$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/98e4e7ab-6db9-3cd9-ad8c-6c9893e4395b.roa File: 98e4e7ab-6db9-3cd9-ad8c-6c9893e4395b.roa (raw, json) Hash identifier: kLw0MIvTZUBoHHdCKtJnPWGRHIvpkKyWVVvuDB34T/c= Subject key identifier: E4:B7:A0:6D:F2:99:BD:20:85:2E:C0:F2:83:F1:86:70:BA:E3:93:FA Certificate issuer: /CN=e94dafbf-328e-40f2-ab0d-4718f1177861 Certificate serial: 010D0C9F432858497279B517F4ED3C6793549A00 Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/98e4e7ab-6db9-3cd9-ad8c-6c9893e4395b.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 46450 IP address blocks: 142.214.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:b5:17:f4:ed:3c:67:93:54:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861 Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=1fd303a2-4f9d-4567-8517-c769890f302b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:a6:ce:35:5d:ec:f8:99:45:f4:71:e0:c2: f1:a3:e7:9f:35:20:3e:80:e5:e0:d6:d0:a4:6c:4f: e2:99:e4:84:39:06:e6:9c:7e:55:51:b2:80:bc:76: 34:b2:5f:37:db:04:f6:78:d5:56:3e:be:fd:ed:0a: 6b:df:55:3f:68:61:ac:79:6d:84:28:04:7c:b1:24: c8:3c:be:74:db:13:96:ca:e8:97:54:1c:2e:27:f9: c6:60:5e:2b:be:f1:a9:88:ee:cd:1c:2e:e7:fa:68: 5c:8c:d3:98:78:4d:9e:a0:cd:32:4e:f2:00:35:0b: ed:6c:c0:50:a5:82:81:1a:f9:69:b5:ea:38:18:27: a4:de:f3:10:fd:e2:bd:d1:c4:b5:08:73:fc:09:9b: 62:1c:3e:59:02:55:3b:c7:90:cd:d4:b4:ab:b4:14: ad:79:05:4c:f4:9f:49:3b:dc:e1:10:ba:fb:65:30: 4a:fa:87:ee:38:d0:1f:84:8b:51:61:ea:28:c8:62: 80:8d:d7:b0:bd:1c:c2:19:7c:20:16:0c:12:c9:38: 20:09:0e:ec:58:da:1b:60:11:aa:eb:70:52:04:da: d4:27:17:9d:e2:dc:00:2c:c4:1b:d5:a2:c1:58:fe: 0d:f0:20:f6:02:1d:80:72:ac:e7:42:65:be:2f:e0: 72:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B7:A0:6D:F2:99:BD:20:85:2E:C0:F2:83:F1:86:70:BA:E3:93:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/98e4e7ab-6db9-3cd9-ad8c-6c9893e4395b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl X509v3 Authority Key Identifier: keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer sbgp-ipAddrBlock: critical IPv4: 142.214.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:e4:f7:d6:42:f4:5c:25:46:6e:0d:ff:26:38:f8:ae:16:3f: 38:f7:ce:a0:74:47:05:dc:ec:cb:03:5d:5b:3c:e9:3c:76:96: b8:1b:24:9a:70:59:b6:5c:cb:c2:4c:47:77:20:94:0f:e3:d9: b6:46:6b:4f:4b:b1:d9:0e:71:85:ab:cd:c5:2e:10:c0:b0:d1: f6:6a:e7:07:63:6c:64:01:0e:c6:b8:ee:8b:f7:5f:d9:86:79: 3b:17:c6:5e:54:f5:02:9b:62:47:4c:8a:14:60:f1:85:ca:92: c1:26:20:71:a3:ea:4d:66:1f:59:21:fc:d7:5e:ae:b0:01:eb: c4:20:d9:30:52:cc:f2:49:90:66:a6:54:76:32:33:00:b5:f3: 23:7e:a8:cc:ad:1b:61:3f:ef:12:31:8d:67:a1:63:e2:fe:33: 05:5c:90:bf:5f:58:7f:b3:0d:a3:67:81:ca:b1:2e:70:f8:3d: e9:61:67:06:56:5e:bf:14:b9:32:53:69:ca:af:8d:8d:4e:26: 52:38:c7:ac:32:a1:b1:2d:d0:4e:bc:2d:1b:8b:cc:ad:35:67: e6:bc:a9:fd:a9:a1:47:19:e4:96:c2:fd:87:5f:fa:8c:1f:df: e4:a5:35:80:53:34:0b:cf:bd:99:a3:45:54:5d:eb:29:ae:cb: 1c:31:d6:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyebUX9O08Z5NUmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk0ZGFmYmYtMzI4ZS00MGYyLWFiMGQtNDcxOGYxMTc3 ODYxMB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk MWZkMzAzYTItNGY5ZC00NTY3LTg1MTctYzc2OTg5MGYzMDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB6mzjVd7PiZRfRx4MLxo+efNSA+gOXg1tCk bE/imeSEOQbmnH5VUbKAvHY0sl832wT2eNVWPr797Qpr31U/aGGseW2EKAR8sSTI PL502xOWyuiXVBwuJ/nGYF4rvvGpiO7NHC7n+mhcjNOYeE2eoM0yTvIANQvtbMBQ pYKBGvlpteo4GCek3vMQ/eK90cS1CHP8CZtiHD5ZAlU7x5DN1LSrtBSteQVM9J9J O9zhELr7ZTBK+ofuONAfhItRYeooyGKAjdewvRzCGXwgFgwSyTggCQ7sWNobYBGq 63BSBNrUJxed4twALMQb1aLBWP4N8CD2Ah2AcqznQmW+L+ByxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOS3oG3ymb0ghS7A8oPxhnC645P6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lOTRk YWZiZi0zMjhlLTQwZjItYWIwZC00NzE4ZjExNzc4NjEvOThlNGU3YWItNmRiOS0z Y2Q5LWFkOGMtNmM5ODkzZTQzOTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTk0ZGFmYmYtMzI4ZS00MGYyLWFi MGQtNDcxOGYxMTc3ODYxL2U5NGRhZmJmLTMyOGUtNDBmMi1hYjBkLTQ3MThmMTE3 Nzg2MS5jcmwwHwYDVR0jBBgwFoAUHpbW+MBWSeEWvtPCmYRooLx45zkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lOTRkYWZiZi0zMjhlLTQwZjItYWIwZC00NzE4 ZjExNzc4NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjtaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3k99ZC9FwlRm4N/yY4+K4WPzj3zqB0RwXc7MsDXVs86Tx2lrgbJJpw WbZcy8JMR3cglA/j2bZGa09LsdkOcYWrzcUuEMCw0fZq5wdjbGQBDsa47ov3X9mG eTsXxl5U9QKbYkdMihRg8YXKksEmIHGj6k1mH1kh/NderrAB68Qg2TBSzPJJkGam VHYyMwC18yN+qMytG2E/7xIxjWehY+L+MwVckL9fWH+zDaNngcqxLnD4PelhZwZW Xr8UuTJTacqvjY1OJlI4x6wyobEt0E68LRuLzK01Z+a8qf2poUcZ5JbC/Ydf+owf 3+SlNYBTNAvPvZmjRVRd6ymuyxwx1kw= -----END CERTIFICATE-----Generated at Wed May 7 06:00:48 2025 by rpki-client