$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/58ec0e37-e22c-32f5-b147-1e377b817c07.roa File: 58ec0e37-e22c-32f5-b147-1e377b817c07.roa (raw, json) Hash identifier: mZGDYR5egITp9ACSAhwiK1MKchb/DB4q0jKZ9s5J/LE= Subject key identifier: 02:11:54:E4:9D:1B:F2:52:47:B8:7F:49:0E:1D:DC:82:86:D9:D8:CB Certificate issuer: /CN=579fe1a7-1d04-4f71-b411-613b966124fb Certificate serial: 010D0C9F432858493ED3F4E3AD261AF43DD36C80 Authority key identifier: 47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/58ec0e37-e22c-32f5-b147-1e377b817c07.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 7018 IP address blocks: 140.235.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:f4:e3:ad:26:1a:f4:3d:d3:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579fe1a7-1d04-4f71-b411-613b966124fb Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=1e0bf614-780c-436e-ae0a-3802d0042366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e5:90:31:45:80:99:33:e9:00:b7:13:a9:6e: 06:0f:0d:2d:4d:eb:64:d0:35:a6:56:4f:fa:15:26: 8a:6c:11:df:f6:e8:a3:f3:b0:2c:bc:a4:39:8d:cd: 39:c2:fc:25:3e:1c:3b:bf:eb:56:ec:19:04:a6:7c: 06:bc:c5:68:ff:50:d9:1d:6c:3d:fe:4e:f4:d4:58: 04:2d:af:5b:b1:ee:a2:3d:bc:8c:22:ee:d5:34:57: 8f:32:16:1f:0f:b8:bc:87:68:3c:e6:74:4f:0e:52: d4:43:7c:34:c0:04:ea:5b:20:6c:9b:f6:79:b5:ba: 48:1d:a6:6b:94:8f:26:15:e6:92:40:d7:f6:c5:3d: 42:8a:7c:62:11:c5:d6:6a:6f:c1:57:ee:2f:f8:9e: 77:09:c1:8d:4e:a7:3c:90:cc:d1:c5:56:7a:e3:05: b3:1d:a5:fa:29:6f:7b:2a:30:45:ea:b8:7d:c6:18: 28:3a:32:8b:a2:47:30:38:f1:c7:ec:a3:16:53:bb: f5:78:2e:2a:62:52:fd:03:8c:82:4f:5c:6c:11:41: 68:e5:14:02:19:f5:a5:d4:56:c8:8e:67:4a:f2:83: fd:42:44:19:a9:03:b5:43:d1:67:21:72:50:aa:c3: 0b:38:77:4c:44:0f:c7:c7:af:bf:bc:a8:c6:d6:18: 59:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:11:54:E4:9D:1B:F2:52:47:B8:7F:49:0E:1D:DC:82:86:D9:D8:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/58ec0e37-e22c-32f5-b147-1e377b817c07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl X509v3 Authority Key Identifier: keyid:47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer sbgp-ipAddrBlock: critical IPv4: 140.235.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:46:94:60:81:e4:cd:96:ad:0d:8a:1c:84:3d:be:60:f7:f7: d0:33:bb:45:44:72:7b:02:14:19:07:02:64:99:49:c0:e4:08: a2:7b:a4:b3:d6:62:10:32:84:ab:ed:95:b1:fa:12:95:00:a3: 52:a0:3d:cb:a8:a5:53:e2:cf:06:81:a4:2a:e9:21:5e:57:5a: 09:a3:83:da:c5:7d:35:ba:10:f7:4b:09:b1:69:0b:87:0a:f3: 5a:39:ea:74:26:58:a5:f4:7b:b2:80:c4:3b:b7:95:22:90:88: 34:38:cb:af:ad:4f:0f:33:60:50:cf:0e:b4:14:83:4c:0d:b3: 32:0b:23:03:5e:ec:a2:b8:82:11:0b:4b:9d:2f:71:c3:74:88: 05:15:4c:9f:4f:bd:32:c5:2a:7a:0e:d7:5b:21:ff:9e:f2:1e: 07:59:a2:c4:1b:86:e7:d0:28:70:ad:b8:c1:a8:12:ef:8f:f8: cf:4e:dc:53:85:79:5d:28:f9:d7:83:ed:49:6d:d2:10:3a:c4: 4c:47:2e:f4:f8:41:90:1e:cd:e9:25:f9:d3:10:00:7f:46:af: d4:79:dc:1e:8a:bc:54:ac:2e:db:3d:8e:77:0b:e4:ff:c6:be: ae:4c:cc:6b:2c:81:f9:8c:67:13:c5:a4:bf:36:ea:dd:a7:01: c7:37:0a:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+0/TjrSYa9D3TbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTc5ZmUxYTctMWQwNC00ZjcxLWI0MTEtNjEzYjk2NjEy NGZiMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk MWUwYmY2MTQtNzgwYy00MzZlLWFlMGEtMzgwMmQwMDQyMzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eWQMUWAmTPpALcTqW4GDw0tTetk0DWmVk/6 FSaKbBHf9uij87AsvKQ5jc05wvwlPhw7v+tW7BkEpnwGvMVo/1DZHWw9/k701FgE La9bse6iPbyMIu7VNFePMhYfD7i8h2g85nRPDlLUQ3w0wATqWyBsm/Z5tbpIHaZr lI8mFeaSQNf2xT1CinxiEcXWam/BV+4v+J53CcGNTqc8kMzRxVZ64wWzHaX6KW97 KjBF6rh9xhgoOjKLokcwOPHH7KMWU7v1eC4qYlL9A4yCT1xsEUFo5RQCGfWl1FbI jmdK8oP9QkQZqQO1Q9FnIXJQqsMLOHdMRA/Hx6+/vKjG1hhZYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIRVOSdG/JSR7h/SQ4d3IKG2djLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81Nzlm ZTFhNy0xZDA0LTRmNzEtYjQxMS02MTNiOTY2MTI0ZmIvNThlYzBlMzctZTIyYy0z MmY1LWIxNDctMWUzNzdiODE3YzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTc5ZmUxYTctMWQwNC00ZjcxLWI0 MTEtNjEzYjk2NjEyNGZiLzU3OWZlMWE3LTFkMDQtNGY3MS1iNDExLTYxM2I5NjYx MjRmYi5jcmwwHwYDVR0jBBgwFoAUR9ED1+qSyGdIgRrPQ0vkaIytvMEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81NzlmZTFhNy0xZDA0LTRmNzEtYjQxMS02MTNi OTY2MTI0ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOvIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJGlGCB5M2WrQ2KHIQ9vmD399Azu0VEcnsCFBkHAmSZScDkCKJ7pLPW YhAyhKvtlbH6EpUAo1KgPcuopVPizwaBpCrpIV5XWgmjg9rFfTW6EPdLCbFpC4cK 81o56nQmWKX0e7KAxDu3lSKQiDQ4y6+tTw8zYFDPDrQUg0wNszILIwNe7KK4ghEL S50vccN0iAUVTJ9PvTLFKnoO11sh/57yHgdZosQbhufQKHCtuMGoEu+P+M9O3FOF eV0o+deD7Ult0hA6xExHLvT4QZAezekl+dMQAH9Gr9R53B6KvFSsLts9jncL5P/G vq5MzGssgfmMZxPFpL826t2nAcc3Cv0= -----END CERTIFICATE-----Generated at Wed Apr 9 16:16:52 2025 by rpki-client