$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/fb865e5f-da52-3d31-8e1f-06468a13efda.roa File: fb865e5f-da52-3d31-8e1f-06468a13efda.roa (raw, json) Hash identifier: 0qAB9psWE7Q7ml4LPkjlCOqIkWT98sQ6IHxIxgjwe3c= Subject key identifier: 57:E1:B7:CB:FF:F0:D7:1D:AE:38:92:21:69:C6:F7:73:1F:8A:64:96 Certificate issuer: /CN=19b60f9c-48d6-4515-ba9c-57166ac85e06 Certificate serial: 010D0C9F4328584975AED0A2A239CDD71DCDFE80 Authority key identifier: A2:70:59:6A:46:EC:90:D1:D2:A0:C5:FC:44:E1:DD:64:52:43:E8:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/fb865e5f-da52-3d31-8e1f-06468a13efda.roa Signing time: Tue 08 Apr 2025 16:35:38 +0000 ROA not before: Tue 08 Apr 2025 16:35:38 +0000 ROA not after: Mon 07 Jul 2025 16:35:38 +0000 asID: 7950 IP address blocks: 142.87.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:ae:d0:a2:a2:39:cd:d7:1d:cd:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19b60f9c-48d6-4515-ba9c-57166ac85e06 Validity Not Before: Apr 8 16:35:38 2025 GMT Not After : Jul 7 16:35:38 2025 GMT Subject: CN=aa5b2bc9-69d7-414d-930a-28da202979c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:72:ab:bf:f0:bf:b7:a5:2b:20:eb:11:fc:6e: f0:8c:c6:ab:0e:1d:ef:1a:10:92:3f:54:b2:d7:2d: af:4a:a0:7f:f3:28:77:7c:b6:b3:a9:93:24:bd:7e: bd:1d:8b:c1:45:bc:ce:23:67:13:a9:2c:00:67:8d: fa:6a:f5:a9:93:8e:52:4f:8e:15:3a:01:ca:b9:f7: bd:0b:2e:77:da:9d:65:b8:06:55:58:e8:f7:32:95: 96:3b:54:dc:7f:06:14:06:e3:2a:9b:44:10:55:82: c6:81:dd:ec:cd:43:42:4b:60:04:5d:e7:11:ae:3d: e1:a7:91:f8:f9:8e:b2:e5:be:ef:55:ca:60:77:4e: cd:8d:0d:83:6e:d2:af:8c:9e:44:8d:30:f8:6c:69: 6a:9c:e5:fc:15:04:ef:ee:14:39:25:48:f7:2b:0e: 39:ca:0a:a9:ce:14:40:02:56:c5:08:1d:28:bc:49: 2a:21:84:0b:5d:f3:78:27:7a:a6:dc:78:80:18:fb: 30:78:d4:87:33:1c:83:0e:bf:16:38:1c:07:09:e2: fd:ad:17:11:87:65:fd:6c:22:86:65:41:bf:2c:e8: 6b:44:70:1c:7c:9e:de:2c:23:7d:9c:bf:c3:ef:c2: 27:c3:1e:cd:35:88:43:55:73:86:dc:31:85:48:1a: df:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E1:B7:CB:FF:F0:D7:1D:AE:38:92:21:69:C6:F7:73:1F:8A:64:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/fb865e5f-da52-3d31-8e1f-06468a13efda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06/19b60f9c-48d6-4515-ba9c-57166ac85e06.crl X509v3 Authority Key Identifier: keyid:A2:70:59:6A:46:EC:90:D1:D2:A0:C5:FC:44:E1:DD:64:52:43:E8:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/19b60f9c-48d6-4515-ba9c-57166ac85e06.cer sbgp-ipAddrBlock: critical IPv4: 142.87.