$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/c4fb4054-eaa4-39fc-b010-d008d5751881.roa File: c4fb4054-eaa4-39fc-b010-d008d5751881.roa (raw, json) Hash identifier: tE+DSo3i3vd/0CVUyZEQG4kdo54VtxmYvKs3ffFUNS0= Subject key identifier: 12:52:3B:A2:BC:D8:AD:03:7B:A6:1E:E7:55:EE:18:01:25:9C:E3:1A Certificate issuer: /CN=fc672add-9928-494f-862b-73d618c8d940 Certificate serial: 010D0C9F432858486AC59A33D32B08075FB49B00 Authority key identifier: B5:EB:80:A5:B2:F4:C6:B3:84:46:B2:7D:73:67:0A:D2:0B:F7:DA:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/c4fb4054-eaa4-39fc-b010-d008d5751881.roa Signing time: Fri 03 Jan 2025 02:00:40 +0000 ROA not before: Fri 03 Jan 2025 02:00:40 +0000 ROA not after: Thu 03 Apr 2025 01:00:40 +0000 asID: 53356 IP address blocks: 140.235.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/fc672add-9928-494f-862b-73d618c8d940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/fc672add-9928-494f-862b-73d618c8d940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6a:c5:9a:33:d3:2b:08:07:5f:b4:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc672add-9928-494f-862b-73d618c8d940 Validity Not Before: Jan 3 02:00:40 2025 GMT Not After : Apr 3 01:00:40 2025 GMT Subject: CN=043108a8-8cf5-4470-a8ac-970e4cd2d69d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:61:a5:a9:64:bc:46:f8:35:6f:f5:36:0c:c7: 2b:f3:61:67:fd:d1:c1:d1:ac:a8:e8:3e:ee:e8:6e: 1d:67:d5:ad:16:64:f7:c0:76:8e:59:a6:7b:7d:3e: 31:6f:4e:2c:f6:64:94:64:31:11:ef:cb:8d:07:09: 8d:e0:55:95:cf:46:55:ac:63:d2:a3:65:aa:c6:32: ec:cd:c3:df:cd:75:b4:17:6b:11:cc:16:57:f0:bd: 59:fc:b4:98:19:c9:ed:42:6d:df:86:ce:62:eb:52: 48:c6:a9:3f:36:cb:d2:d2:a7:32:ba:81:58:c3:36: 68:98:33:77:67:3c:30:f6:78:60:78:46:5b:43:7f: f9:38:fc:64:b4:2e:d6:07:1d:77:87:b7:30:90:b0: c5:e9:c6:91:58:8b:3c:b0:fc:72:af:52:41:b5:48: 2f:1b:40:ae:40:e4:0e:ad:e5:04:69:4e:fa:2b:00: ab:4c:95:0b:35:bd:61:1d:5b:b9:e4:be:9e:22:42: 26:12:2c:56:67:a3:e9:bf:44:e7:b3:a2:16:0f:7c: 57:15:2e:bb:fd:eb:00:7f:ae:48:ea:05:ed:c4:c4: dd:56:45:75:a2:e6:7b:b5:e7:40:88:76:b2:44:23: 08:cc:30:ea:d9:07:a7:f9:27:22:79:21:2c:6f:93: 89:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:52:3B:A2:BC:D8:AD:03:7B:A6:1E:E7:55:EE:18:01:25:9C:E3:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/c4fb4054-eaa4-39fc-b010-d008d5751881.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/fc672add-9928-494f-862b-73d618c8d940.crl X509v3 Authority Key Identifier: keyid:B5:EB:80:A5:B2:F4:C6:B3:84:46:B2:7D:73:67:0A:D2:0B:F7:DA:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940.cer sbgp-ipAddrBlock: critical IPv4: 140.235.