$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/2cf973ac-9292-3942-9252-f179184447a4.roa File: 2cf973ac-9292-3942-9252-f179184447a4.roa (raw, json) Hash identifier: 5eLvGYl6k/yMT7/JkiavuB3u7Vft5YWj9MAkuZ6pxtU= Subject key identifier: 7D:39:68:A2:D4:75:AB:4B:BD:85:D1:E6:80:79:AA:33:80:84:BF:3E Certificate issuer: /CN=b118eb4a-df16-4ce5-adf1-adaaea128c50 Certificate serial: 010D0C9F432858498FC9BF4B3BA1387FC8701E80 Authority key identifier: AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/2cf973ac-9292-3942-9252-f179184447a4.roa Signing time: Fri 18 Apr 2025 01:00:47 +0000 ROA not before: Fri 18 Apr 2025 01:00:47 +0000 ROA not after: Thu 17 Jul 2025 01:00:47 +0000 asID: 1002 IP address blocks: 165.140.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c9:bf:4b:3b:a1:38:7f:c8:70:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b118eb4a-df16-4ce5-adf1-adaaea128c50 Validity Not Before: Apr 18 01:00:47 2025 GMT Not After : Jul 17 01:00:47 2025 GMT Subject: CN=818729fa-8805-43f9-914a-2d8f045dac6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:de:32:bc:c1:45:89:4e:a3:b9:45:20:53:48: 5e:a2:9a:0a:1c:34:d7:2b:99:0c:0d:f6:42:4d:98: 4b:e4:2e:84:e4:cc:47:00:2b:43:e5:d7:93:0e:13: e7:67:3d:48:fc:d3:2d:0f:28:0b:aa:6e:5b:20:71: 06:57:d5:82:e2:ac:c5:7d:df:f2:22:70:90:11:a7: 3b:47:56:55:b5:b4:b2:d6:18:ae:4a:e0:5a:4c:66: 31:cf:dc:5b:4e:64:fa:19:3e:80:cc:75:23:fc:fd: a5:c1:e2:34:68:f0:58:2f:97:5c:5d:0a:b1:48:b3: 5c:36:ee:a8:cd:57:17:9f:9e:63:52:d7:73:2d:5c: d7:bd:03:3e:63:22:3e:6a:87:07:7f:30:ab:7a:24: 11:46:70:aa:2f:78:b8:16:38:d7:7f:48:c1:9f:6d: 57:51:2c:be:c3:6e:64:4f:37:23:c4:30:49:03:5e: 36:0a:c5:50:9e:24:b5:d4:11:8a:32:ad:cd:3b:4d: 76:56:c8:05:2c:38:61:91:32:fb:97:c6:3b:1e:58: 4b:19:0d:1f:01:bb:84:67:fb:fa:8a:b8:cc:73:0c: 50:9a:6f:34:4e:73:f8:ac:27:85:c8:40:b4:e6:3e: 53:5b:14:4d:0a:66:7a:a2:1b:ca:d3:9c:c1:6a:4f: 46:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:39:68:A2:D4:75:AB:4B:BD:85:D1:E6:80:79:AA:33:80:84:BF:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/2cf973ac-9292-3942-9252-f179184447a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl X509v3 Authority Key Identifier: keyid:AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer sbgp-ipAddrBlock: critical IPv4: 165.140.