$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/3dd9312b-0b44-3178-a2d7-c6ad8886f840.roa File: 3dd9312b-0b44-3178-a2d7-c6ad8886f840.roa (raw, json) Hash identifier: Z96P+jIrI65QryuBu/b1q2ck+Le77idY4SMA/vUuPyI= Subject key identifier: AF:86:55:72:85:66:51:1B:A9:2F:9F:4B:57:E6:6D:BC:EB:66:E8:43 Certificate issuer: /CN=61939bbc-e50f-4ced-8482-e7c4008e3583 Certificate serial: 010D0C9F43285849AE7F436E7673C2A15B529180 Authority key identifier: 3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/3dd9312b-0b44-3178-a2d7-c6ad8886f840.roa Signing time: Tue 29 Apr 2025 01:00:47 +0000 ROA not before: Tue 29 Apr 2025 01:00:47 +0000 ROA not after: Mon 28 Jul 2025 01:00:47 +0000 asID: 397453 IP address blocks: 143.223.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:7f:43:6e:76:73:c2:a1:5b:52:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61939bbc-e50f-4ced-8482-e7c4008e3583 Validity Not Before: Apr 29 01:00:47 2025 GMT Not After : Jul 28 01:00:47 2025 GMT Subject: CN=2b66242d-4b3f-4d15-87d6-61574e090486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b8:92:6a:2a:45:a2:ac:31:f7:d3:81:59:f4: de:c2:7b:2f:af:73:12:95:a5:83:fe:f7:64:ac:87: d5:a4:c2:00:7c:fa:ec:f6:4d:2e:da:ec:05:10:cd: b7:e6:2d:2e:15:b4:db:c1:c1:60:8f:b0:78:cd:10: d2:d8:f0:9b:9c:09:19:6c:b4:03:0d:6e:64:36:6f: 07:6b:df:03:c6:b3:d4:6c:54:5a:71:6a:d6:03:84: 54:7b:e2:18:68:8d:bb:d5:1c:72:09:77:a5:b6:13: 23:a3:a3:93:b8:45:81:9a:f4:cf:13:cf:d1:81:df: f3:58:29:f1:ee:2d:3b:ec:b4:89:2e:a5:c6:0e:8d: eb:9f:43:94:03:e5:fb:ab:20:9d:c5:06:3f:63:94: 88:e3:0f:2c:c5:b2:6a:b4:27:f2:5b:b7:53:bd:e7: 74:12:23:00:b5:07:52:76:dd:17:c3:35:89:e9:f9: f4:66:08:17:2d:e4:df:0e:aa:7d:f3:51:8e:f5:f6: b6:8f:f4:a2:dd:41:af:ec:c5:d3:dd:66:5b:2f:14: bb:27:0f:0c:d5:c3:fe:87:e3:bb:d9:d8:8e:f4:88: 6f:d9:29:b4:df:4e:cf:26:c8:fb:9a:55:8e:5c:88: 01:82:3c:83:63:1e:ee:0b:38:35:05:b9:6e:63:81: ea:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:86:55:72:85:66:51:1B:A9:2F:9F:4B:57:E6:6D:BC:EB:66:E8:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/3dd9312b-0b44-3178-a2d7-c6ad8886f840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl X509v3 Authority Key Identifier: keyid:3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer sbgp-ipAddrBlock: critical IPv4: 143.223.