$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/086c1071-1294-3436-beef-cfe7cef951e5.roa File: 086c1071-1294-3436-beef-cfe7cef951e5.roa (raw, json) Hash identifier: QlnhpwHkj9fK1lUCm5xpfTVzpDIXGxb0E1yfmA+mT1U= Subject key identifier: 86:5F:86:1C:D9:F3:F4:1C:F1:B4:A9:A6:BC:3D:58:5F:76:E2:30:A3 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584968B4223AC3BCB708AC7D1000 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/086c1071-1294-3436-beef-cfe7cef951e5.roa Signing time: Fri 04 Apr 2025 01:00:47 +0000 ROA not before: Fri 04 Apr 2025 01:00:47 +0000 ROA not after: Thu 03 Jul 2025 01:00:47 +0000 asID: 136796 IP address blocks: 141.140.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:b4:22:3a:c3:bc:b7:08:ac:7d:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Apr 4 01:00:47 2025 GMT Not After : Jul 3 01:00:47 2025 GMT Subject: CN=72402464-e332-4cb8-952b-f41d928219cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:98:d9:ae:0f:bd:48:32:61:f4:b8:e3:4b:48: 6b:dc:e5:27:d7:66:82:fd:b6:a9:1c:b8:13:91:f7: bf:22:bb:4f:c8:d7:21:42:a7:32:a0:40:4f:44:ee: 2e:fc:1f:06:b5:d0:87:00:61:71:40:ba:f8:47:b7: 70:e9:d6:62:21:4e:b4:4f:57:33:37:85:d0:d6:01: 8f:a9:78:3f:6f:dd:91:bf:b0:78:75:64:37:4d:2d: d9:9c:1d:12:6f:ee:f1:6b:3f:ad:d8:e8:7c:b6:55: 0b:41:c2:9f:4a:78:ca:a8:ce:84:22:d2:20:99:88: 50:8c:11:55:8e:1b:13:4e:11:e3:fe:21:bc:18:a5: 22:5d:11:fe:09:09:78:68:24:57:9b:17:1c:69:58: 44:11:84:d0:cf:3c:8c:77:42:b5:82:de:f4:77:3b: f6:71:7b:ee:ba:4e:6e:ea:79:41:4f:dd:42:e7:bc: 63:03:a4:7a:01:94:fe:89:2e:25:1c:c4:34:a8:c6: 3b:06:8e:f9:ae:9c:09:7a:31:8e:bd:c6:fa:ea:fe: 4d:cc:21:7c:42:bc:09:f9:7d:47:94:61:82:b5:c9: af:8a:66:35:5f:a9:08:9b:e5:b0:3d:16:24:28:f3: ce:74:14:62:79:6a:ad:8c:a7:0e:6c:a6:a7:a9:16: e5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5F:86:1C:D9:F3:F4:1C:F1:B4:A9:A6:BC:3D:58:5F:76:E2:30:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/086c1071-1294-3436-beef-cfe7cef951e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 141.140.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:64:88:cb:4c:02:68:aa:d9:37:79:4d:40:bb:2b:2e:6f:b6: 01:cb:5f:ce:ab:b1:d8:5c:2c:ce:32:d5:3f:ee:38:b6:1b:48: c8:f7:b3:b3:5b:47:54:5e:6a:26:06:64:db:8a:46:f2:6c:18: e9:96:2d:92:90:ca:86:63:3d:d6:8a:f3:12:6d:cf:f9:72:2d: 45:b3:88:e5:09:fd:cf:a0:90:e9:56:eb:2e:cb:f5:6d:c8:7c: 6f:95:91:5a:e4:20:f7:6e:bf:3b:7c:c0:5e:97:9e:31:1f:c1: 65:b2:8b:c9:a0:83:7e:6a:32:a7:8d:7f:36:e8:ec:05:c4:ec: 4f:27:fe:39:8b:c7:e4:00:d9:94:fc:68:25:4d:08:08:4e:af: 5d:db:0f:b1:38:64:67:a5:16:f9:9f:89:42:d1:49:7e:e4:92: 1b:64:32:f1:54:da:a2:1a:dc:2a:16:13:12:cb:ea:87:15:29: 4d:a5:9f:36:a9:05:5d:4e:43:9f:73:86:48:55:4c:c3:bf:a8: 44:61:1e:dc:fe:a5:33:ea:e8:40:0e:b1:60:1e:6e:61:ab:f2: 99:4a:d9:2b:09:34:1f:78:4e:4c:6e:6f:c4:62:a7:ae:cd:01: 32:0b:c1:25:0d:65:03:c6:31:7c:69:a5:82:0f:3a:93:f2:45: fb:c2:c5:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElotCI6w7y3CKx9EAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDQwNDAxMDA0N1oXDTI1MDcwMzAxMDA0N1owLzEtMCsGA1UEAxMk NzI0MDI0NjQtZTMzMi00Y2I4LTk1MmItZjQxZDkyODIxOWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJjZrg+9SDJh9LjjS0hr3OUn12aC/bapHLgT kfe/IrtPyNchQqcyoEBPRO4u/B8GtdCHAGFxQLr4R7dw6dZiIU60T1czN4XQ1gGP qXg/b92Rv7B4dWQ3TS3ZnB0Sb+7xaz+t2Oh8tlULQcKfSnjKqM6EItIgmYhQjBFV jhsTThHj/iG8GKUiXRH+CQl4aCRXmxccaVhEEYTQzzyMd0K1gt70dzv2cXvuuk5u 6nlBT91C57xjA6R6AZT+iS4lHMQ0qMY7Bo75rpwJejGOvcb66v5NzCF8QrwJ+X1H lGGCtcmvimY1X6kIm+WwPRYkKPPOdBRieWqtjKcObKanqRblpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZfhhzZ8/Qc8bSpprw9WF924jCjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvMDg2YzEwNzEtMTI5NC0z NDM2LWJlZWYtY2ZlN2NlZjk1MWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYwDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxkiMtMAmiq2Td5TUC7Ky5vtgHLX86rsdhcLM4y1T/uOLYbSMj3s7Nb R1ReaiYGZNuKRvJsGOmWLZKQyoZjPdaK8xJtz/lyLUWziOUJ/c+gkOlW6y7L9W3I fG+VkVrkIPduvzt8wF6XnjEfwWWyi8mgg35qMqeNfzbo7AXE7E8n/jmLx+QA2ZT8 aCVNCAhOr13bD7E4ZGelFvmfiULRSX7kkhtkMvFU2qIa3CoWExLL6ocVKU2lnzap BV1OQ59zhkhVTMO/qERhHtz+pTPq6EAOsWAebmGr8plK2SsJNB94Tkxub8Rip67N ATILwSUNZQPGMXxppYIPOpPyRfvCxY4= -----END CERTIFICATE-----Generated at Sun Apr 6 11:49:35 2025 by rpki-client