$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/573593e1-8382-308a-91d3-e0a5a344e95b.roa File: 573593e1-8382-308a-91d3-e0a5a344e95b.roa (raw, json) Hash identifier: U5eGV2Gcbva8uxNwRDXZIm2dv64ybkvjeRxLM1WudO8= Subject key identifier: 66:5D:F1:87:89:71:E6:18:51:42:1B:74:8D:44:13:98:99:4B:11:EB Certificate issuer: /CN=997dfd51-5907-4d93-8ce3-05b9bc754eaa Certificate serial: 010D0C9F432858486C2B06C0094B770AA2362744 Authority key identifier: 39:23:B8:33:30:B7:D1:CD:A1:83:63:B8:D4:CF:17:FE:D6:91:64:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/573593e1-8382-308a-91d3-e0a5a344e95b.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 53356 IP address blocks: 140.235.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/997dfd51-5907-4d93-8ce3-05b9bc754eaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/997dfd51-5907-4d93-8ce3-05b9bc754eaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:06:c0:09:4b:77:0a:a2:36:27:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997dfd51-5907-4d93-8ce3-05b9bc754eaa Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=d962be02-1c57-40b1-9fe6-85f1002ee368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:27:a3:80:31:82:89:b9:70:a3:96:7b:69:95: bc:49:f3:e3:75:05:df:bf:8f:f5:a9:98:6f:24:44: cd:51:1a:ac:16:26:0b:ec:eb:b4:0c:b2:1c:00:7e: ff:83:61:88:b9:74:13:43:07:c3:e7:4a:ad:f5:d6: 87:e2:ad:5b:53:87:fa:34:69:ed:74:03:44:48:92: 3c:b9:b2:e9:f1:8c:3f:77:01:76:52:b7:59:d1:d1: 3a:da:11:4b:62:3a:4f:4a:fa:ac:18:0f:d5:c3:e0: 29:90:6a:5e:94:9f:64:8a:c6:3a:37:7c:46:b0:6d: bf:b4:1e:03:4b:b2:14:6a:a4:c3:d5:a4:62:8d:fd: 1d:6e:4f:43:a2:24:4f:a6:3e:30:f5:5d:16:84:fa: fa:fc:ea:de:c7:7d:d1:03:da:d4:d0:df:93:7c:58: 73:b0:d8:c4:e3:e2:da:32:2a:44:8b:4c:99:55:80: c1:03:3d:af:4a:d2:c7:5f:3b:99:2c:b3:ba:6c:de: 02:00:b6:9b:f6:d4:4b:cb:cf:79:90:c2:a1:95:35: 94:da:24:66:0c:da:bf:86:7a:9a:79:41:ab:71:c7: df:36:e8:c0:a7:bf:ff:d2:5a:23:1d:7d:2f:aa:4d: ce:ab:fc:97:71:b6:91:fc:fe:2b:04:20:34:d0:3b: 18:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5D:F1:87:89:71:E6:18:51:42:1B:74:8D:44:13:98:99:4B:11:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/573593e1-8382-308a-91d3-e0a5a344e95b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/997dfd51-5907-4d93-8ce3-05b9bc754eaa.crl X509v3 Authority Key Identifier: keyid:39:23:B8:33:30:B7:D1:CD:A1:83:63:B8:D4:CF:17:FE:D6:91:64:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa.cer sbgp-ipAddrBlock: critical IPv4: 140.235.