$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9d53a0b8-b6f9-35c3-9a9d-9401cc2c1159.roa File: 9d53a0b8-b6f9-35c3-9a9d-9401cc2c1159.roa (raw, json) Hash identifier: HMqXkNnm8/5UW/NGqNs515UUcIGW3SzetU2dv1urg4g= Subject key identifier: 16:51:C5:4D:C8:2B:48:62:7D:81:13:A7:1C:1C:C6:3B:57:61:DF:CD Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285848E0065C9A3D19D28534AD8480 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9d53a0b8-b6f9-35c3-9a9d-9401cc2c1159.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 19893 IP address blocks: 140.174.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:5c:9a:3d:19:d2:85:34:ad:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=efc2a06c-79ad-4b2f-83ec-73e3c5f5aa55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ac:b5:6f:5a:ba:2e:d9:2d:5c:3b:8c:2a:a0: 9b:e7:0f:6f:83:20:98:40:ce:e4:45:b8:64:a0:b1: bf:61:de:a2:17:e1:91:ca:8d:55:25:f3:6f:11:12: 31:8d:5b:08:e1:d0:55:66:f6:24:d1:79:65:a8:9e: 15:96:ac:72:28:de:de:7d:c0:29:11:92:cf:50:19: 61:41:55:a8:33:b2:03:f4:98:15:8d:f5:02:03:6e: 20:23:be:ef:fd:0b:e3:63:d3:68:a7:14:bc:c9:14: 51:01:7f:4b:b1:57:1f:a3:48:45:64:f0:20:60:26: 35:6c:77:62:50:dd:88:c8:5e:43:50:30:45:0a:ca: 0c:b2:6d:f8:79:71:17:e6:75:a7:6e:cc:6a:2a:ad: 14:d4:50:c8:6f:f4:dd:46:9a:3c:65:27:4f:c9:5c: f1:20:2c:fb:25:5f:cc:ac:ea:cb:49:51:82:6e:12: 86:8d:0e:a6:45:6d:fa:06:ca:d3:07:ea:36:b8:1b: d3:17:bb:48:d3:0b:69:21:2c:0d:37:39:ff:fc:78: 55:be:0a:89:82:61:ec:5a:00:5b:7b:67:c4:4c:eb: 0f:15:20:e2:33:d3:72:b1:c0:fd:8a:2f:e3:0d:a6: 88:35:57:8e:2b:88:1e:c2:56:21:a0:c6:89:d2:fe: 05:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:51:C5:4D:C8:2B:48:62:7D:81:13:A7:1C:1C:C6:3B:57:61:DF:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9d53a0b8-b6f9-35c3-9a9d-9401cc2c1159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:f6:a2:ce:9f:ea:90:23:15:bb:9e:59:7c:66:a9:6d:26:68: c4:66:5e:08:d1:92:03:8c:46:03:ec:fe:74:5b:41:b5:24:c8: 34:34:4d:75:7c:26:97:f2:1c:80:68:12:c3:6d:c5:8d:02:07: cc:6b:87:f2:73:9f:fa:4e:06:99:e8:20:67:43:3f:21:9c:c1: b4:5d:c5:e8:9d:04:5a:39:52:72:06:d9:ef:39:08:7b:88:15: 7a:44:0a:93:ba:f6:38:a4:fb:78:2a:c7:b8:f9:1c:11:e2:a1: 20:07:50:0e:8f:3e:0c:96:04:53:d2:f7:c0:cb:6e:55:d4:50: 0f:1a:d2:8b:39:ba:c2:b7:25:e8:84:fa:3b:f8:93:41:84:b5: 8e:4f:fb:bb:5d:29:7f:48:8e:75:3c:cc:eb:11:fa:d0:c7:3a: 34:19:4a:76:59:d9:32:7c:b1:14:46:ff:b3:3d:bb:59:ba:de: 4f:6f:ec:8c:63:6d:bd:3d:1e:33:ce:b2:8e:e3:c6:d6:29:b3: c7:24:7e:4e:05:a5:00:79:b0:d4:08:34:5d:a5:32:3e:40:08: 70:fe:0b:7d:1f:b0:01:44:8a:9c:09:3e:c8:8c:f0:c4:69:e3: d3:c5:97:17:db:f0:70:14:90:a1:f9:7c:de:5f:5d:b0:36:82: 17:58:85:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBlyaPRnShTSthIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk ZWZjMmEwNmMtNzlhZC00YjJmLTgzZWMtNzNlM2M1ZjVhYTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ky1b1q6LtktXDuMKqCb5w9vgyCYQM7kRbhk oLG/Yd6iF+GRyo1VJfNvERIxjVsI4dBVZvYk0XllqJ4VlqxyKN7efcApEZLPUBlh QVWoM7ID9JgVjfUCA24gI77v/QvjY9NopxS8yRRRAX9LsVcfo0hFZPAgYCY1bHdi UN2IyF5DUDBFCsoMsm34eXEX5nWnbsxqKq0U1FDIb/TdRpo8ZSdPyVzxICz7JV/M rOrLSVGCbhKGjQ6mRW36BsrTB+o2uBvTF7tI0wtpISwNNzn//HhVvgqJgmHsWgBb e2fETOsPFSDiM9NyscD9ii/jDaaINVeOK4gewlYhoMaJ0v4FcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZRxU3IK0hifYETpxwcxjtXYd/NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOWQ1M2EwYjgtYjZmOS0z NWMzLTlhOWQtOTQwMWNjMmMxMTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjK7gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB72os6f6pAjFbueWXxmqW0maMRmXgjRkgOMRgPs/nRbQbUkyDQ0TXV8 JpfyHIBoEsNtxY0CB8xrh/Jzn/pOBpnoIGdDPyGcwbRdxeidBFo5UnIG2e85CHuI FXpECpO69jik+3gqx7j5HBHioSAHUA6PPgyWBFPS98DLblXUUA8a0os5usK3JeiE +jv4k0GEtY5P+7tdKX9IjnU8zOsR+tDHOjQZSnZZ2TJ8sRRG/7M9u1m63k9v7Ixj bb09HjPOso7jxtYps8ckfk4FpQB5sNQINF2lMj5ACHD+C30fsAFEipwJPsiM8MRp 49PFlxfb8HAUkKH5fN5fXbA2ghdYhaE= -----END CERTIFICATE-----Generated at Fri Apr 4 17:25:13 2025 by rpki-client