$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/40649f8d-a2c1-32f8-9f91-e76ab12ef234.roa File: 40649f8d-a2c1-32f8-9f91-e76ab12ef234.roa (raw, json) Hash identifier: pmn5G2JjWdO7+OgsrNAtra7dF5VzUwz7xIW5zOxZGlY= Subject key identifier: 45:C2:85:4D:09:5B:30:73:15:AD:47:A9:8E:C6:21:8B:EB:9F:B0:90 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584913AC29DAF1508D16E13D7BE0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/40649f8d-a2c1-32f8-9f91-e76ab12ef234.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 1239 IP address blocks: 141.140.64.0/24 maxlen: 24 141.140.67.0/24 maxlen: 24 141.140.70.0/24 maxlen: 24 141.140.73.0/24 maxlen: 24 141.140.76.0/24 maxlen: 24 141.140.79.0/24 maxlen: 24 141.140.82.0/24 maxlen: 24 141.140.85.0/24 maxlen: 24 141.140.88.0/24 maxlen: 24 141.140.91.0/24 maxlen: 24 141.140.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:29:da:f1:50:8d:16:e1:3d:7b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=00994482-016c-4a19-9e30-92ce989c33d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:08:81:0f:cb:92:0f:ff:ed:8a:42:67:75:e3: 99:f1:88:d8:73:e9:61:dd:31:de:ca:d1:be:1f:aa: dd:10:a0:2f:f0:76:6e:b4:ff:22:c1:ff:fc:4f:5f: 88:7a:6d:e4:4d:e6:c6:8f:9f:92:95:15:5f:14:46: dd:8e:5b:cb:7c:fe:4a:fe:08:6e:78:09:83:f0:56: 99:71:f9:f1:40:90:96:62:f6:8c:8a:c9:6a:ce:e2: 8c:75:2b:46:f2:0a:9b:91:fe:cf:f0:40:15:69:ca: a9:48:a1:1a:ce:38:1e:e9:f3:93:d4:4c:65:ac:85: 32:73:b8:3e:47:78:a8:49:18:74:c5:d5:e9:5f:9d: 9c:ba:23:54:9e:38:3b:35:8d:22:47:ee:25:3a:5a: 1a:01:98:12:3c:20:52:c5:42:0a:d2:f8:f8:50:30: 08:86:d8:68:5b:89:32:8a:71:0e:c9:c7:b6:de:9c: 5b:7f:08:05:a1:7f:08:63:e5:ff:be:dd:90:8d:5c: 49:99:70:8d:80:da:52:2b:69:10:bf:31:eb:48:d6: db:4e:f7:02:b7:eb:81:31:fa:20:ac:7d:cc:f3:b7: dd:7c:e3:d3:4e:f9:f8:45:f9:10:6d:f1:6e:05:36: 66:fe:04:36:81:0e:62:d3:4d:b2:22:57:55:1a:5e: 73:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C2:85:4D:09:5B:30:73:15:AD:47:A9:8E:C6:21:8B:EB:9F:B0:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/40649f8d-a2c1-32f8-9f91-e76ab12ef234.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 141.140.64.0/24 141.140.67.0/24 141.140.70.0/24 141.140.73.0/24 141.140.76.0/24 141.140.79.0/24 141.140.82.0/24 141.140.85.0/24 141.140.88.0/24 141.140.91.0/24 141.140.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:95:c7:0b:d3:b0:d4:99:dc:d9:04:d2:b3:49:75:37:31:50: 8b:6c:fe:97:d4:0f:8f:22:6e:45:4f:0e:24:1c:98:b4:2e:6b: 81:3b:50:ad:6f:52:88:d8:67:cf:05:a2:48:66:b1:80:b9:18: 09:da:95:f9:ef:da:a9:d3:50:36:cb:0d:60:70:d3:03:ef:d9: 5b:5f:d2:e5:43:5a:3e:b6:79:da:8c:2b:60:68:2c:74:f7:1a: b1:5c:64:c2:9f:5b:38:e3:77:df:8c:f5:fe:36:40:6b:88:84: 1f:70:27:80:4e:e7:b2:ca:6d:cd:f5:5c:50:cd:1b:48:4f:14: e4:55:5c:90:de:11:59:49:13:ba:f9:3c:5c:07:3d:25:bd:23: 5f:37:74:78:77:93:ff:76:a1:67:21:17:7c:b6:71:86:10:04: 3f:3c:0e:6d:02:22:1a:96:dd:0c:52:11:02:50:3c:66:99:c6: 38:14:ff:5d:f6:45:0d:00:68:13:1c:95:c4:d8:1d:c6:2a:82: ef:d6:3a:3d:7b:fb:b9:92:2d:14:e1:a6:ec:5c:9c:16:26:13: 14:53:d1:63:6a:9f:95:50:22:2c:bf:40:14:56:40:27:30:20: 2e:e0:51:b7:8e:1c:1a:eb:ee:72:ca:61:1d:35:46:9d:75:b7: 6d:52:eb:8f -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWEkTrCna8VCNFuE9e+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk MDA5OTQ0ODItMDE2Yy00YTE5LTllMzAtOTJjZTk4OWMzM2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgiBD8uSD//tikJndeOZ8YjYc+lh3THeytG+ H6rdEKAv8HZutP8iwf/8T1+Iem3kTebGj5+SlRVfFEbdjlvLfP5K/ghueAmD8FaZ cfnxQJCWYvaMislqzuKMdStG8gqbkf7P8EAVacqpSKEazjge6fOT1ExlrIUyc7g+ R3ioSRh0xdXpX52cuiNUnjg7NY0iR+4lOloaAZgSPCBSxUIK0vj4UDAIhthoW4ky inEOyce23pxbfwgFoX8IY+X/vt2QjVxJmXCNgNpSK2kQvzHrSNbbTvcCt+uBMfog rH3M87fdfOPTTvn4RfkQbfFuBTZm/gQ2gQ5i002yIldVGl5zawIDAQABo4IDkTCC A40wHQYDVR0OBBYEFEXChU0JWzBzFa1HqY7GIYvrn7CQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNDA2NDlmOGQtYTJjMS0z MmY4LTlmOTEtZTc2YWIxMmVmMjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAjYxAAwQA jYxDAwQAjYxGAwQAjYxJAwQAjYxMAwQAjYxPAwQAjYxSAwQAjYxVAwQAjYxYAwQA jYxbAwQAjYxeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAA+VxwvTsNSZ3NkE0rNJdTcxUIts/pfUD48ibkVP DiQcmLQua4E7UK1vUojYZ88FokhmsYC5GAnalfnv2qnTUDbLDWBw0wPv2Vtf0uVD Wj62edqMK2BoLHT3GrFcZMKfWzjjd9+M9f42QGuIhB9wJ4BO57LKbc31XFDNG0hP FORVXJDeEVlJE7r5PFwHPSW9I183dHh3k/92oWchF3y2cYYQBD88Dm0CIhqW3QxS EQJQPGaZxjgU/132RQ0AaBMclcTYHcYqgu/WOj17+7mSLRThpuxcnBYmExRT0WNq n5VQIiy/QBRWQCcwIC7gUbeOHBrr7nLKYR01Rp11t21S648= -----END CERTIFICATE-----Generated at Fri Mar 14 10:33:35 2025 by rpki-client