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:9e:cb:76:2a:63:2f:37:c9:ea:5a:9f:a6:f5:e3:e5:ab:b2: 39:4d:a2:a6:50:95:0e:d4:4e:5f:cc:20:bc:e4:04:59:c2:4e: 64:27:f7:98:a9:f6:4d:1d:18:de:76:17:d1:91:a6:ce:20:85: 39:16:d4:7e:b9:ae:e9:44:c8:22:7f:75:78:72:a6:09:db:7b: 17:40:78:a7:6f:6c:a3:fe:9c:18:f6:4b:93:f9:0b:30:d8:20: 11:da:d5:7c:d7:27:4c:9f:c0:0e:4a:f3:de:e6:60:eb:7b:d7: 40:2d:b2:3f:2d:3c:71:ae:28:65:50:3a:1f:97:b0:c8:32:b1: 51:8f:fa:f9:bc:08:c7:e8:0d:36:d7:f0:75:c1:35:f8:e1:c9: 18:4f:84:cf:9b:df:ae:34:f0:3e:14:a5:f7:54:a7:ee:1b:8d: a3:9e:1e:ee:98:de:54:a8:25:e2:15:2f:e5:07:31:6c:ef:96: 14:4d:c7:cf:7e:a4:75:12:a6:15:62:eb:cc:77:31:f1:3a:ed: c7:f5:df:f9:cb:4e:5c:e6:ba:ad:5c:72:93:83:18:ac:6a:ca: 50:b1:e7:dc:ae:34:6a:83:4e:ec:48:91:93:03:40:8b:8d:d2: 26:2d:a5:e8:1f:cb:eb:60:75:d4:da:85:04:5e:bc:12:7c:29: db:59:8a:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKwbACUt3CqI2J0QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3ZGZkNTEtNTkwNy00ZDkzLThjZTMtMDViOWJjNzU0 ZWFhMB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk ZDk2MmJlMDItMWM1Ny00MGIxLTlmZTYtODVmMTAwMmVlMzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCejgDGCiblwo5Z7aZW8SfPjdQXfv4/1qZhv JETNURqsFiYL7Ou0DLIcAH7/g2GIuXQTQwfD50qt9daH4q1bU4f6NGntdANESJI8 ubLp8Yw/dwF2UrdZ0dE62hFLYjpPSvqsGA/Vw+ApkGpelJ9kisY6N3xGsG2/tB4D S7IUaqTD1aRijf0dbk9DoiRPpj4w9V0WhPr6/Orex33RA9rU0N+TfFhzsNjE4+La MipEi0yZVYDBAz2vStLHXzuZLLO6bN4CALab9tRLy895kMKhlTWU2iRmDNq/hnqa eUGrccffNujAp7//0lojHX0vqk3Oq/yXcbaR/P4rBCA00DsYUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZd8YeJceYYUUIbdI1EE5iZSxHrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85OTdk ZmQ1MS01OTA3LTRkOTMtOGNlMy0wNWI5YmM3NTRlYWEvNTczNTkzZTEtODM4Mi0z MDhhLTkxZDMtZTBhNWEzNDRlOTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTk3ZGZkNTEtNTkwNy00ZDkzLThj ZTMtMDViOWJjNzU0ZWFhLzk5N2RmZDUxLTU5MDctNGQ5My04Y2UzLTA1YjliYzc1 NGVhYS5jcmwwHwYDVR0jBBgwFoAUOSO4MzC30c2hg2O41M8X/taRZJQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85OTdkZmQ1MS01OTA3LTRkOTMtOGNlMy0wNWI5 YmM3NTRlYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOuoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyey3YqYy83yepan6b14+WrsjlNoqZQlQ7UTl/MILzkBFnCTmQn95ip 9k0dGN52F9GRps4ghTkW1H65rulEyCJ/dXhypgnbexdAeKdvbKP+nBj2S5P5CzDY IBHa1XzXJ0yfwA5K897mYOt710Atsj8tPHGuKGVQOh+XsMgysVGP+vm8CMfoDTbX 8HXBNfjhyRhPhM+b36408D4UpfdUp+4bjaOeHu6Y3lSoJeIVL+UHMWzvlhRNx89+ pHUSphVi68x3MfE67cf13/nLTlzmuq1ccpODGKxqylCx59yuNGqDTuxIkZMDQIuN 0iYtpegfy+tgddTahQRevBJ8KdtZig4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:14 2025 by rpki-client