$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a89b8be7-09cf-3e38-8113-f25a3da0f800.roa File: a89b8be7-09cf-3e38-8113-f25a3da0f800.roa (raw, json) Hash identifier: SnbI4UhqiPaKi8WtgggRIst8AE5NrRR8fMYcvXgiMKU= Subject key identifier: 81:6F:49:2B:3B:86:8B:44:27:C5:28:FC:75:86:0D:03:1B:7C:66:6B Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584953C42FC1E4E9693323B10480 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a89b8be7-09cf-3e38-8113-f25a3da0f800.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 54113 IP address blocks: 140.248.218.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:2f:c1:e4:e9:69:33:23:b1:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=79fd308e-65f3-4d84-82b4-669dcf45e611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c1:d7:3c:39:27:0f:c5:87:a3:26:6d:d6:b7: d0:8b:ef:99:9f:c4:32:e6:f6:2a:7e:b4:9b:e8:77: cc:02:6d:4b:a1:3b:8b:54:44:e6:29:ca:d8:da:eb: 59:eb:8d:ee:22:e6:f8:a9:13:2c:c1:9d:6f:04:8e: 88:a4:81:69:0a:71:7c:c9:aa:ab:4c:dc:5a:69:11: be:d9:20:f6:aa:11:73:69:8d:38:41:0a:f3:93:bd: 6a:30:80:62:c5:03:66:4a:56:d8:42:a4:d5:b7:b2: 9b:07:58:54:9f:d5:57:5f:eb:2e:4f:32:77:20:f9: 60:ec:e9:31:2a:67:e1:ec:fe:6d:99:81:7e:17:9b: 2d:39:ed:38:59:e7:72:34:b9:99:06:f3:9e:54:09: 81:47:2d:b3:33:11:f8:8b:9d:66:7d:d8:19:90:95: f4:26:a0:1b:48:83:7d:03:b2:f1:08:ce:80:30:53: 30:64:97:43:96:5c:0c:41:03:05:9e:cc:c2:c5:ac: f6:1b:0e:7e:9d:78:1b:b2:ce:86:22:0a:7d:50:b1: 50:b9:6b:6a:0f:72:90:c6:45:25:18:56:e5:27:ce: 46:2e:d7:cc:dc:1b:60:8d:91:f2:ba:9e:77:95:21: bc:0e:6e:c9:d2:08:cc:2f:29:37:1f:21:c8:ce:67: b1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6F:49:2B:3B:86:8B:44:27:C5:28:FC:75:86:0D:03:1B:7C:66:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a89b8be7-09cf-3e38-8113-f25a3da0f800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.218.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:fa:35:6a:d9:4d:29:bb:0e:67:58:f7:4d:9d:b0:d1:d2:8c: af:db:bf:2b:e9:91:0f:4c:48:f8:12:2e:1a:36:7b:15:d8:a2: 66:16:e3:16:84:d2:c5:d0:5e:d3:72:67:8e:88:93:59:37:46: 74:67:71:06:57:94:67:f6:09:7b:55:0f:20:3a:f3:59:c5:db: 92:11:12:bf:ce:4d:8f:76:d4:1e:5c:9a:8a:34:65:3f:0c:28: c1:1e:ec:12:41:65:81:11:93:84:0c:56:05:92:7c:b1:01:41: 87:86:9c:4a:0a:2a:ae:4a:ae:b7:54:a0:de:a8:a4:70:e8:14: 0a:9e:13:79:d7:28:38:7c:a7:90:d7:0f:e4:fa:3b:cc:f1:2d: a4:57:0a:85:1b:30:9d:9e:72:b1:76:43:d0:73:41:7b:f1:f9: 8e:83:59:c9:58:8b:96:1a:ec:7d:0d:28:d3:66:1d:24:02:50: 2a:b1:ab:3e:95:50:9f:88:9a:1a:9f:e5:8e:5c:38:42:41:03: 40:fc:38:e4:aa:eb:6c:03:ba:a5:8a:36:68:18:37:e8:55:d0: 56:b1:01:d6:7b:54:77:f7:a9:58:be:ec:38:30:90:63:04:ad: f9:45:f1:e5:51:36:a1:4f:e8:55:78:9f:22:e9:55:4f:fe:84: da:cb:b4:52 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElTxC/B5OlpMyOxBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk NzlmZDMwOGUtNjVmMy00ZDg0LTgyYjQtNjY5ZGNmNDVlNjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsHXPDknD8WHoyZt1rfQi++Zn8Qy5vYqfrSb 6HfMAm1LoTuLVETmKcrY2utZ643uIub4qRMswZ1vBI6IpIFpCnF8yaqrTNxaaRG+ 2SD2qhFzaY04QQrzk71qMIBixQNmSlbYQqTVt7KbB1hUn9VXX+suTzJ3IPlg7Okx Kmfh7P5tmYF+F5stOe04WedyNLmZBvOeVAmBRy2zMxH4i51mfdgZkJX0JqAbSIN9 A7LxCM6AMFMwZJdDllwMQQMFnszCxaz2Gw5+nXgbss6GIgp9ULFQuWtqD3KQxkUl GFblJ85GLtfM3BtgjZHyup53lSG8Dm7J0gjMLyk3HyHIzmexwQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIFvSSs7hotEJ8Uo/HWGDQMbfGZrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYTg5YjhiZTctMDljZi0z ZTM4LTgxMTMtZjI1YTNkYTBmODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHjPjagDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCO+jVq2U0puw5nWPdNnbDR0oyv278r6ZEPTEj4Ei4aNnsV2KJmFuMW hNLF0F7TcmeOiJNZN0Z0Z3EGV5Rn9gl7VQ8gOvNZxduSERK/zk2PdtQeXJqKNGU/ DCjBHuwSQWWBEZOEDFYFknyxAUGHhpxKCiquSq63VKDeqKRw6BQKnhN51yg4fKeQ 1w/k+jvM8S2kVwqFGzCdnnKxdkPQc0F78fmOg1nJWIuWGux9DSjTZh0kAlAqsas+ lVCfiJoan+WOXDhCQQNA/DjkqutsA7qlijZoGDfoVdBWsQHWe1R396lYvuw4MJBj BK35RfHlUTahT+hVeJ8i6VVP/oTay7RS -----END CERTIFICATE-----Generated at Thu Apr 3 02:46:04 2025 by rpki-client