$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/128c9924-d5e5-3a45-97db-6c4d06fa5bec.roa File: 128c9924-d5e5-3a45-97db-6c4d06fa5bec.roa (raw, json) Hash identifier: egIA/WHJS6JmsVX5d4xie6JMQgca0EdGpo770nrDsS0= Subject key identifier: C6:FE:F7:04:7D:83:20:7A:E9:A6:CE:AB:89:4E:4F:41:50:96:7F:4D Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584953C42C3E8DE872987788CA80 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/128c9924-d5e5-3a45-97db-6c4d06fa5bec.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 54113 IP address blocks: 140.248.220.128/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:2c:3e:8d:e8:72:98:77:88:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=c7a89ba7-3b99-488c-8e61-ff8ab19ef737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:00:24:e9:d7:89:82:e0:50:b0:f0:cf:de:3d: 01:5b:b4:55:ec:20:e2:a2:a9:35:69:3b:54:70:3e: 98:23:84:5e:a3:df:7b:1c:03:78:94:8f:12:f5:38: 7d:65:b5:0f:ac:fe:3b:82:f2:ca:70:dd:39:a7:47: 51:a8:84:92:90:68:51:89:0f:9e:5d:b7:e8:54:9a: e2:5f:84:2c:24:5f:70:ed:bb:83:96:17:13:d5:d9: 9f:6a:37:09:84:6f:8d:f3:47:b4:a9:3d:23:02:c7: 55:52:91:88:46:3a:0f:1f:81:50:ff:03:53:7e:98: 60:4d:e6:7c:0f:54:44:ad:69:32:85:6d:f2:44:7f: 23:84:11:0f:3d:7b:84:59:ad:92:a3:3a:60:2b:c1: de:07:d5:c8:6e:98:32:95:37:de:8e:78:de:fd:47: ee:3c:fb:b5:61:75:8c:36:db:d6:01:92:fa:c3:04: 52:d6:d9:aa:43:fc:e3:cd:7b:f3:71:1a:11:a3:10: d6:c0:f2:8d:2e:db:f0:f4:8e:39:e6:b0:5b:3d:4f: b7:ac:ea:08:43:a8:23:0d:ce:f1:e2:19:17:59:36: 13:5a:41:f7:04:14:9c:2b:ef:bf:b9:36:4b:ea:dd: 5e:b9:00:ae:bd:10:9c:95:89:dc:5b:81:00:54:e0: a6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:FE:F7:04:7D:83:20:7A:E9:A6:CE:AB:89:4E:4F:41:50:96:7F:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/128c9924-d5e5-3a45-97db-6c4d06fa5bec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.220.128/26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:b5:dc:73:98:61:14:a9:0f:38:37:f1:0c:86:36:9c:36:63: e2:f3:99:6a:1c:32:d9:30:b8:b3:2d:94:90:06:4d:29:09:5c: 7b:35:27:af:5e:e8:2c:a5:cf:e3:0e:b6:5f:e7:ee:0c:d0:47: 1d:0d:87:7d:74:cf:f8:a8:73:15:77:c0:86:b2:47:d8:6e:c4: 5f:ea:a3:f2:c8:83:73:75:d4:5e:5e:81:60:9a:9f:b7:a9:97: cd:2a:6e:9e:8c:18:7e:c6:44:1c:bf:b2:57:f8:d8:18:ab:8b: ac:82:d7:98:8e:37:bd:f2:1c:5f:d6:a1:41:7d:cc:2c:39:76: 0c:e7:06:e3:d4:3a:b9:08:db:89:36:0f:1e:c2:61:07:80:78: e5:54:07:31:e0:9d:ee:8b:d0:d1:1a:fc:b1:ae:68:2d:e0:bc: b8:51:0f:c5:dd:9d:3c:d8:e8:2c:9c:fd:63:1a:14:9d:d3:94: 76:fa:fa:c5:77:85:cc:36:04:4a:0c:89:29:8b:d5:19:91:f8: 01:8f:46:6d:94:46:2e:4a:87:de:a3:41:1d:00:66:c1:eb:d2: 83:e0:05:29:9e:24:57:37:f4:35:e3:0e:d1:d4:1a:13:7f:d0: 80:1a:d9:d2:3b:b5:6f:92:4e:b1:64:40:e3:00:c2:e6:0c:df: 4d:0a:20:d8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElTxCw+jehymHeIyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk YzdhODliYTctM2I5OS00ODhjLThlNjEtZmY4YWIxOWVmNzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwAk6deJguBQsPDP3j0BW7RV7CDioqk1aTtU cD6YI4Reo997HAN4lI8S9Th9ZbUPrP47gvLKcN05p0dRqISSkGhRiQ+eXbfoVJri X4QsJF9w7buDlhcT1dmfajcJhG+N80e0qT0jAsdVUpGIRjoPH4FQ/wNTfphgTeZ8 D1RErWkyhW3yRH8jhBEPPXuEWa2SozpgK8HeB9XIbpgylTfejnje/UfuPPu1YXWM NtvWAZL6wwRS1tmqQ/zjzXvzcRoRoxDWwPKNLtvw9I455rBbPU+3rOoIQ6gjDc7x 4hkXWTYTWkH3BBScK++/uTZL6t1euQCuvRCclYncW4EAVOCmvwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMb+9wR9gyB66abOq4lOT0FQln9NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMTI4Yzk5MjQtZDVlNS0z YTQ1LTk3ZGItNmM0ZDA2ZmE1YmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGjPjcgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC7tdxzmGEUqQ84N/EMhjacNmPi85lqHDLZMLizLZSQBk0pCVx7NSev Xugspc/jDrZf5+4M0EcdDYd9dM/4qHMVd8CGskfYbsRf6qPyyINzddReXoFgmp+3 qZfNKm6ejBh+xkQcv7JX+NgYq4usgteYjje98hxf1qFBfcwsOXYM5wbj1Dq5CNuJ Ng8ewmEHgHjlVAcx4J3ui9DRGvyxrmgt4Ly4UQ/F3Z082OgsnP1jGhSd05R2+vrF d4XMNgRKDIkpi9UZkfgBj0ZtlEYuSofeo0EdAGbB69KD4AUpniRXN/Q14w7R1BoT f9CAGtnSO7Vvkk6xZEDjAMLmDN9NCiDY -----END CERTIFICATE-----Generated at Thu Apr 3 02:41:12 2025 by rpki-client