8E:F7:2B:36:48:F1:6F:63:13:7F:84:A1:B9:7B:60:ED:C5:5B:71:B9 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584925B3ABDA22C30D5A41CF6100 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/41ca8484-ee5e-3e68-86b3-0edd089e66b0.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 398156 IP address blocks: 158.120.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:ab:da:22:c3:0d:5a:41:cf:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=1e8221f2-0cff-4a78-9429-39327bd91781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:78:2b:90:4d:cb:59:ea:3f:55:ac:ab:7b:1e: ae:d6:6b:b8:35:0c:45:ca:a3:09:b9:80:8a:91:17: a0:d7:ea:d3:65:02:65:30:39:1e:d6:92:6c:17:db: 41:b5:44:dc:07:d5:bf:6f:6c:2e:aa:2d:e9:34:e4: 54:63:98:32:0b:d2:e2:09:a9:1a:6c:6e:76:ce:37: cc:7a:02:06:10:b1:d4:0b:b5:76:9e:c6:81:6a:fe: 11:04:4e:fd:8b:b4:a1:fd:3a:e0:6a:7a:d4:3e:e9: 94:72:20:8e:10:2f:b8:2f:86:e1:df:0b:8d:17:bd: 53:d4:42:8f:7c:fc:b6:60:9d:53:88:7e:33:f3:77: ee:5f:a7:b9:f7:be:a3:58:99:9b:2b:ce:8d:35:35: 57:c3:56:83:f6:d4:f2:f2:66:67:f3:bf:f0:8a:56: 93:4f:93:f1:38:97:bb:60:d9:0d:f2:5a:99:c1:81: 87:bc:0c:f9:64:97:39:96:3a:f0:26:b8:bf:ce:51: 56:a9:4f:fb:f8:f4:ff:54:6a:08:36:ab:ba:d9:2f: d7:b4:d5:aa:55:45:42:cb:54:f0:e9:09:a9:60:8b: 9b:99:65:f3:6a:65:dd:3e:e9:30:0e:b3:c3:d2:da: 4f:65:c4:8e:8a:38:c7:f4:40:d8:2a:80:82:e9:22: ce:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F7:2B:36:48:F1:6F:63:13:7F:84:A1:B9:7B:60:ED:C5:5B:71:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/41ca8484-ee5e-3e68-86b3-0edd089e66b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:5a:ba:35:07:96:bd:da:22:51:a7:11:a1:12:6a:8f:bf:63: 71:a5:10:09:0a:af:80:7c:9e:4c:13:bc:d1:c6:9f:e7:6c:4d: 4f:80:52:12:08:71:fa:64:2f:95:d4:30:1a:25:f3:73:3c:72: 77:f1:cf:b7:09:88:2b:c8:71:5f:b0:d8:bb:31:9c:b3:1e:e8: 57:52:fe:71:3e:94:20:db:c8:24:c9:f9:ba:c7:32:d0:1b:21: aa:3d:89:e2:b8:58:8d:58:58:11:2f:ac:70:33:c0:27:4e:f4: ec:73:06:ce:a6:60:b0:bf:f4:45:00:32:51:08:7e:82:16:74: 79:7c:31:52:76:e1:0e:3f:d7:fe:36:2b:2e:90:91:cc:87:3e: 75:f1:45:9d:92:0b:cb:39:1f:7b:91:3c:85:00:32:e1:66:bd: 6a:57:73:ee:af:0a:a6:c2:2d:81:84:c2:cd:a9:a4:f0:d2:08: 63:e5:bd:f0:75:30:7e:00:9d:34:ed:6c:25:8d:17:94:00:55: fd:13:12:8f:b8:26:49:3f:a6:cd:8f:09:30:7e:14:bb:40:e7: 73:7a:0e:cd:f5:91:18:27:13:7a:2e:83:c6:e6:a9:c5:55:00: a3:f1:a0:88:ee:37:38:af:43:fe:37:6d:fd:a5:47:73:9c:ba: 45:6c:bb:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkls6vaIsMNWkHPYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk MWU4MjIxZjItMGNmZi00YTc4LTk0MjktMzkzMjdiZDkxNzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHgrkE3LWeo/Vayrex6u1mu4NQxFyqMJuYCK kReg1+rTZQJlMDke1pJsF9tBtUTcB9W/b2wuqi3pNORUY5gyC9LiCakabG52zjfM egIGELHUC7V2nsaBav4RBE79i7Sh/TrganrUPumUciCOEC+4L4bh3wuNF71T1EKP fPy2YJ1TiH4z83fuX6e5976jWJmbK86NNTVXw1aD9tTy8mZn87/wilaTT5PxOJe7 YNkN8lqZwYGHvAz5ZJc5ljrwJri/zlFWqU/7+PT/VGoINqu62S/XtNWqVUVCy1Tw 6QmpYIubmWXzamXdPukwDrPD0tpPZcSOijjH9EDYKoCC6SLOZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI73KzZI8W9jE3+Eobl7YO3FW3G5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvNDFjYTg0ODQtZWU1ZS0z ZTY4LTg2YjMtMGVkZDA4OWU2NmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdaujUHlr3aIlGnEaESao+/Y3GlEAkKr4B8nkwTvNHGn+dsTU+AUhII cfpkL5XUMBol83M8cnfxz7cJiCvIcV+w2LsxnLMe6FdS/nE+lCDbyCTJ+brHMtAb Iao9ieK4WI1YWBEvrHAzwCdO9OxzBs6mYLC/9EUAMlEIfoIWdHl8MVJ24Q4/1/42 Ky6QkcyHPnXxRZ2SC8s5H3uRPIUAMuFmvWpXc+6vCqbCLYGEws2ppPDSCGPlvfB1 MH4AnTTtbCWNF5QAVf0TEo+4Jkk/ps2PCTB+FLtA53N6Ds31kRgnE3oug8bmqcVV AKPxoIjuNzivQ/43bf2lR3OcukVsuxg= -----END CERTIFICATE-----Generated at Tue May 6 22:56:34 2025 by rpki-client