$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/a2efaf57-bd34-3494-b3ff-d22f52c0707c.roa File: a2efaf57-bd34-3494-b3ff-d22f52c0707c.roa (raw, json) Hash identifier: AeQnlcIJVeJ0/AfkoBAzUY/S6fQ8XavgL39rbGs6O8k= Subject key identifier: 2B:F0:B5:5D:2A:B7:23:9F:A3:C6:6E:AB:F3:04:7A:24:AC:37:77:22 Certificate issuer: /CN=1c8f0fea-4d37-4154-9909-d7fb16d78856 Certificate serial: 010D0C9F43285848CBE3D03E652171D18B390DC0 Authority key identifier: 99:B1:CD:3C:2D:D5:5E:70:0B:11:31:AA:D3:5E:E0:62:07:6A:14:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/a2efaf57-bd34-3494-b3ff-d22f52c0707c.roa Signing time: Thu 06 Feb 2025 20:55:00 +0000 ROA not before: Thu 06 Feb 2025 20:55:00 +0000 ROA not after: Wed 07 May 2025 19:55:00 +0000 asID: 401478 IP address blocks: 140.235.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/1c8f0fea-4d37-4154-9909-d7fb16d78856.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/1c8f0fea-4d37-4154-9909-d7fb16d78856.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:e3:d0:3e:65:21:71:d1:8b:39:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c8f0fea-4d37-4154-9909-d7fb16d78856 Validity Not Before: Feb 6 20:55:00 2025 GMT Not After : May 7 19:55:00 2025 GMT Subject: CN=8fa403a8-78f8-476b-9bf7-089e9d8dc1f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:08:a5:57:c2:60:4b:c5:94:f7:4d:1d:9b:32: 04:27:3a:35:1b:1f:40:90:27:42:54:ae:26:03:6c: e5:8e:53:44:eb:fa:b9:03:38:85:a9:89:30:9d:53: c9:d8:07:cd:2e:5a:45:ba:89:c5:d3:50:4d:73:f0: 2a:f4:25:b4:7d:e0:ce:fa:a4:41:ed:1a:4f:59:8e: 17:32:72:fc:87:71:ae:79:94:d6:ad:4d:14:b3:ef: 91:a4:55:36:fd:c7:9b:a5:8c:86:f1:ac:d9:41:7f: bf:5d:63:4b:55:1f:d0:4c:fd:4a:b5:d6:1b:c9:f9: 80:96:cf:1c:e8:13:5f:73:9b:64:4a:db:f7:91:66: 39:ca:a8:51:82:07:17:20:03:a1:cd:dc:8b:23:e6: de:22:35:54:fa:c5:30:0c:fd:b4:42:17:10:2f:20: 19:ad:7e:ab:e6:b3:c9:f4:ea:6a:ca:bf:23:1c:dd: 01:5d:b9:f4:f8:81:aa:79:0f:b5:55:6f:f2:d0:2c: ae:5b:e2:31:93:c8:a0:28:d0:1f:f6:10:4c:80:a0: cc:80:9c:1c:3e:36:35:bf:41:d1:d7:cd:e8:0d:50: 4b:e0:62:95:30:11:7c:5a:68:03:3e:65:31:2d:c2: 91:6c:12:2c:e2:f6:50:13:e4:ef:9f:da:73:8c:c9: a8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F0:B5:5D:2A:B7:23:9F:A3:C6:6E:AB:F3:04:7A:24:AC:37:77:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/a2efaf57-bd34-3494-b3ff-d22f52c0707c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/1c8f0fea-4d37-4154-9909-d7fb16d78856.crl X509v3 Authority Key Identifier: keyid:99:B1:CD:3C:2D:D5:5E:70:0B:11:31:AA:D3:5E:E0:62:07:6A:14:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856.cer sbgp-ipAddrBlock: critical IPv4: 140.235.