$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/31abc324-39c0-35e7-a764-f0e2dc1ea1e4.roa File: 31abc324-39c0-35e7-a764-f0e2dc1ea1e4.roa (raw, json) Hash identifier: N4jY5cYiSxJ+iEURxRE6fY0KIEAujL+wNHLmRZIm04E= Subject key identifier: 5D:7E:45:E2:6F:9A:0D:B1:DD:B3:80:A8:FF:74:AB:C8:FF:15:6D:BA Certificate issuer: /CN=a9a8478d-2e70-4659-8d85-8edbac09d675 Certificate serial: 010D0C9F43285849B149F2C65024E2EEF3583D00 Authority key identifier: 77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/31abc324-39c0-35e7-a764-f0e2dc1ea1e4.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 27370 IP address blocks: 140.241.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:f2:c6:50:24:e2:ee:f3:58:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9a8478d-2e70-4659-8d85-8edbac09d675 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=30cc895c-dc0c-407a-9a1f-395f9667e784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:73:4c:e0:68:45:73:89:f4:5a:bf:5e:4f:03: b9:3d:07:ec:5c:f7:1f:75:36:aa:57:9f:2c:e1:8d: 8f:fe:b0:0b:d0:e0:2a:86:8d:aa:02:83:dc:7c:b5: e8:e3:36:e4:77:7b:14:a5:81:cc:24:a7:9b:f8:8f: 46:da:a6:c8:7e:5d:eb:06:07:2e:8a:f0:48:49:93: 57:b6:8b:45:58:6e:95:28:5e:6e:7e:82:a2:bc:86: b8:80:90:60:13:74:74:a9:f0:34:8c:5e:6a:b1:23: 9e:08:bd:8f:bc:1d:ec:78:db:b0:ca:94:5b:91:98: 02:76:2c:17:b6:41:a0:de:1b:18:8b:df:5f:8b:0d: 96:52:ce:82:e5:56:48:dd:d3:a0:58:df:46:18:4c: e5:4c:27:00:95:48:61:e4:e3:17:7c:f4:10:e3:90: 97:65:2f:fb:b4:98:75:ac:b7:9b:78:07:54:04:80: b1:d1:f5:7a:29:87:ac:79:33:4d:9f:c2:70:f9:e1: 88:77:6f:41:d9:80:56:49:6c:0b:73:7b:23:ce:09: 66:28:f2:06:42:d0:c5:9d:5c:19:c8:fa:a6:aa:01: da:b1:39:70:be:ac:31:3e:ac:d8:28:90:9e:41:c0: 99:aa:17:b1:c5:36:c0:61:23:b7:92:3a:00:22:a8: 47:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7E:45:E2:6F:9A:0D:B1:DD:B3:80:A8:FF:74:AB:C8:FF:15:6D:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/31abc324-39c0-35e7-a764-f0e2dc1ea1e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl X509v3 Authority Key Identifier: keyid:77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer sbgp-ipAddrBlock: critical IPv4: 140.241.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ce:34:ed:9f:a5:47:8f:bc:ad:78:2f:0d:be:d7:bf:2f:65: 48:57:7b:e4:c4:fc:16:dd:cf:cd:ab:15:70:ff:dd:06:61:b3: 8b:a7:6f:02:12:89:5a:24:af:94:2a:f4:5d:28:18:c1:69:21: 20:d0:08:da:c0:6f:1b:87:76:ec:fc:e1:32:ed:0d:2e:22:0f: 59:7a:c4:6f:2d:8f:93:6a:07:02:1c:d4:81:51:bb:90:09:48: 01:cf:ed:a7:bf:6a:05:4d:f3:9f:66:ec:fc:b0:f6:b9:b8:38: 2b:d9:a9:79:91:49:b7:c8:a1:90:3b:d4:ad:bb:55:cc:3b:c6: 59:03:f2:a9:8f:1a:97:a4:7e:a4:4d:35:fe:ad:64:49:af:10: 38:81:b7:bb:a1:dd:4e:4d:8e:ef:e7:19:8a:12:04:c8:36:29: b6:9c:0d:d0:de:64:61:99:76:5c:48:2f:7f:cb:22:2b:1c:e4: 89:f1:c8:6c:5e:c3:a9:00:13:8c:bf:16:83:6d:d6:60:2f:20: 3d:96:2b:73:c4:02:54:a6:7e:34:da:97:66:53:fa:ad:b7:4d: fe:14:5c:8e:0e:95:58:92:ae:96:03:f4:3f:87:fe:0e:80:62: 3a:62:96:31:cf:ed:bf:dd:b1:74:1c:a4:ed:bb:9b:4a:c6:34: ec:c4:13:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSfLGUCTi7vNYPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTlhODQ3OGQtMmU3MC00NjU5LThkODUtOGVkYmFjMDlk Njc1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MzBjYzg5NWMtZGMwYy00MDdhLTlhMWYtMzk1Zjk2NjdlNzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXNM4GhFc4n0Wr9eTwO5PQfsXPcfdTaqV58s 4Y2P/rAL0OAqho2qAoPcfLXo4zbkd3sUpYHMJKeb+I9G2qbIfl3rBgcuivBISZNX totFWG6VKF5ufoKivIa4gJBgE3R0qfA0jF5qsSOeCL2PvB3seNuwypRbkZgCdiwX tkGg3hsYi99fiw2WUs6C5VZI3dOgWN9GGEzlTCcAlUhh5OMXfPQQ45CXZS/7tJh1 rLebeAdUBICx0fV6KYeseTNNn8Jw+eGId29B2YBWSWwLc3sjzglmKPIGQtDFnVwZ yPqmqgHasTlwvqwxPqzYKJCeQcCZqhexxTbAYSO3kjoAIqhHlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1+ReJvmg2x3bOAqP90q8j/FW26MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOWE4 NDc4ZC0yZTcwLTQ2NTktOGQ4NS04ZWRiYWMwOWQ2NzUvMzFhYmMzMjQtMzljMC0z NWU3LWE3NjQtZjBlMmRjMWVhMWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTlhODQ3OGQtMmU3MC00NjU5LThk ODUtOGVkYmFjMDlkNjc1L2E5YTg0NzhkLTJlNzAtNDY1OS04ZDg1LThlZGJhYzA5 ZDY3NS5jcmwwHwYDVR0jBBgwFoAUd97Xqw5G9TCDoL1A4L3WNgY5qGcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hOWE4NDc4ZC0yZTcwLTQ2NTktOGQ4NS04ZWRi YWMwOWQ2NzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPFWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHONO2fpUePvK14Lw2+178vZUhXe+TE/Bbdz82rFXD/3QZhs4unbwIS iVokr5Qq9F0oGMFpISDQCNrAbxuHduz84TLtDS4iD1l6xG8tj5NqBwIc1IFRu5AJ SAHP7ae/agVN859m7Pyw9rm4OCvZqXmRSbfIoZA71K27Vcw7xlkD8qmPGpekfqRN Nf6tZEmvEDiBt7uh3U5Nju/nGYoSBMg2KbacDdDeZGGZdlxIL3/LIisc5InxyGxe w6kAE4y/FoNt1mAvID2WK3PEAlSmfjTal2ZT+q23Tf4UXI4OlViSrpYD9D+H/g6A YjpiljHP7b/dsXQcpO27m0rGNOzEE3s= -----END CERTIFICATE-----Generated at Wed Apr 30 03:33:57 2025 by rpki-client