$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/491a7f76-8e8e-3356-9245-7144be78c024.roa File: 491a7f76-8e8e-3356-9245-7144be78c024.roa (raw, json) Hash identifier: +gjUNrUBcT9xguT1vR+oY2z3ah+J/2wey5B287dd2W0= Subject key identifier: 60:5A:32:72:48:35:A9:C0:2B:B8:20:2C:C6:12:0F:6D:C7:2E:EC:9C Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F43285848456531A04AA0D8396316D380 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/491a7f76-8e8e-3356-9245-7144be78c024.roa Signing time: Fri 20 Dec 2024 16:41:33 +0000 ROA not before: Fri 20 Dec 2024 16:41:33 +0000 ROA not after: Thu 20 Mar 2025 15:41:33 +0000 asID: 137517 IP address blocks: 140.228.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:45:65:31:a0:4a:a0:d8:39:63:16:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Dec 20 16:41:33 2024 GMT Not After : Mar 20 15:41:33 2025 GMT Subject: CN=f77cf959-bfdd-486f-8fe7-def6718267b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:17:31:82:57:c6:d7:2b:3f:20:3e:fb:69:55: 4c:b0:3c:a0:81:94:3b:a1:9e:d8:b3:30:2a:4e:de: 9f:be:25:06:d2:9f:df:5e:6f:07:ea:4a:58:d6:77: ba:ea:03:9f:b7:83:21:9b:5d:af:5b:2b:db:f0:91: 54:b9:71:d4:e6:b5:26:28:b9:36:2d:d9:b9:f1:8d: 82:74:b6:4e:b7:76:89:e0:8f:c8:ea:6b:63:17:76: 1a:85:82:d6:d5:31:45:3a:0b:64:c6:75:d5:36:1e: a2:74:c3:58:6e:04:b3:63:77:66:5c:e8:e0:c0:2e: d0:f8:13:50:bc:b3:e1:4b:1d:5b:52:12:2d:83:01: 13:d5:c1:dd:4e:cf:de:13:72:b7:e3:dd:48:e8:12: 59:7a:48:ef:bf:b9:f3:32:5c:5a:88:d8:48:2a:ce: 3a:a7:ae:ee:6d:fe:29:8e:4b:d6:f7:74:0e:29:f9: b8:c2:6e:59:83:3d:30:71:ca:11:8e:88:94:61:b4: 88:12:8d:fc:7c:15:9b:26:92:09:b9:fe:79:21:86: d4:07:1c:f4:df:eb:f5:96:f4:f3:27:d4:71:7c:7b: af:c0:00:bb:ff:98:05:00:63:71:f1:60:f7:af:8a: 5f:7f:59:22:3f:ea:a6:f4:a5:24:28:89:d4:69:a9: 9e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:5A:32:72:48:35:A9:C0:2B:B8:20:2C:C6:12:0F:6D:C7:2E:EC:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/491a7f76-8e8e-3356-9245-7144be78c024.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 140.228.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:dc:38:f7:dc:4d:0c:03:69:cd:44:53:b5:30:c2:da:51:7c: f3:0f:72:ad:4c:9e:4b:f8:cb:4c:2f:f3:84:f6:02:ce:9a:60: b8:b9:22:14:0b:74:95:f9:33:b2:cf:2a:3c:d9:0b:f5:54:a5: 73:a8:9a:84:5f:8b:c1:6f:af:14:61:90:9c:2b:29:0d:e3:d9: 77:67:ad:cd:ae:71:6d:d3:b9:88:5c:2c:7c:ff:e0:06:ae:cb: 36:68:23:8b:2d:ed:a7:4d:85:14:a2:8a:62:9b:c0:54:17:80: ce:00:b0:00:ef:c3:cc:f1:b8:b1:db:8b:de:2f:e9:9a:19:6a: 70:ff:c2:2f:38:a8:7a:50:e8:01:04:4b:a5:ee:cc:d8:1b:6b: 38:3c:9e:da:8c:32:b5:e0:43:53:44:2b:c4:64:44:35:1b:6e: 99:51:a4:28:4b:c6:35:33:cd:31:04:e2:74:8b:e5:95:3d:91: b6:09:9f:0a:c3:68:0b:ee:34:01:09:f6:4d:6f:e6:06:ab:6f: 7d:4e:76:da:ba:dd:35:0c:9b:31:f7:5f:fd:35:da:30:99:1e: 42:14:58:44:a0:e8:5c:6c:3e:b8:82:83:32:ed:53:f0:6d:f7: cb:b0:da:fb:3d:06:5c:6d:47:c4:d0:d7:c8:fb:00:52:26:c5: cd:b6:75:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFZTGgSqDYOWMW04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI0MTIyMDE2NDEzM1oXDTI1MDMyMDE1NDEzM1owLzEtMCsGA1UEAxMk Zjc3Y2Y5NTktYmZkZC00ODZmLThmZTctZGVmNjcxODI2N2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRcxglfG1ys/ID77aVVMsDyggZQ7oZ7YszAq Tt6fviUG0p/fXm8H6kpY1ne66gOft4Mhm12vWyvb8JFUuXHU5rUmKLk2Ldm58Y2C dLZOt3aJ4I/I6mtjF3YahYLW1TFFOgtkxnXVNh6idMNYbgSzY3dmXOjgwC7Q+BNQ vLPhSx1bUhItgwET1cHdTs/eE3K3491I6BJZekjvv7nzMlxaiNhIKs46p67ubf4p jkvW93QOKfm4wm5Zgz0wccoRjoiUYbSIEo38fBWbJpIJuf55IYbUBxz03+v1lvTz J9RxfHuvwAC7/5gFAGNx8WD3r4pff1kiP+qm9KUkKInUaamedwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBaMnJINanAK7ggLMYSD23HLuycMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNDkxYTdmNzYtOGU4ZS0z MzU2LTkyNDUtNzE0NGJlNzhjMDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOQeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAncOPfcTQwDac1EU7UwwtpRfPMPcq1Mnkv4y0wv84T2As6aYLi5IhQL dJX5M7LPKjzZC/VUpXOomoRfi8FvrxRhkJwrKQ3j2Xdnrc2ucW3TuYhcLHz/4Aau yzZoI4st7adNhRSiimKbwFQXgM4AsADvw8zxuLHbi94v6ZoZanD/wi84qHpQ6AEE S6XuzNgbazg8ntqMMrXgQ1NEK8RkRDUbbplRpChLxjUzzTEE4nSL5ZU9kbYJnwrD aAvuNAEJ9k1v5garb31Odtq63TUMmzH3X/012jCZHkIUWESg6FxsPriCgzLtU/Bt 98uw2vs9BlxtR8TQ18j7AFImxc22dVU= -----END CERTIFICATE-----Generated at Wed Feb 19 20:38:24 2025 by rpki-client