$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/c4fb4054-eaa4-39fc-b010-d008d5751881.roa File: c4fb4054-eaa4-39fc-b010-d008d5751881.roa (raw, json) Hash identifier: lJHsANkdOaSb6HEZMPaFHDeJuvXQU2V3oxjmFcNiuOA= Subject key identifier: 1C:1A:5B:C8:5D:0A:32:6B:43:3D:F8:C2:18:66:23:CD:F4:C7:56:22 Certificate issuer: /CN=fc672add-9928-494f-862b-73d618c8d940 Certificate serial: 010D0C9F432858494B64073C1761F30FB4D11080 Authority key identifier: B5:EB:80:A5:B2:F4:C6:B3:84:46:B2:7D:73:67:0A:D2:0B:F7:DA:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/c4fb4054-eaa4-39fc-b010-d008d5751881.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 53356 IP address blocks: 140.235.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/fc672add-9928-494f-862b-73d618c8d940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/fc672add-9928-494f-862b-73d618c8d940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:07:3c:17:61:f3:0f:b4:d1:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc672add-9928-494f-862b-73d618c8d940 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=8d0f765f-af09-4007-a6d2-068cd343c46d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:af:d4:a0:c2:50:3d:7d:67:cc:a0:7a:bd:ae: 4a:02:29:bc:da:bf:05:af:a9:e4:5f:a5:1b:33:37: 7c:76:95:70:71:a8:cd:53:8a:0e:64:7f:3d:ea:da: 53:ca:2b:23:60:f2:76:47:c7:c6:10:08:84:c2:d2: 36:fe:2c:2a:e6:5a:2b:c3:58:48:54:0f:b1:d2:44: fe:74:08:0a:7e:8c:f1:c3:9b:2c:0c:cc:4e:76:4f: 55:4a:be:9f:33:52:5e:2c:e9:29:30:10:2d:f1:0a: 97:67:8f:d3:43:17:3e:a7:77:c7:ec:84:df:c7:29: d5:98:6d:05:56:ae:a4:e0:c2:b8:ba:f7:72:de:e7: cd:97:8d:ce:c1:22:af:7c:a0:8f:75:1c:d7:be:e4: 4d:4b:dc:9b:5b:c7:e7:7f:d4:16:b3:01:97:6a:5c: 65:a0:d9:ad:3c:86:f7:85:d4:18:af:7b:7f:2f:56: 56:86:4b:d5:6a:45:e5:d4:ea:85:bf:a9:d0:ee:5e: 7e:db:d0:a7:f7:3e:b5:51:34:8b:26:b4:37:c6:87: 32:0b:46:45:d2:a1:c3:34:13:2f:3a:73:bb:dc:60: ff:38:6d:5d:e3:0a:ef:ed:73:75:12:d0:42:2f:89: fa:68:34:ab:c0:25:6f:fe:8f:3a:45:66:fd:59:38: 68:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1A:5B:C8:5D:0A:32:6B:43:3D:F8:C2:18:66:23:CD:F4:C7:56:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/c4fb4054-eaa4-39fc-b010-d008d5751881.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940/fc672add-9928-494f-862b-73d618c8d940.crl X509v3 Authority Key Identifier: keyid:B5:EB:80:A5:B2:F4:C6:B3:84:46:B2:7D:73:67:0A:D2:0B:F7:DA:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc672add-9928-494f-862b-73d618c8d940.cer sbgp-ipAddrBlock: critical IPv4: 140.235.