$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/89b013b9-4351-3157-862d-1980b0ead2ea.roa File: 89b013b9-4351-3157-862d-1980b0ead2ea.roa (raw, json) Hash identifier: xFZWBviVDDE8jBwMsZC0bWNTtarWkikqmRUbQxVjg1I= Subject key identifier: 3F:69:7A:90:EF:AC:85:B5:28:93:4D:FC:2D:CC:A7:84:A9:A0:29:66 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F432858493C0929E2E24C35F3D2C9B080 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/89b013b9-4351-3157-862d-1980b0ead2ea.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 174 IP address blocks: 140.228.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:29:e2:e2:4c:35:f3:d2:c9:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=3e5fa852-936f-4fd0-95c0-c99143140c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2c:29:97:6c:89:85:c0:dd:0b:13:f1:b0:04: 1a:95:ea:d8:aa:6c:7e:27:2b:59:8c:e1:a6:ac:f8: 8b:96:26:e7:4d:14:c1:f4:87:f0:7c:1a:d3:d9:cc: 60:73:f1:67:74:b4:1d:8d:30:93:2f:b5:4f:7c:ab: 61:5e:7d:88:33:6e:a8:a4:bc:37:1b:b1:e2:e9:8b: 7c:be:5e:4a:7d:9e:60:d6:43:98:ee:a9:32:78:a4: 31:f6:68:56:07:0f:39:bf:eb:23:97:97:ac:26:dd: 2b:66:63:f7:71:38:8e:0b:55:d5:f8:7a:48:15:69: 28:72:b2:4e:f1:8e:25:ae:4b:38:75:56:fb:9d:7c: 5d:9e:db:ab:10:21:60:44:5c:a8:83:05:29:50:7a: fe:28:1e:44:e6:7a:7b:0b:1e:d7:5b:20:75:71:a1: 1e:3b:7f:ee:b6:77:f5:62:3c:7e:9c:cd:8f:55:9c: 01:f3:a2:33:37:b0:8d:44:92:64:66:7d:f5:f1:bb: 2b:47:81:f3:0e:42:4b:ee:cb:c3:9e:71:44:19:3a: 59:24:db:b4:ac:f2:73:a2:1c:9f:12:51:93:22:43: a2:e1:e6:b0:ff:f3:3c:78:0d:cf:0c:69:26:9a:2f: 52:b5:5d:84:d8:32:1a:3e:d4:d3:ed:7e:92:fd:f3: a4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:69:7A:90:EF:AC:85:B5:28:93:4D:FC:2D:CC:A7:84:A9:A0:29:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/89b013b9-4351-3157-862d-1980b0ead2ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 140.228.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:90:b3:dc:2c:34:0a:18:c0:37:f2:3f:ff:71:6a:1a:e5:51: e5:bf:4b:ad:9b:98:66:4a:6b:14:5c:97:41:c2:c3:09:14:09: 70:72:3d:94:73:86:4e:47:1b:c7:de:7c:e9:db:56:fd:d9:9f: f6:ac:89:32:0b:4e:96:bb:53:83:2a:01:f9:4a:42:d5:20:fc: 13:0b:b7:f7:ce:50:21:4b:63:1e:7e:65:3f:50:cc:a6:25:82: ac:45:4f:e1:ec:e0:6e:67:45:ca:40:69:21:32:17:00:c8:a1: 79:65:71:1b:a6:c8:ed:df:7d:17:ff:83:5a:54:24:93:9f:dc: 71:e0:95:8f:74:b2:3b:ff:92:59:a1:e4:0e:03:ba:09:07:20: f2:bf:a7:9e:23:4f:d8:26:34:aa:88:f7:72:33:e5:d0:cf:eb: f3:d9:99:97:66:33:92:da:43:31:b7:87:2a:63:c0:45:75:95: 60:f1:17:53:1b:cb:31:cb:8c:0a:ad:15:c3:99:ce:20:93:7f: c1:a0:5e:73:d6:7d:b3:ea:d2:4f:03:12:04:8e:7e:7d:ac:3a: 39:03:c4:ec:a9:dc:15:8c:4e:ff:a1:97:07:d6:12:2a:82:44: 58:22:f5:35:f0:f6:61:d4:6b:e0:0b:c8:5d:40:94:fa:d5:f2: 14:d5:e9:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CSni4kw189LJsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk M2U1ZmE4NTItOTM2Zi00ZmQwLTk1YzAtYzk5MTQzMTQwYzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlywpl2yJhcDdCxPxsAQalerYqmx+JytZjOGm rPiLlibnTRTB9IfwfBrT2cxgc/FndLQdjTCTL7VPfKthXn2IM26opLw3G7Hi6Yt8 vl5KfZ5g1kOY7qkyeKQx9mhWBw85v+sjl5esJt0rZmP3cTiOC1XV+HpIFWkocrJO 8Y4lrks4dVb7nXxdnturECFgRFyogwUpUHr+KB5E5np7Cx7XWyB1caEeO3/utnf1 Yjx+nM2PVZwB86IzN7CNRJJkZn318bsrR4HzDkJL7svDnnFEGTpZJNu0rPJzohyf ElGTIkOi4eaw//M8eA3PDGkmmi9StV2E2DIaPtTT7X6S/fOkWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9pepDvrIW1KJNN/C3Mp4SpoClmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvODliMDEzYjktNDM1MS0z MTU3LTg2MmQtMTk4MGIwZWFkMmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOQVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKQs9wsNAoYwDfyP/9xahrlUeW/S62bmGZKaxRcl0HCwwkUCXByPZRz hk5HG8fefOnbVv3Zn/asiTILTpa7U4MqAflKQtUg/BMLt/fOUCFLYx5+ZT9QzKYl gqxFT+Hs4G5nRcpAaSEyFwDIoXllcRumyO3ffRf/g1pUJJOf3HHglY90sjv/klmh 5A4DugkHIPK/p54jT9gmNKqI93Iz5dDP6/PZmZdmM5LaQzG3hypjwEV1lWDxF1Mb yzHLjAqtFcOZziCTf8GgXnPWfbPq0k8DEgSOfn2sOjkDxOyp3BWMTv+hlwfWEiqC RFgi9TXw9mHUa+ALyF1AlPrV8hTV6RU= -----END CERTIFICATE-----Generated at Wed Apr 16 04:58:58 2025 by rpki-client