$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa File: cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa (raw, json) Hash identifier: N7zaFd/8xCjpgvf/WSoG6UvfaVaac4FFRPC4AOoPIW0= Subject key identifier: FE:35:D5:52:9A:B4:90:E4:6F:0A:53:C4:99:DE:14:29:A7:34:92:74 Certificate issuer: /CN=319d5f20-2367-457b-970b-7f1c1a60fcae Certificate serial: 010D0C9F43285849CBCF9638EBF259EF3C768860 Authority key identifier: 9C:51:2B:15:7A:87:63:E4:EE:5C:4E:E6:F3:26:B7:38:67:1C:E2:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 14630 IP address blocks: 142.148.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/319d5f20-2367-457b-970b-7f1c1a60fcae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/319d5f20-2367-457b-970b-7f1c1a60fcae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:96:38:eb:f2:59:ef:3c:76:88:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=319d5f20-2367-457b-970b-7f1c1a60fcae Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=fbfc3f05-cbf9-4fdd-a401-0374cd1ec9a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1f:e8:7d:6f:38:27:e1:e7:db:63:02:e6:27: 9e:01:cd:a8:70:a6:ea:0b:f3:88:37:ea:bc:54:47: 1f:6b:65:7c:4e:95:31:39:e9:13:05:dd:b0:49:1a: 03:95:9a:23:ba:ef:4b:3e:49:51:b8:48:b8:79:f6: 05:ad:8b:4d:85:be:9c:95:b7:f9:86:75:dc:4c:c9: 0f:ba:40:eb:5e:03:e7:3b:f7:8e:68:da:84:56:c8: cb:12:9a:04:2f:20:79:b1:5b:bf:51:68:86:3f:13: 29:b0:70:4b:4b:de:be:af:34:c8:ae:8a:cf:a8:46: d8:2e:2b:24:e1:1f:1a:b1:70:7b:0b:c3:27:1a:59: 9b:64:88:43:da:25:27:da:67:48:41:64:1f:7f:26: 1f:67:60:62:1e:e3:4e:57:4f:5c:a0:f8:e0:84:a6: 1b:d4:2d:e0:9d:65:79:8d:6d:4a:10:b7:6f:30:20: f5:e4:05:0f:a9:01:72:bd:2a:92:46:89:f0:e5:c9: cf:d4:af:b9:02:2f:6f:ba:2d:17:7c:bd:13:a6:17: 81:32:cd:d8:ab:d1:8e:fc:96:77:ba:7c:66:66:ff: a5:75:05:fb:88:a5:eb:f0:65:ec:d2:ab:6b:5d:1e: 16:86:23:2c:9d:db:58:e2:c3:c1:91:64:d8:f5:67: d7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:35:D5:52:9A:B4:90:E4:6F:0A:53:C4:99:DE:14:29:A7:34:92:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/319d5f20-2367-457b-970b-7f1c1a60fcae.crl X509v3 Authority Key Identifier: keyid:9C:51:2B:15:7A:87:63:E4:EE:5C:4E:E6:F3:26:B7:38:67:1C:E2:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae.cer sbgp-ipAddrBlock: critical IPv4: 142.148.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:21:3d:83:8e:3a:8a:33:0f:78:c5:65:ca:a9:3e:0d:1a:25: 1e:b4:53:1e:58:12:aa:37:56:95:b4:22:9f:c9:b8:d1:6e:d3: ac:00:e3:1a:f7:85:1d:3b:77:0e:1a:17:ab:07:8f:78:1a:a6: 85:87:c9:6d:bf:7a:9a:42:8a:3e:72:8a:19:66:fd:04:55:38: 43:30:8d:59:67:41:34:3b:66:16:2e:67:1f:3e:2e:03:f5:7e: c0:4e:51:35:e7:a6:56:88:41:11:80:c5:b6:6b:10:5a:41:50: ec:4a:6d:1a:5e:fc:c4:70:82:72:d1:6b:f1:2d:ce:4c:ba:ad: 41:d1:41:0a:8f:94:8c:05:37:81:de:9b:86:e5:a1:2f:cc:22: 38:83:42:d1:3b:1d:63:4f:07:e0:3c:ba:e5:32:1c:94:40:b6: 97:30:53:3a:01:ed:9b:8a:19:50:7a:a0:d1:32:f7:70:89:b1: 84:c9:92:b3:07:96:65:cf:5e:04:92:a7:a2:b2:3f:a6:c4:b1: 33:5f:f4:51:51:bc:7f:b1:d5:3c:52:25:b5:c7:53:4c:0f:04: 47:af:67:d5:87:7d:75:38:53:18:d1:b7:03:77:f2:cb:b8:68: 77:91:b5:0c:b8:7e:6d:2b:1f:98:de:a7:7c:a8:76:54:10:05: 41:9b:04:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz5Y46/JZ7zx2iGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzE5ZDVmMjAtMjM2Ny00NTdiLTk3MGItN2YxYzFhNjBm Y2FlMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk ZmJmYzNmMDUtY2JmOS00ZmRkLWE0MDEtMDM3NGNkMWVjOWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh/ofW84J+Hn22MC5ieeAc2ocKbqC/OIN+q8 VEcfa2V8TpUxOekTBd2wSRoDlZojuu9LPklRuEi4efYFrYtNhb6clbf5hnXcTMkP ukDrXgPnO/eOaNqEVsjLEpoELyB5sVu/UWiGPxMpsHBLS96+rzTIrorPqEbYLisk 4R8asXB7C8MnGlmbZIhD2iUn2mdIQWQffyYfZ2BiHuNOV09coPjghKYb1C3gnWV5 jW1KELdvMCD15AUPqQFyvSqSRonw5cnP1K+5Ai9vui0XfL0TpheBMs3Yq9GO/JZ3 unxmZv+ldQX7iKXr8GXs0qtrXR4WhiMsndtY4sPBkWTY9WfXiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP411VKatJDkbwpTxJneFCmnNJJ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTlk NWYyMC0yMzY3LTQ1N2ItOTcwYi03ZjFjMWE2MGZjYWUvY2FjMTJmMjctZTNhZi0z ODAzLWE2OWMtZTFkYjVjYmM0ZGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzE5ZDVmMjAtMjM2Ny00NTdiLTk3 MGItN2YxYzFhNjBmY2FlLzMxOWQ1ZjIwLTIzNjctNDU3Yi05NzBiLTdmMWMxYTYw ZmNhZS5jcmwwHwYDVR0jBBgwFoAUnFErFXqHY+TuXE7m8ya3OGcc4kswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTlkNWYyMC0yMzY3LTQ1N2ItOTcwYi03ZjFj MWE2MGZjYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHjpSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwhPYOOOoozD3jFZcqpPg0aJR60Ux5YEqo3VpW0Ip/JuNFu06wA4xr3 hR07dw4aF6sHj3gapoWHyW2/eppCij5yihlm/QRVOEMwjVlnQTQ7ZhYuZx8+LgP1 fsBOUTXnplaIQRGAxbZrEFpBUOxKbRpe/MRwgnLRa/Etzky6rUHRQQqPlIwFN4He m4bloS/MIjiDQtE7HWNPB+A8uuUyHJRAtpcwUzoB7ZuKGVB6oNEy93CJsYTJkrMH lmXPXgSSp6KyP6bEsTNf9FFRvH+x1TxSJbXHU0wPBEevZ9WHfXU4UxjRtwN38su4 aHeRtQy4fm0rH5jep3yodlQQBUGbBG8= -----END CERTIFICATE-----Generated at Mon Jun 30 04:14:46 2025 by rpki-client