$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/1acb3e17-b2a2-32de-a5b1-fbd7bfa56870.roa File: 1acb3e17-b2a2-32de-a5b1-fbd7bfa56870.roa (raw, json) Hash identifier: G8fgooAZ6eHuwXjEeSN8PdqY8GBIIst7VAB7qiLdBmw= Subject key identifier: 99:B0:A5:AB:19:1F:84:77:3C:C9:C7:95:B2:B4:89:6C:EB:14:B5:46 Certificate issuer: /CN=d728b4fd-6e8b-46c7-b58e-81fdea6be61f Certificate serial: 010D0C9F4328584930DE65271AD56F832C473B80 Authority key identifier: 5E:AB:B9:1F:C7:01:DE:EE:4A:2D:40:20:72:79:74:A3:FE:09:B0:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/1acb3e17-b2a2-32de-a5b1-fbd7bfa56870.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 398781 IP address blocks: 165.140.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:65:27:1a:d5:6f:83:2c:47:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d728b4fd-6e8b-46c7-b58e-81fdea6be61f Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=1a0b9a6c-d412-4980-9850-91b8b164d6bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1f:fa:e5:66:62:b3:c4:1b:ab:57:d1:e6:b8: ba:53:72:2f:be:00:a1:cc:1c:a4:93:1f:64:c1:6e: 25:08:f9:39:2e:8d:42:8b:0e:78:52:86:c3:80:55: 77:7e:fb:28:63:93:7a:e2:bd:c5:7e:80:c4:dc:7a: 02:35:8c:81:ec:a0:a9:38:09:e2:a7:ff:b6:45:a2: 1a:b6:94:e0:d5:db:55:a5:7e:28:47:6c:5e:07:49: ad:4a:90:9a:28:21:5a:c8:9f:b8:be:2b:92:12:69: 8a:9f:e6:b4:8d:9e:8c:51:8b:eb:3e:74:bd:03:cf: b7:1d:ad:64:a2:f7:cc:8c:bc:a2:57:3a:aa:65:09: 3d:1a:7f:e4:f8:fe:a0:d9:f4:73:b0:6f:ff:35:3e: 07:40:43:97:bf:61:15:0b:64:c9:88:b9:13:29:14: b4:29:41:43:51:4a:2f:b3:ba:1e:3d:0e:fd:bd:8f: ba:21:60:cf:26:af:e4:53:31:8e:a9:ba:12:25:22: 5c:02:76:d9:2d:16:2f:75:d8:d3:f1:e0:ea:e7:e7: b9:c8:01:4f:1f:97:a3:a4:5e:78:bb:ed:d3:52:3d: f6:fc:0a:56:64:4b:2d:51:f0:9d:c1:c1:ab:d5:f4: f9:dc:f8:45:4d:36:b2:e8:bc:da:9e:9b:df:74:67: 85:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B0:A5:AB:19:1F:84:77:3C:C9:C7:95:B2:B4:89:6C:EB:14:B5:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/1acb3e17-b2a2-32de-a5b1-fbd7bfa56870.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl X509v3 Authority Key Identifier: keyid:5E:AB:B9:1F:C7:01:DE:EE:4A:2D:40:20:72:79:74:A3:FE:09:B0:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer sbgp-ipAddrBlock: critical IPv4: 165.140.