$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/dbbd86f5-8e55-3992-82a2-1331024b0f49.roa File: dbbd86f5-8e55-3992-82a2-1331024b0f49.roa (raw, json) Hash identifier: EYMNMFdxma9dLFvtagLXhVhbHKD70N43Mb8Oss5jFIc= Subject key identifier: AF:20:49:85:CC:71:8F:90:2E:32:97:4F:F3:81:48:A6:68:5C:86:B4 Certificate issuer: /CN=df156af0-49c2-46d4-906b-5cf25869e65f Certificate serial: 010D0C9F432858484EDAC346928878CBDD934040 Authority key identifier: B9:69:84:6D:2E:E2:2C:10:2C:B2:AA:C6:E6:A3:5B:AE:F1:42:46:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/dbbd86f5-8e55-3992-82a2-1331024b0f49.roa Signing time: Tue 24 Dec 2024 02:00:38 +0000 ROA not before: Tue 24 Dec 2024 02:00:38 +0000 ROA not after: Mon 24 Mar 2025 01:00:38 +0000 asID: 53356 IP address blocks: 140.235.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/df156af0-49c2-46d4-906b-5cf25869e65f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/df156af0-49c2-46d4-906b-5cf25869e65f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4e:da:c3:46:92:88:78:cb:dd:93:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df156af0-49c2-46d4-906b-5cf25869e65f Validity Not Before: Dec 24 02:00:38 2024 GMT Not After : Mar 24 01:00:38 2025 GMT Subject: CN=1ae6b75f-4898-46de-a98e-9accf2857d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9b:43:31:ab:a4:41:df:67:25:b9:cc:2b:15: ac:d4:82:94:86:7b:6d:68:ed:9e:3b:d1:e3:38:51: 8c:63:26:0f:0e:2a:15:6b:b2:7e:62:2c:38:fd:fd: f6:ec:cb:fd:a6:c3:47:2c:69:41:d2:06:71:42:d4: 56:03:d6:38:55:34:e0:ac:37:1a:d0:7b:d7:c4:e0: 17:ce:61:ca:db:fa:e0:67:30:fe:f6:af:a3:c7:7c: d0:6d:dd:40:c5:90:3f:df:02:fd:76:45:50:a2:f5: 74:74:52:5b:c7:a6:10:22:46:c1:28:4d:f7:e3:62: 3a:44:81:b3:2f:bf:22:35:9b:26:48:83:61:c2:f7: 8a:f9:7f:02:62:d1:cd:d8:41:4d:3a:01:ec:9a:55: 84:f2:c4:a9:6f:16:6c:68:4f:b4:b1:02:1a:6c:74: c5:82:f7:99:cb:15:84:ab:ef:f3:41:cb:4b:8d:01: 32:c4:6b:84:e0:d4:75:33:97:1e:2f:d0:e2:c0:69: e3:d0:b5:62:95:67:5a:9d:de:7d:37:ab:5b:73:6a: 61:d2:4c:68:8d:98:52:3a:fb:f1:7f:6b:9d:37:cb: 74:12:65:43:70:2b:1c:0c:2c:49:83:bf:74:e4:f8: 39:a8:65:98:55:ce:28:02:69:a3:5b:45:93:dd:22: 2f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:20:49:85:CC:71:8F:90:2E:32:97:4F:F3:81:48:A6:68:5C:86:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/dbbd86f5-8e55-3992-82a2-1331024b0f49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/df156af0-49c2-46d4-906b-5cf25869e65f.crl X509v3 Authority Key Identifier: keyid:B9:69:84:6D:2E:E2:2C:10:2C:B2:AA:C6:E6:A3:5B:AE:F1:42:46:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f.cer sbgp-ipAddrBlock: critical IPv4: 140.235.