$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/c11d98ec-8d42-394d-8ff4-4abeea26218e.roa File: c11d98ec-8d42-394d-8ff4-4abeea26218e.roa (raw, json) Hash identifier: WA+vbTvEjEko2txwQFCdcUJ4P0msGeXUMZLuM7e423M= Subject key identifier: 52:48:1F:16:15:38:E6:46:1D:F5:7A:29:4F:7D:B4:F3:14:BE:5B:7F Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584921840C0144B94EE9E109C900 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/c11d98ec-8d42-394d-8ff4-4abeea26218e.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 174 IP address blocks: 141.140.64.0/24 maxlen: 24 141.140.67.0/24 maxlen: 24 141.140.70.0/24 maxlen: 24 141.140.73.0/24 maxlen: 24 141.140.76.0/24 maxlen: 24 141.140.79.0/24 maxlen: 24 141.140.82.0/24 maxlen: 24 141.140.85.0/24 maxlen: 24 141.140.88.0/24 maxlen: 24 141.140.91.0/24 maxlen: 24 141.140.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:0c:01:44:b9:4e:e9:e1:09:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=9ea4b119-6a54-4655-872c-0d999b64a9f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:89:70:df:ae:8a:5b:f3:02:3a:84:2c:88:2f: de:fc:aa:71:ed:4b:a1:a3:1a:17:7e:a7:a0:35:f4: fd:19:a6:9b:8f:ec:51:a3:cf:b4:b7:15:a8:15:68: d9:6f:4d:2b:e8:fb:d2:df:03:4e:00:48:52:e4:1e: 14:38:4d:6d:26:4e:d1:f5:ef:61:b4:69:08:b2:1d: 29:9d:f7:d9:6b:40:49:ca:58:43:52:70:96:3b:02: 5d:5d:90:82:0b:e0:59:a0:ef:cd:dd:87:a5:be:51: 65:79:71:d7:33:ba:1d:72:4c:90:28:14:39:02:0d: e9:04:7b:5c:58:c6:67:94:63:8b:d4:56:df:67:85: 26:4a:e5:59:c7:81:8b:82:dc:f7:9f:c4:4e:89:d9: 3a:de:8f:ef:3a:36:e1:06:46:5b:55:01:a4:4f:0d: ce:d0:9c:99:e3:d6:0a:6d:b2:e5:f0:fe:e5:2e:a3: db:b4:2d:f5:53:98:46:75:ea:fb:7d:95:19:5c:8e: e9:ea:c0:3b:58:f2:ae:31:7b:f9:ae:55:c9:87:7c: d3:49:91:65:9e:59:3c:19:2a:0b:d2:69:5c:75:8b: c6:5e:32:33:33:9f:e3:15:4a:2f:b8:ba:f6:65:96: 3e:75:56:60:ab:6f:2c:44:dc:82:d6:88:71:d1:60: f2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:48:1F:16:15:38:E6:46:1D:F5:7A:29:4F:7D:B4:F3:14:BE:5B:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/c11d98ec-8d42-394d-8ff4-4abeea26218e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 141.140.64.0/24 141.140.67.0/24 141.140.70.0/24 141.140.73.0/24 141.140.76.0/24 141.140.79.0/24 141.140.82.0/24 141.140.85.0/24 141.140.88.0/24 141.140.91.0/24 141.140.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:43:39:a9:3c:2c:b7:b6:cc:3c:3f:dd:29:5b:12:69:c1:93: f3:59:7f:ce:54:67:8b:02:e8:8b:fb:53:3c:d8:fa:e5:09:e3: 4e:bf:68:66:fe:70:fb:6b:4d:19:e3:44:78:5c:5b:69:62:57: e7:9d:ba:87:f2:d3:13:21:18:88:c0:23:37:63:36:68:d8:3a: cd:6a:5b:d7:03:4e:b5:30:cc:f7:ad:99:7a:2b:88:1f:43:cd: fa:35:f9:f9:41:e6:3d:8e:c1:5f:b3:3f:42:a5:c4:a3:5b:57: 1d:91:c0:41:bb:00:e5:26:27:64:b5:83:d1:49:13:c2:d7:67: b9:40:5d:0b:e4:18:80:8f:53:e5:b6:9c:69:82:4c:c0:2e:bc: de:2d:c5:61:db:a0:c4:d8:ff:4a:f5:c8:6c:b7:7c:c2:8f:15: a6:ed:fc:75:be:ae:41:50:02:a0:f7:bb:0a:bb:3a:86:d9:58: 46:7b:d9:6b:1a:27:d1:01:bb:08:18:67:a7:fd:a6:c3:2a:a0: 35:96:dc:e0:d9:84:74:f6:85:ab:89:5f:6f:63:d1:7c:93:b3: c1:de:b2:0e:e1:a0:1a:d9:15:11:e5:69:aa:72:08:8f:cc:9c: 54:eb:4e:ab:dc:12:c7:29:8c:57:a2:e4:3c:0f:e2:ba:23:12: 3f:17:f2:ae -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWEkhhAwBRLlO6eEJyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk OWVhNGIxMTktNmE1NC00NjU1LTg3MmMtMGQ5OTliNjRhOWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0olw366KW/MCOoQsiC/e/Kpx7UuhoxoXfqeg NfT9Gaabj+xRo8+0txWoFWjZb00r6PvS3wNOAEhS5B4UOE1tJk7R9e9htGkIsh0p nffZa0BJylhDUnCWOwJdXZCCC+BZoO/N3YelvlFleXHXM7odckyQKBQ5Ag3pBHtc WMZnlGOL1FbfZ4UmSuVZx4GLgtz3n8ROidk63o/vOjbhBkZbVQGkTw3O0JyZ49YK bbLl8P7lLqPbtC31U5hGder7fZUZXI7p6sA7WPKuMXv5rlXJh3zTSZFlnlk8GSoL 0mlcdYvGXjIzM5/jFUovuLr2ZZY+dVZgq28sRNyC1ohx0WDyMwIDAQABo4IDkTCC A40wHQYDVR0OBBYEFFJIHxYVOOZGHfV6KU99tPMUvlt/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYzExZDk4ZWMtOGQ0Mi0z OTRkLThmZjQtNGFiZWVhMjYyMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAjYxAAwQA jYxDAwQAjYxGAwQAjYxJAwQAjYxMAwQAjYxPAwQAjYxSAwQAjYxVAwQAjYxYAwQA jYxbAwQAjYxeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAA9DOak8LLe2zDw/3SlbEmnBk/NZf85UZ4sC6Iv7 UzzY+uUJ406/aGb+cPtrTRnjRHhcW2liV+eduofy0xMhGIjAIzdjNmjYOs1qW9cD TrUwzPetmXoriB9Dzfo1+flB5j2OwV+zP0KlxKNbVx2RwEG7AOUmJ2S1g9FJE8LX Z7lAXQvkGICPU+W2nGmCTMAuvN4txWHboMTY/0r1yGy3fMKPFabt/HW+rkFQAqD3 uwq7OobZWEZ72WsaJ9EBuwgYZ6f9psMqoDWW3ODZhHT2hauJX29j0XyTs8Hesg7h oBrZFRHlaapyCI/MnFTrTqvcEscpjFei5DwP4rojEj8X8q4= -----END CERTIFICATE-----Generated at Fri Mar 14 10:39:28 2025 by rpki-client