$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7753b393-47b5-3a51-8d15-df478c5d264c.roa File: 7753b393-47b5-3a51-8d15-df478c5d264c.roa (raw, json) Hash identifier: gxoKUPcMA5ALcFnRHtmybkCJGHRfOk5TOIzRr3iUkYY= Subject key identifier: 22:4B:CE:89:C5:85:51:3A:36:15:AB:8F:2B:75:1F:08:C2:62:AB:C8 Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Certificate serial: 010D0C9F432858487E5065E856F5D43634CCAFC0 Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7753b393-47b5-3a51-8d15-df478c5d264c.roa Signing time: Fri 10 Jan 2025 02:00:40 +0000 ROA not before: Fri 10 Jan 2025 02:00:40 +0000 ROA not after: Thu 10 Apr 2025 01:00:40 +0000 asID: 394089 IP address blocks: 140.209.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7e:50:65:e8:56:f5:d4:36:34:cc:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Validity Not Before: Jan 10 02:00:40 2025 GMT Not After : Apr 10 01:00:40 2025 GMT Subject: CN=67006dc9-e7fe-4947-9b95-1b2684fd2ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:69:1c:09:71:21:d8:be:f0:da:11:51:82:e9: 5e:f1:24:3d:f5:2b:fd:0a:e7:e0:17:c4:6a:d9:03: 8e:ec:c2:f6:9d:93:d7:f6:48:b7:e9:56:6a:cd:29: a9:2b:03:fe:e5:ac:f9:b7:54:37:ef:67:d4:34:93: 44:ea:15:1d:fb:b9:8d:cf:46:43:ce:d0:08:f1:14: 95:66:21:cc:61:11:ec:1e:ff:7d:1e:56:2f:31:dc: a4:9c:1b:3b:54:5e:db:65:38:9a:a3:43:33:45:55: 83:72:b8:ca:ae:1e:32:4d:1a:5f:ae:5f:21:b9:fb: bd:39:3c:47:a0:0a:57:74:c0:ea:c3:dc:b6:dd:69: 77:e0:33:ac:91:c3:72:7d:97:68:16:6b:e8:97:20: ce:3c:4e:80:62:2a:f9:13:27:d8:22:99:0c:26:b2: de:0a:0e:01:f8:b0:4e:64:95:85:2b:fb:fe:92:0f: b3:e2:0b:e9:c6:8b:9b:af:af:ed:17:d0:cc:7e:df: 05:a0:33:19:39:54:58:f9:87:33:eb:da:e3:11:9d: a0:34:c7:3d:64:57:9f:c7:d5:d6:70:18:59:5b:17: 12:5a:7a:f0:1f:3f:e8:a3:a7:f7:31:6c:6d:2d:00: c1:56:ea:8b:dc:5d:59:18:36:51:bb:c5:8b:fc:87: 4d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4B:CE:89:C5:85:51:3A:36:15:AB:8F:2B:75:1F:08:C2:62:AB:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7753b393-47b5-3a51-8d15-df478c5d264c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl X509v3 Authority Key Identifier: keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer sbgp-ipAddrBlock: critical IPv4: 140.209.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:3d:a1:4c:36:0a:67:e5:5e:e4:3c:50:8c:c6:ac:ab:ba:aa: 49:7d:4c:6c:a4:45:89:cc:65:cb:0a:eb:6a:3f:80:18:3b:b5: c1:65:82:dc:e3:fe:cc:bc:4c:79:ee:f8:95:e8:02:f9:10:e7: 9b:56:bd:91:38:8c:36:1d:29:c4:cd:a1:be:cc:aa:0b:3c:88: 6b:ed:a3:d0:2b:ed:94:77:5a:fb:15:66:38:9e:2b:71:25:8c: de:53:ce:65:22:00:59:02:ee:55:d7:3f:ea:b0:dc:b5:78:44: 52:1d:40:00:44:25:4d:ce:a0:8f:56:82:34:5a:6a:17:de:83: db:a0:ca:88:a8:bc:ec:8b:b9:8b:57:70:ff:b9:14:9e:18:ea: 75:27:7c:7b:9d:35:46:21:7f:91:a2:27:26:6b:ab:11:6f:00: 12:86:06:8f:41:92:c5:13:a5:7f:68:6d:09:4e:da:50:35:06: 64:3a:a0:cb:c0:6e:2d:d3:b7:26:7d:69:51:a5:91:01:63:cd: 37:65:6c:0a:0f:e7:cc:8d:11:c9:e1:88:8e:c0:3e:1b:43:aa: d9:dd:0d:c3:b3:8c:bc:ae:ad:24:28:15:f8:43:05:80:dd:6f: df:42:78:64:71:f1:02:f3:6e:2a:7f:05:e6:00:8b:7e:4f:05: 99:ae:52:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh+UGXoVvXUNjTMr8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk OWU3MB4XDTI1MDExMDAyMDA0MFoXDTI1MDQxMDAxMDA0MFowLzEtMCsGA1UEAxMk NjcwMDZkYzktZTdmZS00OTQ3LTliOTUtMWIyNjg0ZmQyZWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2kcCXEh2L7w2hFRgule8SQ99Sv9CufgF8Rq 2QOO7ML2nZPX9ki36VZqzSmpKwP+5az5t1Q372fUNJNE6hUd+7mNz0ZDztAI8RSV ZiHMYRHsHv99HlYvMdyknBs7VF7bZTiao0MzRVWDcrjKrh4yTRpfrl8hufu9OTxH oApXdMDqw9y23Wl34DOskcNyfZdoFmvolyDOPE6AYir5EyfYIpkMJrLeCg4B+LBO ZJWFK/v+kg+z4gvpxoubr6/tF9DMft8FoDMZOVRY+Ycz69rjEZ2gNMc9ZFefx9XW cBhZWxcSWnrwHz/oo6f3MWxtLQDBVuqL3F1ZGDZRu8WL/IdN1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJLzonFhVE6NhWrjyt1HwjCYqvIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvNzc1M2IzOTMtNDdiNS0z YTUxLThkMTUtZGY0NzhjNWQyNjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3 M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4 ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5 NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjNH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFc9oUw2CmflXuQ8UIzGrKu6qkl9TGykRYnMZcsK62o/gBg7tcFlgtzj /sy8THnu+JXoAvkQ55tWvZE4jDYdKcTNob7Mqgs8iGvto9Ar7ZR3WvsVZjieK3El jN5TzmUiAFkC7lXXP+qw3LV4RFIdQABEJU3OoI9WgjRaahfeg9ugyoiovOyLuYtX cP+5FJ4Y6nUnfHudNUYhf5GiJyZrqxFvABKGBo9BksUTpX9obQlO2lA1BmQ6oMvA bi3TtyZ9aVGlkQFjzTdlbAoP58yNEcnhiI7APhtDqtndDcOzjLyurSQoFfhDBYDd b99CeGRx8QLzbip/BeYAi35PBZmuUmk= -----END CERTIFICATE-----Generated at Fri Mar 14 11:01:02 2025 by rpki-client