$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/2c733a41-1d85-3fff-a8e9-5ef96865182f.roa File: 2c733a41-1d85-3fff-a8e9-5ef96865182f.roa (raw, json) Hash identifier: gajByCXQza3MXtFf8dD/9/82ODLqNTYilneOZtHhetE= Subject key identifier: C8:FC:3A:F8:AE:E3:B8:0C:7F:A0:8D:43:06:2D:7E:47:90:4C:33:92 Certificate issuer: /CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Certificate serial: 010D0C9F432858494B640B2F1A2C182348569520 Authority key identifier: E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/2c733a41-1d85-3fff-a8e9-5ef96865182f.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 395437 IP address blocks: 143.55.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:0b:2f:1a:2c:18:23:48:56:95:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=ac92816b-2fef-4af5-b980-822329ab0a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3f:6d:01:85:eb:68:0e:92:59:ad:76:46:95: 8d:ed:10:3a:4f:b8:f5:55:22:70:54:5c:75:7f:c3: a6:b0:f8:e1:40:de:ba:52:2e:39:41:14:6d:00:27: 4b:c4:f7:20:97:e2:ae:6f:f8:26:22:41:fa:11:05: 2f:ab:f6:13:2a:ec:fb:5e:0d:7c:c7:10:7b:b6:bc: 15:17:a2:66:13:53:b2:ee:16:28:d3:b8:40:24:72: 55:da:16:f9:8c:f4:84:3c:0a:e7:de:e7:94:3c:99: 68:23:26:cb:af:5e:51:1f:af:b0:77:4b:a4:cb:02: 4e:ea:08:5d:d4:94:b1:52:94:d9:ff:23:c7:55:8b: 8e:12:ad:de:6d:f7:f5:6d:f2:f7:5c:42:37:38:22: 41:ea:d9:7e:c0:3e:f5:7a:e3:21:a7:bf:79:0e:d7: 63:12:ab:9b:f8:38:70:9b:bb:ea:1d:7b:e6:fa:90: 70:b0:85:9e:f1:cd:fa:f9:6e:1c:93:2f:03:87:00: 70:06:3d:f8:06:74:79:c7:40:b0:1f:ff:c5:46:e2: b1:25:82:f8:b5:d6:cd:fe:50:30:8c:2a:7c:a7:83: 42:12:9b:ec:71:55:c9:4b:68:e8:13:8f:54:a3:b6: 55:7d:42:a5:81:40:d2:9c:04:e1:94:39:42:28:97: 52:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FC:3A:F8:AE:E3:B8:0C:7F:A0:8D:43:06:2D:7E:47:90:4C:33:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/2c733a41-1d85-3fff-a8e9-5ef96865182f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl X509v3 Authority Key Identifier: keyid:E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer sbgp-ipAddrBlock: critical IPv4: 143.55.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:06:66:7c:4f:8e:19:b5:9e:ad:a2:bf:a7:a5:c6:99:a1:1d: bd:d3:56:10:2f:f6:ac:06:a4:12:59:b0:91:06:90:13:ea:63: bc:8d:bd:d5:af:e1:c9:ed:13:54:5e:c9:3e:d5:a7:1a:a5:4f: 20:ac:fe:f6:32:b0:4e:53:9c:8d:0a:b9:8d:ad:ec:f0:bf:f7: 17:39:6d:7e:e1:5c:6f:68:c0:7b:81:2c:0d:70:fd:f9:71:e2: f8:7a:4f:06:68:da:9f:8a:d3:ad:33:8c:4d:58:d9:f8:b0:1a: b7:e2:39:4f:d3:9e:f9:ab:dc:99:c6:9f:39:a6:e7:58:1c:c5: 72:b4:32:ec:d3:ba:46:cd:b8:85:ab:a0:a7:b8:f1:d9:c0:87: df:14:a8:0c:79:18:f5:9b:f6:a1:c6:49:97:71:d9:a5:61:2b: 28:03:1d:3e:73:6f:69:71:87:ab:19:fd:41:92:65:e7:e6:e7: 0c:6f:23:da:98:f8:8a:43:ad:92:60:76:60:0c:53:ac:38:69: 6e:4f:df:a2:d3:4b:74:4f:34:4f:9b:f1:a8:63:db:cc:35:ee: 74:73:ae:58:9a:03:73:40:52:35:3a:c3:f6:42:d1:97:1f:30: 2f:2a:0e:a6:4d:24:c5:a9:65:5f:5a:44:12:c1:ec:ff:e8:78: 2e:0a:af:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZAsvGiwYI0hWlSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBkMDMyMjUtYzViNi00N2M0LTlmNGUtN2RlMWQxNmQ1 NTRmMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk YWM5MjgxNmItMmZlZi00YWY1LWI5ODAtODIyMzI5YWIwYTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD9tAYXraA6SWa12RpWN7RA6T7j1VSJwVFx1 f8OmsPjhQN66Ui45QRRtACdLxPcgl+Kub/gmIkH6EQUvq/YTKuz7Xg18xxB7trwV F6JmE1Oy7hYo07hAJHJV2hb5jPSEPArn3ueUPJloIybLr15RH6+wd0ukywJO6ghd 1JSxUpTZ/yPHVYuOEq3ebff1bfL3XEI3OCJB6tl+wD71euMhp795DtdjEqub+Dhw m7vqHXvm+pBwsIWe8c36+W4cky8DhwBwBj34BnR5x0CwH//FRuKxJYL4tdbN/lAw jCp8p4NCEpvscVXJS2joE49Uo7ZVfUKlgUDSnAThlDlCKJdS6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMj8Oviu47gMf6CNQwYtfkeQTDOSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQw MzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUxZDE2ZDU1NGYvMmM3MzNhNDEtMWQ4NS0z ZmZmLWE4ZTktNWVmOTY4NjUxODJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDBkMDMyMjUtYzViNi00N2M0LTlm NGUtN2RlMWQxNmQ1NTRmLzQwZDAzMjI1LWM1YjYtNDdjNC05ZjRlLTdkZTFkMTZk NTU0Zi5jcmwwHwYDVR0jBBgwFoAU6DRhhWrT1VHbhGXdoM02Pj/ijxMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQwMzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUx ZDE2ZDU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjzfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQGZnxPjhm1nq2iv6elxpmhHb3TVhAv9qwGpBJZsJEGkBPqY7yNvdWv 4cntE1ReyT7VpxqlTyCs/vYysE5TnI0KuY2t7PC/9xc5bX7hXG9owHuBLA1w/flx 4vh6TwZo2p+K060zjE1Y2fiwGrfiOU/Tnvmr3JnGnzmm51gcxXK0MuzTukbNuIWr oKe48dnAh98UqAx5GPWb9qHGSZdx2aVhKygDHT5zb2lxh6sZ/UGSZefm5wxvI9qY +IpDrZJgdmAMU6w4aW5P36LTS3RPNE+b8ahj28w17nRzrliaA3NAUjU6w/ZC0Zcf MC8qDqZNJMWpZV9aRBLB7P/oeC4Kr0w= -----END CERTIFICATE-----Generated at Thu Apr 17 18:45:27 2025 by rpki-client