$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9e5b278c-3049-3b32-97d0-4ede92664ea5.roa File: 9e5b278c-3049-3b32-97d0-4ede92664ea5.roa (raw, json) Hash identifier: LWi0ppjl7t9vCyvcYUdLjsJSZsPgTWmujmsOvV023OI= Subject key identifier: A9:70:99:83:C1:96:46:2D:6F:9C:21:AC:9E:DE:1B:4A:C8:ED:9B:FE Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F43285848FDDD5E7D7CFD7BBE26D1F100 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9e5b278c-3049-3b32-97d0-4ede92664ea5.roa Signing time: Mon 24 Feb 2025 18:32:26 +0000 ROA not before: Mon 24 Feb 2025 18:32:26 +0000 ROA not after: Sun 25 May 2025 17:32:26 +0000 asID: 135402 IP address blocks: 139.177.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:dd:5e:7d:7c:fd:7b:be:26:d1:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Feb 24 18:32:26 2025 GMT Not After : May 25 17:32:26 2025 GMT Subject: CN=3e3dd8ed-4bc4-4fa8-9ea4-3d23760da46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:10:a5:db:62:eb:d6:22:8d:8b:8b:5a:b7:a7: df:c5:89:fd:bf:04:73:c6:c7:38:47:97:b9:3c:ff: 07:8e:5e:0f:d6:e9:35:c3:4e:af:2a:6a:18:9c:3f: 01:60:dd:d7:01:2c:a6:32:88:1a:38:a6:cd:3f:11: a4:0c:32:a5:df:c7:a2:8e:12:3e:a0:43:1d:62:61: ca:1d:ff:d6:d4:fd:da:2e:a8:d7:50:0c:d8:45:5d: 88:6d:cc:44:3a:ea:fa:53:f8:9c:8c:03:c2:15:bf: 37:95:8e:c1:12:fc:aa:4e:3d:d5:65:16:78:58:60: fb:44:cc:bc:c8:a8:1e:95:44:c3:14:01:0f:eb:78: c3:cf:b1:ec:3c:a8:bb:ca:64:a6:28:19:71:50:17: 44:6b:4d:56:3d:ee:c1:ec:6a:c6:46:81:7b:31:85: 79:ce:3b:4b:f5:33:84:08:cc:a3:12:7d:d6:80:e6: ce:5b:66:53:5d:5c:9c:a3:6b:9c:57:2d:08:46:80: 1c:06:4e:05:b0:09:24:04:c4:8d:6b:c7:a9:e1:d5: e5:05:c1:54:66:d6:66:a3:1e:25:cc:d0:03:31:af: c2:fe:7b:c1:e0:21:1a:b0:4b:5a:c7:05:d1:b8:22: 19:33:eb:40:b9:16:a0:3c:ea:f7:76:c9:8f:85:d2: 97:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:70:99:83:C1:96:46:2D:6F:9C:21:AC:9E:DE:1B:4A:C8:ED:9B:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9e5b278c-3049-3b32-97d0-4ede92664ea5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 139.177.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:8d:3b:00:17:5e:6b:37:74:b7:65:c8:f5:68:53:a1:8b:e8: 73:2b:e8:b2:91:0d:0d:58:bc:9a:b6:3c:d8:ae:58:60:a2:11: 4d:82:d7:5d:41:5f:e9:2a:30:76:ea:a4:8b:07:f2:9a:66:d4: ea:05:53:e3:76:0a:c5:d2:e6:a3:fa:26:54:10:39:ec:b7:89: cf:d7:21:6a:d0:c2:28:63:79:c4:08:bc:10:65:d9:98:a3:d8: be:7f:6b:f5:cf:38:01:b5:fe:be:7f:3c:34:c3:0a:81:8e:a1: b7:f3:89:db:4c:af:f3:b3:8f:f4:02:2f:e0:c1:a0:05:de:42: 32:f0:2b:fd:db:20:05:c3:55:05:98:42:bd:e0:f9:8b:a1:3d: c9:e6:15:a4:25:7a:a6:08:82:06:84:cd:e2:df:b9:27:6b:9a: d2:a5:a5:15:61:04:5e:e3:4c:5b:d1:16:af:96:ff:34:83:86: 12:c6:c4:f4:60:64:11:b7:df:f9:53:d2:50:54:51:ed:d8:68: 36:7c:f7:0d:51:05:ee:b1:50:44:34:72:a9:db:ef:bb:f1:f5: ce:8f:8a:45:1b:20:0e:f6:23:63:f6:4b:f3:ff:86:11:eb:f6: db:6d:bf:50:bf:c4:69:a7:05:11:9f:82:59:ec:4a:54:6c:54: 54:e8:42:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj93V59fP17vibR8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDIyNDE4MzIyNloXDTI1MDUyNTE3MzIyNlowLzEtMCsGA1UEAxMk M2UzZGQ4ZWQtNGJjNC00ZmE4LTllYTQtM2QyMzc2MGRhNDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhCl22Lr1iKNi4tat6ffxYn9vwRzxsc4R5e5 PP8Hjl4P1uk1w06vKmoYnD8BYN3XASymMogaOKbNPxGkDDKl38eijhI+oEMdYmHK Hf/W1P3aLqjXUAzYRV2IbcxEOur6U/icjAPCFb83lY7BEvyqTj3VZRZ4WGD7RMy8 yKgelUTDFAEP63jDz7HsPKi7ymSmKBlxUBdEa01WPe7B7GrGRoF7MYV5zjtL9TOE CMyjEn3WgObOW2ZTXVyco2ucVy0IRoAcBk4FsAkkBMSNa8ep4dXlBcFUZtZmox4l zNADMa/C/nvB4CEasEtaxwXRuCIZM+tAuRagPOr3dsmPhdKXcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlwmYPBlkYtb5whrJ7eG0rI7Zv+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvOWU1YjI3OGMtMzA0OS0z YjMyLTk3ZDAtNGVkZTkyNjY0ZWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi7GeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWNOwAXXms3dLdlyPVoU6GL6HMr6LKRDQ1YvJq2PNiuWGCiEU2C111B X+kqMHbqpIsH8ppm1OoFU+N2CsXS5qP6JlQQOey3ic/XIWrQwihjecQIvBBl2Zij 2L5/a/XPOAG1/r5/PDTDCoGOobfzidtMr/Ozj/QCL+DBoAXeQjLwK/3bIAXDVQWY Qr3g+YuhPcnmFaQleqYIggaEzeLfuSdrmtKlpRVhBF7jTFvRFq+W/zSDhhLGxPRg ZBG33/lT0lBUUe3YaDZ89w1RBe6xUEQ0cqnb77vx9c6PikUbIA72I2P2S/P/hhHr 9tttv1C/xGmnBRGfglnsSlRsVFToQrk= -----END CERTIFICATE-----Generated at Fri Mar 14 15:01:05 2025 by rpki-client