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:f5:af:25:53:93:66:81:de:2c:f2:cf:83:e8:0d:f5:98:6f: 61:59:7d:9a:f0:e0:34:d1:6c:bc:a9:2a:50:6e:27:40:a2:6a: 65:71:7f:8b:05:fa:58:95:d6:f2:53:dd:43:fe:25:8f:44:42: eb:c3:20:aa:2d:27:1d:23:07:2a:27:62:5c:5e:4a:59:bd:5b: fd:2f:7e:ab:8b:4e:69:f0:da:6e:c3:7c:9e:10:7c:5e:12:cc: a5:3b:c7:11:8f:74:ef:6b:6e:2e:e0:d0:f1:04:65:10:7f:8b: f7:ce:34:2a:5f:85:b2:08:e4:1e:7f:fb:52:f8:49:27:7b:45: dc:42:7e:04:e7:76:fe:e9:a0:f6:99:2f:6c:2d:61:2f:16:7d: e4:bf:c7:f8:b0:57:79:e7:ec:02:bf:38:a7:d1:a2:fb:b8:99: 71:20:13:9c:f3:ec:0d:d3:9e:6b:d2:fb:25:aa:45:ec:fd:dc: 00:cd:01:f5:88:2c:a8:e2:67:35:ae:8b:8a:22:dc:32:86:50: 0d:00:c7:37:f2:9a:3b:85:ec:10:02:dd:04:e8:b3:55:1b:67: 73:f5:80:90:79:84:e4:2d:f7:05:a5:9a:ae:d4:96:6c:04:90: 1a:b5:f4:7f:66:9c:d9:d8:39:fe:26:6e:39:48:b7:9a:97:99: 7a:7d:c1:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjL49A+ZSFx0Ys5DcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM4ZjBmZWEtNGQzNy00MTU0LTk5MDktZDdmYjE2ZDc4 ODU2MB4XDTI1MDIwNjIwNTUwMFoXDTI1MDUwNzE5NTUwMFowLzEtMCsGA1UEAxMk OGZhNDAzYTgtNzhmOC00NzZiLTliZjctMDg5ZTlkOGRjMWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gilV8JgS8WU900dmzIEJzo1Gx9AkCdCVK4m A2zljlNE6/q5AziFqYkwnVPJ2AfNLlpFuonF01BNc/Aq9CW0feDO+qRB7RpPWY4X MnL8h3GueZTWrU0Us++RpFU2/cebpYyG8azZQX+/XWNLVR/QTP1KtdYbyfmAls8c 6BNfc5tkStv3kWY5yqhRggcXIAOhzdyLI+beIjVU+sUwDP20QhcQLyAZrX6r5rPJ 9Opqyr8jHN0BXbn0+IGqeQ+1VW/y0CyuW+Ixk8igKNAf9hBMgKDMgJwcPjY1v0HR 183oDVBL4GKVMBF8WmgDPmUxLcKRbBIs4vZQE+Tvn9pzjMmo9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvwtV0qtyOfo8Zuq/MEeiSsN3ciMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzhm MGZlYS00ZDM3LTQxNTQtOTkwOS1kN2ZiMTZkNzg4NTYvYTJlZmFmNTctYmQzNC0z NDk0LWIzZmYtZDIyZjUyYzA3MDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM4ZjBmZWEtNGQzNy00MTU0LTk5 MDktZDdmYjE2ZDc4ODU2LzFjOGYwZmVhLTRkMzctNDE1NC05OTA5LWQ3ZmIxNmQ3 ODg1Ni5jcmwwHwYDVR0jBBgwFoAUmbHNPC3VXnALETGq017gYgdqFFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzhmMGZlYS00ZDM3LTQxNTQtOTkwOS1kN2Zi MTZkNzg4NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOuUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEz1ryVTk2aB3izyz4PoDfWYb2FZfZrw4DTRbLypKlBuJ0CiamVxf4sF +liV1vJT3UP+JY9EQuvDIKotJx0jByonYlxeSlm9W/0vfquLTmnw2m7DfJ4QfF4S zKU7xxGPdO9rbi7g0PEEZRB/i/fONCpfhbII5B5/+1L4SSd7RdxCfgTndv7poPaZ L2wtYS8WfeS/x/iwV3nn7AK/OKfRovu4mXEgE5zz7A3TnmvS+yWqRez93ADNAfWI LKjiZzWui4oi3DKGUA0AxzfymjuF7BAC3QTos1UbZ3P1gJB5hOQt9wWlmq7UlmwE kBq19H9mnNnYOf4mbjlIt5qXmXp9wd4= -----END CERTIFICATE-----Generated at Sat Apr 12 15:12:33 2025 by rpki-client