$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/b69ff32b-9ad8-3067-af5e-31430bf92e2a.roa File: b69ff32b-9ad8-3067-af5e-31430bf92e2a.roa (raw, json) Hash identifier: 2OrgnvUd40qeEGjU027kR1AXxip2022Hs9w0HrGcCjA= Subject key identifier: 13:B3:95:45:04:6F:C0:74:05:4C:5C:47:63:06:64:83:62:CF:85:16 Certificate issuer: /CN=78ffdd14-7e7a-46d4-993a-4b51f8031030 Certificate serial: 010D0C9F43285848F54CB009EF65C013E8786980 Authority key identifier: FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/b69ff32b-9ad8-3067-af5e-31430bf92e2a.roa Signing time: Fri 21 Feb 2025 16:54:27 +0000 ROA not before: Fri 21 Feb 2025 16:54:27 +0000 ROA not after: Thu 22 May 2025 15:54:27 +0000 asID: 14618 IP address blocks: 165.140.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f5:4c:b0:09:ef:65:c0:13:e8:78:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78ffdd14-7e7a-46d4-993a-4b51f8031030 Validity Not Before: Feb 21 16:54:27 2025 GMT Not After : May 22 15:54:27 2025 GMT Subject: CN=5fcacb03-7d66-4110-a68f-8b606725c639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:19:8f:fe:b4:58:f8:e7:82:a7:31:85:cb:80: 94:bd:0f:23:b1:04:d7:57:f8:35:85:70:27:6c:65: b1:56:38:b8:82:38:25:e3:b2:f9:66:93:9d:20:e7: a4:3b:73:39:38:07:88:09:6e:ad:18:19:53:18:27: 55:20:c7:1a:9a:b4:be:99:46:61:3d:d8:fb:1f:49: 2e:49:fc:68:6e:95:fd:52:f3:0f:98:c6:cd:bc:d4: df:a6:e8:86:34:21:e0:38:ef:50:2c:f9:c6:9c:40: 4d:15:dd:0c:8a:09:8b:3b:bc:68:75:e3:5a:25:a7: a3:67:75:93:50:d4:97:37:29:27:22:3e:7b:c7:5c: 1b:e6:8f:b5:ca:e3:01:e3:0c:fe:f5:40:4a:85:82: 40:96:f0:c3:b7:1f:d0:19:37:28:4f:36:c7:c7:4e: 3a:48:f3:3d:a1:d4:4b:3c:80:0e:62:0b:d5:77:ff: d4:7d:aa:70:af:69:6c:7c:6b:12:9c:4a:74:01:f3: aa:b6:8e:d2:69:c9:88:47:ad:99:e0:8b:cc:7c:32: 16:aa:ad:47:68:85:28:cb:c8:3a:90:92:81:ad:e4: b2:9b:69:44:9b:67:d6:4d:90:f3:16:41:b4:3b:13: bb:dc:02:d0:67:79:4e:78:eb:bb:2f:bc:a3:52:2d: 83:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B3:95:45:04:6F:C0:74:05:4C:5C:47:63:06:64:83:62:CF:85:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/b69ff32b-9ad8-3067-af5e-31430bf92e2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.crl X509v3 Authority Key Identifier: keyid:FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer sbgp-ipAddrBlock: critical IPv4: 165.140.