$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/5e3944b5-0133-3e60-a330-670c4e2cb16f.roa File: 5e3944b5-0133-3e60-a330-670c4e2cb16f.roa (raw, json) Hash identifier: AztzHYN4tUjObuNi/FkqAbO64UMG7cu6hOaVbsXmSek= Subject key identifier: B8:B5:FF:DB:87:7A:D7:4F:D5:C8:47:CC:7B:F5:0E:E5:E7:B5:D7:51 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F43285848FDD4DFEFB25A483A961A8380 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/5e3944b5-0133-3e60-a330-670c4e2cb16f.roa Signing time: Mon 24 Feb 2025 18:15:19 +0000 ROA not before: Mon 24 Feb 2025 18:15:19 +0000 ROA not after: Sun 25 May 2025 17:15:19 +0000 asID: 16276 IP address blocks: 140.228.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:d4:df:ef:b2:5a:48:3a:96:1a:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Feb 24 18:15:19 2025 GMT Not After : May 25 17:15:19 2025 GMT Subject: CN=1cc7af2e-fd17-40f4-b896-bf9bf8612b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5d:f8:9f:16:be:f4:19:8a:94:68:52:2d:79: dd:c2:3b:a4:96:24:51:5b:92:ca:39:d6:c3:78:43: 85:fb:fc:ce:25:62:93:be:23:70:74:31:59:1b:a3: 90:7b:2d:3d:61:b4:99:f3:eb:1d:51:c4:ee:c8:6c: d9:c5:e3:e9:93:6e:4e:a4:84:eb:17:8a:ed:b9:6f: 0e:d5:a3:bd:3e:41:e1:ee:93:47:28:60:f4:77:1f: 1e:08:17:cb:2e:8e:19:cd:9f:56:bb:86:b1:f3:2d: f0:22:48:33:85:5c:79:48:e6:4f:a7:bd:6e:6f:8f: 75:c6:d3:b2:f0:76:3f:e8:14:e3:2d:fd:70:33:ff: df:71:49:5c:1d:37:73:e4:04:58:28:fa:7d:b0:bb: 9f:0c:fd:71:90:c5:6d:8a:4a:4c:c1:c2:6e:78:cd: 03:c9:ab:8f:46:ae:78:f7:fd:37:d4:cc:3e:91:f7: ab:da:94:a2:86:3e:96:62:96:13:2e:de:59:78:a4: 72:66:10:fa:46:d8:4a:93:32:b8:13:22:1d:cc:86: 9f:3b:2c:d1:f7:ed:56:db:61:39:e9:2d:e1:c2:01: b3:cb:4a:d1:f1:c5:6a:29:98:75:f7:a5:d3:e1:4d: bc:6e:51:eb:e0:7e:4f:a8:95:c1:b4:8a:6c:67:27: 64:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B5:FF:DB:87:7A:D7:4F:D5:C8:47:CC:7B:F5:0E:E5:E7:B5:D7:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/5e3944b5-0133-3e60-a330-670c4e2cb16f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 140.228.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:e2:93:49:a2:0a:69:e3:94:19:d3:41:d9:cd:f6:4b:7c:70: 3d:b8:49:4e:2a:b9:29:c6:13:65:6c:16:b1:f2:29:4b:b6:92: 12:d1:4d:9b:cf:ee:ae:6b:38:a2:ec:50:2b:e7:cc:5a:7d:62: 49:d0:b8:cf:6e:b8:70:58:cc:13:aa:05:bb:15:ae:cc:c9:72: 83:dc:0d:ae:eb:b2:9f:14:cc:74:5b:53:59:83:f7:cc:b4:90: 38:5a:f0:d1:72:ce:29:8f:f8:46:2a:a4:ba:b0:d7:d7:08:93: 0f:b2:db:bd:76:83:c4:32:21:f1:3d:24:10:2a:45:32:99:0f: a5:86:d0:5e:c0:f2:a0:46:4a:f0:8f:3a:15:1d:74:96:7c:27: ae:c9:31:f5:e3:cd:02:c9:e8:6a:10:58:7d:f7:2d:4b:27:c8: 8a:b6:e3:4d:ae:77:d6:0f:84:36:de:ae:b4:3e:4f:dc:86:f4: 19:1b:43:73:12:b3:cb:91:0f:78:e4:88:1a:f1:d2:b7:5d:e5: 3a:b7:b3:20:47:e4:a6:07:48:bc:ed:c1:06:7b:a0:00:aa:84: 75:87:09:69:15:93:07:da:80:4a:fa:f4:cd:68:97:23:c8:17: 40:02:80:5b:29:e2:13:83:cd:c5:7c:9e:ad:85:8f:55:b5:14: ba:73:54:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj91N/vslpIOpYag4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDIyNDE4MTUxOVoXDTI1MDUyNTE3MTUxOVowLzEtMCsGA1UEAxMk MWNjN2FmMmUtZmQxNy00MGY0LWI4OTYtYmY5YmY4NjEyYjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx134nxa+9BmKlGhSLXndwjukliRRW5LKOdbD eEOF+/zOJWKTviNwdDFZG6OQey09YbSZ8+sdUcTuyGzZxePpk25OpITrF4rtuW8O 1aO9PkHh7pNHKGD0dx8eCBfLLo4ZzZ9Wu4ax8y3wIkgzhVx5SOZPp71ub491xtOy 8HY/6BTjLf1wM//fcUlcHTdz5ARYKPp9sLufDP1xkMVtikpMwcJueM0DyauPRq54 9/031Mw+kfer2pSihj6WYpYTLt5ZeKRyZhD6RthKkzK4EyIdzIafOyzR9+1W22E5 6S3hwgGzy0rR8cVqKZh196XT4U28blHr4H5PqJXBtIpsZydkGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLi1/9uHetdP1chHzHv1DuXntddRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNWUzOTQ0YjUtMDEzMy0z ZTYwLWEzMzAtNjcwYzRlMmNiMTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOQXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjik0miCmnjlBnTQdnN9kt8cD24SU4quSnGE2VsFrHyKUu2khLRTZvP 7q5rOKLsUCvnzFp9YknQuM9uuHBYzBOqBbsVrszJcoPcDa7rsp8UzHRbU1mD98y0 kDha8NFyzimP+EYqpLqw19cIkw+y2712g8QyIfE9JBAqRTKZD6WG0F7A8qBGSvCP OhUddJZ8J67JMfXjzQLJ6GoQWH33LUsnyIq2402ud9YPhDberrQ+T9yG9BkbQ3MS s8uRD3jkiBrx0rdd5Tq3syBH5KYHSLztwQZ7oACqhHWHCWkVkwfagEr69M1olyPI F0ACgFsp4hODzcV8nq2Fj1W1FLpzVKQ= -----END CERTIFICATE-----Generated at Fri Mar 14 15:01:05 2025 by rpki-client