$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7/533c1010-86c1-3b13-ad2b-6347a5b8bd79.roa File: 533c1010-86c1-3b13-ad2b-6347a5b8bd79.roa (raw, json) Hash identifier: 1b2ORphjkIqKhnwYrw1glX5Tlh+3EdoRNb2/E9gBzXg= Subject key identifier: 5C:C1:49:9C:19:66:D8:4E:B8:8B:5D:1E:96:09:26:26:04:51:4C:A4 Certificate issuer: /CN=78308f5f-20d8-4869-b8d0-cced78ce51b7 Certificate serial: 010D0C9F4328584894A5E056FC5C0FC0C4E83A00 Authority key identifier: CF:18:EF:06:CD:10:C0:4E:11:AD:49:8D:23:B7:68:A1:2D:FD:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7/533c1010-86c1-3b13-ad2b-6347a5b8bd79.roa Signing time: Sat 18 Jan 2025 02:00:38 +0000 ROA not before: Sat 18 Jan 2025 02:00:38 +0000 ROA not after: Fri 18 Apr 2025 01:00:38 +0000 asID: 396982 IP address blocks: 140.235.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7/78308f5f-20d8-4869-b8d0-cced78ce51b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7/78308f5f-20d8-4869-b8d0-cced78ce51b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:94:a5:e0:56:fc:5c:0f:c0:c4:e8:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78308f5f-20d8-4869-b8d0-cced78ce51b7 Validity Not Before: Jan 18 02:00:38 2025 GMT Not After : Apr 18 01:00:38 2025 GMT Subject: CN=453df2cf-fa55-4bc8-a87f-e3dceed813d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:52:bf:bc:d6:57:d7:de:f1:7e:a1:8d:ff:e5: 0a:a2:c6:47:5b:6b:21:b7:75:f9:9c:85:1e:5e:f5: ce:ff:95:69:99:6f:dd:15:1e:59:69:ab:b0:d6:19: 68:0b:72:f7:5e:16:31:a9:f0:c2:fc:df:d5:74:66: 84:80:ea:30:de:35:b5:27:d3:dd:32:8e:79:3a:55: 63:62:ce:d4:9f:3a:51:b0:dc:1e:3f:61:58:4c:01: 77:b4:fa:7b:7b:27:47:f5:c7:44:7b:ae:a2:d8:04: 0e:e3:2b:06:f2:d0:c6:43:74:9f:3c:19:3b:a6:b6: bb:a2:64:0f:78:99:05:21:46:f1:c7:53:33:8b:1e: 02:38:05:f9:c0:60:b4:20:9a:88:e7:86:6f:68:e5: b2:2a:8c:59:49:fa:ee:e2:e0:f3:4f:7f:7d:a3:11: 56:b6:a3:60:fb:00:99:71:d9:b3:94:e5:8d:72:3f: 03:59:59:db:c4:b5:31:43:ec:1c:1e:2e:d8:89:08: 6e:b8:f4:12:28:0d:9b:94:7a:8c:83:be:73:43:d9: 3f:71:d7:92:55:a0:aa:a3:1d:30:02:4e:25:4d:91: 2f:2d:39:47:43:4a:51:b8:67:08:11:66:db:07:bb: 2d:48:23:d1:95:d0:06:60:d6:bf:c7:29:16:0c:a1: 83:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C1:49:9C:19:66:D8:4E:B8:8B:5D:1E:96:09:26:26:04:51:4C:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7/533c1010-86c1-3b13-ad2b-6347a5b8bd79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7/78308f5f-20d8-4869-b8d0-cced78ce51b7.crl X509v3 Authority Key Identifier: keyid:CF:18:EF:06:CD:10:C0:4E:11:AD:49:8D:23:B7:68:A1:2D:FD:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78308f5f-20d8-4869-b8d0-cced78ce51b7.cer sbgp-ipAddrBlock: critical IPv4: 140.235.