$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/194a2536-f5c7-30fa-a3f2-891677b761c0.roa File: 194a2536-f5c7-30fa-a3f2-891677b761c0.roa (raw, json) Hash identifier: tKo0n8IeQ34GvjdMOuACcyevpnyoxEEkA+dh968cIK8= Subject key identifier: 0D:DB:FC:2C:67:5F:0C:DA:AB:D2:C9:35:02:C2:A0:F5:45:AF:B4:EC Certificate issuer: /CN=0e43d693-397f-4f90-96eb-2da9e8465ff5 Certificate serial: 010D0C9F432858493C0942D44EDB117A002D3600 Authority key identifier: 37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/194a2536-f5c7-30fa-a3f2-891677b761c0.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 401015 IP address blocks: 140.221.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:42:d4:4e:db:11:7a:00:2d:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e43d693-397f-4f90-96eb-2da9e8465ff5 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=82766108-9054-495f-8c88-26f1e9351f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:08:9a:58:2a:52:31:ce:b2:d6:3f:1d:86:cf: ed:ef:51:fa:9c:12:8c:e6:75:02:7f:bf:56:4d:32: 80:07:62:43:d8:98:10:2b:26:99:b7:f4:36:a7:d3: d6:25:eb:87:a7:be:9b:a8:ba:4b:18:ae:85:88:ab: 4e:d5:97:4f:d5:35:16:05:4a:fd:fc:03:89:03:00: 99:b9:39:99:15:ac:bc:5e:70:6c:29:45:88:b7:e4: 90:99:ee:36:5d:f7:28:f0:c7:74:16:3c:c7:b0:c0: 3e:5c:52:14:b4:8d:ed:eb:bf:91:21:84:62:d5:ec: 7f:a0:89:2b:8b:1e:82:b8:e6:e9:c6:c0:51:a6:56: 8a:1f:a8:2b:ba:7e:b4:ad:23:d9:b2:25:95:1c:0d: 80:94:4a:33:6b:de:5f:c7:80:79:fb:e7:2e:00:3b: 4a:fe:ff:63:3b:b6:80:bb:ea:d2:13:d3:73:45:2b: dc:44:63:ae:3e:d8:58:30:e7:a2:88:b1:31:9b:fc: 47:42:1e:b6:02:d9:12:b2:9d:62:1b:9b:60:f4:15: b3:50:c3:29:90:aa:83:f3:07:95:a1:32:fc:ae:26: 22:5d:a2:cb:8e:4f:27:c5:f7:4e:0c:a5:4b:6e:96: 6a:86:8a:95:9b:f1:07:f7:85:3a:a6:e7:5e:f8:5d: 79:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DB:FC:2C:67:5F:0C:DA:AB:D2:C9:35:02:C2:A0:F5:45:AF:B4:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/194a2536-f5c7-30fa-a3f2-891677b761c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl X509v3 Authority Key Identifier: keyid:37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer sbgp-ipAddrBlock: critical IPv4: 140.221.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:94:8c:e9:eb:3e:6b:cc:8b:14:bb:81:e8:57:80:26:08:01: 2f:51:5b:34:86:f7:f0:1b:a8:8f:80:68:26:ed:9b:44:98:d1: 3a:8f:fa:fe:34:e9:69:92:cf:af:22:95:1a:ca:31:55:82:fb: 24:59:65:22:a6:00:b4:2d:0e:b7:ca:ac:d9:9e:a3:c6:2b:54: 10:c1:86:d7:e9:d3:99:25:99:55:5b:34:c9:84:94:66:38:66: 1b:56:b0:87:91:d6:98:03:0f:1a:d7:d6:cd:74:d5:a8:3d:e0: 87:3a:3e:76:ec:71:e6:ad:57:c0:7f:ab:fd:38:35:00:72:1b: 8b:7d:be:9b:b0:69:19:69:ba:44:63:33:12:d7:2f:34:80:c7: 96:2e:69:81:af:35:3e:82:42:6d:e7:5c:fc:5f:1b:cc:ed:79: 60:83:a1:5d:15:d7:a7:53:e0:20:2c:95:65:8a:39:18:66:bf: 42:48:0c:bb:b4:55:3d:16:c1:92:2a:15:7e:f0:67:fe:45:ed: 80:0c:53:51:ae:c1:4d:f4:c7:60:ff:b3:24:90:1f:32:2a:de: 56:6f:c7:b5:4a:26:37:68:ef:84:c7:7e:ad:c7:c5:c3:1a:c4: 62:41:14:12:87:a6:58:d0:50:58:9f:ca:c8:d7:3b:c7:e9:a9: 2d:ab:67:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CULUTtsRegAtNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2ZWItMmRhOWU4NDY1 ZmY1MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk ODI3NjYxMDgtOTA1NC00OTVmLThjODgtMjZmMWU5MzUxZjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwiaWCpSMc6y1j8dhs/t71H6nBKM5nUCf79W TTKAB2JD2JgQKyaZt/Q2p9PWJeuHp76bqLpLGK6FiKtO1ZdP1TUWBUr9/AOJAwCZ uTmZFay8XnBsKUWIt+SQme42Xfco8Md0FjzHsMA+XFIUtI3t67+RIYRi1ex/oIkr ix6CuObpxsBRplaKH6grun60rSPZsiWVHA2AlEoza95fx4B5++cuADtK/v9jO7aA u+rSE9NzRSvcRGOuPthYMOeiiLExm/xHQh62AtkSsp1iG5tg9BWzUMMpkKqD8weV oTL8riYiXaLLjk8nxfdODKVLbpZqhoqVm/EH94U6pude+F15yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3b/CxnXwzaq9LJNQLCoPVFr7TsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQz ZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5ZTg0NjVmZjUvMTk0YTI1MzYtZjVjNy0z MGZhLWEzZjItODkxNjc3Yjc2MWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2 ZWItMmRhOWU4NDY1ZmY1LzBlNDNkNjkzLTM5N2YtNGY5MC05NmViLTJkYTllODQ2 NWZmNS5jcmwwHwYDVR0jBBgwFoAUN04o9CXpjNBwif9JO2tz/WIVviYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQzZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5 ZTg0NjVmZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjN2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOUjOnrPmvMixS7gehXgCYIAS9RWzSG9/AbqI+AaCbtm0SY0TqP+v40 6WmSz68ilRrKMVWC+yRZZSKmALQtDrfKrNmeo8YrVBDBhtfp05klmVVbNMmElGY4 ZhtWsIeR1pgDDxrX1s101ag94Ic6PnbsceatV8B/q/04NQByG4t9vpuwaRlpukRj MxLXLzSAx5YuaYGvNT6CQm3nXPxfG8zteWCDoV0V16dT4CAslWWKORhmv0JIDLu0 VT0WwZIqFX7wZ/5F7YAMU1GuwU30x2D/sySQHzIq3lZvx7VKJjdo74THfq3HxcMa xGJBFBKHpljQUFifysjXO8fpqS2rZ5M= -----END CERTIFICATE-----Generated at Fri Apr 4 19:03:28 2025 by rpki-client