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:35:7a:59:ad:8b:fb:7f:c4:8a:bd:99:d2:76:59:e5:66:fd: 0d:c7:d0:8d:3b:f4:f4:1c:9a:51:9c:05:72:c9:57:9e:c1:10: b5:36:5a:3f:a7:8e:84:c2:3c:63:e2:e3:ae:03:c5:e1:c9:4b: b3:a7:34:00:0c:57:b0:9c:59:15:fd:94:15:04:c2:54:3f:f4: af:c6:58:68:e9:fe:66:1a:bf:a4:d1:7c:57:a8:39:46:4a:6d: e3:96:ce:4b:79:3f:52:f8:d3:a6:b6:94:f5:b8:3e:a4:e6:38: 54:27:36:be:17:7e:de:40:bb:04:37:da:28:ba:05:7d:26:b6: 2e:e7:68:91:03:d1:3e:84:1a:83:62:12:6b:33:60:7e:7c:87: f8:c8:ac:6e:b0:88:5b:14:02:a3:84:f5:2e:fc:78:b2:48:45: 1f:45:82:ed:87:84:04:ea:82:00:69:87:b4:32:b5:4e:d0:2d: f2:54:0e:24:ee:2a:cf:b4:4f:3d:ea:65:1a:0c:9e:8c:4d:a1: 4d:d0:20:0a:e5:7b:73:ee:dc:e9:f8:71:39:74:b7:b8:b6:38: 6e:aa:b4:03:95:d1:c9:82:ba:eb:d6:c0:55:96:7e:bf:a5:24: f6:04:4d:7e:81:cc:41:bb:08:33:27:21:fa:a3:ea:35:da:74: 4e:a4:4e:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj1TLAJ72XAE+h4aYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhmZmRkMTQtN2U3YS00NmQ0LTk5M2EtNGI1MWY4MDMx MDMwMB4XDTI1MDIyMTE2NTQyN1oXDTI1MDUyMjE1NTQyN1owLzEtMCsGA1UEAxMk NWZjYWNiMDMtN2Q2Ni00MTEwLWE2OGYtOGI2MDY3MjVjNjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hmP/rRY+OeCpzGFy4CUvQ8jsQTXV/g1hXAn bGWxVji4gjgl47L5ZpOdIOekO3M5OAeICW6tGBlTGCdVIMcamrS+mUZhPdj7H0ku SfxobpX9UvMPmMbNvNTfpuiGNCHgOO9QLPnGnEBNFd0MigmLO7xodeNaJaejZ3WT UNSXNyknIj57x1wb5o+1yuMB4wz+9UBKhYJAlvDDtx/QGTcoTzbHx046SPM9odRL PIAOYgvVd//Ufapwr2lsfGsSnEp0AfOqto7SacmIR62Z4IvMfDIWqq1HaIUoy8g6 kJKBreSym2lEm2fWTZDzFkG0OxO73ALQZ3lOeOu7L7yjUi2DgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOzlUUEb8B0BUxcR2MGZINiz4UWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83OGZm ZGQxNC03ZTdhLTQ2ZDQtOTkzYS00YjUxZjgwMzEwMzAvYjY5ZmYzMmItOWFkOC0z MDY3LWFmNWUtMzE0MzBiZjkyZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzhmZmRkMTQtN2U3YS00NmQ0LTk5 M2EtNGI1MWY4MDMxMDMwLzc4ZmZkZDE0LTdlN2EtNDZkNC05OTNhLTRiNTFmODAz MTAzMC5jcmwwHwYDVR0jBBgwFoAU/QuzhgAVhg19Ci8bWzOXl7mVTrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83OGZmZGQxNC03ZTdhLTQ2ZDQtOTkzYS00YjUx ZjgwMzEwMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpYw6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHs1elmti/t/xIq9mdJ2WeVm/Q3H0I079PQcmlGcBXLJV57BELU2Wj+n joTCPGPi464DxeHJS7OnNAAMV7CcWRX9lBUEwlQ/9K/GWGjp/mYav6TRfFeoOUZK beOWzkt5P1L406a2lPW4PqTmOFQnNr4Xft5AuwQ32ii6BX0mti7naJED0T6EGoNi EmszYH58h/jIrG6wiFsUAqOE9S78eLJIRR9Fgu2HhATqggBph7QytU7QLfJUDiTu Ks+0Tz3qZRoMnoxNoU3QIArle3Pu3On4cTl0t7i2OG6qtAOV0cmCuuvWwFWWfr+l JPYETX6BzEG7CDMnIfqj6jXadE6kTlk= -----END CERTIFICATE-----Generated at Fri Apr 4 23:27:00 2025 by rpki-client