$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e3ed6180-9232-3040-807e-a3ab628e546c.roa File: e3ed6180-9232-3040-807e-a3ab628e546c.roa (raw, json) Hash identifier: UrPaY5GJe2bF0xA42Ellxc5zneGSSmf8MHDO9jlLLkA= Subject key identifier: 7C:4C:E2:D6:EC:27:48:53:45:46:EC:D2:3F:57:3A:CF:45:F4:7B:4F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848A069F68A6C4357B22252EF00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e3ed6180-9232-3040-807e-a3ab628e546c.roa Signing time: Wed 22 Jan 2025 07:09:44 +0000 ROA not before: Wed 22 Jan 2025 07:09:44 +0000 ROA not after: Tue 22 Apr 2025 06:09:44 +0000 asID: 9009 IP address blocks: 206.123.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a0:69:f6:8a:6c:43:57:b2:22:52:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jan 22 07:09:44 2025 GMT Not After : Apr 22 06:09:44 2025 GMT Subject: CN=183472df-055b-4bb4-b30d-6168190b42dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2f:46:06:cf:a2:41:c7:c0:ad:32:5d:db:7e: 03:c2:f3:f0:df:84:b4:3f:35:fb:ae:a3:e5:49:62: 10:6b:35:c2:df:68:db:48:25:77:76:54:30:5d:95: 74:5f:81:79:24:f6:2f:23:d0:cd:94:84:4f:e6:da: b3:6c:4f:4c:30:ee:fc:51:3f:9c:b0:d9:1c:b4:cd: 73:c4:06:d6:97:c4:0b:74:5f:f6:63:6a:43:1a:82: 39:56:f0:90:23:4f:75:3e:9e:f3:c1:f2:ed:a3:4e: 0b:6d:dd:ba:be:77:66:5e:51:4d:9e:6d:69:01:2c: ee:07:70:ae:39:4a:ff:d7:be:7e:a9:d9:c1:46:53: c3:4a:ba:60:b4:64:7a:7d:1d:78:c1:53:c9:43:71: ae:81:f3:de:02:f1:99:58:13:ad:d1:48:58:38:de: bc:77:23:bd:d0:87:57:c4:5b:4f:f0:f4:06:6d:d9: 19:6e:00:0b:7f:c8:d5:30:c8:1d:a8:d3:75:ef:38: cc:31:5b:2b:1c:c7:bb:6f:d5:85:db:58:c5:43:59: b2:bd:cd:8f:01:c3:82:e3:c4:f6:de:0f:31:8f:9d: ac:5f:3b:a3:a6:b3:46:2e:d7:37:e5:ac:06:92:ea: 4a:f6:1f:76:ea:1b:d0:98:48:2b:4d:62:3b:ce:cf: 13:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4C:E2:D6:EC:27:48:53:45:46:EC:D2:3F:57:3A:CF:45:F4:7B:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e3ed6180-9232-3040-807e-a3ab628e546c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:95:7a:18:bc:c9:2a:99:67:be:40:06:45:44:84:20:40:d0: d2:3e:e1:68:45:7e:3e:64:b4:32:60:21:3e:6c:f6:9e:f6:c6: 51:34:2d:8c:57:2d:3c:a7:6d:f4:d9:bf:03:16:85:1d:72:76: 23:2f:d5:a2:a2:4e:bd:60:1b:a3:f2:27:37:7b:df:7b:ca:16: 3f:86:36:cf:af:7f:36:29:47:94:37:9c:9e:5a:30:89:25:8a: b9:81:c2:be:e3:da:1d:00:fd:a9:8d:d4:c1:1b:ce:17:dd:bf: 90:2d:09:49:24:a5:44:91:f2:41:32:02:1a:fc:29:12:02:37: 4a:46:22:dc:5f:46:79:31:09:05:9a:44:a7:01:67:30:0c:20: 34:2c:3a:05:b7:67:b1:9a:f5:e5:fa:97:06:b0:f5:0a:7f:cd: 4b:91:57:82:57:77:dd:93:0e:52:72:ae:74:97:9b:d7:3c:41: e8:3a:71:2e:69:89:6a:43:83:be:f3:a7:ed:b2:80:19:dc:68: 0a:65:4a:e8:27:79:74:3e:88:21:ad:bd:03:f9:b2:ed:35:b1: 0a:98:11:ee:f2:fd:cb:bd:35:c0:9b:88:f2:67:ea:4a:16:7e: 55:3d:e9:14:7f:1d:11:b6:27:f9:e9:ae:0d:33:3e:15:94:d3: 4e:21:b4:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEigafaKbENXsiJS7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDEyMjA3MDk0NFoXDTI1MDQyMjA2MDk0NFowLzEtMCsGA1UEAxMk MTgzNDcyZGYtMDU1Yi00YmI0LWIzMGQtNjE2ODE5MGI0MmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzC9GBs+iQcfArTJd234DwvPw34S0PzX7rqPl SWIQazXC32jbSCV3dlQwXZV0X4F5JPYvI9DNlIRP5tqzbE9MMO78UT+csNkctM1z xAbWl8QLdF/2Y2pDGoI5VvCQI091Pp7zwfLto04Lbd26vndmXlFNnm1pASzuB3Cu OUr/175+qdnBRlPDSrpgtGR6fR14wVPJQ3GugfPeAvGZWBOt0UhYON68dyO90IdX xFtP8PQGbdkZbgALf8jVMMgdqNN17zjMMVsrHMe7b9WF21jFQ1myvc2PAcOC48T2 3g8xj52sXzujprNGLtc35awGkupK9h926hvQmEgrTWI7zs8TOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxM4tbsJ0hTRUbs0j9XOs9F9HtPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZTNlZDYxODAtOTIzMi0z MDQwLTgwN2UtYTNhYjYyOGU1NDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyVehi8ySqZZ75ABkVEhCBA0NI+4WhFfj5ktDJgIT5s9p72xlE0LYxX LTynbfTZvwMWhR1ydiMv1aKiTr1gG6PyJzd733vKFj+GNs+vfzYpR5Q3nJ5aMIkl irmBwr7j2h0A/amN1MEbzhfdv5AtCUkkpUSR8kEyAhr8KRICN0pGItxfRnkxCQWa RKcBZzAMIDQsOgW3Z7Ga9eX6lwaw9Qp/zUuRV4JXd92TDlJyrnSXm9c8Qeg6cS5p iWpDg77zp+2ygBncaAplSugneXQ+iCGtvQP5su01sQqYEe7y/cu9NcCbiPJn6koW flU96RR/HRG2J/nprg0zPhWU004htKE= -----END CERTIFICATE-----Generated at Fri Apr 11 22:26:55 2025 by rpki-client