$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/423303eb-88f3-3dc8-8249-ad6927e04dd0.roa File: 423303eb-88f3-3dc8-8249-ad6927e04dd0.roa (raw, json) Hash identifier: 15vma1djNhOF9UBomNkBjEppbM5UNsbpbMCc0RbEEC8= Subject key identifier: 85:5D:6A:17:E7:F4:3E:75:EB:73:6B:F6:D9:A9:45:02:68:2A:9D:B7 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584953C436526265CA53C04A9104 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/423303eb-88f3-3dc8-8249-ad6927e04dd0.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 54113 IP address blocks: 140.248.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:36:52:62:65:ca:53:c0:4a:91:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=f9c22d69-c8a7-4fa9-9bcb-da7ab00bc313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f7:ec:4f:cf:ce:6c:b2:ae:14:4c:86:b6:4c: 19:25:fe:14:58:ae:b8:03:7c:6e:2b:d4:c5:ed:ab: b4:9c:d1:b3:37:b7:20:00:b3:a6:2a:ad:b0:3a:01: 4e:55:74:ca:35:70:3d:74:63:c9:dc:6f:17:e7:d9: 42:b0:b9:08:34:18:bd:d5:b4:2e:63:d1:cc:0c:ad: 39:ea:9e:04:e0:e6:b4:1a:c1:72:8f:4d:3a:97:52: 32:52:c6:66:ec:83:16:29:7e:44:f8:69:8f:44:5c: 38:fb:bf:8a:0f:6e:7d:5a:5b:75:55:f3:35:06:a9: 5a:78:08:fc:88:bb:6c:dc:28:d7:70:65:f6:4e:ee: 48:6a:ed:25:ec:58:8d:91:c0:e2:c2:47:84:66:97: 22:f3:5e:77:69:83:3a:69:2a:fb:ab:aa:71:aa:88: 65:49:41:48:72:cf:fb:98:25:d0:b9:1e:dc:07:63: aa:c8:0e:41:80:d3:e4:0c:e5:34:fa:24:51:ad:b7: ca:16:d6:11:47:81:97:aa:e2:49:e4:7b:03:6a:9a: b9:5e:9c:32:30:6b:2f:41:2b:61:4c:33:e0:90:42: 9d:c5:93:60:0b:2a:93:f6:b6:b9:51:d1:d1:fa:79: c2:70:79:54:90:45:b7:78:71:23:9a:cf:e1:aa:c5: d5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5D:6A:17:E7:F4:3E:75:EB:73:6B:F6:D9:A9:45:02:68:2A:9D:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/423303eb-88f3-3dc8-8249-ad6927e04dd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:14:d7:38:1d:f4:49:29:78:25:61:10:5a:34:33:c2:b2:b0: a1:7d:04:0b:56:2a:7d:71:8a:13:62:0c:94:6d:b8:40:00:ac: 5c:70:f9:70:3c:f3:cf:ca:1f:2e:84:4a:67:ed:f6:d8:b2:72: 93:fe:72:14:20:1c:97:84:b5:24:4f:e4:23:70:1b:92:27:31: 75:cb:0c:78:e3:52:32:9a:00:76:e1:5a:44:c8:67:60:3a:8f: a1:f7:26:3b:99:4e:01:0c:22:88:1b:1b:d6:0a:fb:d0:6c:a0: e1:8b:b1:ae:0a:af:9d:01:6d:55:00:84:81:45:d4:65:99:f2: 79:55:96:4b:6b:95:14:0d:4e:85:df:5e:3d:76:42:31:14:83: d5:6d:9c:c2:8d:0a:68:a4:6c:8c:72:50:50:4c:5f:36:d3:fb: e2:b5:d0:9e:31:f6:b2:17:4a:ec:ac:96:c2:dd:72:ce:ca:ed: 26:cd:f2:0c:50:0e:7e:a7:ef:87:d7:ba:9f:24:c2:c7:1c:48: 66:be:f5:fd:d5:3a:c7:18:34:d2:09:48:3c:04:d7:99:1c:01: 4e:cf:ca:ef:14:4e:11:25:c5:82:2a:82:d7:55:f1:1c:5d:84: 88:cb:e5:b9:5b:4f:0f:4a:b9:2d:42:41:f8:d3:d6:f5:2d:fc: 53:cd:77:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxDZSYmXKU8BKkQQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjljMjJkNjktYzhhNy00ZmE5LTliY2ItZGE3YWIwMGJjMzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlffsT8/ObLKuFEyGtkwZJf4UWK64A3xuK9TF 7au0nNGzN7cgALOmKq2wOgFOVXTKNXA9dGPJ3G8X59lCsLkINBi91bQuY9HMDK05 6p4E4Oa0GsFyj006l1IyUsZm7IMWKX5E+GmPRFw4+7+KD259Wlt1VfM1BqlaeAj8 iLts3CjXcGX2Tu5Iau0l7FiNkcDiwkeEZpci8153aYM6aSr7q6pxqohlSUFIcs/7 mCXQuR7cB2OqyA5BgNPkDOU0+iRRrbfKFtYRR4GXquJJ5HsDapq5XpwyMGsvQSth TDPgkEKdxZNgCyqT9ra5UdHR+nnCcHlUkEW3eHEjms/hqsXVRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVdahfn9D5163Nr9tmpRQJoKp23MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNDIzMzAzZWItODhmMy0z ZGM4LTgyNDktYWQ2OTI3ZTA0ZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALMU1zgd9EkpeCVhEFo0M8KysKF9BAtWKn1xihNiDJRtuEAArFxw+XA8 88/KHy6ESmft9tiycpP+chQgHJeEtSRP5CNwG5InMXXLDHjjUjKaAHbhWkTIZ2A6 j6H3JjuZTgEMIogbG9YK+9BsoOGLsa4Kr50BbVUAhIFF1GWZ8nlVlktrlRQNToXf Xj12QjEUg9VtnMKNCmikbIxyUFBMXzbT++K10J4x9rIXSuyslsLdcs7K7SbN8gxQ Dn6n74fXup8kwsccSGa+9f3VOscYNNIJSDwE15kcAU7Pyu8UThElxYIqgtdV8Rxd hIjL5blbTw9KuS1CQfjT1vUt/FPNd3k= -----END CERTIFICATE-----Generated at Thu Apr 3 02:57:40 2025 by rpki-client