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:b5:ea:ca:71:0d:3c:7f:df:b0:30:27:b7:6b:4f:ec:2a:a9: 98:21:5d:72:71:31:7e:92:b2:da:27:38:40:83:25:09:cf:0e: 36:ba:77:be:da:63:0a:40:d4:93:c0:7f:be:8c:22:58:78:c2: 30:c6:3e:80:f7:98:39:54:fb:d5:b2:4a:61:de:89:c7:9f:89: fc:a1:a1:fc:a6:74:02:a8:2a:fb:0c:06:a8:45:39:6a:0c:5d: 63:10:54:2d:46:83:a0:dc:bf:9a:b0:02:3e:7a:8a:e3:ff:89: ff:35:74:b5:f5:8c:2b:a3:01:5f:79:d5:ab:64:42:04:7e:3d: d2:b2:5c:06:59:74:27:99:ee:00:91:af:b3:89:0b:33:40:1c: eb:d3:8e:1f:f1:b2:55:22:91:16:da:b1:ea:77:3b:ba:04:ba: d5:dd:37:30:52:d5:dd:cc:ed:f9:af:a0:74:85:08:f1:73:1c: 61:f5:ab:a8:0e:d0:d7:31:d2:e5:77:64:ec:b6:94:3f:9d:aa: 7e:85:88:24:1c:0c:b0:0c:44:c2:56:b1:e9:f4:53:99:ee:da: 2d:a1:79:2a:09:c7:3f:d7:c0:e3:8d:4e:b4:0f:93:94:0f:59: 5e:0e:b8:bc:f3:e8:4a:b0:09:81:5d:fe:66:7a:4b:f9:d5:05: 7e:b5:20:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmPyb9LO6E4f8hwHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjExOGViNGEtZGYxNi00Y2U1LWFkZjEtYWRhYWVhMTI4 YzUwMB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk ODE4NzI5ZmEtODgwNS00M2Y5LTkxNGEtMmQ4ZjA0NWRhYzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk94yvMFFiU6juUUgU0heopoKHDTXK5kMDfZC TZhL5C6E5MxHACtD5deTDhPnZz1I/NMtDygLqm5bIHEGV9WC4qzFfd/yInCQEac7 R1ZVtbSy1hiuSuBaTGYxz9xbTmT6GT6AzHUj/P2lweI0aPBYL5dcXQqxSLNcNu6o zVcXn55jUtdzLVzXvQM+YyI+aocHfzCreiQRRnCqL3i4FjjXf0jBn21XUSy+w25k TzcjxDBJA142CsVQniS11BGKMq3NO012VsgFLDhhkTL7l8Y7HlhLGQ0fAbuEZ/v6 irjMcwxQmm80TnP4rCeFyEC05j5TWxRNCmZ6ohvK05zBak9GpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH05aKLUdatLvYXR5oB5qjOAhL8+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMTE4 ZWI0YS1kZjE2LTRjZTUtYWRmMS1hZGFhZWExMjhjNTAvMmNmOTczYWMtOTI5Mi0z OTQyLTkyNTItZjE3OTE4NDQ0N2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjExOGViNGEtZGYxNi00Y2U1LWFk ZjEtYWRhYWVhMTI4YzUwL2IxMThlYjRhLWRmMTYtNGNlNS1hZGYxLWFkYWFlYTEy OGM1MC5jcmwwHwYDVR0jBBgwFoAUr6JYQ6l/axWnraxW2DHKWIf9Dc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMTE4ZWI0YS1kZjE2LTRjZTUtYWRmMS1hZGFh ZWExMjhjNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYzLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEO16spxDTx/37AwJ7drT+wqqZghXXJxMX6SstonOECDJQnPDja6d77a YwpA1JPAf76MIlh4wjDGPoD3mDlU+9WySmHeicefifyhofymdAKoKvsMBqhFOWoM XWMQVC1Gg6Dcv5qwAj56iuP/if81dLX1jCujAV951atkQgR+PdKyXAZZdCeZ7gCR r7OJCzNAHOvTjh/xslUikRbasep3O7oEutXdNzBS1d3M7fmvoHSFCPFzHGH1q6gO 0Ncx0uV3ZOy2lD+dqn6FiCQcDLAMRMJWsen0U5nu2i2heSoJxz/XwOONTrQPk5QP WV4OuLzz6EqwCYFd/mZ6S/nVBX61IBU= -----END CERTIFICATE-----Generated at Sun Apr 27 15:54:12 2025 by rpki-client