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:7b:64:92:42:ec:22:98:a4:84:de:a5:b2:a4:81:b6:74:ee: e5:11:34:15:3c:07:85:45:6f:cb:06:9a:b1:c9:1a:d1:8b:6f: 14:3e:ef:e6:c4:e7:1d:6f:d5:4f:68:42:8a:18:da:f2:ff:5b: e7:b1:f9:70:cb:ac:53:2d:f9:6c:bc:df:76:01:dd:46:eb:97: bb:db:18:64:55:ef:b2:28:13:fc:9b:9d:1b:fd:c9:5a:30:c8: 45:1d:dd:c4:57:42:e0:e4:e3:a0:0d:26:47:e4:16:3c:2e:1a: 8e:b7:e4:8a:4a:1d:78:52:a3:ad:ee:6f:f7:c4:1b:10:62:7f: ac:fa:3c:01:78:36:0a:76:7a:fb:0b:db:e2:e4:86:81:ce:57: 1c:47:3c:4f:53:e7:0d:3a:84:44:15:aa:87:11:27:ea:6d:ad: 2b:9e:ca:b5:0b:07:fc:a9:8d:2a:21:b8:54:b5:3f:2b:a5:8b: 4b:52:a5:ae:ff:26:1e:5c:f3:2d:ed:bc:28:f1:d1:e4:99:d8: a2:f1:6f:6d:91:09:b1:57:6b:60:04:b2:c8:00:08:d2:02:cf: 53:24:17:f6:6f:09:49:88:39:7b:5c:1e:56:85:11:57:04:5b: f2:cb:58:19:dd:90:dd:ea:22:08:b8:0a:4e:c3:ce:b4:25:68: a5:c5:18:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZAc8F2HzD7TREIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmM2NzJhZGQtOTkyOC00OTRmLTg2MmItNzNkNjE4Yzhk OTQwMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk OGQwZjc2NWYtYWYwOS00MDA3LWE2ZDItMDY4Y2QzNDNjNDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6/UoMJQPX1nzKB6va5KAim82r8Fr6nkX6Ub Mzd8dpVwcajNU4oOZH896tpTyisjYPJ2R8fGEAiEwtI2/iwq5lorw1hIVA+x0kT+ dAgKfozxw5ssDMxOdk9VSr6fM1JeLOkpMBAt8QqXZ4/TQxc+p3fH7ITfxynVmG0F Vq6k4MK4uvdy3ufNl43OwSKvfKCPdRzXvuRNS9ybW8fnf9QWswGXalxloNmtPIb3 hdQYr3t/L1ZWhkvVakXl1OqFv6nQ7l5+29Cn9z61UTSLJrQ3xocyC0ZF0qHDNBMv OnO73GD/OG1d4wrv7XN1EtBCL4n6aDSrwCVv/o86RWb9WThoBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwaW8hdCjJrQz34whhmI830x1YiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mYzY3 MmFkZC05OTI4LTQ5NGYtODYyYi03M2Q2MThjOGQ5NDAvYzRmYjQwNTQtZWFhNC0z OWZjLWIwMTAtZDAwOGQ1NzUxODgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmM2NzJhZGQtOTkyOC00OTRmLTg2 MmItNzNkNjE4YzhkOTQwL2ZjNjcyYWRkLTk5MjgtNDk0Zi04NjJiLTczZDYxOGM4 ZDk0MC5jcmwwHwYDVR0jBBgwFoAUteuApbL0xrOERrJ9c2cK0gv32oEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mYzY3MmFkZC05OTI4LTQ5NGYtODYyYi03M2Q2 MThjOGQ5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOtkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB57ZJJC7CKYpITepbKkgbZ07uURNBU8B4VFb8sGmrHJGtGLbxQ+7+bE 5x1v1U9oQooY2vL/W+ex+XDLrFMt+Wy833YB3Ubrl7vbGGRV77IoE/ybnRv9yVow yEUd3cRXQuDk46ANJkfkFjwuGo635IpKHXhSo63ub/fEGxBif6z6PAF4Ngp2evsL 2+LkhoHOVxxHPE9T5w06hEQVqocRJ+ptrSueyrULB/ypjSohuFS1Pyuli0tSpa7/ Jh5c8y3tvCjx0eSZ2KLxb22RCbFXa2AEssgACNICz1MkF/ZvCUmIOXtcHlaFEVcE W/LLWBndkN3qIgi4Ck7DzrQlaKXFGPE= -----END CERTIFICATE-----Generated at Sat Apr 5 05:27:15 2025 by rpki-client