$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/e8971827-03b8-3a83-a866-197e29a5e189.roa File: e8971827-03b8-3a83-a866-197e29a5e189.roa (raw, json) Hash identifier: 13mk3RFf3jbjj9eJ9vLF/kblUiNrItI2jknlvXr36SA= Subject key identifier: 57:CD:F9:CA:48:10:2F:78:86:65:CD:91:46:BE:15:5D:32:72:98:E7 Certificate issuer: /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5 Certificate serial: 010D0C9F432858489ABF9E667BF776E01B088F80 Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/e8971827-03b8-3a83-a866-197e29a5e189.roa Signing time: Mon 20 Jan 2025 06:27:28 +0000 ROA not before: Mon 20 Jan 2025 06:27:28 +0000 ROA not after: Sun 20 Apr 2025 05:27:28 +0000 asID: 399122 IP address blocks: 140.235.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9a:bf:9e:66:7b:f7:76:e0:1b:08:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5 Validity Not Before: Jan 20 06:27:28 2025 GMT Not After : Apr 20 05:27:28 2025 GMT Subject: CN=5ba51d42-cf80-4825-b309-3957af5f79d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:23:92:d3:f3:08:b7:e6:71:15:98:d9:d8:4a: 12:eb:21:54:ea:50:3a:71:f3:1d:f6:ad:f7:cc:b3: d3:b4:f6:41:09:0f:5f:10:f3:01:db:5f:a1:f9:33: 29:a7:ad:c5:76:ba:33:75:bb:e5:18:e0:2d:f9:37: f1:c2:00:0f:43:f7:ae:7f:e2:8f:cb:e3:81:ca:20: 85:ea:6f:33:02:64:aa:69:1f:00:2b:8f:af:80:14: e9:29:7e:5f:4a:ec:6e:99:bb:ef:6f:2b:bf:5a:29: ee:f4:cb:46:32:bf:4d:7b:cb:d1:ee:6e:b9:f2:32: c1:71:b1:6d:f5:cd:01:44:68:34:80:f6:7a:80:3b: 37:ba:ed:8e:ec:79:c6:ea:48:65:ec:39:af:a2:22: f0:23:ff:ea:9b:45:d3:17:11:cb:63:d2:f3:e6:a0: 5b:32:c9:b3:e6:07:f5:a9:3c:35:65:b1:a2:a3:75: c7:e1:7c:6f:62:49:e5:c9:96:93:a8:6e:af:f4:5e: 49:0b:51:11:37:7a:0b:0a:49:91:d0:a9:1e:f3:a9: 7a:8b:73:bd:88:78:55:e6:9d:f1:ce:20:f9:f8:e4: 21:4e:b9:cb:d0:d9:9c:b2:e8:f5:0e:3e:a3:63:4c: 1b:3e:2b:4a:33:a2:ba:b0:2f:f4:8f:04:f1:2e:82: fd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:CD:F9:CA:48:10:2F:78:86:65:CD:91:46:BE:15:5D:32:72:98:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/e8971827-03b8-3a83-a866-197e29a5e189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl X509v3 Authority Key Identifier: keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer sbgp-ipAddrBlock: critical IPv4: 140.235.