$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cde87bfa-7d06-34bf-9c03-15214404e72e.roa File: cde87bfa-7d06-34bf-9c03-15214404e72e.roa (raw, json) Hash identifier: 4D8IxvEkeORcSfjOwXPAfg6ELUNx+9rkGmqwX1i88kc= Subject key identifier: 2B:29:8A:F4:7B:37:82:7E:BC:0D:20:F2:7F:5C:E6:A4:DB:3E:B8:D6 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849071BF3D41CF86ECA4DA5A000 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cde87bfa-7d06-34bf-9c03-15214404e72e.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 29852 IP address blocks: 140.174.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:f3:d4:1c:f8:6e:ca:4d:a5:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=e8f5ebab-c343-4aa5-a5c7-dce32e99d7bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0c:58:b8:d7:b8:0d:e0:da:d3:ec:c6:16:65: 8a:a3:27:62:a2:43:46:63:bc:fa:51:bb:de:a4:7e: c9:2e:69:26:8a:28:d5:58:05:77:7f:f2:52:82:49: 62:33:78:48:fd:aa:a9:20:bc:fb:56:ab:c8:ed:fc: 08:d3:d7:2e:7d:74:e8:e0:29:f5:ed:bf:af:d0:a7: b7:85:50:91:f5:c2:25:00:3c:7a:62:a8:91:cc:56: 2a:1c:11:80:5f:82:c0:da:0a:23:63:38:00:13:28: 54:9e:d5:71:ce:a3:21:bc:40:cf:66:07:b1:5b:24: 5f:14:d3:c4:15:e3:99:ce:f9:19:3f:52:74:66:c1: 86:d0:c0:50:6e:5e:59:00:d0:e1:b7:07:d9:27:08: 07:12:bb:88:08:d0:38:c1:f3:b3:40:16:03:1d:07: c0:86:3f:fa:be:6d:1f:82:91:12:b6:cb:0f:ab:f9: 7e:c7:c7:ff:4d:9c:a6:35:96:21:a7:63:e1:33:68: 06:4c:15:7d:ba:28:36:c4:69:24:94:3d:2a:8e:be: f0:9b:e6:ee:36:7a:00:e3:04:90:16:3f:b7:db:81: bc:c5:e8:9d:7b:1a:4e:85:36:d1:31:0b:d6:cd:66: a7:e2:3e:0f:46:c8:10:0a:26:d1:24:52:9a:9f:37: e4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:29:8A:F4:7B:37:82:7E:BC:0D:20:F2:7F:5C:E6:A4:DB:3E:B8:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cde87bfa-7d06-34bf-9c03-15214404e72e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:1f:8d:31:70:31:4a:29:ff:06:86:8f:89:fa:b3:9f:e1:31: 39:6f:cb:f0:84:67:a0:0d:1b:b4:ec:dc:05:23:60:10:2b:c3: 50:1e:86:0e:ac:06:ad:72:d9:a8:b0:1c:e4:fa:3f:c5:f7:a3: 53:7f:14:81:4b:c3:e2:6c:03:20:b2:81:9a:b2:de:30:fc:92: f4:6b:62:5b:f0:36:31:57:35:c6:b8:6a:a5:48:41:cf:8c:55: 9a:d2:f5:3c:79:a7:f0:0a:79:e5:08:bd:12:67:9a:37:89:9c: e5:cc:ae:7c:0a:d2:f8:4f:cf:c4:b5:bb:30:73:32:9c:19:26: 21:bf:5e:4c:ec:2a:e9:ad:b9:7a:c2:ea:98:ac:22:42:c2:11: cb:99:02:69:2d:94:3f:c0:d3:06:97:19:8e:fb:b7:1c:10:f9: 88:75:55:20:7d:cd:fe:78:26:58:01:a0:7c:89:18:c7:3b:4f: 8b:75:3f:fd:8f:07:19:42:40:8d:da:86:84:0c:17:21:a9:e3: 5a:06:24:32:cc:76:ac:23:a2:ed:77:ca:3a:b4:76:48:50:c7: aa:a2:fb:0d:29:ce:11:e8:87:b9:49:8a:2d:99:ea:56:16:1f: 73:a7:18:c5:b5:e3:e0:42:8f:61:be:f8:4e:ba:5f:5b:02:79: 0a:bc:1e:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG/PUHPhuyk2loAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk ZThmNWViYWItYzM0My00YWE1LWE1YzctZGNlMzJlOTlkN2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAxYuNe4DeDa0+zGFmWKoydiokNGY7z6Ubve pH7JLmkmiijVWAV3f/JSgkliM3hI/aqpILz7VqvI7fwI09cufXTo4Cn17b+v0Ke3 hVCR9cIlADx6YqiRzFYqHBGAX4LA2gojYzgAEyhUntVxzqMhvEDPZgexWyRfFNPE FeOZzvkZP1J0ZsGG0MBQbl5ZANDhtwfZJwgHEruICNA4wfOzQBYDHQfAhj/6vm0f gpEStssPq/l+x8f/TZymNZYhp2PhM2gGTBV9uig2xGkklD0qjr7wm+buNnoA4wSQ Fj+324G8xeidexpOhTbRMQvWzWan4j4PRsgQCibRJFKanzfkxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCspivR7N4J+vA0g8n9c5qTbPrjWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvY2RlODdiZmEtN2QwNi0z NGJmLTljMDMtMTUyMTQ0MDRlNzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjK5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcfjTFwMUop/waGj4n6s5/hMTlvy/CEZ6ANG7Ts3AUjYBArw1Aehg6s Bq1y2aiwHOT6P8X3o1N/FIFLw+JsAyCygZqy3jD8kvRrYlvwNjFXNca4aqVIQc+M VZrS9Tx5p/AKeeUIvRJnmjeJnOXMrnwK0vhPz8S1uzBzMpwZJiG/XkzsKumtuXrC 6pisIkLCEcuZAmktlD/A0waXGY77txwQ+Yh1VSB9zf54JlgBoHyJGMc7T4t1P/2P BxlCQI3ahoQMFyGp41oGJDLMdqwjou13yjq0dkhQx6qi+w0pzhHoh7lJii2Z6lYW H3OnGMW14+BCj2G++E66X1sCeQq8HiA= -----END CERTIFICATE-----Generated at Sun Apr 27 01:10:49 2025 by rpki-client