$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/791737a9-6ef5-349f-8551-4e4fe0275515.roa File: 791737a9-6ef5-349f-8551-4e4fe0275515.roa (raw, json) Hash identifier: fZaCE+YypMZRUoIAavR75GxfIq8ep7EV2zJG5Cg+2N4= Subject key identifier: 3C:B1:4B:6B:58:03:2C:EA:AF:59:F4:54:48:78:CC:9A:3C:B7:4E:35 Certificate issuer: /CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412 Certificate serial: 010D0C9F432858498339F531A80DDE43A6A09480 Authority key identifier: AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/791737a9-6ef5-349f-8551-4e4fe0275515.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 14048 IP address blocks: 141.225.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:f5:31:a8:0d:de:43:a6:a0:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412 Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=655b1b75-b4a5-4c31-9297-7bb46c5c5322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:09:fb:d9:f5:4d:6a:53:a0:c8:4a:33:96:11: 6e:79:cd:df:00:ca:13:d1:9a:e3:c7:f1:cf:2f:63: a0:76:15:64:be:58:7a:98:f8:ed:37:7d:25:02:da: 1c:04:09:04:83:05:86:57:4c:61:31:26:9f:60:c9: 1d:6e:de:1f:7b:98:9e:0e:b8:71:7a:9a:e0:f2:b0: 5d:68:94:0a:a5:e2:3f:ee:74:cc:0f:ea:b7:ed:76: 2e:2e:cc:95:a5:60:64:0b:84:76:74:b7:8f:e5:f1: 9d:57:a0:11:0c:d2:0d:6e:56:20:c6:1c:cc:0b:b2: 37:72:df:e8:37:1f:3e:bf:86:33:2f:0b:eb:4a:22: 76:6e:41:81:c9:b1:90:ef:9d:70:a3:c1:1c:33:a3: 3b:e5:8c:ce:08:f9:fa:6e:d6:03:4c:6c:3f:4b:3c: 37:fe:50:81:7c:79:44:f1:a3:f9:b5:b9:71:1d:da: 3c:bf:5c:41:23:1a:42:00:f1:5e:19:49:33:5f:b9: da:40:a5:3e:9e:61:a1:0d:df:cc:e4:21:23:1b:dd: bc:29:e4:4b:15:58:25:e8:36:dc:6a:0d:7c:5e:52: 7b:0a:c3:66:cd:c9:fa:7e:2e:c5:50:4d:9e:4c:11: 55:f8:f0:05:54:7a:e2:ab:29:3a:f9:08:f9:03:1a: ef:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B1:4B:6B:58:03:2C:EA:AF:59:F4:54:48:78:CC:9A:3C:B7:4E:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/791737a9-6ef5-349f-8551-4e4fe0275515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.crl X509v3 Authority Key Identifier: keyid:AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer sbgp-ipAddrBlock: critical IPv4: 141.225.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:bd:6a:50:78:db:4c:a1:21:05:b2:c3:56:9b:cc:dc:2e:1e: 8f:a9:09:ee:ae:15:2e:3d:d9:2e:19:31:3d:16:39:cd:70:6d: 4a:7a:64:2b:3c:e1:42:30:bc:d7:8e:47:c1:f9:44:14:bf:8b: 0d:b7:b6:51:93:e8:ab:c9:83:8a:c7:34:df:a4:ba:35:4d:45: 13:87:58:48:99:9a:ea:7e:12:55:83:47:a4:3d:d6:c0:74:86: b1:85:c3:5a:4b:5f:35:30:cc:9a:aa:4c:22:52:2d:ab:9e:27: 3d:ef:12:ce:38:4e:87:62:de:e3:70:6a:d2:9c:35:0d:d6:0e: 65:4b:01:a5:b9:f1:9a:f0:ae:65:21:90:eb:94:72:01:2b:52: 45:75:6c:33:7a:3e:b4:54:3f:f0:fd:dc:84:0b:ef:ee:bc:05: f9:c2:08:3d:6a:03:82:2f:41:1c:f5:92:03:bf:e4:06:aa:33: 64:4f:73:df:68:66:54:1a:27:b3:89:de:3a:58:91:0e:45:92: 1b:9c:72:c0:3e:73:0d:b8:dc:29:88:af:86:0a:4b:ec:15:c5: 6d:d9:24:22:6a:b1:00:41:9a:4d:87:ea:c2:44:90:b8:74:77: 97:dd:e5:5c:4b:1d:a8:4c:fc:37:f2:61:e0:38:c9:50:22:97: 72:21:d0:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOfUxqA3eQ6aglIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVlZmRkNzktYTJjMi00ZmQ0LWFkMWEtNWQ1Mzg0MTM4 NDEyMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk NjU1YjFiNzUtYjRhNS00YzMxLTkyOTctN2JiNDZjNWM1MzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAn72fVNalOgyEozlhFuec3fAMoT0Zrjx/HP L2OgdhVkvlh6mPjtN30lAtocBAkEgwWGV0xhMSafYMkdbt4fe5ieDrhxeprg8rBd aJQKpeI/7nTMD+q37XYuLsyVpWBkC4R2dLeP5fGdV6ARDNINblYgxhzMC7I3ct/o Nx8+v4YzLwvrSiJ2bkGBybGQ751wo8EcM6M75YzOCPn6btYDTGw/Szw3/lCBfHlE 8aP5tblxHdo8v1xBIxpCAPFeGUkzX7naQKU+nmGhDd/M5CEjG928KeRLFVgl6Dbc ag18XlJ7CsNmzcn6fi7FUE2eTBFV+PAFVHriqyk6+Qj5AxrvYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyxS2tYAyzqr1n0VEh4zJo8t041MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWVm ZGQ3OS1hMmMyLTRmZDQtYWQxYS01ZDUzODQxMzg0MTIvNzkxNzM3YTktNmVmNS0z NDlmLTg1NTEtNGU0ZmUwMjc1NTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVlZmRkNzktYTJjMi00ZmQ0LWFk MWEtNWQ1Mzg0MTM4NDEyLzY1ZWZkZDc5LWEyYzItNGZkNC1hZDFhLTVkNTM4NDEz ODQxMi5jcmwwHwYDVR0jBBgwFoAUrBLkmEvyBzypjD+IIQbdJmX8XKYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82NWVmZGQ3OS1hMmMyLTRmZDQtYWQxYS01ZDUz ODQxMzg0MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHjeEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB69alB420yhIQWyw1abzNwuHo+pCe6uFS492S4ZMT0WOc1wbUp6ZCs8 4UIwvNeOR8H5RBS/iw23tlGT6KvJg4rHNN+kujVNRROHWEiZmup+ElWDR6Q91sB0 hrGFw1pLXzUwzJqqTCJSLaueJz3vEs44Todi3uNwatKcNQ3WDmVLAaW58ZrwrmUh kOuUcgErUkV1bDN6PrRUP/D93IQL7+68BfnCCD1qA4IvQRz1kgO/5AaqM2RPc99o ZlQaJ7OJ3jpYkQ5FkhuccsA+cw243CmIr4YKS+wVxW3ZJCJqsQBBmk2H6sJEkLh0 d5fd5VxLHahM/DfyYeA4yVAil3Ih0IM= -----END CERTIFICATE-----Generated at Tue Apr 29 09:31:03 2025 by rpki-client