$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/8f05e2d7-c724-30d1-8222-b8d4dca649bc.roa File: 8f05e2d7-c724-30d1-8222-b8d4dca649bc.roa (raw, json) Hash identifier: 4XTez1ELZ7KSMSqXSU0shRIkj3Amc0Kffnt2PxoL+dU= Subject key identifier: 73:98:3F:DC:71:FC:BF:B1:78:C6:F6:31:28:14:2C:54:64:09:A6:44 Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F432858495ABEC8940A36D64A785D8E00 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/8f05e2d7-c724-30d1-8222-b8d4dca649bc.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 399275 IP address blocks: 165.140.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:c8:94:0a:36:d6:4a:78:5d:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=5d675017-23d6-4b7e-b8ba-fdc5cf509af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9a:56:f8:eb:aa:10:33:b3:3d:a9:fb:94:57: 64:3d:bd:c6:57:c5:fd:ff:c9:f0:18:e1:51:ac:2e: 77:75:10:a9:97:f7:6f:dc:91:c8:c8:47:d9:28:4c: 46:85:f3:18:ba:81:d1:16:fc:aa:ab:b2:63:2a:8b: 0e:8f:65:b7:49:d1:ad:c7:cf:c4:9e:97:f4:a9:3d: 78:72:66:c1:18:ff:3a:a7:f4:2b:89:58:e3:aa:c0: 46:40:4f:32:36:35:b6:ba:e6:87:da:eb:66:d5:b1: b2:80:59:4c:dc:01:fb:a3:ac:b4:9b:7f:8c:aa:27: 03:44:fc:6b:cb:ad:a0:c4:c4:0a:63:23:e7:ec:29: bc:bd:c7:fe:52:0a:f3:ac:be:c5:cc:6c:52:0f:c6: e7:f0:74:f0:2c:fe:4c:cf:3a:76:ab:6b:c9:ee:6f: 0c:4f:92:15:89:af:6b:42:67:0b:d0:c3:13:fb:dc: 20:18:a5:24:0b:d9:e4:b3:f6:01:d6:e6:a6:28:b9: aa:9e:37:67:75:bc:1a:0d:c8:08:f6:94:65:6f:28: f5:33:a8:cf:d9:b7:0f:3d:94:83:f1:a9:9d:08:2f: 1d:bd:15:2a:b4:1b:c4:3c:33:79:a6:b2:b3:ab:fa: 1c:55:e3:bc:65:ee:f0:62:8a:db:ce:b9:94:ed:0d: ff:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:98:3F:DC:71:FC:BF:B1:78:C6:F6:31:28:14:2C:54:64:09:A6:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/8f05e2d7-c724-30d1-8222-b8d4dca649bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv4: 165.140.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:d3:88:ca:a5:be:61:c5:5d:d4:43:3c:88:fb:12:5d:b6:63: 4d:89:af:80:6c:b1:32:2f:22:20:91:ee:16:af:83:b9:02:4d: 94:87:90:da:25:2e:c7:6c:f1:79:11:48:bd:c7:a6:4e:4f:4d: d0:a3:25:87:9a:0d:79:c9:07:ed:04:7d:f6:a9:3a:ff:d7:08: 47:c4:87:cb:f2:73:f8:58:af:a4:aa:99:54:37:33:6f:0d:53: 1e:fd:e3:9e:f5:f0:02:58:d4:89:0e:a2:2d:16:fb:3e:20:ed: 22:63:38:08:b5:a0:f2:f0:cf:84:11:97:68:ac:b0:4a:dc:af: 8d:c0:06:35:d4:09:d9:f5:84:17:bd:f6:24:d1:31:d3:f0:3e: 31:25:31:50:dc:54:2c:35:5a:53:dc:62:b4:10:98:f1:fe:8f: 70:1a:b7:5d:58:9d:15:64:7c:da:4d:d7:9c:9d:6b:8f:fc:54: 6a:b8:55:1f:82:0d:3d:50:ea:58:02:05:8e:6e:ea:72:09:42: 1a:4b:f3:d1:02:2f:83:5c:8e:3e:89:08:ae:b1:9c:17:a0:85: 4d:8e:3c:c2:73:bb:88:75:14:43:e5:96:a1:6d:5d:6c:eb:16: 95:77:b5:05:d9:73:cd:ce:f9:ea:6d:ce:28:99:78:6c:f5:63: 11:e9:01:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavsiUCjbWSnhdjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk NWQ2NzUwMTctMjNkNi00YjdlLWI4YmEtZmRjNWNmNTA5YWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzppW+OuqEDOzPan7lFdkPb3GV8X9/8nwGOFR rC53dRCpl/dv3JHIyEfZKExGhfMYuoHRFvyqq7JjKosOj2W3SdGtx8/Enpf0qT14 cmbBGP86p/QriVjjqsBGQE8yNjW2uuaH2utm1bGygFlM3AH7o6y0m3+MqicDRPxr y62gxMQKYyPn7Cm8vcf+UgrzrL7FzGxSD8bn8HTwLP5Mzzp2q2vJ7m8MT5IVia9r QmcL0MMT+9wgGKUkC9nks/YB1uamKLmqnjdndbwaDcgI9pRlbyj1M6jP2bcPPZSD 8amdCC8dvRUqtBvEPDN5prKzq/ocVeO8Ze7wYorbzrmU7Q3/1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOYP9xx/L+xeMb2MSgULFRkCaZEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvOGYwNWUyZDctYzcyNC0z MGQxLTgyMjItYjhkNGRjYTY0OWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYx1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLTiMqlvmHFXdRDPIj7El22Y02Jr4BssTIvIiCR7havg7kCTZSHkNol Lsds8XkRSL3Hpk5PTdCjJYeaDXnJB+0EffapOv/XCEfEh8vyc/hYr6SqmVQ3M28N Ux7945718AJY1IkOoi0W+z4g7SJjOAi1oPLwz4QRl2issErcr43ABjXUCdn1hBe9 9iTRMdPwPjElMVDcVCw1WlPcYrQQmPH+j3Aat11YnRVkfNpN15yda4/8VGq4VR+C DT1Q6lgCBY5u6nIJQhpL89ECL4Ncjj6JCK6xnBeghU2OPMJzu4h1FEPllqFtXWzr FpV3tQXZc83O+eptziiZeGz1YxHpAWE= -----END CERTIFICATE-----Generated at Sat Apr 12 18:22:17 2025 by rpki-client