$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/0335608f-a9cd-3396-90f3-61164a83f73d.roa File: 0335608f-a9cd-3396-90f3-61164a83f73d.roa (raw, json) Hash identifier: Hb3dMIWcowfzWtYuoPrBtcdbrKFnrZZSDOR6vXn1mSw= Subject key identifier: EC:8F:99:B2:E5:68:46:25:10:60:17:A3:C9:BD:E4:22:FB:A9:86:05 Certificate issuer: /CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Certificate serial: 010D0C9F43285848A830ADAAB96998F0F2758600 Authority key identifier: D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/0335608f-a9cd-3396-90f3-61164a83f73d.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 400245 IP address blocks: 165.140.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:ad:aa:b9:69:98:f0:f2:75:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=dadfec25-a17c-4192-89db-ab4cd3baaa43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:20:9e:29:ac:1a:b1:7e:2b:8a:d8:64:b0:ac: 92:f4:f2:5e:2d:46:7b:c4:26:5d:aa:b7:6d:9c:f3: 3c:b9:0f:50:90:b0:68:09:6a:8e:24:8a:ef:31:89: 6b:6c:8b:27:b8:fc:bc:e6:d7:5c:2e:25:c0:c3:a1: f9:e9:e3:09:4c:11:46:55:a5:0a:e5:24:4e:8b:0e: 38:f5:a7:48:8e:af:87:6d:a8:70:72:be:71:8b:4c: b2:3c:48:f9:17:56:31:4c:71:a8:16:7a:c0:4b:17: 9a:82:41:9a:10:f4:c5:7f:69:db:47:f3:12:46:dd: f4:8a:56:fb:c3:17:69:26:24:8e:09:a3:bc:9d:2f: dc:ab:61:73:ec:1c:55:6f:58:e7:f6:00:9d:71:88: 97:81:38:71:98:1c:80:43:2b:c4:02:0e:e8:a1:73: 94:26:86:7b:e3:11:40:3e:b2:e1:5b:35:1f:da:b3: 76:fb:9d:0d:8a:75:e6:ec:a1:98:b8:e1:d0:1a:08: 0b:5f:70:5c:b0:2f:be:e9:f5:8c:fc:79:ea:e5:1c: 71:96:b7:3a:65:09:f7:e1:77:81:de:1f:9e:71:d4: 8c:00:3e:ca:7a:80:c9:47:86:bc:1c:90:5c:6a:45: b7:b6:30:18:12:4b:1a:00:d0:ef:2b:cb:4e:b9:4f: eb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:8F:99:B2:E5:68:46:25:10:60:17:A3:C9:BD:E4:22:FB:A9:86:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/0335608f-a9cd-3396-90f3-61164a83f73d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl X509v3 Authority Key Identifier: keyid:D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer sbgp-ipAddrBlock: critical IPv4: 165.140.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:be:09:0b:6c:a1:54:98:65:87:e5:e2:27:50:ec:1a:fd:30: 0e:ae:e4:2f:73:c1:f3:91:93:45:75:8f:01:68:78:96:b9:fb: b1:8e:76:66:15:47:1b:1b:d8:ce:4f:9a:97:0d:7e:2a:c6:32: b0:ab:73:e3:cb:c9:b1:fb:8c:1a:a5:12:55:0b:c5:05:be:31: df:3a:9c:87:09:25:f0:dd:d4:0c:08:78:0b:59:9e:e7:5b:ac: 26:f6:40:d9:ad:76:d4:4c:04:1e:ff:73:f5:94:f0:8d:35:6d: 1a:67:88:5e:05:6b:df:3e:3d:a5:53:9c:d2:c5:22:50:cc:3d: 26:cf:e9:21:e6:1f:b4:eb:39:cd:82:88:40:9e:d5:f7:12:5f: 88:e8:71:18:79:03:11:4a:f7:ea:f7:17:3f:88:cf:2e:f7:b5: 66:8b:d4:84:eb:2c:22:f2:e0:e1:de:72:51:de:bf:fd:f8:bd: 93:64:a0:05:7c:25:dd:9f:c6:6b:78:70:42:be:20:66:9f:ee: aa:f2:fa:90:23:71:94:b8:02:53:2a:aa:bb:ec:f2:7e:40:c9: e1:03:bd:62:c8:96:08:fb:a1:36:f3:fa:a9:bc:a9:55:3d:1a: 4d:51:36:8f:1b:73:2c:80:c3:bb:f6:b3:6b:d4:f2:78:42:3a: bb:ac:0d:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMK2quWmY8PJ1hgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmExZTk3MzQtMGE3Zi00OGU2LTg3ZDMtY2E3ZDgzN2Y0 ZTUwMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk ZGFkZmVjMjUtYTE3Yy00MTkyLTg5ZGItYWI0Y2QzYmFhYTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSCeKawasX4rithksKyS9PJeLUZ7xCZdqrdt nPM8uQ9QkLBoCWqOJIrvMYlrbIsnuPy85tdcLiXAw6H56eMJTBFGVaUK5SROiw44 9adIjq+Hbahwcr5xi0yyPEj5F1YxTHGoFnrASxeagkGaEPTFf2nbR/MSRt30ilb7 wxdpJiSOCaO8nS/cq2Fz7BxVb1jn9gCdcYiXgThxmByAQyvEAg7ooXOUJoZ74xFA PrLhWzUf2rN2+50NinXm7KGYuOHQGggLX3BcsC++6fWM/Hnq5Rxxlrc6ZQn34XeB 3h+ecdSMAD7KeoDJR4a8HJBcakW3tjAYEksaANDvK8tOuU/rhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyPmbLlaEYlEGAXo8m95CL7qYYFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFl OTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdkODM3ZjRlNTAvMDMzNTYwOGYtYTljZC0z Mzk2LTkwZjMtNjExNjRhODNmNzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmExZTk3MzQtMGE3Zi00OGU2LTg3 ZDMtY2E3ZDgzN2Y0ZTUwLzJhMWU5NzM0LTBhN2YtNDhlNi04N2QzLWNhN2Q4Mzdm NGU1MC5jcmwwHwYDVR0jBBgwFoAU2ZfG3YFV+RX1BGNFOdNqUSwXdMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFlOTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdk ODM3ZjRlNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpYx8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2+CQtsoVSYZYfl4idQ7Br9MA6u5C9zwfORk0V1jwFoeJa5+7GOdmYV Rxsb2M5PmpcNfirGMrCrc+PLybH7jBqlElULxQW+Md86nIcJJfDd1AwIeAtZnudb rCb2QNmtdtRMBB7/c/WU8I01bRpniF4Fa98+PaVTnNLFIlDMPSbP6SHmH7TrOc2C iECe1fcSX4jocRh5AxFK9+r3Fz+Izy73tWaL1ITrLCLy4OHeclHev/34vZNkoAV8 Jd2fxmt4cEK+IGaf7qry+pAjcZS4AlMqqrvs8n5AyeEDvWLIlgj7oTbz+qm8qVU9 Gk1RNo8bcyyAw7v2s2vU8nhCOrusDTk= -----END CERTIFICATE-----Generated at Sat Apr 5 10:02:01 2025 by rpki-client