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:84:a3:37:93:5c:00:7b:f1:f1:51:96:2d:c6:00:47:1c:6d: 18:6a:4e:59:68:c5:c4:75:d1:74:cb:32:a0:6a:eb:d2:74:b0: b8:06:ca:37:19:9f:f3:a2:b1:d4:0c:de:3c:b9:11:55:37:d2: 5d:2c:63:01:f9:6d:be:00:36:73:37:43:3b:d4:ad:9f:f4:38: e1:26:20:de:c2:de:0a:9b:7c:01:ba:37:13:72:9d:c8:cd:21: 86:8e:16:e7:51:b0:98:86:49:2f:45:67:4e:0b:90:86:57:a0: 18:81:0d:7f:56:fa:cb:0b:04:a5:b1:27:1e:f7:a6:92:69:82: fe:34:20:bd:7f:d8:0b:8f:e8:a8:0e:89:2f:22:e5:15:79:88: 7b:6c:e2:0a:18:c0:0d:d9:5c:01:48:6d:14:47:36:c0:90:8e: 09:d1:2f:c0:c4:18:92:67:fc:fa:50:b3:e4:85:4e:5c:57:19: e1:c5:12:ab:b5:90:ca:a3:50:e3:38:59:7a:31:69:0d:a1:e2: f7:c3:41:a2:b8:b5:ae:3b:93:e5:18:cb:69:af:0d:88:37:e3: c6:2b:70:00:da:90:cd:23:be:ce:a9:d3:c7:d2:01:3b:db:14: 0c:ac:9f:2a:3f:93:ae:ad:2f:a2:02:5d:4f:f8:bf:22:0b:0c: de:74:5d:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiUpeBW/FwPwMToOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzgzMDhmNWYtMjBkOC00ODY5LWI4ZDAtY2NlZDc4Y2U1 MWI3MB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk NDUzZGYyY2YtZmE1NS00YmM4LWE4N2YtZTNkY2VlZDgxM2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1K/vNZX197xfqGN/+UKosZHW2sht3X5nIUe XvXO/5VpmW/dFR5Zaauw1hloC3L3XhYxqfDC/N/VdGaEgOow3jW1J9PdMo55OlVj Ys7UnzpRsNweP2FYTAF3tPp7eydH9cdEe66i2AQO4ysG8tDGQ3SfPBk7pra7omQP eJkFIUbxx1Mzix4COAX5wGC0IJqI54ZvaOWyKoxZSfru4uDzT399oxFWtqNg+wCZ cdmzlOWNcj8DWVnbxLUxQ+wcHi7YiQhuuPQSKA2blHqMg75zQ9k/cdeSVaCqox0w Ak4lTZEvLTlHQ0pRuGcIEWbbB7stSCPRldAGYNa/xykWDKGD5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzBSZwZZthOuItdHpYJJiYEUUykMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83ODMw OGY1Zi0yMGQ4LTQ4NjktYjhkMC1jY2VkNzhjZTUxYjcvNTMzYzEwMTAtODZjMS0z YjEzLWFkMmItNjM0N2E1YjhiZDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzgzMDhmNWYtMjBkOC00ODY5LWI4 ZDAtY2NlZDc4Y2U1MWI3Lzc4MzA4ZjVmLTIwZDgtNDg2OS1iOGQwLWNjZWQ3OGNl NTFiNy5jcmwwHwYDVR0jBBgwFoAUzxjvBs0QwE4RrUmNI7dooS39h/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83ODMwOGY1Zi0yMGQ4LTQ4NjktYjhkMC1jY2Vk NzhjZTUxYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOv4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALOEozeTXAB78fFRli3GAEccbRhqTlloxcR10XTLMqBq69J0sLgGyjcZ n/OisdQM3jy5EVU30l0sYwH5bb4ANnM3QzvUrZ/0OOEmIN7C3gqbfAG6NxNyncjN IYaOFudRsJiGSS9FZ04LkIZXoBiBDX9W+ssLBKWxJx73ppJpgv40IL1/2AuP6KgO iS8i5RV5iHts4goYwA3ZXAFIbRRHNsCQjgnRL8DEGJJn/PpQs+SFTlxXGeHFEqu1 kMqjUOM4WXoxaQ2h4vfDQaK4ta47k+UYy2mvDYg348YrcADakM0jvs6p08fSATvb FAysnyo/k66tL6ICXU/4vyILDN50XZI= -----END CERTIFICATE-----Generated at Fri Apr 4 21:49:43 2025 by rpki-client