$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/35c3e86b-e2fe-30bd-83db-775661d2ea6b.roa File: 35c3e86b-e2fe-30bd-83db-775661d2ea6b.roa (raw, json) Hash identifier: vktzDDwHqH+Cnbe6g0w3fD5040fI60lXsnkgOwqvzeg= Subject key identifier: 2D:57:F5:27:1E:09:BD:3C:6F:68:B3:33:04:0A:41:EA:74:F4:48:2B Certificate issuer: /CN=cc9bfce1-5e74-4c92-954d-8728969d8835 Certificate serial: 010D0C9F4328584912522ED14FCB991207A2CB80 Authority key identifier: 59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/35c3e86b-e2fe-30bd-83db-775661d2ea6b.roa Signing time: Tue 04 Mar 2025 02:23:58 +0000 ROA not before: Tue 04 Mar 2025 02:23:58 +0000 ROA not after: Mon 02 Jun 2025 01:23:58 +0000 asID: 22761 IP address blocks: 165.140.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:52:2e:d1:4f:cb:99:12:07:a2:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9bfce1-5e74-4c92-954d-8728969d8835 Validity Not Before: Mar 4 02:23:58 2025 GMT Not After : Jun 2 01:23:58 2025 GMT Subject: CN=325bcfc4-ef27-4804-a70f-ceb97806e86f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:73:2f:9d:1c:12:07:92:14:d2:0f:7c:f8:2e: c4:65:43:2c:c0:ef:ef:96:a1:e5:08:e9:87:8c:c2: 21:14:b6:c7:df:2b:84:1a:ab:e3:22:0f:7f:5f:69: 77:ba:a1:96:6f:b5:20:7f:64:2a:83:bb:f9:71:90: 69:f0:b3:56:0c:4b:95:c7:77:d7:22:7e:22:d7:48: 94:43:53:e7:58:80:f4:1d:60:45:a2:15:a7:ba:b8: 85:09:30:03:5a:cc:6d:f9:84:c5:05:60:39:df:2d: ac:3a:28:b7:51:61:3b:0a:56:4f:5a:b2:cf:4c:00: 29:51:b1:31:4e:55:03:52:c4:c8:2b:23:b5:9c:a7: 33:90:3a:04:c1:1d:ee:4d:0e:86:5e:3f:54:02:da: 21:37:c2:38:bd:af:80:81:59:f1:38:db:e8:7c:f4: 17:e9:de:f1:85:fc:a1:3e:58:bc:f9:51:89:3b:2e: f5:2b:fb:53:eb:b8:cc:03:bf:d9:cb:bd:e3:4a:6c: 2d:99:75:65:fd:39:be:c8:bf:9a:00:9e:6c:a1:39: 1c:ef:c2:d8:67:9d:c1:d7:d8:ef:da:33:dd:72:fc: 7b:fc:f2:b8:4a:03:f5:a1:f0:14:75:4c:9f:33:d7: 93:63:8f:a0:c4:7c:57:90:22:69:09:6d:7b:d5:c7: 82:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:57:F5:27:1E:09:BD:3C:6F:68:B3:33:04:0A:41:EA:74:F4:48:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/35c3e86b-e2fe-30bd-83db-775661d2ea6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl X509v3 Authority Key Identifier: keyid:59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer sbgp-ipAddrBlock: critical IPv4: 165.140.