$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/971c721e-2148-3a91-aae8-d902249a3b48.roa File: 971c721e-2148-3a91-aae8-d902249a3b48.roa (raw, json) Hash identifier: woPk62a9owzd8jWA1k6BS/IFTJs8yRnMIPj3P07Vy1Q= Subject key identifier: 7E:45:CE:67:56:EC:63:4F:1E:04:29:7D:CF:BD:9B:DE:35:7A:C0:49 Certificate issuer: /CN=2e4e9332-b3fa-4993-b1e0-b3204976405f Certificate serial: 010D0C9F4328584909E6A1345D80A2E0ACF37840 Authority key identifier: 41:A4:3C:BD:61:0C:4B:19:7C:37:1C:1F:E4:82:A3:DE:78:0E:18:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/971c721e-2148-3a91-aae8-d902249a3b48.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 397388 IP address blocks: 140.228.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/2e4e9332-b3fa-4993-b1e0-b3204976405f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/2e4e9332-b3fa-4993-b1e0-b3204976405f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:a1:34:5d:80:a2:e0:ac:f3:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e4e9332-b3fa-4993-b1e0-b3204976405f Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=2f45ad95-b06f-4236-b209-838a14b5b3a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:72:1d:e4:82:bb:ab:8a:63:8b:a5:5a:e3:13: c7:2b:1b:e3:6e:39:8a:31:3f:f5:ae:36:da:c3:a7: a4:af:3c:45:db:81:98:62:1e:97:a1:9d:15:7a:76: e0:d8:13:b1:f6:33:30:47:f1:d5:2d:59:f9:1d:e9: cc:2f:8c:4e:91:24:46:30:05:b2:49:84:5a:bb:13: f7:af:c8:7f:dd:e1:e9:9b:04:12:b5:f7:57:87:1d: 36:2e:44:da:b3:dd:6d:0b:09:f1:05:96:ee:0d:3c: fa:53:5c:6e:02:f7:92:ab:d1:be:23:34:c6:67:6f: 3a:7f:42:a1:a6:33:98:46:cb:ef:60:70:da:26:08: 8a:38:b9:7a:a8:b0:a3:e5:80:3b:92:cf:6a:b3:d7: 0e:6f:e4:ff:57:04:34:f2:75:17:a3:1b:8d:33:ac: 5c:12:4a:9f:57:ac:eb:20:04:aa:26:f5:e8:30:91: 33:58:36:4e:bd:ef:b8:e6:c3:57:3e:c5:1a:e4:47: 61:18:62:1d:88:4a:7c:76:ed:ca:12:05:e8:57:a4: 64:d6:39:ec:0a:77:95:12:d4:d1:5d:9d:97:20:78: ad:29:57:b0:7b:47:8b:56:f5:e2:26:bf:be:70:90: d1:71:7a:c9:e8:db:36:89:20:5c:68:e8:d4:e1:d9: 23:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:45:CE:67:56:EC:63:4F:1E:04:29:7D:CF:BD:9B:DE:35:7A:C0:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/971c721e-2148-3a91-aae8-d902249a3b48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/2e4e9332-b3fa-4993-b1e0-b3204976405f.crl X509v3 Authority Key Identifier: keyid:41:A4:3C:BD:61:0C:4B:19:7C:37:1C:1F:E4:82:A3:DE:78:0E:18:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f.cer sbgp-ipAddrBlock: critical IPv4: 140.228.