$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/e8b5bf02-bef5-3093-896e-4cbcb128ab4b.roa File: e8b5bf02-bef5-3093-896e-4cbcb128ab4b.roa (raw, json) Hash identifier: cQZGUAMlGBVLqA6lZ73vjCvA+6uhXJVA+lnrs57Fkiw= Subject key identifier: 23:ED:3E:C1:A3:6D:30:47:F5:29:5B:4C:32:57:2B:6B:9D:E7:E7:3D Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F43285848D6410D9D9B62E920994A1540 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/e8b5bf02-bef5-3093-896e-4cbcb128ab4b.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 61317 IP address blocks: 141.140.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:0d:9d:9b:62:e9:20:99:4a:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=75a0aa37-83a7-4a0c-8f30-b3725828720f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:77:ee:c0:21:bb:06:cb:5c:7c:b7:d8:bf:16: 5e:19:93:5d:52:ff:96:f2:9f:8f:67:35:59:3f:37: 1d:9b:6e:b7:5c:9f:22:13:af:ce:19:21:81:c7:72: 00:1f:c7:5d:9c:26:56:80:c1:3f:a5:90:ad:d1:eb: 89:d8:44:14:3f:45:29:5d:be:dc:4f:a8:2d:b2:a0: 58:b7:23:cb:2b:66:16:91:86:75:10:9e:5d:5b:b5: e3:98:04:e7:55:da:93:7d:81:ac:ce:61:e1:cd:f1: cb:43:25:4a:67:c4:9e:22:41:7e:25:53:ee:67:6b: fc:62:96:8e:05:79:58:83:46:df:2f:2b:97:cc:fa: 6c:c8:cc:e3:2b:1b:3b:c1:6a:87:e3:33:b8:93:fe: 76:ab:03:2f:36:ca:bf:92:02:80:98:f8:df:ed:fa: 58:7e:59:37:09:f3:1c:36:bf:61:ce:7b:0e:ea:7e: bb:98:ad:69:6e:f0:46:36:0f:69:d7:34:d6:39:61: 1f:08:95:6a:04:d6:19:0c:ef:9d:1f:90:67:ed:46: 62:41:6c:a1:f5:c7:a2:96:22:67:3e:a3:fe:07:e2: 22:dd:c1:82:ad:c0:c0:df:65:06:e6:9b:de:22:54: d1:bf:c8:d5:f3:70:91:84:db:81:2a:06:38:c8:9c: f6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:ED:3E:C1:A3:6D:30:47:F5:29:5B:4C:32:57:2B:6B:9D:E7:E7:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/e8b5bf02-bef5-3093-896e-4cbcb128ab4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 141.140.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:06:05:a5:54:17:9b:62:c2:e5:6a:c0:71:f3:ab:a3:58:ba: 54:b0:99:b3:34:2a:44:cb:fe:38:22:f1:5c:58:84:bf:2d:91: 47:23:65:35:21:15:65:67:01:0c:a6:d3:8d:f8:84:3d:4e:8a: a2:f6:49:bd:b1:1a:51:c0:82:ce:46:20:81:60:c8:a8:e7:ba: 2c:2e:29:ef:80:71:f2:36:b7:ca:24:cb:77:1d:f3:cb:a8:fa: b8:01:b2:d6:a1:e4:40:ab:23:88:92:72:26:4e:c9:74:15:33: 5a:0a:58:e0:9a:54:f9:65:d3:c3:2a:3f:8f:ff:0b:ec:16:f8: df:5d:a0:81:0c:33:44:87:c5:8d:1d:ce:95:c7:11:cc:91:df: 6b:8e:67:e3:99:38:2d:f9:d2:e0:cc:eb:07:1b:7b:d6:36:bf: e1:c3:6d:1e:58:38:34:a8:30:ac:da:60:24:ee:43:01:91:f9: f8:39:f1:ed:6c:d5:58:88:18:68:1c:d6:02:f3:43:e7:7e:e0: 35:73:13:33:a0:a5:06:b4:91:e3:52:e4:2a:a7:f4:33:56:24: ca:ac:15:8a:d6:c8:a1:9c:05:89:f8:a8:d5:c4:4c:6c:20:31: 25:3b:c8:61:aa:4c:00:16:94:ac:1f:d8:de:11:c6:d3:05:62: 44:65:9a:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQQ2dm2LpIJlKFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk NzVhMGFhMzctODNhNy00YTBjLThmMzAtYjM3MjU4Mjg3MjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03fuwCG7BstcfLfYvxZeGZNdUv+W8p+PZzVZ Pzcdm263XJ8iE6/OGSGBx3IAH8ddnCZWgME/pZCt0euJ2EQUP0UpXb7cT6gtsqBY tyPLK2YWkYZ1EJ5dW7XjmATnVdqTfYGszmHhzfHLQyVKZ8SeIkF+JVPuZ2v8YpaO BXlYg0bfLyuXzPpsyMzjKxs7wWqH4zO4k/52qwMvNsq/kgKAmPjf7fpYflk3CfMc Nr9hznsO6n67mK1pbvBGNg9p1zTWOWEfCJVqBNYZDO+dH5Bn7UZiQWyh9ceiliJn PqP+B+Ii3cGCrcDA32UG5pveIlTRv8jV83CRhNuBKgY4yJz20QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPtPsGjbTBH9SlbTDJXK2ud5+c9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvZThiNWJmMDItYmVmNS0z MDkzLTg5NmUtNGNiY2IxMjhhYjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjYwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQGBaVUF5tiwuVqwHHzq6NYulSwmbM0KkTL/jgi8VxYhL8tkUcjZTUh FWVnAQym0434hD1OiqL2Sb2xGlHAgs5GIIFgyKjnuiwuKe+AcfI2t8oky3cd88uo +rgBstah5ECrI4iSciZOyXQVM1oKWOCaVPll08MqP4//C+wW+N9doIEMM0SHxY0d zpXHEcyR32uOZ+OZOC350uDM6wcbe9Y2v+HDbR5YODSoMKzaYCTuQwGR+fg58e1s 1ViIGGgc1gLzQ+d+4DVzEzOgpQa0keNS5Cqn9DNWJMqsFYrWyKGcBYn4qNXETGwg MSU7yGGqTAAWlKwf2N4RxtMFYkRlmpg= -----END CERTIFICATE-----Generated at Fri Apr 4 19:05:49 2025 by rpki-client