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:d1:3d:7f:8b:5b:e1:32:04:d1:82:db:06:7e:b5:fe:b0:aa: dd:94:22:0c:79:72:54:d6:76:e5:49:22:f9:a9:9e:b1:46:8f: db:cd:c9:37:a0:30:5a:5b:a1:c0:69:ce:e1:1c:1d:a4:f1:33: 3f:3a:3c:63:3c:7d:83:79:b3:fe:28:60:72:aa:37:1c:46:65: 61:4c:4e:2b:21:60:2f:58:f3:7a:a3:9c:b4:94:e0:52:af:28: f1:4c:1a:16:8f:3c:c9:03:f0:30:6c:20:cb:0e:f7:9c:ed:cc: a6:47:bb:c3:bd:8a:60:52:f8:2a:8a:da:08:7a:60:9c:2c:51: 86:06:c9:68:62:7e:99:e5:fa:17:b9:9e:8f:bc:4f:2a:af:a3: 83:c3:8f:9a:95:8d:c4:52:e1:cb:f8:11:d0:8b:0b:89:25:85: 66:df:c5:c4:b4:d2:0b:2d:30:8e:f1:77:94:13:67:84:f0:dd: 11:29:01:98:01:27:7c:f0:34:a4:ca:ac:f5:9b:90:9d:7b:cd: c4:f2:e6:bb:38:8b:e1:00:d6:f3:f5:7a:9d:e1:eb:4b:dc:8c: 68:ce:0b:a2:61:2c:b4:46:5b:e4:61:e6:99:89:c3:be:10:4b: 16:34:dd:e4:d6:8c:ae:9b:05:3e:f6:23:cf:dc:9e:b5:ab:d5: 18:32:2e:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmuf0NudnPCoVtSkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE5MzliYmMtZTUwZi00Y2VkLTg0ODItZTdjNDAwOGUz NTgzMB4XDTI1MDQyOTAxMDA0N1oXDTI1MDcyODAxMDA0N1owLzEtMCsGA1UEAxMk MmI2NjI0MmQtNGIzZi00ZDE1LTg3ZDYtNjE1NzRlMDkwNDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibiSaipFoqwx99OBWfTewnsvr3MSlaWD/vdk rIfVpMIAfPrs9k0u2uwFEM235i0uFbTbwcFgj7B4zRDS2PCbnAkZbLQDDW5kNm8H a98DxrPUbFRacWrWA4RUe+IYaI271RxyCXelthMjo6OTuEWBmvTPE8/Rgd/zWCnx 7i077LSJLqXGDo3rn0OUA+X7qyCdxQY/Y5SI4w8sxbJqtCfyW7dTved0EiMAtQdS dt0XwzWJ6fn0ZggXLeTfDqp981GO9fa2j/Si3UGv7MXT3WZbLxS7Jw8M1cP+h+O7 2diO9Ihv2Sm0307PJsj7mlWOXIgBgjyDYx7uCzg1BbluY4HqUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+GVXKFZlEbqS+fS1fmbbzrZuhDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTkz OWJiYy1lNTBmLTRjZWQtODQ4Mi1lN2M0MDA4ZTM1ODMvM2RkOTMxMmItMGI0NC0z MTc4LWEyZDctYzZhZDg4ODZmODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE5MzliYmMtZTUwZi00Y2VkLTg0 ODItZTdjNDAwOGUzNTgzLzYxOTM5YmJjLWU1MGYtNGNlZC04NDgyLWU3YzQwMDhl MzU4My5jcmwwHwYDVR0jBBgwFoAUP434UbbjU/pqwc9K3Q6RzsPeSRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTkzOWJiYy1lNTBmLTRjZWQtODQ4Mi1lN2M0 MDA4ZTM1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDj9/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7RPX+LW+EyBNGC2wZ+tf6wqt2UIgx5clTWduVJIvmpnrFGj9vNyTeg MFpbocBpzuEcHaTxMz86PGM8fYN5s/4oYHKqNxxGZWFMTishYC9Y83qjnLSU4FKv KPFMGhaPPMkD8DBsIMsO95ztzKZHu8O9imBS+CqK2gh6YJwsUYYGyWhifpnl+he5 no+8Tyqvo4PDj5qVjcRS4cv4EdCLC4klhWbfxcS00gstMI7xd5QTZ4Tw3REpAZgB J3zwNKTKrPWbkJ17zcTy5rs4i+EA1vP1ep3h60vcjGjOC6JhLLRGW+Rh5pmJw74Q SxY03eTWjK6bBT72I8/cnrWr1RgyLiU= -----END CERTIFICATE-----Generated at Fri May 9 13:18:24 2025 by rpki-client