$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/1b6c62e1-eb55-361a-9aef-1a8a2d91a599.roa File: 1b6c62e1-eb55-361a-9aef-1a8a2d91a599.roa (raw, json) Hash identifier: Smi/uPrvUjbRnmFZRjTlJSecxntOvL5Tp6YzED8SWVM= Subject key identifier: A5:32:51:3B:41:7D:D1:30:6B:29:E8:5B:C3:50:54:F5:DC:1D:6C:D4 Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F4328584940394D2EAA780EF7E619F9B0 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/1b6c62e1-eb55-361a-9aef-1a8a2d91a599.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 399275 IP address blocks: 165.140.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:4d:2e:aa:78:0e:f7:e6:19:f9:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=7265e0e1-3f09-4b91-8478-36f3f696115d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9f:88:9e:1c:35:88:d2:41:1a:aa:45:70:76: 40:c4:76:92:97:74:b9:aa:91:e9:9f:73:48:be:44: c5:4c:5d:d6:74:67:ff:b5:46:a0:f3:61:95:b2:63: 5f:c2:c4:1e:10:76:09:03:dc:80:d7:a8:88:c4:41: 28:b6:74:3d:8c:c1:12:16:28:d7:cd:be:95:42:12: f3:da:5d:b7:7d:1a:74:da:5c:fe:38:b8:57:49:e8: 94:7e:be:66:b6:48:c0:36:c0:1f:81:43:79:81:17: 27:11:bc:ed:18:19:1f:82:43:9d:92:9d:b7:49:72: e9:d5:48:0d:67:a3:1f:18:86:7c:50:64:4e:bf:94: d0:4a:34:22:31:f9:11:9c:d5:9c:7a:e5:ce:28:07: 8f:cc:bc:a3:4e:2b:91:1b:83:41:f9:ce:af:b7:28: 44:f5:35:13:c0:20:2f:be:fa:6d:77:ac:5b:bc:ee: 54:96:f4:25:f4:2f:8c:d4:28:21:2f:9f:ca:13:6d: 20:84:0c:a6:c7:1d:cb:56:4b:d5:0d:39:01:33:a5: a5:f8:77:cf:75:de:07:72:b8:b9:d0:6a:6b:55:e6: 98:0e:19:67:5e:57:ca:66:47:c2:c8:21:28:33:ba: d7:65:c6:66:b2:52:18:ee:96:b7:0b:78:e8:9c:86: 41:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:32:51:3B:41:7D:D1:30:6B:29:E8:5B:C3:50:54:F5:DC:1D:6C:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/1b6c62e1-eb55-361a-9aef-1a8a2d91a599.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv4: 165.140.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:02:0e:97:70:d8:a6:98:d9:e9:b9:31:db:7d:6c:6a:bb:9c: a2:ed:c3:15:f2:a0:52:c9:ce:c0:ab:44:40:c7:18:b8:02:60: 96:c4:b9:fc:3e:c9:8f:67:71:25:8b:2e:16:c7:f7:c3:ee:91: 19:04:04:57:22:4a:16:1d:e2:41:9f:77:20:7b:86:ce:ae:a7: ff:cb:01:7d:2a:bb:3a:3c:29:91:0d:2d:f4:68:01:52:57:39: b8:b0:c7:6a:29:c7:11:51:b6:2b:4e:10:04:02:62:94:71:8d: ff:6e:38:59:0a:34:25:80:16:34:03:a7:b2:40:ed:00:8e:36: c6:98:1b:04:63:fa:11:0b:12:e5:dc:20:14:e6:1b:8a:5d:dd: cc:0e:1e:f7:54:39:90:13:36:01:0b:c4:c1:f5:bf:38:0a:1f: 9f:a3:ef:0f:bf:15:14:ec:14:eb:4a:0a:42:ad:cb:06:4a:64: a8:f2:e8:f9:75:ca:06:62:42:d0:30:19:79:da:d9:ce:90:53: f8:29:fd:77:95:55:9b:f5:f1:73:7f:d2:49:c0:4a:48:2a:a5: 8e:d6:66:62:67:d6:f4:12:f7:5f:26:e6:76:8c:90:fd:9e:c0: d0:cb:dd:a8:d1:ac:6b:6d:ff:1e:d5:6e:bc:1c:8b:d3:64:c5: 73:33:b7:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOU0uqngO9+YZ+bAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk NzI2NWUwZTEtM2YwOS00YjkxLTg0NzgtMzZmM2Y2OTYxMTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkp+Inhw1iNJBGqpFcHZAxHaSl3S5qpHpn3NI vkTFTF3WdGf/tUag82GVsmNfwsQeEHYJA9yA16iIxEEotnQ9jMESFijXzb6VQhLz 2l23fRp02lz+OLhXSeiUfr5mtkjANsAfgUN5gRcnEbztGBkfgkOdkp23SXLp1UgN Z6MfGIZ8UGROv5TQSjQiMfkRnNWceuXOKAePzLyjTiuRG4NB+c6vtyhE9TUTwCAv vvptd6xbvO5UlvQl9C+M1CghL5/KE20ghAymxx3LVkvVDTkBM6Wl+HfPdd4Hcri5 0GprVeaYDhlnXlfKZkfCyCEoM7rXZcZmslIY7pa3C3jonIZBhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUyUTtBfdEwaynoW8NQVPXcHWzUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvMWI2YzYyZTEtZWI1NS0z NjFhLTlhZWYtMWE4YTJkOTFhNTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYx2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMCDpdw2KaY2em5Mdt9bGq7nKLtwxXyoFLJzsCrREDHGLgCYJbEufw+ yY9ncSWLLhbH98PukRkEBFciShYd4kGfdyB7hs6up//LAX0quzo8KZENLfRoAVJX Obiwx2opxxFRtitOEAQCYpRxjf9uOFkKNCWAFjQDp7JA7QCONsaYGwRj+hELEuXc IBTmG4pd3cwOHvdUOZATNgELxMH1vzgKH5+j7w+/FRTsFOtKCkKtywZKZKjy6Pl1 ygZiQtAwGXna2c6QU/gp/XeVVZv18XN/0knASkgqpY7WZmJn1vQS918m5naMkP2e wNDL3ajRrGtt/x7Vbrwci9NkxXMztx0= -----END CERTIFICATE-----Generated at Sat Apr 12 18:32:15 2025 by rpki-client