$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/ae9fd340-bed2-3574-9398-92708ea0e3a3.roa File: ae9fd340-bed2-3574-9398-92708ea0e3a3.roa (raw, json) Hash identifier: hHoc2l8Hf5wesUPqz1PjF8d5F8+6TdSTu1McqH600gU= Subject key identifier: D8:FD:D0:9B:2E:6C:64:99:4E:1A:EF:B4:24:31:C1:CF:B4:AC:EE:3F Certificate issuer: /CN=2f9f859b-6735-4c5f-8f00-0526da777ec4 Certificate serial: 010D0C9F432858493ED3D778428B8A85FFCA2F80 Authority key identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/ae9fd340-bed2-3574-9398-92708ea0e3a3.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 63018 IP address blocks: 165.140.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:d7:78:42:8b:8a:85:ff:ca:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f9f859b-6735-4c5f-8f00-0526da777ec4 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=3859e328-d941-4e70-98f9-6b112b548d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:65:9a:0d:9b:d6:96:b2:bc:db:23:cf:64:8f: 90:01:c7:86:23:09:95:a3:62:ba:aa:23:c5:e5:ff: 12:2e:07:95:21:58:50:36:b7:6e:35:9f:99:a1:2e: 88:88:cb:56:4e:10:3c:a5:af:cd:09:de:ed:69:6f: f3:10:2a:14:c5:10:dd:b0:77:04:41:fe:e0:06:e2: 91:58:b5:5f:11:2e:bc:49:be:4d:c0:1b:70:3d:70: cc:bd:9a:e1:58:e3:92:a7:33:94:fb:c9:2d:ed:b0: a5:3a:a9:86:6f:5a:33:58:c8:f8:65:0f:f8:2c:9a: 82:46:13:20:a4:30:e5:8d:73:c1:39:8c:2f:a8:bc: f0:b5:84:a3:58:4e:24:b9:90:f0:1f:6d:2a:66:2e: 54:f0:9d:bb:c9:de:b2:5d:4e:d5:ca:33:ed:cd:62: 5a:44:98:38:0c:b6:57:05:d9:66:f7:68:da:4a:9f: fe:ea:68:10:e5:bd:14:4e:75:d0:3b:a2:18:d9:11: 29:19:38:3d:1a:34:4d:f6:fa:91:45:d4:a3:07:0b: 73:ef:b7:7c:35:96:50:da:d5:c7:9e:04:32:25:97: 94:2a:5b:25:8b:66:2c:83:84:64:c2:37:cf:25:cf: 44:96:b5:bc:cd:bc:75:f0:08:ba:da:b0:8c:fc:5c: 86:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FD:D0:9B:2E:6C:64:99:4E:1A:EF:B4:24:31:C1:CF:B4:AC:EE:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/ae9fd340-bed2-3574-9398-92708ea0e3a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl X509v3 Authority Key Identifier: keyid:58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer sbgp-ipAddrBlock: critical IPv4: 165.140.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:af:17:b9:44:f5:a5:c8:59:c5:51:5c:0f:52:15:5f:2b:32: bc:25:b3:e3:b7:34:7e:e6:98:ca:f9:05:9b:1b:5b:56:4a:6e: 85:44:58:6b:66:88:97:db:2f:b9:fa:c4:ff:37:cf:c6:c4:3a: 43:4b:e5:04:be:03:01:ae:aa:92:fa:08:50:69:a7:30:de:fc: e0:4a:59:dc:59:66:ee:e8:6e:86:be:69:fa:c3:fc:63:fe:04: 22:d6:f6:0b:6a:48:34:3d:21:9c:40:ec:a5:a9:5d:fd:18:d0: 56:b8:16:88:06:55:91:6b:7a:0c:fc:7e:7f:57:0c:51:99:c7: f6:08:9e:9f:73:dd:6d:2d:c1:08:ef:1b:79:02:0a:f9:35:f2: 98:aa:12:b8:3e:cf:9f:05:a0:45:ca:34:48:78:74:36:33:c5: ad:ce:e3:01:58:c3:be:ff:c2:e6:69:3d:2d:90:b5:1d:9b:1f: f4:98:61:8f:c1:74:e4:8b:58:75:9e:05:c2:58:eb:bd:42:39: 82:7b:7a:17:f4:81:fa:87:77:2b:68:b5:7b:58:62:e2:ef:40: 5c:69:f9:09:f6:84:60:2c:8b:a4:b6:2c:66:28:04:55:f1:34: 1c:1c:3e:8a:d6:e5:9f:ff:2b:79:1d:20:10:da:5e:a2:ae:04: ac:98:71:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+09d4QouKhf/KL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmY5Zjg1OWItNjczNS00YzVmLThmMDAtMDUyNmRhNzc3 ZWM0MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk Mzg1OWUzMjgtZDk0MS00ZTcwLTk4ZjktNmIxMTJiNTQ4ZDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mWaDZvWlrK82yPPZI+QAceGIwmVo2K6qiPF 5f8SLgeVIVhQNrduNZ+ZoS6IiMtWThA8pa/NCd7taW/zECoUxRDdsHcEQf7gBuKR WLVfES68Sb5NwBtwPXDMvZrhWOOSpzOU+8kt7bClOqmGb1ozWMj4ZQ/4LJqCRhMg pDDljXPBOYwvqLzwtYSjWE4kuZDwH20qZi5U8J27yd6yXU7VyjPtzWJaRJg4DLZX Bdlm92jaSp/+6mgQ5b0UTnXQO6IY2REpGTg9GjRN9vqRRdSjBwtz77d8NZZQ2tXH ngQyJZeUKlsli2Ysg4RkwjfPJc9ElrW8zbx18Ai62rCM/FyGyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNj90JsubGSZThrvtCQxwc+0rO4/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yZjlm ODU5Yi02NzM1LTRjNWYtOGYwMC0wNTI2ZGE3NzdlYzQvYWU5ZmQzNDAtYmVkMi0z NTc0LTkzOTgtOTI3MDhlYTBlM2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmY5Zjg1OWItNjczNS00YzVmLThm MDAtMDUyNmRhNzc3ZWM0LzJmOWY4NTliLTY3MzUtNGM1Zi04ZjAwLTA1MjZkYTc3 N2VjNC5jcmwwHwYDVR0jBBgwFoAUWI+fR0ta6F5LtvUPbC68dpiUqyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yZjlmODU5Yi02NzM1LTRjNWYtOGYwMC0wNTI2 ZGE3NzdlYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYymMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOvF7lE9aXIWcVRXA9SFV8rMrwls+O3NH7mmMr5BZsbW1ZKboVEWGtm iJfbL7n6xP83z8bEOkNL5QS+AwGuqpL6CFBppzDe/OBKWdxZZu7oboa+afrD/GP+ BCLW9gtqSDQ9IZxA7KWpXf0Y0Fa4FogGVZFregz8fn9XDFGZx/YInp9z3W0twQjv G3kCCvk18piqErg+z58FoEXKNEh4dDYzxa3O4wFYw77/wuZpPS2QtR2bH/SYYY/B dOSLWHWeBcJY671COYJ7ehf0gfqHdytotXtYYuLvQFxp+Qn2hGAsi6S2LGYoBFXx NBwcPorW5Z//K3kdIBDaXqKuBKyYcXc= -----END CERTIFICATE-----Generated at Sat Apr 26 13:01:39 2025 by rpki-client