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:a7:cb:7d:8a:98:1c:e2:7d:da:26:5e:c3:b1:61:5c:31:f7: dd:6b:79:2b:3a:8f:dd:f1:1f:c8:1a:8e:ea:e1:bc:fe:a3:99: ef:7a:3f:9b:7f:9c:f4:89:6b:73:68:9b:55:bb:21:7a:34:a0: 7a:34:3e:97:2a:54:74:18:30:b0:50:01:d7:9d:95:c0:12:d0: b8:22:15:aa:08:20:33:be:7c:80:8e:51:e2:9b:29:6d:92:c5: e2:68:95:17:cb:3f:13:79:9c:e8:48:b8:c1:e6:a8:1d:f8:05: 6e:4f:38:02:5b:d0:74:66:51:eb:6b:f9:fe:9d:a5:ad:e1:7d: f9:d2:12:69:0d:62:9f:fd:8e:22:c6:35:8d:c7:ec:48:26:5b: b7:ec:6c:46:71:22:6a:25:f6:2f:dc:25:1a:6f:e6:f0:e0:dc: a4:d0:89:10:5d:67:dc:34:e2:17:a6:4c:b1:5e:14:75:45:6c: cb:31:5d:ae:a0:bc:aa:c4:8f:52:67:88:1b:ad:f6:f8:90:b6: 7f:28:77:dc:20:0c:66:26:c4:26:63:96:ea:fe:c3:df:41:4f: f4:34:10:29:42:4b:98:b3:7b:f6:04:d9:e9:ae:ab:11:b3:a1: a0:fe:cd:13:ef:57:f9:33:36:a7:48:5a:e1:6e:79:c4:94:7b: f3:65:fb:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5qE0XYCi4KzzeEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU0ZTkzMzItYjNmYS00OTkzLWIxZTAtYjMyMDQ5NzY0 MDVmMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk MmY0NWFkOTUtYjA2Zi00MjM2LWIyMDktODM4YTE0YjViM2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnId5IK7q4pji6Va4xPHKxvjbjmKMT/1rjba w6ekrzxF24GYYh6XoZ0Venbg2BOx9jMwR/HVLVn5HenML4xOkSRGMAWySYRauxP3 r8h/3eHpmwQStfdXhx02LkTas91tCwnxBZbuDTz6U1xuAveSq9G+IzTGZ286f0Kh pjOYRsvvYHDaJgiKOLl6qLCj5YA7ks9qs9cOb+T/VwQ08nUXoxuNM6xcEkqfV6zr IASqJvXoMJEzWDZOve+45sNXPsUa5EdhGGIdiEp8du3KEgXoV6Rk1jnsCneVEtTR XZ2XIHitKVewe0eLVvXiJr++cJDRcXrJ6Ns2iSBcaOjU4dkjUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5FzmdW7GNPHgQpfc+9m941esBJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZTRl OTMzMi1iM2ZhLTQ5OTMtYjFlMC1iMzIwNDk3NjQwNWYvOTcxYzcyMWUtMjE0OC0z YTkxLWFhZTgtZDkwMjI0OWEzYjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmU0ZTkzMzItYjNmYS00OTkzLWIx ZTAtYjMyMDQ5NzY0MDVmLzJlNGU5MzMyLWIzZmEtNDk5My1iMWUwLWIzMjA0OTc2 NDA1Zi5jcmwwHwYDVR0jBBgwFoAUQaQ8vWEMSxl8Nxwf5IKj3ngOGKwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yZTRlOTMzMi1iM2ZhLTQ5OTMtYjFlMC1iMzIw NDk3NjQwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjORwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+ny32KmBzifdomXsOxYVwx991reSs6j93xH8gajurhvP6jme96P5t/ nPSJa3Nom1W7IXo0oHo0PpcqVHQYMLBQAdedlcAS0LgiFaoIIDO+fICOUeKbKW2S xeJolRfLPxN5nOhIuMHmqB34BW5POAJb0HRmUetr+f6dpa3hffnSEmkNYp/9jiLG NY3H7EgmW7fsbEZxImol9i/cJRpv5vDg3KTQiRBdZ9w04hemTLFeFHVFbMsxXa6g vKrEj1JniBut9viQtn8od9wgDGYmxCZjlur+w99BT/Q0EClCS5ize/YE2emuqxGz oaD+zRPvV/kzNqdIWuFuecSUe/Nl+7s= -----END CERTIFICATE-----Generated at Sat Apr 12 15:10:38 2025 by rpki-client