$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d727d5f4-9a28-3733-9f4f-bd3714d9f4cd.roa File: d727d5f4-9a28-3733-9f4f-bd3714d9f4cd.roa (raw, json) Hash identifier: ypZ9/IxHs9+6n6Nd8qfDX9lQ2tXIfAlsDphz80eg59s= Subject key identifier: 57:36:51:A2:62:1B:D9:25:DB:AA:95:26:3B:10:90:B1:82:36:BF:07 Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F4328584863CB05142DFE63AB3D850F00 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d727d5f4-9a28-3733-9f4f-bd3714d9f4cd.roa Signing time: Tue 31 Dec 2024 14:00:53 +0000 ROA not before: Tue 31 Dec 2024 14:00:53 +0000 ROA not after: Mon 31 Mar 2025 13:00:53 +0000 asID: 88 IP address blocks: 140.180.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:63:cb:05:14:2d:fe:63:ab:3d:85:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Dec 31 14:00:53 2024 GMT Not After : Mar 31 13:00:53 2025 GMT Subject: CN=c8c683d3-c980-4cd2-b904-be777d36b4ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1b:b6:70:71:ed:8f:8d:62:66:37:89:7a:1e: 1f:af:78:b4:1c:43:41:fa:49:52:ee:4f:fd:d7:d1: 13:a7:79:bb:00:11:ab:23:88:43:d1:f5:f6:67:52: 05:fa:75:8b:5f:e1:51:7b:f8:70:5a:b6:7f:18:f6: 29:b0:ad:76:9b:9a:04:67:80:db:c5:6f:ac:c8:fc: 0f:44:13:e0:38:6a:b8:7a:47:8f:6d:ad:4a:82:2c: b9:c9:81:fb:c6:3b:90:3e:2a:95:6a:3c:cb:8e:9f: 33:2e:dd:06:3c:de:e5:72:94:1a:29:01:c0:b7:cd: e0:c8:a8:a9:81:78:f4:b6:4b:68:63:ae:b0:15:b2: 52:23:c9:42:d6:37:67:12:32:65:ff:52:7d:96:dd: 6c:34:7d:7a:d3:9e:69:94:6a:0a:cf:71:52:3b:31: a6:a5:ee:e4:0d:d6:96:25:f6:48:48:a3:59:96:85: 6c:5b:8d:5b:b7:35:94:8d:05:da:61:9e:f3:00:83: 41:86:ec:10:ec:e9:4f:91:ca:15:54:72:89:da:6e: 84:3a:a1:62:38:07:27:0e:dc:a5:63:cd:70:1d:39: 5e:4a:62:2d:44:ff:02:7a:5f:3d:c7:c2:ec:21:a1: 20:a6:a3:7d:7c:80:86:a2:4c:7e:d5:6f:dc:2d:2b: 3e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:36:51:A2:62:1B:D9:25:DB:AA:95:26:3B:10:90:B1:82:36:BF:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d727d5f4-9a28-3733-9f4f-bd3714d9f4cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 140.180.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:e8:ad:7f:4b:dc:92:45:6f:30:e2:f5:d5:79:84:df:d4:61: c0:f2:ff:c8:89:27:d7:03:fd:57:8c:be:eb:f0:a5:0d:fb:68: 15:d6:6f:f9:bd:cf:91:ae:c1:86:c2:ba:c1:77:c9:56:a3:5f: 74:1d:e1:49:28:94:61:eb:f3:f8:eb:9f:b5:f5:59:98:9a:9a: c5:ac:2c:f8:6a:2c:7e:a9:e0:89:3d:5c:89:0a:c5:e6:8c:1e: 28:18:ee:db:09:b8:82:5f:e4:f1:f2:37:3a:ed:85:26:9c:cf: ba:94:7e:20:18:5f:a8:62:f4:12:3d:a3:28:41:d7:ef:45:a2: 0e:16:64:39:14:cf:45:ec:4a:da:e6:ad:63:e4:0a:66:ae:3b: da:c6:01:0d:fc:09:27:c9:25:38:cc:fe:4e:e4:1a:73:f2:91: 2c:37:32:7e:22:76:af:c6:3d:69:43:9f:da:06:02:cb:32:4a: c7:02:87:4e:73:6e:9f:39:a6:9f:59:6f:52:41:a8:12:46:9f: 23:87:f0:f1:1c:94:3d:17:41:dd:55:bd:a8:cd:80:e8:e0:48: 35:ca:f8:5f:a5:91:e3:a6:b3:a2:59:89:8d:c4:27:8e:69:3f: 1b:af:58:6c:e8:8f:40:db:24:63:b0:62:70:f3:5b:a2:0b:8f: b6:a7:cd:69 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhjywUULf5jqz2FDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk YzhjNjgzZDMtYzk4MC00Y2QyLWI5MDQtYmU3NzdkMzZiNGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphu2cHHtj41iZjeJeh4fr3i0HENB+klS7k/9 19ETp3m7ABGrI4hD0fX2Z1IF+nWLX+FRe/hwWrZ/GPYpsK12m5oEZ4DbxW+syPwP RBPgOGq4ekePba1Kgiy5yYH7xjuQPiqVajzLjp8zLt0GPN7lcpQaKQHAt83gyKip gXj0tktoY66wFbJSI8lC1jdnEjJl/1J9lt1sNH16055plGoKz3FSOzGmpe7kDdaW JfZISKNZloVsW41btzWUjQXaYZ7zAINBhuwQ7OlPkcoVVHKJ2m6EOqFiOAcnDtyl Y81wHTleSmItRP8Cel89x8LsIaEgpqN9fICGokx+1W/cLSs+1wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFc2UaJiG9kl26qVJjsQkLGCNr8HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvZDcyN2Q1ZjQtOWEyOC0z NzMzLTlmNGYtYmQzNzE0ZDlmNGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjLQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAh+itf0vckkVvMOL11XmE39RhwPL/yIkn1wP9V4y+6/ClDftoFdZv+b3P ka7BhsK6wXfJVqNfdB3hSSiUYevz+OuftfVZmJqaxaws+GosfqngiT1ciQrF5owe KBju2wm4gl/k8fI3Ou2FJpzPupR+IBhfqGL0Ej2jKEHX70WiDhZkORTPRexK2uat Y+QKZq472sYBDfwJJ8klOMz+TuQac/KRLDcyfiJ2r8Y9aUOf2gYCyzJKxwKHTnNu nzmmn1lvUkGoEkafI4fw8RyUPRdB3VW9qM2A6OBINcr4X6WR46azolmJjcQnjmk/ G69YbOiPQNskY7BicPNboguPtqfNaQ== -----END CERTIFICATE-----Generated at Sun Feb 16 20:24:16 2025 by rpki-client