$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/b988863a-b55f-306e-a9f1-1ac1df3e2b66.roa File: b988863a-b55f-306e-a9f1-1ac1df3e2b66.roa (raw, json) Hash identifier: FTpgjyVw0yDKVHhbKkMTEFTmsyAUNqQyKuxZTqaxuvE= Subject key identifier: E3:FB:43:3B:8D:45:1A:9A:C4:15:5E:55:BE:76:96:0C:10:BF:F3:98 Certificate issuer: /CN=90867e5c-2c8f-4999-a134-dc9418f84496 Certificate serial: 010D0C9F43285848AF2B7DA83B9B31B4BD8F0600 Authority key identifier: 7F:CC:4B:3E:97:1E:B5:00:F6:7A:41:32:9C:50:6F:B0:B7:61:9D:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/b988863a-b55f-306e-a9f1-1ac1df3e2b66.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 40623 IP address blocks: 140.208.0.0/17 maxlen: 24 140.208.128.0/19 maxlen: 24 140.208.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:7d:a8:3b:9b:31:b4:bd:8f:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90867e5c-2c8f-4999-a134-dc9418f84496 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=c85f1c3c-7c78-4b0a-bbcf-97081de2bf27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ba:1e:a5:f9:03:98:d2:68:de:72:5c:10:c6: 98:02:c7:92:79:9e:31:50:dd:c6:f8:45:25:4c:8f: 6d:a6:49:a9:26:00:47:7b:f5:65:f0:de:91:ee:19: e9:b4:28:77:7c:f9:ba:8a:9f:c8:0f:55:19:3a:f9: 8a:2a:4b:fa:52:1b:ef:76:43:9f:ee:42:a8:a0:25: 9b:1a:2f:8f:1e:19:64:f4:8e:7f:02:1e:69:b1:50: c6:9a:03:8e:03:db:e8:f1:f2:8e:36:28:bb:54:a0: 79:dc:9b:44:04:9d:6b:a7:be:ae:41:ae:0a:80:1a: 66:6f:d7:80:68:2d:0e:24:8a:9e:64:23:6a:11:df: ea:b6:79:cd:b2:1c:72:9a:de:b6:78:1d:a7:09:b8: 97:59:25:58:4f:bf:7d:fd:ec:67:87:13:d2:c7:66: 94:b7:26:cc:7c:15:df:49:65:83:5e:c6:cd:70:9c: 15:2d:6f:0b:1b:40:c2:e7:86:94:45:eb:d7:d4:8b: 74:16:e8:0c:f5:51:64:da:38:7d:17:5f:0a:ab:3e: 84:cf:4e:5d:c5:79:88:55:be:f3:f1:03:10:9e:47: 83:b2:ae:ca:5f:52:2b:09:43:9f:ee:69:85:1b:46: d1:0e:53:72:72:5b:fc:ef:fe:ac:f1:b1:91:21:19: 43:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FB:43:3B:8D:45:1A:9A:C4:15:5E:55:BE:76:96:0C:10:BF:F3:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/b988863a-b55f-306e-a9f1-1ac1df3e2b66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.crl X509v3 Authority Key Identifier: keyid:7F:CC:4B:3E:97:1E:B5:00:F6:7A:41:32:9C:50:6F:B0:B7:61:9D:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer sbgp-ipAddrBlock: critical IPv4: 140.208.0.0-140.208.159.255 140.208.