$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45f939b0-98c3-3891-921b-a6edd06cebc1.roa File: 45f939b0-98c3-3891-921b-a6edd06cebc1.roa (raw, json) Hash identifier: i4x2pzDxicJ7mEIOy/LqGV2gVHRlg56yjCz2dADZ16s= Subject key identifier: 85:A6:81:86:5B:F8:A9:77:47:EE:CD:40:A2:0C:E0:77:9E:15:FC:61 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584949FEB2B00BC62595F19CC280 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45f939b0-98c3-3891-921b-a6edd06cebc1.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 29852 IP address blocks: 140.174.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:b2:b0:0b:c6:25:95:f1:9c:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=37771543-2a3f-44e4-a658-ecd1585a5c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bd:82:2e:b8:c3:8c:04:ac:fd:87:43:48:b7: 6b:f4:bf:ea:be:be:77:84:f8:ad:5e:00:2a:b9:41: 00:42:ae:d6:e4:40:c8:15:ba:5c:12:de:8d:c8:84: 15:c8:c8:70:4c:e7:80:58:a5:58:c6:8f:b9:a5:f2: e5:af:dc:20:08:e6:c3:d3:44:14:79:74:18:48:a7: 1d:28:80:6b:5f:97:c2:21:cf:66:4b:e6:bb:7c:74: 0e:1c:88:8d:87:f2:10:1a:e3:09:99:dc:58:b0:c2: c0:6a:ad:66:da:7f:d7:40:27:4b:99:47:77:37:65: 01:3d:ea:04:57:b7:36:b2:dc:4c:a9:0e:ed:46:37: fb:4d:1b:a7:14:3f:8d:3d:4e:f2:5b:1a:e0:39:62: 0f:b7:54:d7:91:14:3b:77:3d:3f:2c:03:05:c2:0e: 43:33:9a:cf:e4:76:ef:48:00:74:f3:69:7c:1d:8f: 84:98:41:06:43:bc:ed:64:40:8b:51:af:c4:f2:5b: bd:8c:ff:44:08:6e:6d:6b:8f:9f:b0:35:a4:51:fa: 09:fc:eb:7c:88:81:28:52:d9:f1:e0:08:b0:6f:00: ee:71:d4:42:9c:94:1e:d8:c2:91:19:08:74:54:fb: be:30:6a:2c:4b:1a:0e:e8:fe:36:0b:66:89:f5:e1: 62:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A6:81:86:5B:F8:A9:77:47:EE:CD:40:A2:0C:E0:77:9E:15:FC:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45f939b0-98c3-3891-921b-a6edd06cebc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:1c:28:d0:dd:ce:40:f6:0c:cf:45:e4:55:e9:f7:ac:ca:65: c9:98:01:1b:c6:7c:a8:2e:36:32:4b:75:34:ee:07:7d:23:9c: 27:91:b8:1d:24:42:70:f7:95:2d:9e:49:dc:0a:81:dd:be:9c: e2:d9:8d:26:6a:c2:23:84:d8:7e:a7:8a:6b:5d:ad:6f:d3:33: d1:9b:af:9e:bf:ee:37:5b:7b:e7:9a:b1:03:4d:c6:d0:d8:c9: 46:3e:39:8e:94:20:5f:ce:9a:7e:98:8c:31:54:74:b1:36:c7: 38:3b:b7:6f:e5:1f:00:4b:e4:4e:5a:b5:b2:40:b0:09:6e:3c: 94:af:35:6a:20:a1:c8:2c:e2:5a:58:5e:7c:4f:6b:d2:fe:cb: 70:97:3d:35:9c:5c:1b:91:cf:70:b3:de:ec:80:51:73:c9:21: 16:d6:5f:9d:cf:2c:c5:5d:8d:36:45:01:7c:38:bb:b8:8b:38: 2b:c1:7f:1f:13:ac:21:b2:ad:11:c5:ec:ce:9e:73:b0:16:22: 34:4b:1e:76:a7:3f:14:c7:9a:af:17:2f:56:64:50:02:2b:0c: 06:01:ef:51:cf:cf:85:e7:45:61:eb:d4:2b:b2:7a:ae:11:d6: 88:fd:ae:68:62:a2:95:e3:7c:e3:24:7a:8d:94:1b:6f:23:0b: 46:46:70:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/rKwC8YllfGcwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk Mzc3NzE1NDMtMmEzZi00NGU0LWE2NTgtZWNkMTU4NWE1YzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0b2CLrjDjASs/YdDSLdr9L/qvr53hPitXgAq uUEAQq7W5EDIFbpcEt6NyIQVyMhwTOeAWKVYxo+5pfLlr9wgCObD00QUeXQYSKcd KIBrX5fCIc9mS+a7fHQOHIiNh/IQGuMJmdxYsMLAaq1m2n/XQCdLmUd3N2UBPeoE V7c2stxMqQ7tRjf7TRunFD+NPU7yWxrgOWIPt1TXkRQ7dz0/LAMFwg5DM5rP5Hbv SAB082l8HY+EmEEGQ7ztZECLUa/E8lu9jP9ECG5ta4+fsDWkUfoJ/Ot8iIEoUtnx 4AiwbwDucdRCnJQe2MKRGQh0VPu+MGosSxoO6P42C2aJ9eFixwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWmgYZb+Kl3R+7NQKIM4HeeFfxhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNDVmOTM5YjAtOThjMy0z ODkxLTkyMWItYTZlZGQwNmNlYmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjK7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgcKNDdzkD2DM9F5FXp96zKZcmYARvGfKguNjJLdTTuB30jnCeRuB0k QnD3lS2eSdwKgd2+nOLZjSZqwiOE2H6nimtdrW/TM9Gbr56/7jdbe+easQNNxtDY yUY+OY6UIF/Omn6YjDFUdLE2xzg7t2/lHwBL5E5atbJAsAluPJSvNWogocgs4lpY XnxPa9L+y3CXPTWcXBuRz3Cz3uyAUXPJIRbWX53PLMVdjTZFAXw4u7iLOCvBfx8T rCGyrRHF7M6ec7AWIjRLHnanPxTHmq8XL1ZkUAIrDAYB71HPz4XnRWHr1Cuyeq4R 1oj9rmhiopXjfOMkeo2UG28jC0ZGcLY= -----END CERTIFICATE-----Generated at Fri Apr 4 17:34:12 2025 by rpki-client