$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/dadb8667-9016-3ed9-aec9-53a09735cd1a.roa File: dadb8667-9016-3ed9-aec9-53a09735cd1a.roa (raw, json) Hash identifier: 9EYJKB15tCUOk0WQQPPTKB3QnF8mqbQZHEFHygKa4NE= Subject key identifier: 7C:12:68:BD:F0:3D:6A:F5:2A:6E:4E:87:66:E3:42:36:17:E1:C9:06 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F432858490CB16B0FE238AE4B35A4B100 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/dadb8667-9016-3ed9-aec9-53a09735cd1a.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 396073 IP address blocks: 140.228.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:6b:0f:e2:38:ae:4b:35:a4:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=e650084c-bc99-4762-96ca-b44b0ee352c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:78:5f:94:46:c9:d8:a8:40:03:05:34:ad:c5: 27:c5:b8:a3:7f:25:86:ce:c6:67:6b:2c:30:c1:a2: a8:2e:73:42:4f:cb:47:38:f1:a9:30:4d:cb:b1:c3: 78:1f:29:92:f6:10:ce:19:db:96:10:fd:a4:a3:b4: d9:7d:01:fe:c6:35:e5:6a:58:63:83:c3:a7:46:01: 8c:0a:1f:74:c4:13:62:f0:c8:55:95:99:2d:d0:99: 39:11:91:a1:fb:81:0c:4c:00:65:f3:5f:d7:0c:29: a3:88:5b:f2:6c:7f:43:db:0a:4d:45:23:1a:92:85: d7:a3:bd:1d:3e:83:4e:44:0a:89:a7:6e:34:9a:a8: d8:c2:2a:4f:e7:88:5d:b8:e9:bd:92:c8:2f:c1:c1: 52:ef:75:61:8e:0c:8a:02:42:11:70:2f:fe:ac:22: 1e:c5:0a:30:e5:91:89:64:33:05:a3:4e:6f:83:4d: 3f:e5:34:8d:ce:26:9f:40:e6:14:4a:3e:73:bf:ed: ad:8d:98:f5:5b:83:7c:84:4c:ea:ee:fa:38:9a:cc: b8:95:6e:9f:da:16:25:7c:aa:e8:5d:7f:a0:ff:77: 88:46:55:3e:37:4f:30:53:46:b9:e1:35:be:e6:5e: e0:78:70:af:13:93:8e:96:a9:fa:f1:b0:21:79:49: a9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:12:68:BD:F0:3D:6A:F5:2A:6E:4E:87:66:E3:42:36:17:E1:C9:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/dadb8667-9016-3ed9-aec9-53a09735cd1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 140.228.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:6c:b2:5b:a8:7c:37:6b:ed:e9:1c:ee:2c:95:db:e7:21:e2: 93:02:6e:92:d9:95:e7:49:0b:aa:77:7f:32:54:6e:38:08:1f: 64:0c:fc:e6:cd:ce:0b:1d:bc:a6:7a:fe:b6:86:ae:4b:e5:c0: ab:76:e0:21:8f:5e:5a:be:dd:65:89:cb:dc:a1:3d:7c:4a:66: e6:fe:6a:0e:4b:08:98:9d:2b:42:be:75:98:c9:30:71:b3:73: fc:df:7f:2f:a9:4b:41:3b:d0:64:75:97:0b:43:16:1d:89:0d: 29:c6:f2:58:b7:6c:9f:dc:46:a9:e2:38:00:ef:c3:12:2b:e2: c2:06:0a:68:8c:3e:bd:ab:2e:e9:19:00:6b:ab:1b:68:5c:75: 36:ba:1f:a6:8d:76:58:52:81:45:f2:34:62:fc:43:b2:11:cc: 73:8a:50:42:d5:ba:a4:58:66:ca:69:c7:32:72:e1:08:18:2d: 17:22:d3:9b:a0:5e:8d:2c:5b:75:5c:97:d3:38:0e:fd:1e:ff: 96:ae:96:4d:33:17:6f:a4:b4:c6:71:39:aa:9f:89:39:4b:e0: 9f:56:98:9d:47:a4:a3:13:79:7b:ce:01:cd:e7:01:c4:e4:b8: 76:fc:1b:db:82:63:49:ec:be:17:dc:7f:9d:ba:33:ea:a8:ca: 5c:43:67:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsWsP4jiuSzWksQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk ZTY1MDA4NGMtYmM5OS00NzYyLTk2Y2EtYjQ0YjBlZTM1MmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnhflEbJ2KhAAwU0rcUnxbijfyWGzsZnayww waKoLnNCT8tHOPGpME3LscN4HymS9hDOGduWEP2ko7TZfQH+xjXlalhjg8OnRgGM Ch90xBNi8MhVlZkt0Jk5EZGh+4EMTABl81/XDCmjiFvybH9D2wpNRSMakoXXo70d PoNORAqJp240mqjYwipP54hduOm9ksgvwcFS73VhjgyKAkIRcC/+rCIexQow5ZGJ ZDMFo05vg00/5TSNziafQOYUSj5zv+2tjZj1W4N8hEzq7vo4msy4lW6f2hYlfKro XX+g/3eIRlU+N08wU0a54TW+5l7geHCvE5OOlqn68bAheUmpFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwSaL3wPWr1Km5Oh2bjQjYX4ckGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvZGFkYjg2NjctOTAxNi0z ZWQ5LWFlYzktNTNhMDk3MzVjZDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOQdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtssluofDdr7ekc7iyV2+ch4pMCbpLZledJC6p3fzJUbjgIH2QM/ObN zgsdvKZ6/raGrkvlwKt24CGPXlq+3WWJy9yhPXxKZub+ag5LCJidK0K+dZjJMHGz c/zffy+pS0E70GR1lwtDFh2JDSnG8li3bJ/cRqniOADvwxIr4sIGCmiMPr2rLukZ AGurG2hcdTa6H6aNdlhSgUXyNGL8Q7IRzHOKUELVuqRYZsppxzJy4QgYLRci05ug Xo0sW3Vcl9M4Dv0e/5aulk0zF2+ktMZxOaqfiTlL4J9WmJ1HpKMTeXvOAc3nAcTk uHb8G9uCY0nsvhfcf526M+qoylxDZws= -----END CERTIFICATE-----Generated at Fri Mar 14 10:01:52 2025 by rpki-client