$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/7205920f-9d29-3b2c-addd-d07cb69abb10.roa File: 7205920f-9d29-3b2c-addd-d07cb69abb10.roa (raw, json) Hash identifier: KYQbg7tucekIPQoqyxXSpQ+36tvLo3LHAVJwPMitjZs= Subject key identifier: D8:70:52:E8:3B:F7:A3:91:20:51:18:93:2C:08:D5:8B:8D:54:D9:50 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584953C435F6CABC9CCEBB3BDB40 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/7205920f-9d29-3b2c-addd-d07cb69abb10.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 54113 IP address blocks: 140.248.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:35:f6:ca:bc:9c:ce:bb:3b:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=df9aac49-9094-4f13-ad5f-55854b321c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b7:58:cb:38:91:5d:c4:51:99:90:18:b5:59: 9c:af:ca:2f:c4:92:be:c6:57:f5:f4:07:2f:5a:83: 5a:51:aa:78:1c:31:3c:d4:90:22:fc:bf:d6:3a:ad: 65:be:30:83:d7:bc:6a:82:81:d3:24:bb:8a:eb:42: 74:50:d4:ef:0c:c9:12:89:71:21:1c:d0:3a:e4:8e: 65:49:77:d7:c6:ad:84:d9:95:aa:61:80:61:5b:5e: 5a:38:0e:37:8d:f6:81:d4:f4:bb:9f:f1:df:60:99: 15:f0:20:f5:4a:36:91:09:a6:84:e7:b4:3f:fe:87: cb:84:9f:8f:5e:aa:ee:95:15:06:36:d6:34:b9:11: 6a:1d:c5:01:36:76:ff:0a:fb:d5:ea:1f:18:61:6f: 2b:45:ec:be:76:59:34:60:d6:fe:ed:97:e0:83:b0: 20:bd:fc:f5:27:5b:0d:a1:f9:b4:0b:30:37:1d:42: 18:94:a7:e1:ce:c6:4e:2f:fe:6c:e7:2d:35:09:f2: ac:ac:37:de:f0:6b:75:18:ab:a1:fb:ab:e7:81:53: 3e:fc:ab:ac:d7:1b:7c:bc:14:2e:be:92:65:0e:55: 0a:09:c3:eb:1b:ff:a5:fd:8b:80:51:94:50:e5:7e: 1e:19:1d:b9:ec:69:2b:c7:57:3a:d3:37:09:6c:9a: 51:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:70:52:E8:3B:F7:A3:91:20:51:18:93:2C:08:D5:8B:8D:54:D9:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/7205920f-9d29-3b2c-addd-d07cb69abb10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:ca:4e:1e:06:df:e2:fd:df:1f:30:a4:d2:2b:b4:d0:1a:3a: e7:81:d2:ef:ca:33:b3:d9:c8:42:16:a6:0d:68:cb:a6:ca:7b: bf:21:70:3e:77:25:f2:ee:d7:6f:78:60:77:10:40:5f:96:5d: 49:f4:9c:86:16:9e:c2:29:6b:a4:5f:80:8c:dc:4d:df:a8:8d: 92:b2:0c:cf:72:8a:05:1f:ae:8a:11:81:14:9e:98:be:20:fa: 77:58:6d:5a:bd:5e:53:78:c8:9e:4b:5c:ce:6f:e2:bf:3b:44: be:d2:9f:00:8c:b4:8c:63:f9:c9:07:44:7b:47:fb:e7:53:12: 5d:05:3f:35:8d:5a:ee:27:d3:46:16:a0:ce:1a:84:77:75:09: a6:4b:c5:94:d3:b4:e5:d6:08:96:b9:80:0d:a8:37:b1:9c:a0: 5d:ac:3a:9e:47:23:53:2f:04:62:2a:b1:ff:f5:c2:a3:04:d7: d7:e7:ae:73:fe:b0:27:a4:3b:9f:6c:4a:7e:d1:f3:d0:95:f3: 87:e6:e4:8d:0b:05:ab:f3:39:6b:61:ee:0b:e0:d1:fb:33:3d: 12:de:df:5f:0b:c6:ed:be:0b:90:67:96:25:4e:a0:3d:10:8a: 34:80:c0:78:fe:fa:f7:f3:8f:78:a2:85:cd:75:cf:8a:d3:ad: 65:c5:b9:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxDX2yryczrs720AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZGY5YWFjNDktOTA5NC00ZjEzLWFkNWYtNTU4NTRiMzIxYzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrdYyziRXcRRmZAYtVmcr8ovxJK+xlf19Acv WoNaUap4HDE81JAi/L/WOq1lvjCD17xqgoHTJLuK60J0UNTvDMkSiXEhHNA65I5l SXfXxq2E2ZWqYYBhW15aOA43jfaB1PS7n/HfYJkV8CD1SjaRCaaE57Q//ofLhJ+P XqrulRUGNtY0uRFqHcUBNnb/CvvV6h8YYW8rRey+dlk0YNb+7Zfgg7Agvfz1J1sN ofm0CzA3HUIYlKfhzsZOL/5s5y01CfKsrDfe8Gt1GKuh+6vngVM+/Kus1xt8vBQu vpJlDlUKCcPrG/+l/YuAUZRQ5X4eGR257Gkrx1c60zcJbJpRjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhwUug796ORIFEYkywI1YuNVNlQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNzIwNTkyMGYtOWQyOS0z YjJjLWFkZGQtZDA3Y2I2OWFiYjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPhWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMbKTh4G3+L93x8wpNIrtNAaOueB0u/KM7PZyEIWpg1oy6bKe78hcD53 JfLu1294YHcQQF+WXUn0nIYWnsIpa6RfgIzcTd+ojZKyDM9yigUfrooRgRSemL4g +ndYbVq9XlN4yJ5LXM5v4r87RL7SnwCMtIxj+ckHRHtH++dTEl0FPzWNWu4n00YW oM4ahHd1CaZLxZTTtOXWCJa5gA2oN7GcoF2sOp5HI1MvBGIqsf/1wqME19fnrnP+ sCekO59sSn7R89CV84fm5I0LBavzOWth7gvg0fszPRLe318Lxu2+C5BnliVOoD0Q ijSAwHj++vfzj3iihc11z4rTrWXFuUI= -----END CERTIFICATE-----Generated at Thu Apr 3 02:51:13 2025 by rpki-client