$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/a126dc2a-ea12-360f-884a-c034289f0aee.roa File: a126dc2a-ea12-360f-884a-c034289f0aee.roa (raw, json) Hash identifier: aeTcZqkU3i5/WLNkfCNC6DRYAzJAg1kd4ACzIyGVlk0= Subject key identifier: 0E:82:85:4D:60:59:47:F9:8D:20:9B:B0:9F:B7:48:9F:82:5F:AB:FA Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F432858493C091E2F374707890D7B1680 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/a126dc2a-ea12-360f-884a-c034289f0aee.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 397423 IP address blocks: 165.140.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:1e:2f:37:47:07:89:0d:7b:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=6604c6e9-a62d-4a5f-a308-0f402a7059f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c1:37:eb:3c:98:55:c8:2f:e1:c6:36:a3:16: 95:a5:6b:e1:98:32:fb:dd:7c:f5:1a:49:c1:51:70: 7a:38:be:fd:6e:04:cb:41:7f:77:2a:ee:5f:28:5e: 13:21:b2:13:27:71:5e:5f:90:89:24:83:1f:23:7d: 0a:9b:b0:c1:19:59:36:14:f2:5c:1a:4c:3b:a8:7d: 9f:f7:1f:3d:3c:b7:00:e7:77:56:b5:0f:79:43:22: b6:e5:b5:b8:22:66:ad:be:7c:3c:f4:19:4c:a6:6a: 40:b0:8d:42:7a:ea:08:5c:8a:ac:ad:3b:86:50:30: fb:56:fb:05:32:6b:71:68:d1:59:07:c4:ba:f1:59: 35:48:14:85:70:6b:64:f1:4b:24:db:74:5a:4a:72: e5:5b:ef:fb:ab:a4:18:c8:88:36:2a:35:b2:db:05: 81:78:f0:4a:d4:60:ba:e9:61:1e:12:bb:d6:2f:1e: 76:a2:62:5d:1b:b3:0f:73:28:90:ec:40:9c:a1:ab: 61:68:ce:af:53:1e:09:c7:54:9d:65:6f:53:a8:5f: c8:1f:62:ee:e0:b4:34:8b:26:13:35:97:34:81:8c: c0:03:c3:75:ca:57:f7:60:7f:ea:a3:43:cc:cb:e9: b4:2c:bd:58:56:8d:57:e8:7a:7b:7a:ab:db:30:88: 2e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:82:85:4D:60:59:47:F9:8D:20:9B:B0:9F:B7:48:9F:82:5F:AB:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/a126dc2a-ea12-360f-884a-c034289f0aee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv4: 165.140.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:0c:3a:d4:87:47:f4:f5:b3:42:f4:62:5d:2a:73:11:02:06: 84:3b:7a:b9:44:17:3a:08:2a:42:f2:8c:c2:93:37:b5:6b:1b: 5a:fc:3c:9a:c0:17:58:41:8a:f8:88:eb:8d:d5:bf:34:84:04: 7e:6e:d9:47:32:e2:8c:9e:11:69:cd:b8:59:fe:6e:6c:84:4d: b4:5c:22:39:a3:04:78:13:9c:41:46:6c:71:1a:99:05:8a:c5: b2:e9:19:8f:ac:88:a5:28:a0:cc:d7:be:03:35:3f:77:80:ff: 38:ba:25:56:3c:69:26:cd:82:95:df:be:ae:d9:ad:86:7c:3f: 2b:62:3f:d8:be:67:79:a9:03:85:d3:f4:df:21:28:8e:99:17: a9:c1:a4:5f:67:f1:a1:81:9a:2a:94:19:13:9f:15:b8:49:1a: b6:79:90:66:e6:3f:cd:4a:90:6a:38:77:c3:1b:1c:92:65:67: 8a:63:ef:0f:c5:91:44:ed:27:4b:85:a9:03:37:0d:a3:5f:24: 12:9d:6d:7e:b5:40:f7:94:47:25:a0:ed:3c:81:ca:85:94:fb: a3:69:61:9c:ff:b1:3c:ee:97:d0:c0:69:75:98:e2:6b:f7:83: b1:a5:4b:ed:3b:b0:05:9f:b2:bd:d5:98:d3:f4:42:99:08:0f: e7:ad:69:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CR4vN0cHiQ17FoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk NjYwNGM2ZTktYTYyZC00YTVmLWEzMDgtMGY0MDJhNzA1OWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sE36zyYVcgv4cY2oxaVpWvhmDL73Xz1GknB UXB6OL79bgTLQX93Ku5fKF4TIbITJ3FeX5CJJIMfI30Km7DBGVk2FPJcGkw7qH2f 9x89PLcA53dWtQ95QyK25bW4Imatvnw89BlMpmpAsI1CeuoIXIqsrTuGUDD7VvsF MmtxaNFZB8S68Vk1SBSFcGtk8Usk23RaSnLlW+/7q6QYyIg2KjWy2wWBePBK1GC6 6WEeErvWLx52omJdG7MPcyiQ7ECcoathaM6vUx4Jx1SdZW9TqF/IH2Lu4LQ0iyYT NZc0gYzAA8N1ylf3YH/qo0PMy+m0LL1YVo1X6Hp7eqvbMIguiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6ChU1gWUf5jSCbsJ+3SJ+CX6v6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvYTEyNmRjMmEtZWExMi0z NjBmLTg4NGEtYzAzNDI4OWYwYWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpYxUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAMOtSHR/T1s0L0Yl0qcxECBoQ7erlEFzoIKkLyjMKTN7VrG1r8PJrA F1hBiviI643VvzSEBH5u2Ucy4oyeEWnNuFn+bmyETbRcIjmjBHgTnEFGbHEamQWK xbLpGY+siKUooMzXvgM1P3eA/zi6JVY8aSbNgpXfvq7ZrYZ8PytiP9i+Z3mpA4XT 9N8hKI6ZF6nBpF9n8aGBmiqUGROfFbhJGrZ5kGbmP81KkGo4d8MbHJJlZ4pj7w/F kUTtJ0uFqQM3DaNfJBKdbX61QPeURyWg7TyByoWU+6NpYZz/sTzul9DAaXWY4mv3 g7GlS+07sAWfsr3VmNP0QpkID+etaZc= -----END CERTIFICATE-----Generated at Fri Apr 11 23:41:50 2025 by rpki-client