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:02:45:71:bc:2f:e7:4f:a3:f1:a0:33:85:4e:ea:4f:2d:f6: ef:ff:dd:76:86:29:05:51:69:41:8b:1c:ab:07:04:5d:cb:42: 4c:85:ea:c9:db:a2:ee:32:91:47:a4:c0:4a:43:00:44:f5:29: f4:d8:a5:70:ee:a6:c5:37:58:c3:4c:5b:53:6f:0d:f3:19:37: 12:2c:0e:35:69:97:dd:e4:38:0c:40:16:75:4b:19:45:96:4e: 7e:5c:44:f2:8b:9f:65:a8:8a:dc:c9:3d:d7:39:71:df:1c:82: 93:e1:73:ae:96:96:77:e4:5a:88:ce:61:22:64:3d:67:2c:fe: 2a:52:b9:a6:49:de:63:c5:71:5d:fe:89:ab:f0:88:0e:a3:ba: e9:a2:33:27:a4:e1:80:86:38:c9:75:6a:a6:9d:f8:0e:fd:ab: 67:a6:03:2f:bf:f5:50:d1:47:74:fc:08:cb:f5:7f:82:1c:7d: 87:d2:8c:a6:ff:b9:63:16:38:b1:4f:9f:7c:02:1e:22:ce:e4: 51:16:47:7e:19:b9:8b:5d:3b:ac:57:1c:21:83:6a:38:12:05: 98:e4:f5:72:0e:25:6f:6f:14:b4:e5:a1:47:c3:3e:ea:42:1b: 95:3a:c0:6b:87:60:87:28:5e:33:30:54:26:ed:4f:0c:f3:5d: b1:6f:b8:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhO2sNGkoh4y92TQEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYxNTZhZjAtNDljMi00NmQ0LTkwNmItNWNmMjU4Njll NjVmMB4XDTI0MTIyNDAyMDAzOFoXDTI1MDMyNDAxMDAzOFowLzEtMCsGA1UEAxMk MWFlNmI3NWYtNDg5OC00NmRlLWE5OGUtOWFjY2YyODU3ZDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJtDMaukQd9nJbnMKxWs1IKUhnttaO2eO9Hj OFGMYyYPDioVa7J+Yiw4/f327Mv9psNHLGlB0gZxQtRWA9Y4VTTgrDca0HvXxOAX zmHK2/rgZzD+9q+jx3zQbd1AxZA/3wL9dkVQovV0dFJbx6YQIkbBKE3342I6RIGz L78iNZsmSINhwveK+X8CYtHN2EFNOgHsmlWE8sSpbxZsaE+0sQIabHTFgveZyxWE q+/zQctLjQEyxGuE4NR1M5ceL9DiwGnj0LVilWdand59N6tbc2ph0kxojZhSOvvx f2udN8t0EmVDcCscDCxJg7905Pg5qGWYVc4oAmmjW0WT3SIv1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8gSYXMcY+QLjKXT/OBSKZoXIa0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZjE1 NmFmMC00OWMyLTQ2ZDQtOTA2Yi01Y2YyNTg2OWU2NWYvZGJiZDg2ZjUtOGU1NS0z OTkyLTgyYTItMTMzMTAyNGIwZjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGYxNTZhZjAtNDljMi00NmQ0LTkw NmItNWNmMjU4NjllNjVmL2RmMTU2YWYwLTQ5YzItNDZkNC05MDZiLTVjZjI1ODY5 ZTY1Zi5jcmwwHwYDVR0jBBgwFoAUuWmEbS7iLBAssqrG5qNbrvFCRk8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZjE1NmFmMC00OWMyLTQ2ZDQtOTA2Yi01Y2Yy NTg2OWU2NWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQCRXG8L+dPo/GgM4VO6k8t9u//3XaGKQVRaUGLHKsHBF3LQkyF6snb ou4ykUekwEpDAET1KfTYpXDupsU3WMNMW1NvDfMZNxIsDjVpl93kOAxAFnVLGUWW Tn5cRPKLn2WoitzJPdc5cd8cgpPhc66WlnfkWojOYSJkPWcs/ipSuaZJ3mPFcV3+ iavwiA6juumiMyek4YCGOMl1aqad+A79q2emAy+/9VDRR3T8CMv1f4IcfYfSjKb/ uWMWOLFPn3wCHiLO5FEWR34ZuYtdO6xXHCGDajgSBZjk9XIOJW9vFLTloUfDPupC G5U6wGuHYIcoXjMwVCbtTwzzXbFvuJY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:36 2025 by rpki-client