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:8e:de:40:b0:e7:af:d7:32:04:ff:ed:4a:67:96:90:55:df: 2c:69:d7:71:96:38:19:54:0e:0a:dc:05:d4:14:88:66:7f:f4: e9:67:2a:5c:3b:7f:52:f8:73:3f:43:b7:6d:0f:06:23:32:1a: 3a:26:de:b3:04:0f:3e:ba:5c:6e:d5:77:50:3f:e2:89:4d:e0: c5:f6:f2:89:68:7c:cd:28:62:e1:bc:38:38:59:b1:cb:ee:ad: 65:9b:42:85:e0:80:89:c9:fa:4b:8d:a5:b6:f2:4d:92:26:b4: b0:cf:71:fc:ab:14:f3:53:d4:ff:94:59:a8:05:f1:fa:de:fc: d7:a9:1e:c3:1c:9b:4f:17:5d:1f:6d:27:cd:45:ee:05:7f:06: cc:fe:52:c3:e8:d5:29:1f:31:2b:2a:08:e4:4f:a0:7d:23:5c: ce:13:6a:5e:fd:4a:09:20:a8:1b:67:72:f5:1e:1b:18:a3:72: 0a:90:56:42:95:ae:81:f9:17:b0:cb:66:40:a3:f5:fb:28:e2: ee:08:ac:06:f3:12:80:bf:62:ef:32:54:d0:bc:eb:7a:22:ba: cf:17:94:78:dd:18:9c:19:11:ce:37:15:4c:46:e3:3f:0f:54: ae:78:14:b1:bf:39:d5:26:38:e0:dd:97:ae:ab:7d:2f:a9:1a: 7b:0d:33:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3mUnGtVvgyxHO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcyOGI0ZmQtNmU4Yi00NmM3LWI1OGUtODFmZGVhNmJl NjFmMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk MWEwYjlhNmMtZDQxMi00OTgwLTk4NTAtOTFiOGIxNjRkNmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgx/65WZis8Qbq1fR5ri6U3IvvgChzBykkx9k wW4lCPk5Lo1Ciw54UobDgFV3fvsoY5N64r3FfoDE3HoCNYyB7KCpOAnip/+2RaIa tpTg1dtVpX4oR2xeB0mtSpCaKCFayJ+4viuSEmmKn+a0jZ6MUYvrPnS9A8+3Ha1k ovfMjLyiVzqqZQk9Gn/k+P6g2fRzsG//NT4HQEOXv2EVC2TJiLkTKRS0KUFDUUov s7oePQ79vY+6IWDPJq/kUzGOqboSJSJcAnbZLRYvddjT8eDq5+e5yAFPH5ejpF54 u+3TUj32/ApWZEstUfCdwcGr1fT53PhFTTay6LzanpvfdGeFIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmwpasZH4R3PMnHlbK0iWzrFLVGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNzI4 YjRmZC02ZThiLTQ2YzctYjU4ZS04MWZkZWE2YmU2MWYvMWFjYjNlMTctYjJhMi0z MmRlLWE1YjEtZmJkN2JmYTU2ODcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDcyOGI0ZmQtNmU4Yi00NmM3LWI1 OGUtODFmZGVhNmJlNjFmL2Q3MjhiNGZkLTZlOGItNDZjNy1iNThlLTgxZmRlYTZi ZTYxZi5jcmwwHwYDVR0jBBgwFoAUXqu5H8cB3u5KLUAgcnl0o/4JsCEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNzI4YjRmZC02ZThiLTQ2YzctYjU4ZS04MWZk ZWE2YmU2MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuO3kCw56/XMgT/7UpnlpBV3yxp13GWOBlUDgrcBdQUiGZ/9OlnKlw7 f1L4cz9Dt20PBiMyGjom3rMEDz66XG7Vd1A/4olN4MX28olofM0oYuG8ODhZscvu rWWbQoXggInJ+kuNpbbyTZImtLDPcfyrFPNT1P+UWagF8fre/NepHsMcm08XXR9t J81F7gV/Bsz+UsPo1SkfMSsqCORPoH0jXM4Tal79SgkgqBtncvUeGxijcgqQVkKV roH5F7DLZkCj9fso4u4IrAbzEoC/Yu8yVNC863oius8XlHjdGJwZEc43FUxG4z8P VK54FLG/OdUmOODdl66rfS+pGnsNM9k= -----END CERTIFICATE-----Generated at Mon Apr 7 15:26:49 2025 by rpki-client