$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/f95bcc3c-1478-3b0c-a5bb-f908f7f5833a.roa File: f95bcc3c-1478-3b0c-a5bb-f908f7f5833a.roa (raw, json) Hash identifier: P1JDYXxhMyKR9FnNfvuov2DQCA7CFKdfkPFODBzb8pQ= Subject key identifier: 2F:54:8C:C3:A8:78:9E:1A:06:48:2B:7C:A5:C9:7F:D1:3D:49:55:85 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F432858488552251C0BE3032D61781380 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/f95bcc3c-1478-3b0c-a5bb-f908f7f5833a.roa Signing time: Sun 12 Jan 2025 14:14:55 +0000 ROA not before: Sun 12 Jan 2025 14:14:55 +0000 ROA not after: Sat 12 Apr 2025 13:14:55 +0000 asID: 21859 IP address blocks: 140.228.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:85:52:25:1c:0b:e3:03:2d:61:78:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Jan 12 14:14:55 2025 GMT Not After : Apr 12 13:14:55 2025 GMT Subject: CN=3d04a933-d1ef-440f-8142-b6ad76748862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c0:87:2f:da:af:da:b2:57:d4:50:8b:64:16: e5:8f:98:16:e5:50:22:3f:71:99:09:91:73:17:60: de:c6:d5:8d:ea:76:9a:1b:b9:f1:f8:98:95:c5:c1: e3:88:ac:07:36:40:0f:25:7b:56:9e:0d:44:ba:b8: 53:cf:c7:b7:96:db:98:ad:90:a5:6f:60:13:e8:97: d1:bc:e0:e0:07:54:21:7f:54:c9:fb:f1:16:57:fc: d7:67:d3:61:62:5f:4a:9a:1b:5f:aa:dc:5d:60:7b: ee:ab:06:70:7f:ef:8c:c5:ed:05:7b:04:3b:35:92: 27:7c:5b:30:6c:69:f4:a5:0f:50:8d:fe:2d:9e:1e: 57:a0:12:a1:93:9a:6a:64:65:c2:a8:4c:dc:dc:f9: 1b:31:a7:d2:14:5a:aa:07:2b:36:0f:cd:63:dc:c7: d4:2c:cd:0b:e3:2e:f6:25:b8:bf:1b:6c:2b:ef:18: e2:8f:de:90:17:d1:7e:ae:08:e5:e1:37:a0:58:47: 93:60:cc:8e:2c:75:85:d3:83:c5:ac:e3:fe:ef:93: bc:74:73:02:1f:65:62:cd:62:75:0a:13:58:37:03: 19:c9:9d:e8:d8:9c:d4:33:5c:45:6c:c4:fd:e0:ef: 8f:44:2f:d7:d2:73:08:df:a0:1f:9b:e1:d2:9d:da: ff:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:54:8C:C3:A8:78:9E:1A:06:48:2B:7C:A5:C9:7F:D1:3D:49:55:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/f95bcc3c-1478-3b0c-a5bb-f908f7f5833a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 140.228.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:aa:5f:a0:43:58:5d:28:28:1e:83:2c:4f:40:dc:2d:f9:8c: 25:51:f1:50:e9:75:b2:e6:42:9b:53:d6:80:a4:25:89:32:a4: fb:1f:4e:c1:dc:a8:50:4c:5c:d9:ef:75:b5:bc:6f:61:aa:9a: 46:e5:4c:b6:00:ae:30:45:1e:6e:2c:ac:a1:8d:45:f2:f6:72: f9:2b:1c:74:62:0f:1c:d4:e5:2d:7c:49:ba:11:c9:e6:6c:70: 62:da:1e:58:c5:e2:97:1f:43:87:48:76:1d:a0:74:db:5f:a8: cf:f9:d3:d5:00:6b:85:15:55:c1:80:28:73:da:4b:3d:83:e9: 66:28:d3:7f:49:ea:40:ac:bc:1d:08:85:9e:93:0e:65:c3:85: 77:49:30:d4:38:76:88:32:08:c6:90:ba:02:82:22:db:74:e4: 8c:32:8e:6c:86:31:e0:41:aa:b5:fb:7c:e7:a8:92:c4:60:7e: 6b:56:9e:3a:92:2e:04:26:ee:74:79:b5:2c:12:02:e3:51:ae: be:20:0f:3d:82:80:b8:7c:18:db:95:13:7d:39:b8:e4:c4:ab: 40:34:d8:2f:62:e3:7a:8f:43:2b:f0:bd:aa:80:99:0e:9c:98: 59:91:8e:93:62:1d:b1:39:03:eb:d6:8a:1e:6e:f3:b2:83:57: 59:3e:80:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFUiUcC+MDLWF4E4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDExMjE0MTQ1NVoXDTI1MDQxMjEzMTQ1NVowLzEtMCsGA1UEAxMk M2QwNGE5MzMtZDFlZi00NDBmLTgxNDItYjZhZDc2NzQ4ODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMCHL9qv2rJX1FCLZBblj5gW5VAiP3GZCZFz F2DextWN6naaG7nx+JiVxcHjiKwHNkAPJXtWng1EurhTz8e3ltuYrZClb2AT6JfR vODgB1Qhf1TJ+/EWV/zXZ9NhYl9KmhtfqtxdYHvuqwZwf++Mxe0FewQ7NZInfFsw bGn0pQ9Qjf4tnh5XoBKhk5pqZGXCqEzc3PkbMafSFFqqBys2D81j3MfULM0L4y72 Jbi/G2wr7xjij96QF9F+rgjl4TegWEeTYMyOLHWF04PFrOP+75O8dHMCH2VizWJ1 ChNYNwMZyZ3o2JzUM1xFbMT94O+PRC/X0nMI36Afm+HSndr/dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9UjMOoeJ4aBkgrfKXJf9E9SVWFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvZjk1YmNjM2MtMTQ3OC0z YjBjLWE1YmItZjkwOGY3ZjU4MzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOQaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOqX6BDWF0oKB6DLE9A3C35jCVR8VDpdbLmQptT1oCkJYkypPsfTsHc qFBMXNnvdbW8b2GqmkblTLYArjBFHm4srKGNRfL2cvkrHHRiDxzU5S18SboRyeZs cGLaHljF4pcfQ4dIdh2gdNtfqM/509UAa4UVVcGAKHPaSz2D6WYo039J6kCsvB0I hZ6TDmXDhXdJMNQ4dogyCMaQugKCItt05IwyjmyGMeBBqrX7fOeoksRgfmtWnjqS LgQm7nR5tSwSAuNRrr4gDz2CgLh8GNuVE305uOTEq0A02C9i43qPQyvwvaqAmQ6c mFmRjpNiHbE5A+vWih5u87KDV1k+gK4= -----END CERTIFICATE-----Generated at Wed Feb 19 20:46:58 2025 by rpki-client