$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2dd6f539-f0a8-3109-acc2-e6b04eed1f2e.roa File: 2dd6f539-f0a8-3109-acc2-e6b04eed1f2e.roa (raw, json) Hash identifier: iGpb7lWF3Mh4Te60ZEiAyRpc62MS1DbzW0+jvWYb5V4= Subject key identifier: 59:65:53:3B:BE:5D:14:AC:C8:3F:A6:33:3C:81:83:20:3A:97:A8:AA Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584953C430FBC06ED05C1F3F8570 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2dd6f539-f0a8-3109-acc2-e6b04eed1f2e.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 54113 IP address blocks: 140.248.252.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:30:fb:c0:6e:d0:5c:1f:3f:85:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=dd682a01-10b5-44a2-8b02-5bac1359500f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:20:ee:00:d7:d5:a4:58:da:e2:ce:dd:18:ee: 19:2b:c2:13:29:b9:ce:27:f5:95:53:96:32:f4:78: b2:27:a9:85:3e:85:20:52:38:a3:3f:aa:8a:d7:08: 7e:63:fe:01:85:c5:8f:5a:4a:a5:c4:cf:cf:58:e3: 0f:30:73:7f:67:82:a5:6b:b6:0e:45:76:87:ee:01: 44:c7:47:7d:3b:7e:c5:a9:84:ce:d4:3f:53:89:d5: d6:80:38:33:f7:d2:18:b9:e1:14:df:69:1f:fe:a2: 17:81:a8:db:ce:73:f9:ac:02:d8:12:45:ff:30:7c: d6:97:8c:49:1a:f2:d1:0b:fb:69:02:98:d2:27:73: 2f:e7:5a:7d:7f:3c:6c:38:d3:f9:54:92:64:68:36: d9:e0:e2:f2:55:93:1d:3c:fb:f0:76:23:4d:f1:58: 3e:d4:06:c3:e5:03:e2:f0:c7:ff:89:7c:aa:c1:af: 37:77:17:d7:14:99:40:42:91:f6:41:be:a0:c7:eb: 1f:a4:e3:8c:45:3f:4e:89:20:8b:e7:ba:68:ae:af: 4c:70:eb:a4:92:b1:7f:e1:fa:52:3b:ac:0d:ab:64: de:f7:75:11:52:4f:47:b6:2c:5e:71:8a:98:9c:62: 4e:c3:20:4a:e6:66:18:ff:ba:f7:50:d1:f1:09:d3: f6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:65:53:3B:BE:5D:14:AC:C8:3F:A6:33:3C:81:83:20:3A:97:A8:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2dd6f539-f0a8-3109-acc2-e6b04eed1f2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.252.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:a7:b4:37:ad:7c:a1:49:40:98:60:98:a5:48:a2:a6:c2:74: de:21:b2:88:9e:e0:66:33:e2:3f:fb:02:71:9d:05:8b:94:40: 64:23:9c:b0:56:0d:24:6c:72:25:c3:d4:e5:cf:1d:bd:e9:56: 44:3d:5c:3d:39:89:e9:c2:f3:e4:59:ab:01:e5:33:0b:80:ed: f9:9e:81:9b:39:d0:cc:74:cc:4f:91:c9:fa:72:f8:a1:65:ba: c9:b1:59:84:68:cd:8a:ac:54:7b:c9:e8:6c:3a:29:c1:fc:48: 67:42:03:17:c0:aa:11:59:0f:f5:25:79:06:bd:6d:6e:8a:02: ec:78:f2:79:ae:8c:fb:81:49:43:61:fa:93:35:6b:c5:5c:f5: ae:e9:cb:69:a6:2d:ac:42:90:e1:6d:77:d5:54:df:17:0f:69: 1e:61:96:59:3a:77:d0:df:81:c8:4f:47:c6:ac:c1:e3:d3:57: ea:e3:a0:12:28:65:a8:2e:de:54:a8:86:14:2c:fd:98:16:b2: 5d:97:01:14:bd:f9:f8:63:ba:a6:2a:c2:df:73:ca:5e:90:8a: 9c:dd:23:6e:88:3f:8c:7e:de:c1:db:e6:d4:fc:db:dc:bb:37: d8:9e:aa:f4:e0:8e:43:5c:83:82:8f:85:e1:ae:15:94:8a:76: d3:53:e9:d3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElTxDD7wG7QXB8/hXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZGQ2ODJhMDEtMTBiNS00NGEyLThiMDItNWJhYzEzNTk1MDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiDuANfVpFja4s7dGO4ZK8ITKbnOJ/WVU5Yy 9HiyJ6mFPoUgUjijP6qK1wh+Y/4BhcWPWkqlxM/PWOMPMHN/Z4Kla7YORXaH7gFE x0d9O37FqYTO1D9TidXWgDgz99IYueEU32kf/qIXgajbznP5rALYEkX/MHzWl4xJ GvLRC/tpApjSJ3Mv51p9fzxsONP5VJJkaDbZ4OLyVZMdPPvwdiNN8Vg+1AbD5QPi 8Mf/iXyqwa83dxfXFJlAQpH2Qb6gx+sfpOOMRT9OiSCL57porq9McOukkrF/4fpS O6wNq2Te93URUk9HtixecYqYnGJOwyBK5mYY/7r3UNHxCdP25wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFllUzu+XRSsyD+mMzyBgyA6l6iqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMmRkNmY1MzktZjBhOC0z MTA5LWFjYzItZTZiMDRlZWQxZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHjPj8ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAip7Q3rXyhSUCYYJilSKKmwnTeIbKInuBmM+I/+wJxnQWLlEBkI5yw Vg0kbHIlw9Tlzx296VZEPVw9OYnpwvPkWasB5TMLgO35noGbOdDMdMxPkcn6cvih ZbrJsVmEaM2KrFR7yehsOinB/EhnQgMXwKoRWQ/1JXkGvW1uigLsePJ5roz7gUlD YfqTNWvFXPWu6ctppi2sQpDhbXfVVN8XD2keYZZZOnfQ34HIT0fGrMHj01fq46AS KGWoLt5UqIYULP2YFrJdlwEUvfn4Y7qmKsLfc8pekIqc3SNuiD+Mft7B2+bU/Nvc uzfYnqr04I5DXIOCj4XhrhWUinbTU+nT -----END CERTIFICATE-----Generated at Thu Apr 3 02:52:51 2025 by rpki-client