$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/40649f8d-a2c1-32f8-9f91-e76ab12ef234.roa File: 40649f8d-a2c1-32f8-9f91-e76ab12ef234.roa (raw, json) Hash identifier: +wL91S7zYTIppLktQzzajUJfdl7yr2vPRB1wSaffNI8= Subject key identifier: 30:A7:18:54:28:34:4C:EE:37:4D:DF:84:E3:83:80:F2:52:87:6C:8B Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584834557328B0E1225911FF7F80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/40649f8d-a2c1-32f8-9f91-e76ab12ef234.roa Signing time: Sat 14 Dec 2024 14:00:52 +0000 ROA not before: Sat 14 Dec 2024 14:00:52 +0000 ROA not after: Fri 14 Mar 2025 13:00:52 +0000 asID: 1239 IP address blocks: 141.140.64.0/24 maxlen: 24 141.140.67.0/24 maxlen: 24 141.140.70.0/24 maxlen: 24 141.140.73.0/24 maxlen: 24 141.140.76.0/24 maxlen: 24 141.140.79.0/24 maxlen: 24 141.140.82.0/24 maxlen: 24 141.140.85.0/24 maxlen: 24 141.140.88.0/24 maxlen: 24 141.140.91.0/24 maxlen: 24 141.140.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:34:55:73:28:b0:e1:22:59:11:ff:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Dec 14 14:00:52 2024 GMT Not After : Mar 14 13:00:52 2025 GMT Subject: CN=86e6beeb-79d7-4050-8206-36f97025b91a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e3:08:19:63:a9:99:f6:cb:2f:54:3f:66:12: 3d:3e:c8:96:43:cf:8c:df:47:1c:36:b5:e1:bc:1d: 8e:f5:5e:69:3c:e2:63:84:b9:47:de:08:86:15:52: a9:78:ed:f8:27:2f:36:40:f5:e6:7f:19:fa:5c:95: 6a:21:5e:a4:1d:f7:d9:8d:0c:2f:0a:d9:1a:8e:3f: 4d:47:b7:de:92:75:23:43:85:62:7b:80:0c:4c:46: 9e:89:33:c1:d0:ae:78:b7:d4:1d:c7:5b:fb:bb:95: e3:93:58:ac:f7:60:c0:e4:7f:88:d4:e9:a5:d6:6e: 93:33:e4:ce:e6:aa:e5:10:b4:08:31:fb:8e:a8:17: bd:23:59:78:08:97:d3:b8:c9:c1:7d:07:6e:19:5a: 46:e3:38:35:0a:c3:1b:d0:33:62:2c:61:72:a9:b7: 32:df:9d:40:4a:3a:d3:18:da:b5:fe:95:28:6e:8f: ca:c1:bd:8a:f7:eb:a8:2e:b7:e0:74:bc:d1:e7:83: f1:51:05:96:38:59:d8:df:87:76:d9:57:52:04:fc: fd:7a:f3:58:a3:de:2c:cf:7c:b0:c1:a2:0c:36:7b: 6d:b6:5d:43:e9:59:33:ba:a9:06:52:e1:4d:5f:bc: ce:87:6a:c8:5f:da:26:2f:24:de:7e:92:2e:fd:cd: 08:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A7:18:54:28:34:4C:EE:37:4D:DF:84:E3:83:80:F2:52:87:6C:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/40649f8d-a2c1-32f8-9f91-e76ab12ef234.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 141.140.64.0/24 141.140.67.0/24 141.140.70.0/24 141.140.73.0/24 141.140.76.0/24 141.140.79.0/24 141.140.82.0/24 141.140.85.0/24 141.140.88.0/24 141.140.91.0/24 141.140.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:72:7e:18:d7:5c:d1:5f:09:94:fe:7c:f9:98:c7:f2:60:60: dd:b4:9b:0e:f0:1e:4a:73:09:e9:02:98:fa:d1:c5:0c:ed:9e: cb:e9:1b:8a:36:c7:1a:6f:ac:25:cd:67:0f:47:c3:00:12:d8: 53:eb:ab:01:c6:99:2e:23:da:4b:a9:e9:49:e2:d2:32:48:57: e0:c4:0e:36:44:47:6e:1f:7c:fa:35:63:56:20:e7:02:61:e2: c9:b4:ef:87:f7:f8:83:69:02:ac:d1:9d:20:dc:02:8d:b2:3b: 6a:19:f7:20:9b:83:9c:2d:12:90:d2:10:ab:20:25:db:3e:0c: e4:e9:e8:28:b8:39:db:79:bb:9b:e8:ec:15:6d:6f:fc:c4:0d: cf:fe:96:33:fe:8b:ec:a0:b7:da:26:9f:0f:f5:cc:3b:28:b6: 4b:68:be:54:f5:a8:55:6d:4c:0f:cc:33:eb:a5:43:74:88:bd: f8:31:29:b0:cc:4a:5b:1f:49:fe:b5:d0:8c:81:fc:f6:62:7a: 87:6e:a4:7a:42:50:20:88:9b:9f:1d:b7:a5:8d:56:02:d4:4a: 42:b0:3b:3e:ab:41:df:23:1d:bf:3e:4a:94:ef:e6:d5:c9:e7: 31:c9:e3:b9:87:78:e9:b8:df:ec:00:53:d1:19:9d:0d:18:d7: 5c:c9:d2:3a -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWEg0VXMosOEiWRH/f4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk ODZlNmJlZWItNzlkNy00MDUwLTgyMDYtMzZmOTcwMjViOTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+MIGWOpmfbLL1Q/ZhI9PsiWQ8+M30ccNrXh vB2O9V5pPOJjhLlH3giGFVKpeO34Jy82QPXmfxn6XJVqIV6kHffZjQwvCtkajj9N R7feknUjQ4Vie4AMTEaeiTPB0K54t9Qdx1v7u5Xjk1is92DA5H+I1Oml1m6TM+TO 5qrlELQIMfuOqBe9I1l4CJfTuMnBfQduGVpG4zg1CsMb0DNiLGFyqbcy351ASjrT GNq1/pUobo/Kwb2K9+uoLrfgdLzR54PxUQWWOFnY34d22VdSBPz9evNYo94sz3yw waIMNntttl1D6VkzuqkGUuFNX7zOh2rIX9omLyTefpIu/c0IGwIDAQABo4IDkTCC A40wHQYDVR0OBBYEFDCnGFQoNEzuN03fhOODgPJSh2yLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNDA2NDlmOGQtYTJjMS0z MmY4LTlmOTEtZTc2YWIxMmVmMjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAjYxAAwQA jYxDAwQAjYxGAwQAjYxJAwQAjYxMAwQAjYxPAwQAjYxSAwQAjYxVAwQAjYxYAwQA jYxbAwQAjYxeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAENyfhjXXNFfCZT+fPmYx/JgYN20mw7wHkpzCekC mPrRxQztnsvpG4o2xxpvrCXNZw9HwwAS2FPrqwHGmS4j2kup6Uni0jJIV+DEDjZE R24ffPo1Y1Yg5wJh4sm074f3+INpAqzRnSDcAo2yO2oZ9yCbg5wtEpDSEKsgJds+ DOTp6Ci4Odt5u5vo7BVtb/zEDc/+ljP+i+ygt9omnw/1zDsotktovlT1qFVtTA/M M+ulQ3SIvfgxKbDMSlsfSf610IyB/PZieodupHpCUCCIm58dt6WNVgLUSkKwOz6r Qd8jHb8+SpTv5tXJ5zHJ47mHeOm43+wAU9EZnQ0Y11zJ0jo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:32 2025 by rpki-client