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:d2:57:89:18:f7:f4:df:44:3a:90:c5:a6:80:01:95:0d:0b: f3:5b:9f:2b:59:13:35:1c:3c:06:bc:43:9c:21:b1:57:f3:3a: 35:cf:c2:db:cb:e2:39:b9:65:98:8c:03:2e:30:49:9b:ba:81: 4f:f2:54:02:e3:47:7f:fb:7b:9e:98:2e:11:90:7f:26:2f:58: 95:d4:46:b6:a2:4d:ef:54:03:b0:73:9f:36:f4:1d:f1:46:ad: 85:1f:f2:1f:d3:b6:61:e7:0b:84:c2:12:bc:dc:e0:82:ac:2c: e3:ce:97:02:d7:ff:ad:27:74:07:f5:f3:5f:f9:40:16:de:dd: 85:57:f8:ad:33:dc:3d:a0:9f:e8:8d:ae:d9:c4:11:8b:f4:6f: 00:5f:98:fe:a5:d7:7f:28:48:62:08:35:1f:e2:0a:d8:e7:67: 16:c9:1a:45:df:a1:ee:0e:d6:46:3e:15:1b:e7:a4:78:f2:78: 53:d2:21:65:9d:ee:95:60:86:00:5c:bd:f8:ea:1e:52:c5:7a: 2a:99:94:0c:22:79:ae:1a:00:e3:50:eb:6d:98:85:02:c0:71: 09:66:19:57:ac:ee:29:67:80:dc:ca:d3:f9:b8:bb:65:88:c5: a6:b4:78:4c:6d:96:13:d1:7b:00:90:76:af:dc:9b:fc:b3:e6: b1:72:f9:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSUi7RT8uZEgeiy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5YmZjZTEtNWU3NC00YzkyLTk1NGQtODcyODk2OWQ4 ODM1MB4XDTI1MDMwNDAyMjM1OFoXDTI1MDYwMjAxMjM1OFowLzEtMCsGA1UEAxMk MzI1YmNmYzQtZWYyNy00ODA0LWE3MGYtY2ViOTc4MDZlODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXMvnRwSB5IU0g98+C7EZUMswO/vlqHlCOmH jMIhFLbH3yuEGqvjIg9/X2l3uqGWb7Ugf2Qqg7v5cZBp8LNWDEuVx3fXIn4i10iU Q1PnWID0HWBFohWnuriFCTADWsxt+YTFBWA53y2sOii3UWE7ClZPWrLPTAApUbEx TlUDUsTIKyO1nKczkDoEwR3uTQ6GXj9UAtohN8I4va+AgVnxONvofPQX6d7xhfyh Pli8+VGJOy71K/tT67jMA7/Zy73jSmwtmXVl/Tm+yL+aAJ5soTkc78LYZ53B19jv 2jPdcvx7/PK4SgP1ofAUdUyfM9eTY4+gxHxXkCJpCW171ceCAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1X9SceCb08b2izMwQKQep09EgrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jYzli ZmNlMS01ZTc0LTRjOTItOTU0ZC04NzI4OTY5ZDg4MzUvMzVjM2U4NmItZTJmZS0z MGJkLTgzZGItNzc1NjYxZDJlYTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2M5YmZjZTEtNWU3NC00YzkyLTk1 NGQtODcyODk2OWQ4ODM1L2NjOWJmY2UxLTVlNzQtNGM5Mi05NTRkLTg3Mjg5Njlk ODgzNS5jcmwwHwYDVR0jBBgwFoAUWSOVY38ODRqcqJwYgOE4O8qtc+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jYzliZmNlMS01ZTc0LTRjOTItOTU0ZC04NzI4 OTY5ZDg4MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYwIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzSV4kY9/TfRDqQxaaAAZUNC/NbnytZEzUcPAa8Q5whsVfzOjXPwtvL 4jm5ZZiMAy4wSZu6gU/yVALjR3/7e56YLhGQfyYvWJXURraiTe9UA7Bznzb0HfFG rYUf8h/TtmHnC4TCErzc4IKsLOPOlwLX/60ndAf181/5QBbe3YVX+K0z3D2gn+iN rtnEEYv0bwBfmP6l138oSGIINR/iCtjnZxbJGkXfoe4O1kY+FRvnpHjyeFPSIWWd 7pVghgBcvfjqHlLFeiqZlAwiea4aAONQ622YhQLAcQlmGVes7ilngNzK0/m4u2WI xaa0eExtlhPRewCQdq/cm/yz5rFy+eQ= -----END CERTIFICATE-----Generated at Fri Mar 14 15:00:59 2025 by rpki-client