$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/dacc3826-a49a-31ce-8af8-aff620dec6e2.roa File: dacc3826-a49a-31ce-8af8-aff620dec6e2.roa (raw, json) Hash identifier: qYIHUR+Y7Z3fCr8GfjG8+jN58YLpR1zHsobUz5Dvit0= Subject key identifier: 2D:C4:7C:66:D1:59:48:79:0D:FF:88:3A:26:43:E6:63:AE:4D:50:C3 Certificate issuer: /CN=c3927d26-c229-496a-8940-c88a834f5196 Certificate serial: 010D0C9F432858495ABEE3BC7A1990CDE3D37180 Authority key identifier: DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/dacc3826-a49a-31ce-8af8-aff620dec6e2.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 12119 IP address blocks: 140.177.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:e3:bc:7a:19:90:cd:e3:d3:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3927d26-c229-496a-8940-c88a834f5196 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=1058d3ce-d308-4046-b67e-1e13b3067df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:be:e1:20:0a:7b:f5:e2:bc:0c:bb:3b:5e:f9: d8:95:ae:db:19:25:fa:c8:7b:c1:8c:07:93:07:09: 03:d4:32:7e:fc:1b:47:86:2a:a0:e4:e8:71:12:a3: 29:d6:6d:85:42:2f:2a:7d:f5:3e:fa:ff:03:ba:c1: 79:b5:0b:6f:dc:b5:ee:08:79:3f:54:7e:68:e4:80: 66:bb:fd:37:ee:c4:ed:e2:4d:15:0e:6b:e7:5f:38: 5a:de:e0:72:f6:fc:d4:95:f4:5f:e1:82:44:1f:5e: c7:56:a1:58:6b:d5:c7:dc:82:2f:c3:1d:03:80:10: 38:1b:d9:33:d0:be:32:e0:de:f5:93:20:91:03:fc: 5e:a6:83:94:7c:20:14:01:e1:55:31:04:d8:2e:46: 3f:d5:46:b2:73:f3:29:93:fc:b6:c7:d5:ca:af:b2: 4d:57:dc:cf:ea:6d:df:9b:86:2c:38:cc:ef:5b:d5: 81:32:7b:b3:82:d3:f8:2e:a1:d4:2f:98:bc:2c:39: 05:c8:7a:79:34:b8:e2:61:af:99:82:f7:b8:76:bf: eb:1a:73:63:d6:db:91:23:13:f7:fa:8d:50:68:54: de:85:ad:14:2a:b1:c0:20:66:c7:1c:82:59:67:16: 39:2d:93:c9:6a:c2:bf:dc:d7:8b:c6:c4:57:d2:8c: 5d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C4:7C:66:D1:59:48:79:0D:FF:88:3A:26:43:E6:63:AE:4D:50:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/dacc3826-a49a-31ce-8af8-aff620dec6e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl X509v3 Authority Key Identifier: keyid:DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer sbgp-ipAddrBlock: critical IPv4: 140.177.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:0b:86:4c:50:92:31:16:53:36:f6:a7:3d:35:21:96:75:4f: e6:81:de:7a:04:37:ce:ea:88:c9:a3:fc:87:9d:33:f7:89:d6: db:ac:ee:8b:4e:81:60:65:38:c2:d2:f2:53:bb:72:1a:4a:f3: 34:c0:25:00:e7:a6:50:ea:88:d6:f4:09:ac:70:de:ed:1f:45: 75:0d:e9:17:78:c9:1b:da:fb:77:5c:45:8e:82:b0:b6:ae:1c: 78:66:c9:3e:a5:ae:c0:dd:61:44:ed:3d:d9:12:b0:f2:d6:2d: 81:bb:d5:33:8e:80:d9:4d:17:c4:62:15:6f:fb:ab:3c:94:01: 8e:94:4a:64:33:aa:52:8a:ee:08:3f:d4:aa:95:b1:f7:87:be: c6:59:1c:3f:ec:5a:d1:ed:a0:ea:da:92:62:1b:cb:89:13:3a: 89:6a:3a:51:33:53:93:66:75:1c:49:b5:64:c1:af:5f:13:b0: 41:ae:29:29:dd:f6:fd:66:26:e9:18:00:3b:91:16:f7:c1:db: 6e:72:b4:e3:4e:01:74:b1:9a:52:7f:85:e8:95:c4:03:d0:ea: 90:31:ec:12:28:c5:24:11:72:99:cc:2f:d3:a1:eb:d8:89:82: 0f:bf:c7:8f:89:cd:16:cf:58:b7:f9:db:95:11:5e:c1:d7:ab: 19:ea:05:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavuO8ehmQzePTcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM5MjdkMjYtYzIyOS00OTZhLTg5NDAtYzg4YTgzNGY1 MTk2MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk MTA1OGQzY2UtZDMwOC00MDQ2LWI2N2UtMWUxM2IzMDY3ZGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl77hIAp79eK8DLs7XvnYla7bGSX6yHvBjAeT BwkD1DJ+/BtHhiqg5OhxEqMp1m2FQi8qffU++v8DusF5tQtv3LXuCHk/VH5o5IBm u/037sTt4k0VDmvnXzha3uBy9vzUlfRf4YJEH17HVqFYa9XH3IIvwx0DgBA4G9kz 0L4y4N71kyCRA/xepoOUfCAUAeFVMQTYLkY/1Uayc/Mpk/y2x9XKr7JNV9zP6m3f m4YsOMzvW9WBMnuzgtP4LqHUL5i8LDkFyHp5NLjiYa+Zgve4dr/rGnNj1tuRIxP3 +o1QaFTeha0UKrHAIGbHHIJZZxY5LZPJasK/3NeLxsRX0oxd0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3EfGbRWUh5Df+IOiZD5mOuTVDDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMzky N2QyNi1jMjI5LTQ5NmEtODk0MC1jODhhODM0ZjUxOTYvZGFjYzM4MjYtYTQ5YS0z MWNlLThhZjgtYWZmNjIwZGVjNmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzM5MjdkMjYtYzIyOS00OTZhLTg5 NDAtYzg4YTgzNGY1MTk2L2MzOTI3ZDI2LWMyMjktNDk2YS04OTQwLWM4OGE4MzRm NTE5Ni5jcmwwHwYDVR0jBBgwFoAU3iC7Zcii3YxtAozJJDHZDGDF51owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jMzkyN2QyNi1jMjI5LTQ5NmEtODk0MC1jODhh ODM0ZjUxOTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHjLGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANELhkxQkjEWUzb2pz01IZZ1T+aB3noEN87qiMmj/IedM/eJ1tus7otO gWBlOMLS8lO7chpK8zTAJQDnplDqiNb0Caxw3u0fRXUN6Rd4yRva+3dcRY6CsLau HHhmyT6lrsDdYUTtPdkSsPLWLYG71TOOgNlNF8RiFW/7qzyUAY6USmQzqlKK7gg/ 1KqVsfeHvsZZHD/sWtHtoOrakmIby4kTOolqOlEzU5NmdRxJtWTBr18TsEGuKSnd 9v1mJukYADuRFvfB225ytONOAXSxmlJ/heiVxAPQ6pAx7BIoxSQRcpnML9Oh69iJ gg+/x4+JzRbPWLf525URXsHXqxnqBec= -----END CERTIFICATE-----Generated at Sat Apr 12 09:29:10 2025 by rpki-client