$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/014e8e33-2e04-3a2f-a9bb-45363aac6531.roa File: 014e8e33-2e04-3a2f-a9bb-45363aac6531.roa (raw, json) Hash identifier: 2tX/on795Evy6VYvq61Rx6xVJ665ZqJi90EY9dIww7U= Subject key identifier: 85:27:45:F8:16:C7:E5:F3:BB:6A:45:8B:88:30:F2:2D:5F:31:8F:B7 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F43285848D90BB9A96E5227D82144C600 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/014e8e33-2e04-3a2f-a9bb-45363aac6531.roa Signing time: Tue 11 Feb 2025 14:00:52 +0000 ROA not before: Tue 11 Feb 2025 14:00:52 +0000 ROA not after: Mon 12 May 2025 13:00:52 +0000 asID: 54113 IP address blocks: 140.248.91.224/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d9:0b:b9:a9:6e:52:27:d8:21:44:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Feb 11 14:00:52 2025 GMT Not After : May 12 13:00:52 2025 GMT Subject: CN=52f146f0-521c-431c-9f58-656f82f6a4cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6a:11:f1:82:8a:21:79:73:cc:dc:bf:36:ed: c3:b5:7c:30:f8:08:d7:44:68:34:d9:f9:5e:84:b1: 27:a0:43:72:88:58:dd:6d:d2:9f:8f:8c:2b:17:e5: 34:fb:d7:fb:0e:47:d5:eb:12:11:5a:b8:72:ce:15: 12:05:f1:65:a3:e7:b3:7a:01:f7:5d:48:f1:9f:65: a2:c0:65:65:c1:c0:f8:dc:01:92:99:44:85:e4:f9: 4d:67:64:ab:ad:b1:89:31:ba:9d:ad:43:9f:2d:06: 0b:4b:0d:0d:c8:45:23:9f:46:72:c5:f2:5c:36:8b: 6a:b2:81:b7:b1:eb:b3:ec:26:db:ca:af:82:e5:68: 44:44:a5:28:0d:ad:02:72:41:a8:5d:a0:88:95:4a: 56:88:9f:06:e1:5d:3a:7b:17:78:39:11:5a:51:0a: 46:ca:c2:32:c9:7e:28:aa:e7:c0:49:9f:88:c4:a0: 79:cb:72:86:68:ee:db:6c:24:08:a5:fa:97:26:5d: a9:05:76:c8:8b:e9:90:53:2f:b7:4e:0a:85:80:54: 41:0f:f5:23:8e:d6:87:2a:0e:b2:4f:93:47:09:20: 6c:c1:5b:4c:e8:ac:d8:eb:12:8c:3c:f4:b8:21:2b: dd:c9:2e:bf:dc:af:44:93:f3:43:ef:c1:09:0e:b9: 4c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:27:45:F8:16:C7:E5:F3:BB:6A:45:8B:88:30:F2:2D:5F:31:8F:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/014e8e33-2e04-3a2f-a9bb-45363aac6531.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.91.224/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:fd:86:91:eb:87:b1:af:be:b8:93:81:2a:65:5c:30:e3:5b: cc:55:40:17:96:72:da:13:e0:5e:f9:66:40:2b:05:d7:ef:5b: 33:3f:e3:9f:95:cc:96:64:07:71:3d:11:40:30:80:ea:98:40: 87:af:ac:b8:b3:3c:66:d1:b6:ef:d2:2c:38:16:c0:88:fc:c1: 50:66:3d:ed:fb:69:da:44:53:06:3e:0e:45:0d:c9:37:b3:9e: 43:30:4c:5e:eb:ef:1e:56:ac:18:6e:6d:30:f9:84:52:6d:90: 28:d6:02:65:7e:dd:43:4f:64:26:1c:19:e5:14:d8:36:97:57: 0f:64:28:c6:4d:ae:3a:4f:ba:3b:ee:4a:b5:5d:eb:5f:2e:00: 41:6b:fa:9f:50:6c:93:f0:51:9f:00:8f:f5:ec:58:2e:77:64: fe:5c:fb:73:57:65:cd:9a:f4:5f:3b:0a:df:3d:fc:5c:3e:78: 35:af:67:20:a7:ac:2e:df:31:62:76:eb:b0:2d:93:d6:b6:64: a9:cd:21:7e:aa:a1:e5:42:3f:e9:0b:a6:06:b5:e4:d8:a8:a9: 5c:96:55:67:b8:da:7d:ba:ff:71:db:b3:a5:71:74:3a:0e:25: 93:70:0f:a0:be:ec:84:fe:97:9c:49:93:af:2c:03:fd:c9:fb: 03:a5:4a:e1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjZC7mpblIn2CFExgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDIxMTE0MDA1MloXDTI1MDUxMjEzMDA1MlowLzEtMCsGA1UEAxMk NTJmMTQ2ZjAtNTIxYy00MzFjLTlmNTgtNjU2ZjgyZjZhNGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmoR8YKKIXlzzNy/Nu3DtXww+AjXRGg02fle hLEnoENyiFjdbdKfj4wrF+U0+9f7DkfV6xIRWrhyzhUSBfFlo+ezegH3XUjxn2Wi wGVlwcD43AGSmUSF5PlNZ2SrrbGJMbqdrUOfLQYLSw0NyEUjn0ZyxfJcNotqsoG3 seuz7Cbbyq+C5WhERKUoDa0CckGoXaCIlUpWiJ8G4V06exd4ORFaUQpGysIyyX4o qufASZ+IxKB5y3KGaO7bbCQIpfqXJl2pBXbIi+mQUy+3TgqFgFRBD/UjjtaHKg6y T5NHCSBswVtM6KzY6xKMPPS4ISvdyS6/3K9Ek/ND78EJDrlMFQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIUnRfgWx+Xzu2pFi4gw8i1fMY+3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMDE0ZThlMzMtMmUwNC0z YTJmLWE5YmItNDUzNjNhYWM2NTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEjPhb4DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAW/YaR64exr764k4EqZVww41vMVUAXlnLaE+Be+WZAKwXX71szP+Of lcyWZAdxPRFAMIDqmECHr6y4szxm0bbv0iw4FsCI/MFQZj3t+2naRFMGPg5FDck3 s55DMExe6+8eVqwYbm0w+YRSbZAo1gJlft1DT2QmHBnlFNg2l1cPZCjGTa46T7o7 7kq1XetfLgBBa/qfUGyT8FGfAI/17Fgud2T+XPtzV2XNmvRfOwrfPfxcPng1r2cg p6wu3zFiduuwLZPWtmSpzSF+qqHlQj/pC6YGteTYqKlcllVnuNp9uv9x27OlcXQ6 DiWTcA+gvuyE/pecSZOvLAP9yfsDpUrh -----END CERTIFICATE-----Generated at Thu Apr 3 02:57:37 2025 by rpki-client