$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/0521fef7-cd78-3a00-a728-3dac60458388.roa File: 0521fef7-cd78-3a00-a728-3dac60458388.roa (raw, json) Hash identifier: aQtILoHUCsdarLUQp2HeKr1VQKwM0LU+ZaawAwbk2ok= Subject key identifier: F9:0B:BF:34:E3:1A:2A:07:D9:D9:EC:73:EF:19:81:54:AA:06:6A:A4 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F43285848913E775C3B36155921251500 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/0521fef7-cd78-3a00-a728-3dac60458388.roa Signing time: Thu 16 Jan 2025 20:44:58 +0000 ROA not before: Thu 16 Jan 2025 20:44:58 +0000 ROA not after: Wed 16 Apr 2025 19:44:58 +0000 asID: 53356 IP address blocks: 140.228.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:91:3e:77:5c:3b:36:15:59:21:25:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Jan 16 20:44:58 2025 GMT Not After : Apr 16 19:44:58 2025 GMT Subject: CN=d0bfdb79-0c50-4ff8-9bd3-5da1983c241d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3b:2f:d5:e6:db:18:d7:62:d3:00:96:47:19: 77:c7:50:89:cd:73:c0:99:6b:40:df:38:d6:44:fc: aa:0b:45:e1:7c:7f:0d:ed:f7:ed:dd:ae:53:c7:e3: 05:d4:33:32:ec:e9:b5:e4:3a:4b:36:ea:ef:2d:6b: df:88:c1:0c:2a:bc:c0:8a:3a:45:b6:24:fa:77:e4: 62:e9:ad:8d:b1:e3:7d:9e:96:8f:2f:3a:26:03:6b: 58:8a:c0:20:f7:17:c6:20:81:d9:49:5e:6c:84:9c: 3a:ff:74:6f:96:0c:1b:51:ec:a7:f0:49:d6:27:27: d7:08:e4:8b:a2:1c:df:8e:63:01:d6:c9:9d:2e:2c: f9:09:5d:f8:44:16:96:b0:22:ee:91:fe:5c:8d:8f: f9:c5:fc:8b:57:fd:8b:03:6c:d3:f7:5c:ec:cb:2c: 43:bc:6a:77:2c:76:5b:2f:4c:03:33:09:54:ce:f2: ee:49:d8:49:f9:19:bd:1a:12:e3:88:db:b3:8b:46: 11:9a:17:a3:eb:dc:fa:61:0f:c1:5a:e5:1e:f5:0f: 6d:6f:6f:fd:37:92:bd:dd:6d:38:60:45:94:f4:6d: 76:3f:1d:13:c0:51:06:0d:74:72:f6:8f:47:65:47: 92:81:d9:55:ab:2c:38:39:91:b6:74:4c:59:9e:3e: 74:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0B:BF:34:E3:1A:2A:07:D9:D9:EC:73:EF:19:81:54:AA:06:6A:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/0521fef7-cd78-3a00-a728-3dac60458388.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 140.228.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:a4:fa:1f:13:92:ca:d3:7b:6c:2c:0a:cb:48:e2:d5:29:ba: 5b:19:b3:f9:78:06:ef:31:19:f6:6b:2c:1b:28:9c:30:c0:6e: 5e:a6:b4:de:42:33:43:63:21:2e:57:db:9a:30:8c:e5:85:48: 20:5a:4a:ee:86:2d:4e:0b:91:13:24:34:55:29:f6:08:64:0c: 20:45:4e:3c:de:7e:92:a6:ff:bb:d3:6d:70:05:91:f3:bf:7e: 3e:0c:44:14:2b:69:c3:1a:7f:4a:f2:6f:00:89:f6:20:c1:87: a0:a3:bf:a0:3b:58:a9:ad:cc:dd:d0:15:40:85:86:a1:e8:fe: ae:24:0d:7e:96:ae:4e:85:ab:9d:16:ff:46:c4:0e:f6:02:0d: 82:72:f0:dc:3b:94:3c:0c:05:6f:96:a2:67:e1:6b:71:51:29: fd:b6:28:19:55:05:72:5f:f2:50:ab:59:9a:be:30:70:57:35: 34:01:4c:8c:f3:01:16:b5:19:eb:ec:e5:c5:73:5c:37:bd:7f: b3:c9:07:b7:7d:14:6f:36:80:6f:01:7b:17:4a:f9:33:ee:0c: 3a:f0:a1:73:e0:9c:ee:a3:2e:c7:e9:0c:a6:de:0a:b7:17:64: 8a:49:29:8f:84:e8:76:b6:94:c7:b4:fa:ef:63:81:a8:b4:25: 2b:d5:41:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiRPndcOzYVWSElFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDExNjIwNDQ1OFoXDTI1MDQxNjE5NDQ1OFowLzEtMCsGA1UEAxMk ZDBiZmRiNzktMGM1MC00ZmY4LTliZDMtNWRhMTk4M2MyNDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjsv1ebbGNdi0wCWRxl3x1CJzXPAmWtA3zjW RPyqC0XhfH8N7fft3a5Tx+MF1DMy7Om15DpLNurvLWvfiMEMKrzAijpFtiT6d+Ri 6a2NseN9npaPLzomA2tYisAg9xfGIIHZSV5shJw6/3RvlgwbUeyn8EnWJyfXCOSL ohzfjmMB1smdLiz5CV34RBaWsCLukf5cjY/5xfyLV/2LA2zT91zsyyxDvGp3LHZb L0wDMwlUzvLuSdhJ+Rm9GhLjiNuzi0YRmhej69z6YQ/BWuUe9Q9tb2/9N5K93W04 YEWU9G12Px0TwFEGDXRy9o9HZUeSgdlVqyw4OZG2dExZnj500QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkLvzTjGioH2dnsc+8ZgVSqBmqkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvMDUyMWZlZjctY2Q3OC0z YTAwLWE3MjgtM2RhYzYwNDU4Mzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2k+h8TksrTe2wsCstI4tUpulsZs/l4Bu8xGfZrLBsonDDAbl6mtN5C M0NjIS5X25owjOWFSCBaSu6GLU4LkRMkNFUp9ghkDCBFTjzefpKm/7vTbXAFkfO/ fj4MRBQracMaf0rybwCJ9iDBh6Cjv6A7WKmtzN3QFUCFhqHo/q4kDX6Wrk6Fq50W /0bEDvYCDYJy8Nw7lDwMBW+Womfha3FRKf22KBlVBXJf8lCrWZq+MHBXNTQBTIzz ARa1Gevs5cVzXDe9f7PJB7d9FG82gG8BexdK+TPuDDrwoXPgnO6jLsfpDKbeCrcX ZIpJKY+E6Ha2lMe0+u9jgai0JSvVQdI= -----END CERTIFICATE-----Generated at Wed Feb 19 20:36:58 2025 by rpki-client