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:6a:55:26:c8:08:1c:10:41:a8:1d:c7:83:6b:77:d4:eb:56: 1e:79:90:e8:88:92:8d:77:d8:98:6b:8f:a0:33:ee:9e:c0:c2: 1e:c2:c8:1b:67:d9:97:96:65:fe:eb:d8:c2:48:11:08:38:2a: aa:2d:2f:bb:06:1d:a1:19:37:2b:43:bd:67:b6:16:70:03:72: 8c:81:c3:eb:d1:df:59:b5:36:2d:51:bd:04:47:f6:9d:3e:67: b1:1a:8f:70:e3:c3:c0:67:a2:50:7d:30:0c:51:d5:6f:47:c9: 19:95:5b:65:2c:1f:71:7f:a8:93:ed:8a:bf:20:32:fc:57:90: af:c5:e6:ff:69:8e:4b:fa:25:8a:76:7b:ff:d4:0d:a8:0d:2d: 72:56:b0:e5:9d:b4:06:8e:7d:6b:4a:71:ba:cd:14:ac:f4:05: 25:4b:ca:ba:b8:af:5d:58:0a:80:99:c2:72:98:3b:55:e8:32: 66:df:b4:81:2e:33:10:1f:4d:60:ff:2e:1b:1a:86:9f:6f:38: 81:41:4a:49:22:94:a5:71:ca:4c:1f:56:05:84:57:bb:3e:b1: f9:9e:95:6c:22:0f:39:5e:86:39:f5:77:cb:57:a2:23:f6:79: 66:1e:60:bc:aa:d6:16:57:5a:e1:ac:4d:04:09:db:89:93:a4: 2d:5a:14:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiav55me/d24BsIj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYyNjE4NzgtNWVmNC00Zjk5LThkMDktYjZkMjQ5MzQ0 NGM1MB4XDTI1MDEyMDA2MjcyOFoXDTI1MDQyMDA1MjcyOFowLzEtMCsGA1UEAxMk NWJhNTFkNDItY2Y4MC00ODI1LWIzMDktMzk1N2FmNWY3OWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiOS0/MIt+ZxFZjZ2EoS6yFU6lA6cfMd9q33 zLPTtPZBCQ9fEPMB21+h+TMpp63FdrozdbvlGOAt+TfxwgAPQ/euf+KPy+OByiCF 6m8zAmSqaR8AK4+vgBTpKX5fSuxumbvvbyu/Winu9MtGMr9Ne8vR7m658jLBcbFt 9c0BRGg0gPZ6gDs3uu2O7HnG6khl7DmvoiLwI//qm0XTFxHLY9Lz5qBbMsmz5gf1 qTw1ZbGio3XH4XxvYknlyZaTqG6v9F5JC1ERN3oLCkmR0Kke86l6i3O9iHhV5p3x ziD5+OQhTrnL0Nmcsuj1Dj6jY0wbPitKM6K6sC/0jwTxLoL9WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfN+cpIEC94hmXNkUa+FV0ycpjnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNjI2 MTg3OC01ZWY0LTRmOTktOGQwOS1iNmQyNDkzNDQ0YzUvZTg5NzE4MjctMDNiOC0z YTgzLWE4NjYtMTk3ZTI5YTVlMTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTYyNjE4NzgtNWVmNC00Zjk5LThk MDktYjZkMjQ5MzQ0NGM1L2E2MjYxODc4LTVlZjQtNGY5OS04ZDA5LWI2ZDI0OTM0 NDRjNS5jcmwwHwYDVR0jBBgwFoAU5DgAsivRHURmtzlG/z1FUty+3BowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNjI2MTg3OC01ZWY0LTRmOTktOGQwOS1iNmQy NDkzNDQ0YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOuhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1qVSbICBwQQagdx4Nrd9TrVh55kOiIko132Jhrj6Az7p7Awh7CyBtn 2ZeWZf7r2MJIEQg4KqotL7sGHaEZNytDvWe2FnADcoyBw+vR31m1Ni1RvQRH9p0+ Z7Eaj3Djw8BnolB9MAxR1W9HyRmVW2UsH3F/qJPtir8gMvxXkK/F5v9pjkv6JYp2 e//UDagNLXJWsOWdtAaOfWtKcbrNFKz0BSVLyrq4r11YCoCZwnKYO1XoMmbftIEu MxAfTWD/Lhsahp9vOIFBSkkilKVxykwfVgWEV7s+sfmelWwiDzlehjn1d8tXoiP2 eWYeYLyq1hZXWuGsTQQJ24mTpC1aFIU= -----END CERTIFICATE-----Generated at Wed Feb 19 20:35:37 2025 by rpki-client