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:0b:7b:da:7b:8d:87:de:ad:c7:39:aa:7a:99:7d:6a:71:76: 9a:89:1e:32:14:6e:10:a6:87:42:01:e8:ff:9b:a4:84:ad:7d: 7d:e3:90:7b:03:15:23:24:38:1a:7e:1e:9b:2a:cf:d2:d7:ad: 15:97:c9:a6:66:9b:1a:ff:62:87:50:a3:75:3a:2b:a4:17:91: dd:65:0f:2d:33:2c:de:e7:a6:03:80:f2:aa:b8:2c:11:b5:ed: b3:04:bd:6c:e4:c1:b3:f6:e4:d4:8a:f0:e3:66:b6:78:c4:b2: 7f:30:08:00:f5:90:69:53:37:45:04:44:a6:d4:c6:66:55:f5: 6a:8e:8c:54:74:ef:60:25:72:fb:a9:ed:0b:98:15:ed:9e:fb: bf:4b:1c:57:69:44:d4:16:86:a3:06:7e:61:13:4d:91:03:a4: 0c:80:73:71:f2:08:15:8c:d5:2c:b9:be:43:06:6c:a2:e6:bc: 84:5d:73:22:6b:46:cd:fb:4e:5e:3d:0f:a8:8d:ce:6a:a9:53: f3:bc:43:7b:53:15:f5:39:a1:a8:cb:c7:fe:b3:dd:6a:70:a7: cd:78:05:2c:2d:46:9a:56:52:14:11:a8:20:38:28:e1:9c:1b: db:ae:56:b5:e0:f1:45:94:c3:89:fe:76:e7:e0:b6:7c:84:2d: 2e:74:37:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhqxZoz0ysIB1+0mwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmM2NzJhZGQtOTkyOC00OTRmLTg2MmItNzNkNjE4Yzhk OTQwMB4XDTI1MDEwMzAyMDA0MFoXDTI1MDQwMzAxMDA0MFowLzEtMCsGA1UEAxMk MDQzMTA4YTgtOGNmNS00NDcwLWE4YWMtOTcwZTRjZDJkNjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2GlqWS8Rvg1b/U2DMcr82Fn/dHB0ayo6D7u 6G4dZ9WtFmT3wHaOWaZ7fT4xb04s9mSUZDER78uNBwmN4FWVz0ZVrGPSo2WqxjLs zcPfzXW0F2sRzBZX8L1Z/LSYGcntQm3fhs5i61JIxqk/NsvS0qcyuoFYwzZomDN3 Zzww9nhgeEZbQ3/5OPxktC7WBx13h7cwkLDF6caRWIs8sPxyr1JBtUgvG0CuQOQO reUEaU76KwCrTJULNb1hHVu55L6eIkImEixWZ6Ppv0Tns6IWD3xXFS67/esAf65I 6gXtxMTdVkV1ouZ7tedAiHayRCMIzDDq2Qen+ScieSEsb5OJVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJSO6K82K0De6Ye51XuGAElnOMaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mYzY3 MmFkZC05OTI4LTQ5NGYtODYyYi03M2Q2MThjOGQ5NDAvYzRmYjQwNTQtZWFhNC0z OWZjLWIwMTAtZDAwOGQ1NzUxODgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmM2NzJhZGQtOTkyOC00OTRmLTg2 MmItNzNkNjE4YzhkOTQwL2ZjNjcyYWRkLTk5MjgtNDk0Zi04NjJiLTczZDYxOGM4 ZDk0MC5jcmwwHwYDVR0jBBgwFoAUteuApbL0xrOERrJ9c2cK0gv32oEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mYzY3MmFkZC05OTI4LTQ5NGYtODYyYi03M2Q2 MThjOGQ5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOtkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADALe9p7jYfercc5qnqZfWpxdpqJHjIUbhCmh0IB6P+bpIStfX3jkHsD FSMkOBp+Hpsqz9LXrRWXyaZmmxr/YodQo3U6K6QXkd1lDy0zLN7npgOA8qq4LBG1 7bMEvWzkwbP25NSK8ONmtnjEsn8wCAD1kGlTN0UERKbUxmZV9WqOjFR072Alcvup 7QuYFe2e+79LHFdpRNQWhqMGfmETTZEDpAyAc3HyCBWM1Sy5vkMGbKLmvIRdcyJr Rs37Tl49D6iNzmqpU/O8Q3tTFfU5oajLx/6z3Wpwp814BSwtRppWUhQRqCA4KOGc G9uuVrXg8UWUw4n+dufgtnyELS50N6o= -----END CERTIFICATE-----Generated at Fri Mar 14 11:17:52 2025 by rpki-client