$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/68359572-ada3-3f96-a3ca-23583c701e48.roa File: 68359572-ada3-3f96-a3ca-23583c701e48.roa (raw, json) Hash identifier: Ve6wRXZbp8b+VB+x+RfieIWhxdkd8EfRbCe5nW8GczY= Subject key identifier: A9:C2:2C:DC:43:33:C8:A2:1E:5B:83:B1:2E:7D:CE:F7:33:0D:BF:74 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F432858488921FBA524D7245958B57700 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/68359572-ada3-3f96-a3ca-23583c701e48.roa Signing time: Mon 13 Jan 2025 23:01:06 +0000 ROA not before: Mon 13 Jan 2025 23:01:06 +0000 ROA not after: Sun 13 Apr 2025 22:01:06 +0000 asID: 13763 IP address blocks: 141.140.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:89:21:fb:a5:24:d7:24:59:58:b5:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Jan 13 23:01:06 2025 GMT Not After : Apr 13 22:01:06 2025 GMT Subject: CN=05468bde-972b-4924-8a72-f74baec80073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:df:f7:1d:c2:0f:8a:29:37:d6:1f:14:78:9d: 9a:2e:72:b8:fc:b9:d4:aa:dc:99:92:58:11:45:39: 47:5e:bb:f0:fc:79:03:55:4a:8f:33:86:64:fb:27: 15:7c:ed:01:75:00:8e:38:66:44:ad:44:d0:fa:bf: 1a:2d:f7:ae:42:a1:c4:c4:5b:08:50:dd:db:ad:6d: 47:1a:67:7d:e9:23:7d:ab:8c:46:d2:6e:60:6c:4f: 13:9e:3c:77:af:86:f5:41:6a:72:19:e2:c5:c9:a2: d1:40:43:c6:be:76:9a:8c:ce:75:f0:50:75:70:2a: 58:a0:34:51:1f:0d:5a:24:bf:c6:41:f2:2a:7b:1b: 69:b1:92:20:1f:d7:b8:79:c2:74:d1:19:94:dd:db: de:a4:b0:79:61:ce:49:41:b5:9a:c4:ec:bc:e2:da: 5f:68:8f:c5:52:95:86:d9:34:de:25:d0:d4:18:65: 88:fe:cc:1d:f2:31:42:8f:9d:10:6b:f5:cc:f1:c9: d9:59:99:c0:16:f5:85:74:83:70:4a:57:1d:f4:e4: 34:94:83:48:64:64:f6:26:87:fb:e8:5e:24:f0:25: a5:64:6b:ef:e1:0b:dd:dc:84:15:60:18:09:28:96: 89:8b:1f:4e:bc:9a:db:5d:54:02:f9:c9:66:fe:05: 7e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C2:2C:DC:43:33:C8:A2:1E:5B:83:B1:2E:7D:CE:F7:33:0D:BF:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/68359572-ada3-3f96-a3ca-23583c701e48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 141.140.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:76:0b:8c:73:fe:78:5d:ea:25:ec:71:a5:73:01:1e:ba:cd: 38:f8:49:95:78:e4:09:9a:77:9c:0d:2b:c7:49:19:69:40:a8: ae:57:6e:13:2b:44:9d:b4:4d:5b:9d:45:2a:2a:98:e2:34:6f: 4f:11:ee:54:b7:aa:2b:3e:bc:b8:0b:c6:9b:7b:76:0f:e5:5b: bd:ab:b4:7d:48:c4:83:33:e3:80:01:df:f9:79:c7:5a:df:9b: a7:cb:2b:3c:4d:c8:34:13:b8:44:21:39:4d:5e:30:50:9f:0b: 67:0a:04:12:20:2f:8d:56:85:1a:42:64:50:55:3c:a3:72:6a: 50:06:95:8c:f9:85:0f:52:ee:28:fb:89:d0:da:aa:f5:c7:da: 8f:b8:5f:73:11:eb:80:1e:15:83:a5:f9:78:97:50:8d:5b:b0: 08:44:02:9e:81:d1:91:c8:90:fe:15:a3:77:1c:3b:bc:da:7a: da:a4:ff:90:75:bd:02:b7:71:1e:5c:88:64:17:68:ee:c7:44: 99:3d:29:33:5b:03:4b:59:cb:a0:f2:ef:9e:8d:74:c1:0e:48: 2d:03:8e:f6:a6:cd:ed:4e:4a:1a:9e:f9:be:a8:19:fa:2e:1c: 14:10:9f:5b:a0:94:e4:7d:73:72:73:ba:b3:3f:42:4d:ea:97: 93:c3:fd:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiJIfulJNckWVi1dwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDExMzIzMDEwNloXDTI1MDQxMzIyMDEwNlowLzEtMCsGA1UEAxMk MDU0NjhiZGUtOTcyYi00OTI0LThhNzItZjc0YmFlYzgwMDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN/3HcIPiik31h8UeJ2aLnK4/LnUqtyZklgR RTlHXrvw/HkDVUqPM4Zk+ycVfO0BdQCOOGZErUTQ+r8aLfeuQqHExFsIUN3brW1H Gmd96SN9q4xG0m5gbE8Tnjx3r4b1QWpyGeLFyaLRQEPGvnaajM518FB1cCpYoDRR Hw1aJL/GQfIqextpsZIgH9e4ecJ00RmU3dvepLB5Yc5JQbWaxOy84tpfaI/FUpWG 2TTeJdDUGGWI/swd8jFCj50Qa/XM8cnZWZnAFvWFdINwSlcd9OQ0lINIZGT2Jof7 6F4k8CWlZGvv4Qvd3IQVYBgJKJaJix9OvJrbXVQC+clm/gV+CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnCLNxDM8iiHluDsS59zvczDb90MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvNjgzNTk1NzItYWRhMy0z Zjk2LWEzY2EtMjM1ODNjNzAxZTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYwDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABp2C4xz/nhd6iXscaVzAR66zTj4SZV45Amad5wNK8dJGWlAqK5XbhMr RJ20TVudRSoqmOI0b08R7lS3qis+vLgLxpt7dg/lW72rtH1IxIMz44AB3/l5x1rf m6fLKzxNyDQTuEQhOU1eMFCfC2cKBBIgL41WhRpCZFBVPKNyalAGlYz5hQ9S7ij7 idDaqvXH2o+4X3MR64AeFYOl+XiXUI1bsAhEAp6B0ZHIkP4Vo3ccO7zaetqk/5B1 vQK3cR5ciGQXaO7HRJk9KTNbA0tZy6Dy756NdMEOSC0Djvamze1OShqe+b6oGfou HBQQn1uglOR9c3JzurM/Qk3ql5PD/Zg= -----END CERTIFICATE-----Generated at Sat Feb 22 04:42:46 2025 by rpki-client