$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bf1633f8-d6b7-3a23-a0ed-24ee930e2af2.roa File: bf1633f8-d6b7-3a23-a0ed-24ee930e2af2.roa (raw, json) Hash identifier: FWkEyNaHWVJ/MklCnkfTnEcmAJNvK/9HDND1dFJZLb4= Subject key identifier: 93:E9:40:A9:47:FC:BF:11:6B:24:90:8C:90:7D:FB:9D:38:BF:86:D9 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584953C42C5B4AB447769CCE1680 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bf1633f8-d6b7-3a23-a0ed-24ee930e2af2.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 54113 IP address blocks: 140.248.221.64/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:2c:5b:4a:b4:47:76:9c:ce:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=523e9acf-10f6-4776-9785-cbf7aa512021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:19:01:76:05:31:6b:c3:ce:61:0a:a7:9b:76: a9:eb:80:b5:37:fe:2e:4b:e2:32:88:36:8a:76:2d: d8:78:a7:d9:5e:f5:66:a4:f9:8b:f6:8a:62:1f:f8: 9a:83:19:a9:9c:40:76:55:d6:f8:b8:b4:ae:1e:2a: a9:e7:df:6e:96:40:80:3b:4f:3f:1d:ab:11:75:84: 08:c5:d1:3d:53:7d:67:8d:9b:da:e9:75:cf:37:a5: ae:d1:ae:d9:f2:b1:5c:71:2b:e8:71:14:53:2e:91: 73:d6:64:03:eb:dd:ac:4c:78:ea:be:35:34:bf:ca: a2:68:2d:7d:30:ff:bf:66:2c:b7:a0:2b:be:df:be: 90:df:7f:a3:fc:8f:7d:8c:9d:64:5e:e2:fc:ea:87: 8d:7b:ba:b2:8f:42:98:cf:d2:6d:87:d0:ec:3a:99: 09:ae:0f:64:48:bc:4c:7a:e7:54:9a:04:01:7a:d5: da:9e:a1:20:c5:30:5f:19:ce:ff:07:19:8c:ab:40: e6:89:30:60:bc:58:ea:d7:6c:4d:6d:80:24:8c:7e: 38:ea:cf:73:9e:ae:8c:2b:2e:3d:41:82:57:cf:dc: f9:49:4a:3b:1c:e7:61:c8:43:ca:e2:de:91:f4:05: c6:60:1b:53:a4:60:10:b4:1a:8a:f8:c3:d0:eb:44: fc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E9:40:A9:47:FC:BF:11:6B:24:90:8C:90:7D:FB:9D:38:BF:86:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bf1633f8-d6b7-3a23-a0ed-24ee930e2af2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.221.64/26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:e3:fc:66:0d:04:49:e8:36:40:9e:31:57:32:e0:f9:c6:20: a2:20:c7:7b:cb:03:43:e3:10:ad:e6:6d:95:76:5c:a6:49:70: cd:0d:86:b0:63:4d:13:90:d9:2a:29:09:ed:1f:40:e4:17:b6: 32:6e:b8:2f:8f:89:9e:f1:74:db:f8:82:77:ea:b7:02:18:4d: 40:c3:8b:7a:fe:06:76:ac:bc:10:0b:ec:88:f0:54:64:d9:7c: 5c:04:dd:9d:d7:73:a7:b4:ce:19:c9:19:81:c1:ea:1b:4b:0c: 21:df:49:b9:af:9a:fb:53:d9:24:76:8d:52:1a:92:6a:2f:89: 07:fc:9d:2c:e7:e0:e0:c3:c1:bd:89:ae:ad:de:f0:8f:18:e4: 5a:b2:01:cb:46:27:ae:3e:60:a2:51:a5:81:bd:63:68:a0:fc: aa:a2:e8:4a:f8:db:11:d8:b6:49:f4:31:39:55:7d:2a:40:e8: 68:1e:c1:0b:a2:71:3a:d3:73:c4:f6:ed:12:a7:a6:4f:3f:b1: ec:f4:06:eb:c7:be:2c:03:5b:0c:7b:31:80:01:7b:b8:92:cf: 54:3b:2f:86:cb:09:dc:50:9b:89:99:03:76:eb:89:a5:c0:db: 1a:45:8e:2d:a2:2e:5f:9b:77:1e:b8:84:ef:e5:98:7c:89:09: bf:f1:c9:33 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElTxCxbSrRHdpzOFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk NTIzZTlhY2YtMTBmNi00Nzc2LTk3ODUtY2JmN2FhNTEyMDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRkBdgUxa8POYQqnm3ap64C1N/4uS+IyiDaK di3YeKfZXvVmpPmL9opiH/iagxmpnEB2Vdb4uLSuHiqp599ulkCAO08/HasRdYQI xdE9U31njZva6XXPN6Wu0a7Z8rFccSvocRRTLpFz1mQD692sTHjqvjU0v8qiaC19 MP+/Ziy3oCu+376Q33+j/I99jJ1kXuL86oeNe7qyj0KYz9Jth9DsOpkJrg9kSLxM eudUmgQBetXanqEgxTBfGc7/BxmMq0DmiTBgvFjq12xNbYAkjH446s9znq6MKy49 QYJXz9z5SUo7HOdhyEPK4t6R9AXGYBtTpGAQtBqK+MPQ60T8dQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJPpQKlH/L8RaySQjJB9+504v4bZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYmYxNjMzZjgtZDZiNy0z YTIzLWEwZWQtMjRlZTkzMGUyYWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGjPjdQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAq4/xmDQRJ6DZAnjFXMuD5xiCiIMd7ywND4xCt5m2VdlymSXDNDYaw Y00TkNkqKQntH0DkF7Yybrgvj4me8XTb+IJ36rcCGE1Aw4t6/gZ2rLwQC+yI8FRk 2XxcBN2d13OntM4ZyRmBweobSwwh30m5r5r7U9kkdo1SGpJqL4kH/J0s5+Dgw8G9 ia6t3vCPGORasgHLRieuPmCiUaWBvWNooPyqouhK+NsR2LZJ9DE5VX0qQOhoHsEL onE603PE9u0Sp6ZPP7Hs9Abrx74sA1sMezGAAXu4ks9UOy+GywncUJuJmQN264ml wNsaRY4toi5fm3ceuITv5Zh8iQm/8ckz -----END CERTIFICATE-----Generated at Thu Apr 3 02:51:11 2025 by rpki-client