$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/ba3ff8df-1c2d-3cdb-9aa6-c021fdff5a26.roa File: ba3ff8df-1c2d-3cdb-9aa6-c021fdff5a26.roa (raw, json) Hash identifier: dAU0sS3pgkjLT3Tp3AutrBWNLGBzfYS8ZJP5uY8rQnE= Subject key identifier: 85:A0:D6:A2:98:D3:41:0C:89:20:D7:95:0A:44:EF:38:A4:33:10:65 Certificate issuer: /CN=6511a5cc-df0b-4c6e-a228-2902fbea4263 Certificate serial: 010D0C9F43285848FD56C4E99D11027EC542AE80 Authority key identifier: ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/ba3ff8df-1c2d-3cdb-9aa6-c021fdff5a26.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 140.98.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c4:e9:9d:11:02:7e:c5:42:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6511a5cc-df0b-4c6e-a228-2902fbea4263 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=7040feae-1d33-4dfb-af05-9979a8b55e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:be:7e:72:f3:18:35:bd:53:3d:bc:64:28:2d: 54:9f:ef:0e:fb:13:2b:f8:db:0c:1c:36:dc:6e:9c: e0:93:5f:f3:97:a5:c1:7d:d0:bf:a2:00:fe:f8:b4: 6b:22:3f:60:ae:b1:b6:d5:a9:19:55:51:f3:6c:36: e4:5e:ec:6e:4a:03:56:0d:c7:e4:38:d8:6c:76:92: 15:00:f1:58:bb:7e:dc:80:d0:84:82:cf:54:5b:05: d1:51:48:4f:0c:fc:4d:ad:49:44:80:96:7f:13:27: 65:90:7b:65:c0:ff:89:7a:7e:92:30:f8:01:2a:18: f4:b5:d6:4e:45:0c:52:94:c6:18:a5:1c:ad:2e:7e: ae:68:a4:fb:97:6e:a5:b9:18:55:04:f2:a3:d0:16: e5:02:bf:54:11:c6:12:b7:a8:68:01:d4:86:2a:c8: b0:b8:7f:a9:7d:ac:6f:50:df:59:15:7e:48:a8:ca: 81:5a:29:c9:23:20:75:62:16:36:4e:b0:29:20:ab: 0f:78:9a:8a:72:04:1c:14:b8:93:b7:64:ef:1c:e6: cc:94:4d:00:9b:a3:e7:cc:33:86:95:e9:ee:2a:37: 35:e3:06:46:58:c6:cb:1a:c9:d4:32:5f:09:82:e1: 88:07:65:58:b8:ec:13:4e:96:d3:23:86:7f:dd:c5: 85:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A0:D6:A2:98:D3:41:0C:89:20:D7:95:0A:44:EF:38:A4:33:10:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/ba3ff8df-1c2d-3cdb-9aa6-c021fdff5a26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl X509v3 Authority Key Identifier: keyid:ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer sbgp-ipAddrBlock: critical IPv4: 140.98.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:71:23:57:14:59:38:88:c3:ec:49:1b:fc:81:4c:19:14:df: 51:43:d4:e0:61:90:ad:74:fc:c2:0a:be:b4:ed:01:46:32:4e: 0a:9e:0b:87:5a:c0:e6:7e:ed:b0:a5:a5:0f:86:15:33:9b:5f: 12:88:bc:e7:d0:20:1a:dc:b5:64:ca:89:f9:56:06:7f:e9:e8: d0:19:d9:24:72:2a:f8:42:cb:e8:bf:f4:61:39:35:0d:ca:8a: 46:8e:19:8b:cb:b6:1e:f1:fe:a0:48:a4:a6:30:82:91:4e:ca: 5a:8b:47:55:8e:60:cd:36:75:13:9c:42:e5:d4:0f:fa:13:54: 76:bb:fe:78:2e:d4:28:c3:0b:cf:b5:d9:8a:bf:7b:58:c4:7b: ef:18:f4:68:e7:a0:40:45:41:39:c2:0f:3a:8e:24:91:f0:45: e4:26:51:e2:a9:f6:aa:fe:81:c0:9d:19:28:4b:33:6e:aa:00: 1c:d1:74:cc:cb:51:a9:45:80:98:e2:8c:f3:a6:01:a1:99:36: 1d:24:06:a0:95:ae:95:2b:40:5c:43:b0:93:f4:ee:d2:a3:67: e9:c8:a4:a3:81:59:d9:d7:9e:9e:06:b7:bd:b7:77:85:57:9d: 92:69:20:69:23:85:ba:c9:87:f6:ea:6a:d7:2f:af:a0:8f:60: 12:4a:07:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsTpnRECfsVCroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjUxMWE1Y2MtZGYwYi00YzZlLWEyMjgtMjkwMmZiZWE0 MjYzMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk NzA0MGZlYWUtMWQzMy00ZGZiLWFmMDUtOTk3OWE4YjU1ZTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr5+cvMYNb1TPbxkKC1Un+8O+xMr+NsMHDbc bpzgk1/zl6XBfdC/ogD++LRrIj9grrG21akZVVHzbDbkXuxuSgNWDcfkONhsdpIV APFYu37cgNCEgs9UWwXRUUhPDPxNrUlEgJZ/EydlkHtlwP+Jen6SMPgBKhj0tdZO RQxSlMYYpRytLn6uaKT7l26luRhVBPKj0BblAr9UEcYSt6hoAdSGKsiwuH+pfaxv UN9ZFX5IqMqBWinJIyB1YhY2TrApIKsPeJqKcgQcFLiTt2TvHObMlE0Am6PnzDOG lenuKjc14wZGWMbLGsnUMl8JguGIB2VYuOwTTpbTI4Z/3cWFwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWg1qKY00EMiSDXlQpE7zikMxBlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NTEx YTVjYy1kZjBiLTRjNmUtYTIyOC0yOTAyZmJlYTQyNjMvYmEzZmY4ZGYtMWMyZC0z Y2RiLTlhYTYtYzAyMWZkZmY1YTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjUxMWE1Y2MtZGYwYi00YzZlLWEy MjgtMjkwMmZiZWE0MjYzLzY1MTFhNWNjLWRmMGItNGM2ZS1hMjI4LTI5MDJmYmVh NDI2My5jcmwwHwYDVR0jBBgwFoAU7bIECmX2igA0Jez8q6Ur+CaZGxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NTExYTVjYy1kZjBiLTRjNmUtYTIyOC0yOTAy ZmJlYTQyNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjGIcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5xI1cUWTiIw+xJG/yBTBkU31FD1OBhkK10/MIKvrTtAUYyTgqeC4da wOZ+7bClpQ+GFTObXxKIvOfQIBrctWTKiflWBn/p6NAZ2SRyKvhCy+i/9GE5NQ3K ikaOGYvLth7x/qBIpKYwgpFOylqLR1WOYM02dROcQuXUD/oTVHa7/ngu1CjDC8+1 2Yq/e1jEe+8Y9GjnoEBFQTnCDzqOJJHwReQmUeKp9qr+gcCdGShLM26qABzRdMzL UalFgJjijPOmAaGZNh0kBqCVrpUrQFxDsJP07tKjZ+nIpKOBWdnXnp4Gt723d4VX nZJpIGkjhbrJh/bqatcvr6CPYBJKB4U= -----END CERTIFICATE-----Generated at Fri Apr 4 18:52:07 2025 by rpki-client