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:70:8e:5f:9a:a3:5b:ff:a7:0e:21:dc:e1:ea:da:84:50:40: 95:63:f6:df:d3:e8:fd:f1:a5:47:57:98:78:51:90:cc:5c:c8: b1:ad:7b:da:a0:26:6e:c7:7a:78:cc:0b:ea:6a:c8:64:34:37: 02:38:c8:f7:f4:b8:65:b9:bc:51:a6:00:56:04:90:61:89:c0: 91:02:91:86:3a:66:8b:cb:4d:22:6e:fb:b6:19:fa:38:f3:03: 59:f7:71:b3:97:16:26:d8:21:dc:60:be:2c:12:b6:c2:19:a0: 63:75:db:da:16:1f:7a:59:d7:5f:e5:ed:c4:b4:4b:0e:0b:a6: 0f:b3:cf:39:f9:db:5e:2d:03:c1:25:98:4b:61:92:61:cf:5f: 86:ec:a6:29:72:4e:91:eb:e6:89:15:e2:9d:cf:96:7b:29:e0: c1:f9:37:2f:b5:58:66:b1:ba:1f:c1:5c:bf:c7:f1:8f:92:40: 8b:99:af:51:de:4b:fc:b1:9e:2c:5c:85:21:cf:17:e8:90:b8: e4:c1:ba:5b:07:bd:58:84:a0:12:ef:40:be:00:28:84:9f:a0: b2:74:53:fc:97:a3:22:25:43:15:67:1e:cf:62:4c:38:5b:c3: 8b:6a:64:81:c6:40:38:b9:0b:a7:e4:c9:e6:9c:14:01:49:f6: 2a:b3:ec:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1rtCiojnN1x3N/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTliNjBmOWMtNDhkNi00NTE1LWJhOWMtNTcxNjZhYzg1 ZTA2MB4XDTI1MDQwODE2MzUzOFoXDTI1MDcwNzE2MzUzOFowLzEtMCsGA1UEAxMk YWE1YjJiYzktNjlkNy00MTRkLTkzMGEtMjhkYTIwMjk3OWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnKrv/C/t6UrIOsR/G7wjMarDh3vGhCSP1Sy 1y2vSqB/8yh3fLazqZMkvX69HYvBRbzOI2cTqSwAZ436avWpk45ST44VOgHKufe9 Cy532p1luAZVWOj3MpWWO1TcfwYUBuMqm0QQVYLGgd3szUNCS2AEXecRrj3hp5H4 +Y6y5b7vVcpgd07NjQ2DbtKvjJ5EjTD4bGlqnOX8FQTv7hQ5JUj3Kw45ygqpzhRA AlbFCB0ovEkqIYQLXfN4J3qm3HiAGPsweNSHMxyDDr8WOBwHCeL9rRcRh2X9bCKG ZUG/LOhrRHAcfJ7eLCN9nL/D78Inwx7NNYhDVXOG3DGFSBrflQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfht8v/8NcdrjiSIWnG93MfimSWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xOWI2 MGY5Yy00OGQ2LTQ1MTUtYmE5Yy01NzE2NmFjODVlMDYvZmI4NjVlNWYtZGE1Mi0z ZDMxLThlMWYtMDY0NjhhMTNlZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMTliNjBmOWMtNDhkNi00NTE1LWJh OWMtNTcxNjZhYzg1ZTA2LzE5YjYwZjljLTQ4ZDYtNDUxNS1iYTljLTU3MTY2YWM4 NWUwNi5jcmwwHwYDVR0jBBgwFoAUonBZakbskNHSoMX8ROHdZFJD6EswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xOWI2MGY5Yy00OGQ2LTQ1MTUtYmE5Yy01NzE2 NmFjODVlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjlehMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpwjl+ao1v/pw4h3OHq2oRQQJVj9t/T6P3xpUdXmHhRkMxcyLGte9qg Jm7HenjMC+pqyGQ0NwI4yPf0uGW5vFGmAFYEkGGJwJECkYY6ZovLTSJu+7YZ+jjz A1n3cbOXFibYIdxgviwStsIZoGN129oWH3pZ11/l7cS0Sw4Lpg+zzzn5214tA8El mEthkmHPX4bspilyTpHr5okV4p3Plnsp4MH5Ny+1WGaxuh/BXL/H8Y+SQIuZr1He S/yxnixchSHPF+iQuOTBulsHvViEoBLvQL4AKISfoLJ0U/yXoyIlQxVnHs9iTDhb w4tqZIHGQDi5C6fkyeacFAFJ9iqz7DU= -----END CERTIFICATE-----Generated at Tue May 13 06:38:44 2025 by rpki-client