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:a1:63:aa:47:f0:84:4a:6a:5e:c4:ea:19:a8:26:41:db:dd: 74:db:dc:a8:20:fe:b5:52:a0:5d:ef:9a:6c:62:97:c6:26:4b: 25:9b:0e:d8:ad:d9:fc:6e:29:01:eb:46:71:27:71:73:7a:73: 39:e8:bf:44:ec:d5:1f:7f:35:f8:01:5a:56:5d:ac:b8:e1:68: fd:4e:ca:4d:b5:45:d7:c8:65:ba:4b:bb:88:aa:63:c2:00:2d: d0:7c:fc:52:b0:c1:33:c9:9e:7c:ef:94:83:f0:51:73:a5:4d: 21:eb:9b:85:de:79:f5:12:5e:03:19:ff:ac:e0:b1:c7:22:e4: d2:c6:71:b0:8b:50:34:ac:d1:90:1f:c8:ee:16:7c:dc:03:77: fe:66:ed:20:aa:2c:ec:fe:2e:21:e4:f2:c6:88:a9:eb:e1:60: 27:c9:88:b5:fb:4a:c3:1d:ea:a6:ed:dd:31:60:f4:1e:9d:33: 6a:89:95:2f:fc:4a:96:9a:3c:41:e4:93:99:15:8b:c8:62:21: 8e:3b:70:a6:d9:3d:71:7e:67:dd:59:5e:14:10:7b:ec:4a:a1: c0:85:5b:e6:7a:ab:88:47:4e:7a:0a:56:cf:39:ba:60:1e:33: 69:8a:86:45:af:8c:84:9c:7e:68:17:90:3a:39:b7:26:ee:3e: a9:cb:fe:30 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEivK32oO5sxtL2PBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NjdlNWMtMmM4Zi00OTk5LWExMzQtZGM5NDE4Zjg0 NDk2MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk Yzg1ZjFjM2MtN2M3OC00YjBhLWJiY2YtOTcwODFkZTJiZjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlboepfkDmNJo3nJcEMaYAseSeZ4xUN3G+EUl TI9tpkmpJgBHe/Vl8N6R7hnptCh3fPm6ip/ID1UZOvmKKkv6UhvvdkOf7kKooCWb Gi+PHhlk9I5/Ah5psVDGmgOOA9vo8fKONii7VKB53JtEBJ1rp76uQa4KgBpmb9eA aC0OJIqeZCNqEd/qtnnNshxymt62eB2nCbiXWSVYT799/exnhxPSx2aUtybMfBXf SWWDXsbNcJwVLW8LG0DC54aURevX1It0FugM9VFk2jh9F18Kqz6Ez05dxXmIVb7z 8QMQnkeDsq7KX1IrCUOf7mmFG0bRDlNyclv87/6s8bGRIRlDQQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOP7QzuNRRqaxBVeVb52lgwQv/OYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MDg2 N2U1Yy0yYzhmLTQ5OTktYTEzNC1kYzk0MThmODQ0OTYvYjk4ODg2M2EtYjU1Zi0z MDZlLWE5ZjEtMWFjMWRmM2UyYjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTA4NjdlNWMtMmM4Zi00OTk5LWEx MzQtZGM5NDE4Zjg0NDk2LzkwODY3ZTVjLTJjOGYtNDk5OS1hMTM0LWRjOTQxOGY4 NDQ5Ni5jcmwwHwYDVR0jBBgwFoAUf8xLPpcetQD2ekEynFBvsLdhnSwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MDg2N2U1Yy0yYzhmLTQ5OTktYTEzNC1kYzk0 MThmODQ0OTYuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATMAsDAwSM0AME BYzQgAMEBIzQ4DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB4oWOqR/CESmpexOoZqCZB291029yoIP61UqBd 75psYpfGJkslmw7Yrdn8bikB60ZxJ3FzenM56L9E7NUffzX4AVpWXay44Wj9TspN tUXXyGW6S7uIqmPCAC3QfPxSsMEzyZ5875SD8FFzpU0h65uF3nn1El4DGf+s4LHH IuTSxnGwi1A0rNGQH8juFnzcA3f+Zu0gqizs/i4h5PLGiKnr4WAnyYi1+0rDHeqm 7d0xYPQenTNqiZUv/EqWmjxB5JOZFYvIYiGOO3Cm2T1xfmfdWV4UEHvsSqHAhVvm equIR056ClbPObpgHjNpioZFr4yEnH5oF5A6Obcm7j6py/4w -----END CERTIFICATE-----Generated at Fri Feb 7 02:30:23 2025 by rpki-client