$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/39ff98a5-c0f7-3940-ab7e-4c296c76694e.roa File: 39ff98a5-c0f7-3940-ab7e-4c296c76694e.roa (raw, json) Hash identifier: u6j4h03KiePLhSj+ZcN/qZf2adMjz0N9m7Kwti+F7go= Subject key identifier: 15:DB:41:25:5E:A1:5E:49:E5:F0:34:6F:7C:B7:9B:E4:10:A3:6B:B8 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F43285848E8667C69D82A312A168A9840 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/39ff98a5-c0f7-3940-ab7e-4c296c76694e.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 395374 IP address blocks: 141.140.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:7c:69:d8:2a:31:2a:16:8a:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=10edbb49-c3d1-4165-b6e5-078de1cb253e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f0:32:0d:39:cf:71:1a:0e:a1:8e:92:d6:a3: 97:0f:c9:3e:08:c9:db:44:bf:82:67:7f:4f:9a:1b: 8b:34:ea:c2:70:21:a9:9d:a1:c0:df:3e:7d:c7:ab: 36:7b:20:25:19:c4:a7:09:f9:33:a2:ca:5f:51:5b: 08:d2:f9:b4:40:f3:4d:aa:71:13:8e:8c:f1:5f:3b: 42:d2:a6:86:8b:31:2e:eb:73:b6:bf:c2:48:77:e6: 9c:c8:4e:cd:57:0e:0d:fe:7e:20:da:f0:24:d6:b7: a2:9d:88:90:9f:42:0d:0d:df:40:5f:5b:33:9a:52: 5b:b0:88:a1:1f:e0:c7:c9:a6:99:51:7c:89:23:cb: a8:09:f0:1e:9c:32:a6:3d:54:bc:2a:84:0b:8d:1d: d9:d1:1d:60:a1:85:5b:f7:cc:a7:0f:91:96:f1:c4: b3:cb:cd:7a:56:43:cd:12:16:11:f9:ce:0c:6c:c7: b9:b2:1e:56:78:de:c6:79:49:d0:dd:ac:08:08:55: 61:e6:69:1b:ed:e7:c9:3d:6a:94:07:88:01:78:ee: 0b:3f:62:12:6d:9f:ba:12:e0:1c:df:fe:17:44:ef: 5a:02:e7:36:23:c4:e9:15:75:1c:d6:7a:08:c1:5b: 33:05:d6:77:09:4f:66:24:fb:39:3f:76:73:93:17: ec:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DB:41:25:5E:A1:5E:49:E5:F0:34:6F:7C:B7:9B:E4:10:A3:6B:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/39ff98a5-c0f7-3940-ab7e-4c296c76694e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 141.140.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:08:d3:b8:78:44:ce:e9:03:c3:68:14:48:59:71:15:32:4d: d2:ae:5d:b3:53:23:3c:bf:c7:c5:d7:52:2b:7b:08:a1:00:78: 62:cd:8d:1f:86:02:09:d8:31:47:84:80:52:99:67:bf:52:61: a4:97:00:d8:7f:fa:31:d9:b7:32:3f:e2:4d:c1:42:c5:33:08: 43:17:3d:8b:87:7d:3c:6c:4d:34:ae:90:ca:7c:29:17:57:aa: 15:da:99:4d:a0:f2:45:ff:81:53:c2:a5:fb:d5:3d:32:53:ba: 00:53:73:6c:d2:57:93:d9:c2:7b:60:83:b8:a8:ac:80:9c:6c: 73:a8:9d:24:91:99:36:2f:cb:a1:e9:d4:c8:c0:e0:c4:1e:95: 09:2d:1c:a4:5c:1c:76:23:5b:28:d9:a9:25:16:7e:63:71:30: 62:2b:d9:ad:c3:20:4f:16:6b:b2:09:ca:c6:f5:a8:71:40:49: 12:8a:fa:0a:fa:d6:4b:8e:4a:a8:a9:af:6f:64:54:f3:80:8c: 63:17:9e:d5:2f:24:de:b3:44:34:cc:f2:47:98:05:e3:99:9b: 81:87:21:15:84:66:57:7f:80:bd:a6:9f:f6:f6:5d:7d:b9:bb: b4:b0:37:79:cf:6a:fa:59:23:e6:da:6c:c5:33:f5:f3:b1:06: 82:37:e5:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZnxp2CoxKhaKmEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk MTBlZGJiNDktYzNkMS00MTY1LWI2ZTUtMDc4ZGUxY2IyNTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofAyDTnPcRoOoY6S1qOXD8k+CMnbRL+CZ39P mhuLNOrCcCGpnaHA3z59x6s2eyAlGcSnCfkzospfUVsI0vm0QPNNqnETjozxXztC 0qaGizEu63O2v8JId+acyE7NVw4N/n4g2vAk1reinYiQn0INDd9AX1szmlJbsIih H+DHyaaZUXyJI8uoCfAenDKmPVS8KoQLjR3Z0R1goYVb98ynD5GW8cSzy816VkPN EhYR+c4MbMe5sh5WeN7GeUnQ3awICFVh5mkb7efJPWqUB4gBeO4LP2ISbZ+6EuAc 3/4XRO9aAuc2I8TpFXUc1noIwVszBdZ3CU9mJPs5P3ZzkxfsLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXbQSVeoV5J5fA0b3y3m+QQo2u4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvMzlmZjk4YTUtYzBmNy0z OTQwLWFiN2UtNGMyOTZjNzY2OTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALMI07h4RM7pA8NoFEhZcRUyTdKuXbNTIzy/x8XXUit7CKEAeGLNjR+G AgnYMUeEgFKZZ79SYaSXANh/+jHZtzI/4k3BQsUzCEMXPYuHfTxsTTSukMp8KRdX qhXamU2g8kX/gVPCpfvVPTJTugBTc2zSV5PZwntgg7iorICcbHOonSSRmTYvy6Hp 1MjA4MQelQktHKRcHHYjWyjZqSUWfmNxMGIr2a3DIE8Wa7IJysb1qHFASRKK+gr6 1kuOSqipr29kVPOAjGMXntUvJN6zRDTM8keYBeOZm4GHIRWEZld/gL2mn/b2XX25 u7SwN3nPavpZI+babMUz9fOxBoI35R8= -----END CERTIFICATE-----Generated at Sun Apr 13 23:46:48 2025 by rpki-client