$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/e68bfaa5-a982-3f10-94ec-bd1242e1563c.roa File: e68bfaa5-a982-3f10-94ec-bd1242e1563c.roa (raw, json) Hash identifier: TNlcKFuXUmtYMesdzrSu2DsgC4svJjBOvnm8422oHi4= Subject key identifier: 90:52:0E:79:D4:21:E3:17:E3:03:5D:21:E5:D9:70:12:1A:68:6B:BE Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584957F4123DA00BDF6134210580 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/e68bfaa5-a982-3f10-94ec-bd1242e1563c.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 2914 IP address blocks: 140.228.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:12:3d:a0:0b:df:61:34:21:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=2ce3a459-b39b-4b65-9a0b-6535e6d1ec0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0e:6e:e2:ba:75:58:41:c5:db:86:c3:07:7c: 92:02:34:53:b0:69:3a:cd:ec:73:30:be:13:62:6c: 4e:ad:ca:6d:6e:7c:93:7b:0d:b8:09:45:99:c9:d1: 3e:5a:34:b3:13:96:9b:73:08:43:55:7e:9c:2a:44: 99:76:ab:15:2c:95:27:31:66:02:fb:65:7e:ec:31: 06:73:c1:98:c4:0f:87:7b:b6:5e:d9:cb:cd:ff:5a: 3f:1f:38:ce:88:ce:e0:d9:8a:dd:40:7e:a6:df:a0: 3c:b7:95:d1:88:a9:4d:67:e9:3f:22:76:a4:02:10: 5a:37:c4:73:d6:fd:40:99:2d:0b:ce:a4:81:f5:48: e9:22:8e:81:db:97:cf:fd:ee:40:04:29:35:f0:39: 87:e1:31:8b:0a:eb:fb:3b:b9:46:af:fd:6c:37:d6: cf:d4:f0:6b:26:98:99:8f:f1:06:05:7a:95:0a:08: 7a:67:09:92:41:2c:f4:ba:36:5e:2e:0f:2f:5f:e6: c3:ba:7a:e0:a8:c5:bb:3f:fe:03:1b:37:35:ab:16: 30:3c:ea:de:7f:d3:44:f2:7a:6f:9c:a3:e2:08:6e: 4f:29:8d:e4:cc:26:af:58:7a:07:b8:ad:9c:1b:cf: 4c:25:b3:6c:09:6b:9c:11:c3:40:00:74:b8:38:b3: be:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:52:0E:79:D4:21:E3:17:E3:03:5D:21:E5:D9:70:12:1A:68:6B:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/e68bfaa5-a982-3f10-94ec-bd1242e1563c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 140.228.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ac:cc:22:db:f9:c2:54:00:51:75:58:0c:14:1a:ad:3c:aa: e1:cd:38:fe:76:e5:16:ed:5a:f5:fe:19:24:ff:b3:ba:ee:d8: c2:00:56:b8:b2:a2:29:f1:f9:82:9e:11:ad:be:1d:c1:04:2c: 63:43:cd:e3:bb:ab:fb:33:13:10:5c:7a:27:79:7e:d3:c3:7d: 48:d3:16:6b:38:f5:cc:38:4e:1c:0c:63:c7:a9:4c:72:cc:df: 37:cb:63:da:ed:97:4d:e0:62:50:44:f9:6e:2a:88:7c:76:ea: 53:bd:e7:c5:36:2a:06:31:15:a5:dc:73:37:56:bb:82:dd:0b: f1:11:b5:02:eb:05:8e:c0:b8:b9:1e:d3:e8:fa:96:0d:9a:cc: 6b:74:2d:94:f4:ad:b9:da:e2:26:0e:4d:60:1b:3a:b7:a5:e8: c4:65:e7:52:41:f6:b4:0c:21:9e:79:da:46:b7:8b:f8:90:2f: 73:49:91:5d:1a:b9:d6:02:7f:50:e1:3e:fc:03:ef:6d:5b:b3: 00:80:a3:0f:1e:a4:7c:de:ad:e1:c3:5d:2c:72:0b:37:ba:04: a1:79:3f:e2:6b:7c:e5:d6:0a:70:97:11:2d:a5:7f:42:c6:ce: ba:fb:5e:17:97:a0:72:9d:f6:d1:27:8a:f7:1a:4f:a0:46:73: 58:36:de:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9BI9oAvfYTQhBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk MmNlM2E0NTktYjM5Yi00YjY1LTlhMGItNjUzNWU2ZDFlYzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig5u4rp1WEHF24bDB3ySAjRTsGk6zexzML4T YmxOrcptbnyTew24CUWZydE+WjSzE5abcwhDVX6cKkSZdqsVLJUnMWYC+2V+7DEG c8GYxA+He7Ze2cvN/1o/HzjOiM7g2YrdQH6m36A8t5XRiKlNZ+k/InakAhBaN8Rz 1v1AmS0LzqSB9UjpIo6B25fP/e5ABCk18DmH4TGLCuv7O7lGr/1sN9bP1PBrJpiZ j/EGBXqVCgh6ZwmSQSz0ujZeLg8vX+bDunrgqMW7P/4DGzc1qxYwPOref9NE8npv nKPiCG5PKY3kzCavWHoHuK2cG89MJbNsCWucEcNAAHS4OLO+OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBSDnnUIeMX4wNdIeXZcBIaaGu+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvZTY4YmZhYTUtYTk4Mi0z ZjEwLTk0ZWMtYmQxMjQyZTE1NjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOQTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaszCLb+cJUAFF1WAwUGq08quHNOP525RbtWvX+GST/s7ru2MIAVriy oinx+YKeEa2+HcEELGNDzeO7q/szExBceid5ftPDfUjTFms49cw4ThwMY8epTHLM 3zfLY9rtl03gYlBE+W4qiHx26lO958U2KgYxFaXcczdWu4LdC/ERtQLrBY7AuLke 0+j6lg2azGt0LZT0rbna4iYOTWAbOrel6MRl51JB9rQMIZ552ka3i/iQL3NJkV0a udYCf1DhPvwD721bswCAow8epHzereHDXSxyCze6BKF5P+JrfOXWCnCXES2lf0LG zrr7XheXoHKd9tEnivcaT6BGc1g23ss= -----END CERTIFICATE-----Generated at Wed Apr 16 04:42:16 2025 by rpki-client