$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5b0097a2-973c-3d58-b2bc-5e79397c0e91.roa File: 5b0097a2-973c-3d58-b2bc-5e79397c0e91.roa (raw, json) Hash identifier: b4ksMSWZeBqPki+qDHgM/svV4p58+gmHZ0wyH+1/2jA= Subject key identifier: 35:07:C6:B9:AC:D3:D0:5D:00:82:80:96:C8:4D:EA:B5:22:8F:D7:89 Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F43285848F4F6A2D1A0D2ECE37F4B5A80 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5b0097a2-973c-3d58-b2bc-5e79397c0e91.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 3477 IP address blocks: 140.208.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:a2:d1:a0:d2:ec:e3:7f:4b:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=3e0d75b4-d96f-46f5-988d-0ff694022bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:11:5f:b1:97:b9:41:26:06:02:da:fa:a4:82: c1:09:06:ef:d1:9e:b1:83:e9:66:46:0f:56:d2:ab: 4b:cd:6c:50:7b:66:87:1e:02:75:4e:1e:2f:84:93: d6:3f:eb:52:fc:b1:83:4b:0e:f9:e8:4d:c1:f0:9e: e2:54:cb:87:e4:7d:df:c5:09:95:11:25:fe:cc:36: ca:39:3c:24:d3:7e:80:9c:ad:4e:7d:60:3b:05:6e: b5:2b:d6:69:0a:98:46:0e:77:91:9e:bd:e6:9b:ac: 3a:6d:4e:8d:98:ea:b2:69:f1:3e:f7:37:e1:da:36: b2:70:7f:60:6a:88:68:2f:a3:1f:27:79:a6:3c:e4: 62:f6:d5:04:58:83:b2:39:49:82:fd:17:cc:21:fe: 90:64:91:79:45:e3:fa:fd:e3:ca:6f:9e:bf:c1:30: 8d:18:53:78:a6:00:97:2e:ac:29:35:31:42:93:83: 52:74:df:3c:54:9c:e0:86:51:dd:13:e8:e3:0b:cd: 8e:46:b1:0b:7a:20:04:91:ff:e6:cf:9d:38:98:89: ae:01:3a:c3:4d:bb:06:45:cf:2b:90:b1:8d:c2:8a: 80:75:84:41:9a:c7:68:22:e2:62:47:bc:57:a3:ff: fb:5a:00:5d:f2:e3:eb:80:a9:93:a2:f5:fb:8b:37: 99:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:07:C6:B9:AC:D3:D0:5D:00:82:80:96:C8:4D:EA:B5:22:8F:D7:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5b0097a2-973c-3d58-b2bc-5e79397c0e91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 140.208.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:e5:f9:fb:61:ad:6b:a2:40:53:13:4e:98:ef:24:8e:bf:c8: a7:a4:f4:4c:d5:fe:bf:59:f8:3b:03:da:16:e8:c1:be:fd:1e: 9e:e3:ce:ea:a1:5f:39:44:55:5b:b4:29:87:cc:8d:e6:17:59: d8:0d:1f:71:a3:f3:be:3c:0a:97:3a:a1:2e:65:26:e0:69:1e: 5f:83:d0:77:78:6a:3c:d1:e2:e1:1b:d9:ea:5c:c5:9e:82:4b: 18:13:7e:dc:62:0d:ca:40:b1:1a:b9:21:4b:0d:0e:65:89:ca: 99:02:f2:0d:6d:fe:5b:17:c2:70:f5:99:a5:58:bb:8b:d9:33: 0e:a4:11:7a:67:4d:ed:02:40:d0:11:b2:d6:e8:15:13:f1:21: c7:ba:90:82:6e:4e:6d:a4:64:86:25:66:aa:93:c2:5c:f2:0a: 9a:ca:7c:e7:3b:17:58:90:28:5f:fe:b5:07:72:1c:ba:32:0c: c6:26:23:a6:46:ea:1d:4b:0a:46:0b:cc:53:12:82:5b:a9:0f: 42:ac:37:92:a8:65:7e:ba:a6:cd:8d:2d:24:cf:a0:fd:35:dd: 9c:42:b8:84:63:fd:d0:7e:64:b4:a8:40:07:6e:86:28:44:a7: e9:2b:41:ab:ec:9a:98:c0:75:d0:72:a6:7a:75:dc:d2:d7:10: e0:d2:78:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09qLRoNLs439LWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk M2UwZDc1YjQtZDk2Zi00NmY1LTk4OGQtMGZmNjk0MDIyYmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hFfsZe5QSYGAtr6pILBCQbv0Z6xg+lmRg9W 0qtLzWxQe2aHHgJ1Th4vhJPWP+tS/LGDSw756E3B8J7iVMuH5H3fxQmVESX+zDbK OTwk036AnK1OfWA7BW61K9ZpCphGDneRnr3mm6w6bU6NmOqyafE+9zfh2jaycH9g aohoL6MfJ3mmPORi9tUEWIOyOUmC/RfMIf6QZJF5ReP6/ePKb56/wTCNGFN4pgCX LqwpNTFCk4NSdN88VJzghlHdE+jjC82ORrELeiAEkf/mz504mImuATrDTbsGRc8r kLGNwoqAdYRBmsdoIuJiR7xXo//7WgBd8uPrgKmTovX7izeZVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUHxrms09BdAIKAlshN6rUij9eJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvNWIwMDk3YTItOTczYy0z ZDU4LWIyYmMtNWU3OTM5N2MwZTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjNDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTl+fthrWuiQFMTTpjvJI6/yKek9EzV/r9Z+DsD2hbowb79Hp7jzuqh XzlEVVu0KYfMjeYXWdgNH3Gj8748Cpc6oS5lJuBpHl+D0Hd4ajzR4uEb2epcxZ6C SxgTftxiDcpAsRq5IUsNDmWJypkC8g1t/lsXwnD1maVYu4vZMw6kEXpnTe0CQNAR stboFRPxIce6kIJuTm2kZIYlZqqTwlzyCprKfOc7F1iQKF/+tQdyHLoyDMYmI6ZG 6h1LCkYLzFMSglupD0KsN5KoZX66ps2NLSTPoP013ZxCuIRj/dB+ZLSoQAduhihE p+krQavsmpjAddBypnp13NLXEODSePI= -----END CERTIFICATE-----Generated at Sat Apr 5 03:41:47 2025 by rpki-client