$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/10efffec-8118-3912-b378-fa58a2bf751a.roa File: 10efffec-8118-3912-b378-fa58a2bf751a.roa (raw, json) Hash identifier: KSRa6+ncEXKBskgUoD0vPeeETrcNlci6m0knJwcE66s= Subject key identifier: 82:00:19:A9:DA:9D:D4:29:A5:E6:FA:52:A9:AE:62:EA:06:7D:1D:E6 Certificate issuer: /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f Certificate serial: 010D0C9F43285849AD1A00577B66FD366B9BEF80 Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/10efffec-8118-3912-b378-fa58a2bf751a.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 18934 IP address blocks: 142.202.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:00:57:7b:66:fd:36:6b:9b:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=5792ec37-08db-46a5-8bda-a0c15956dedd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9b:2f:af:c4:60:7a:2e:26:8d:64:d7:74:e7: ab:d4:ac:b8:89:49:7d:a1:f0:c7:df:1a:68:df:e9: 6a:7b:1a:bc:fb:0b:f6:de:53:86:5e:12:4e:4b:e0: 0a:5c:b4:67:9b:dc:3a:02:11:e9:2b:a5:42:9e:25: 7b:6e:f3:4c:9a:c1:b2:b6:4a:83:9d:62:c0:bf:68: 10:16:bb:a3:12:c0:df:e4:9b:f1:98:f9:83:d5:b2: 0f:7e:19:d6:42:87:c5:44:8b:c9:47:06:db:b8:ed: 7d:c9:59:9b:33:47:46:a3:4b:dc:36:ee:e4:5b:a2: 23:44:08:90:5e:19:2e:98:80:a7:7c:14:29:05:ef: 4e:83:30:9b:49:d8:8c:e2:70:5b:5c:a8:11:e7:7d: d8:d0:49:d0:49:16:c5:b8:36:d4:97:b4:51:48:c4: 5a:78:bf:1f:2c:be:3a:7a:dd:6c:f1:72:46:2c:bb: b6:13:00:24:3c:6e:18:fe:dc:b5:60:96:c9:4c:90: 2f:20:97:c7:b2:ff:4c:48:b9:a0:14:90:22:81:d1: b3:7f:c9:b0:bd:af:f6:50:4c:65:55:c3:4d:33:e7: 4d:ae:8e:7b:17:f1:3a:6e:81:47:02:b7:7d:6d:05: 35:46:8c:39:85:56:78:f9:05:d2:d6:f4:37:52:39: 57:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:00:19:A9:DA:9D:D4:29:A5:E6:FA:52:A9:AE:62:EA:06:7D:1D:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/10efffec-8118-3912-b378-fa58a2bf751a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl X509v3 Authority Key Identifier: keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer sbgp-ipAddrBlock: critical IPv4: 142.202.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:5e:53:38:98:af:b9:c0:55:77:8b:cc:70:0d:80:aa:65:bf: 06:52:8a:91:df:e2:f2:f6:ea:d6:1a:f2:91:11:dc:35:fe:d8: 14:ca:db:18:5c:bc:3b:c8:32:35:86:ae:2e:02:22:a9:bf:b7: 08:12:10:e0:01:8a:8a:02:cb:6e:1f:42:b8:20:12:39:ca:ac: e7:f0:d3:09:0b:a8:d8:a0:c4:4b:61:9e:55:a0:de:a5:a0:64: c4:dd:a5:9c:58:35:d7:89:ff:c4:66:59:65:70:de:b0:bd:d1: 07:ae:2d:b6:6e:51:62:a3:4b:b8:67:7a:9d:10:e6:19:0a:36: 9b:43:24:a6:02:2f:07:63:8a:37:4d:b5:61:a1:f1:6b:75:0f: 46:e9:0a:eb:2f:75:3b:9b:b1:c0:f1:0e:0b:dc:2c:dd:04:b4: 1e:7a:5f:49:45:7b:4b:9f:5b:38:5e:ec:91:ab:7a:70:be:35: 8b:07:79:57:2a:87:4b:7b:24:81:e0:5c:ae:e4:5e:d8:e9:08: 9a:45:49:a2:d5:2f:25:6e:71:4a:3d:b9:12:a8:9d:c8:a5:25: 6e:95:16:55:45:a1:21:f8:34:af:2c:0b:82:05:db:04:e8:2c: bf:e1:34:c6:4d:b6:75:c0:b4:07:a7:52:ae:64:c1:3a:77:ab: 22:25:4c:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGgBXe2b9Nmub74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ5MjEzZjctMjhlMi00ZmExLTg0OTEtNzhlMzU4MGNk YjdmMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk NTc5MmVjMzctMDhkYi00NmE1LThiZGEtYTBjMTU5NTZkZWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZsvr8Rgei4mjWTXdOer1Ky4iUl9ofDH3xpo 3+lqexq8+wv23lOGXhJOS+AKXLRnm9w6AhHpK6VCniV7bvNMmsGytkqDnWLAv2gQ FrujEsDf5JvxmPmD1bIPfhnWQofFRIvJRwbbuO19yVmbM0dGo0vcNu7kW6IjRAiQ XhkumICnfBQpBe9OgzCbSdiM4nBbXKgR533Y0EnQSRbFuDbUl7RRSMRaeL8fLL46 et1s8XJGLLu2EwAkPG4Y/ty1YJbJTJAvIJfHsv9MSLmgFJAigdGzf8mwva/2UExl VcNNM+dNro57F/E6boFHArd9bQU1Row5hVZ4+QXS1vQ3UjlXwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIAGanandQppeb6UqmuYuoGfR3mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNDky MTNmNy0yOGUyLTRmYTEtODQ5MS03OGUzNTgwY2RiN2YvMTBlZmZmZWMtODExOC0z OTEyLWIzNzgtZmE1OGEyYmY3NTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzQ5MjEzZjctMjhlMi00ZmExLTg0 OTEtNzhlMzU4MGNkYjdmLzM0OTIxM2Y3LTI4ZTItNGZhMS04NDkxLTc4ZTM1ODBj ZGI3Zi5jcmwwHwYDVR0jBBgwFoAUl16fqcxh1Y3cB+3gRH1f3Ykt9AMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNDkyMTNmNy0yOGUyLTRmYTEtODQ5MS03OGUz NTgwY2RiN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjspHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1eUziYr7nAVXeLzHANgKplvwZSipHf4vL26tYa8pER3DX+2BTK2xhc vDvIMjWGri4CIqm/twgSEOABiooCy24fQrggEjnKrOfw0wkLqNigxEthnlWg3qWg ZMTdpZxYNdeJ/8RmWWVw3rC90QeuLbZuUWKjS7hnep0Q5hkKNptDJKYCLwdjijdN tWGh8Wt1D0bpCusvdTubscDxDgvcLN0EtB56X0lFe0ufWzhe7JGrenC+NYsHeVcq h0t7JIHgXK7kXtjpCJpFSaLVLyVucUo9uRKoncilJW6VFlVFoSH4NK8sC4IF2wTo LL/hNMZNtnXAtAenUq5kwTp3qyIlTLQ= -----END CERTIFICATE-----Generated at Sat May 10 04:04:34 2025 by rpki-client