$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/cb09db06-6943-32ec-9b7c-d0a1928a7823.roa File: cb09db06-6943-32ec-9b7c-d0a1928a7823.roa (raw, json) Hash identifier: RNb7lb66cOpf9/A7DGpXWJv9Unkj/9zadCJJ1fjat2I= Subject key identifier: A5:46:53:80:69:81:BA:4F:A1:6F:12:FA:59:FA:69:C1:A3:BA:1B:D8 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F43285849899890A467611A21F3BADD20 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/cb09db06-6943-32ec-9b7c-d0a1928a7823.roa Signing time: Tue 15 Apr 2025 19:46:58 +0000 ROA not before: Tue 15 Apr 2025 19:46:58 +0000 ROA not after: Mon 14 Jul 2025 19:46:58 +0000 asID: 53356 IP address blocks: 140.228.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:89:98:90:a4:67:61:1a:21:f3:ba:dd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Apr 15 19:46:58 2025 GMT Not After : Jul 14 19:46:58 2025 GMT Subject: CN=1b28af61-3ec1-4d56-a6b7-e634bf9dc2ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2b:63:0d:71:05:e3:c6:be:13:be:be:69:06: 04:3e:1b:ac:54:31:5f:b2:7e:cb:92:1c:6c:14:9c: 8c:57:1d:3f:39:31:87:8c:e2:d0:46:32:fa:f9:71: ca:b0:67:ec:9d:77:5f:53:e1:96:ee:1b:44:05:0d: 49:35:60:c0:87:87:8b:6b:ec:15:74:91:df:c5:4c: 98:de:22:31:be:7e:16:95:11:29:c4:8e:d5:85:a0: ae:dd:aa:0e:a1:3a:c9:6f:09:90:aa:c1:9d:88:0c: b1:8d:aa:c4:9a:d1:aa:68:79:8d:b6:e6:03:ff:d5: 3c:dc:c8:45:9b:3d:8e:76:5e:d5:e2:3c:3b:e2:f6: 18:41:f0:f7:22:f3:d8:29:38:b6:ba:f3:4b:29:02: 24:d2:15:02:01:0e:fc:84:7c:23:ad:9f:bc:82:59: bd:6f:e7:af:c4:d5:18:14:16:38:3d:c5:8a:9b:67: ed:58:2f:a5:41:f5:a3:7a:2d:c8:c3:1e:d9:30:04: a9:8e:1b:c3:43:35:0a:15:4a:d7:ca:65:9b:69:7b: 21:5c:a5:f5:88:fb:1c:46:4e:0b:d0:a7:64:51:d2: be:7c:2a:53:c5:7e:d4:22:e8:35:92:99:cd:11:b0: 1c:41:12:35:8a:c6:74:50:d6:c3:30:a1:87:d9:61: 81:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:46:53:80:69:81:BA:4F:A1:6F:12:FA:59:FA:69:C1:A3:BA:1B:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/cb09db06-6943-32ec-9b7c-d0a1928a7823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 140.228.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ce:a4:56:11:d3:42:b4:df:d4:e5:e1:7a:6f:57:3f:e1:79: 02:e4:b3:42:6d:2b:61:bc:01:79:1e:ac:a3:b2:89:71:bf:e0: f9:a9:d8:92:d5:ad:c9:1c:1f:b6:10:1d:3d:8c:c4:7d:9d:08: 31:7f:8b:bf:d8:d4:d0:1e:61:69:4f:87:34:7e:70:03:27:ed: b7:88:47:e2:82:8c:06:db:f4:1a:db:c1:7e:49:ef:26:38:f7: 3d:d3:d4:9d:09:14:32:ac:f1:58:fc:6a:7a:9e:86:00:59:6b: 0b:45:fe:29:bd:8c:80:9b:fd:13:04:77:68:b3:35:53:48:db: c4:f3:08:5d:fa:ce:66:fd:46:c5:e4:e4:12:9c:3a:b5:4c:bd: ca:0f:05:07:04:dd:29:07:8d:0d:af:af:6d:10:d3:81:b2:97: 49:61:86:b4:a5:cc:e4:27:3a:2d:85:15:47:f5:12:d0:d7:6f: be:a0:6e:93:6b:b8:0a:ac:80:1e:b6:bb:8d:1c:62:82:9d:03: 29:0b:79:4b:92:af:85:9c:14:37:5c:a9:93:70:2e:5e:be:0f: 4f:4a:45:a0:d1:6f:7d:ac:14:67:d4:b3:91:36:43:84:8c:91: 25:23:e1:a7:d6:68:bc:39:c0:38:f9:e3:c0:c4:9e:76:37:a0: 66:c3:23:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmJmJCkZ2EaIfO63SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDQxNTE5NDY1OFoXDTI1MDcxNDE5NDY1OFowLzEtMCsGA1UEAxMk MWIyOGFmNjEtM2VjMS00ZDU2LWE2YjctZTYzNGJmOWRjMmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoitjDXEF48a+E76+aQYEPhusVDFfsn7Lkhxs FJyMVx0/OTGHjOLQRjL6+XHKsGfsnXdfU+GW7htEBQ1JNWDAh4eLa+wVdJHfxUyY 3iIxvn4WlREpxI7VhaCu3aoOoTrJbwmQqsGdiAyxjarEmtGqaHmNtuYD/9U83MhF mz2Odl7V4jw74vYYQfD3IvPYKTi2uvNLKQIk0hUCAQ78hHwjrZ+8glm9b+evxNUY FBY4PcWKm2ftWC+lQfWjei3Iwx7ZMASpjhvDQzUKFUrXymWbaXshXKX1iPscRk4L 0KdkUdK+fCpTxX7UIug1kpnNEbAcQRI1isZ0UNbDMKGH2WGBcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVGU4BpgbpPoW8S+ln6acGjuhvYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvY2IwOWRiMDYtNjk0My0z MmVjLTliN2MtZDBhMTkyOGE3ODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvOpFYR00K039Tl4XpvVz/heQLks0JtK2G8AXkerKOyiXG/4Pmp2JLV rckcH7YQHT2MxH2dCDF/i7/Y1NAeYWlPhzR+cAMn7beIR+KCjAbb9BrbwX5J7yY4 9z3T1J0JFDKs8Vj8anqehgBZawtF/im9jICb/RMEd2izNVNI28TzCF36zmb9RsXk 5BKcOrVMvcoPBQcE3SkHjQ2vr20Q04Gyl0lhhrSlzOQnOi2FFUf1EtDXb76gbpNr uAqsgB62u40cYoKdAykLeUuSr4WcFDdcqZNwLl6+D09KRaDRb32sFGfUs5E2Q4SM kSUj4afWaLw5wDj548DEnnY3oGbDI6M= -----END CERTIFICATE-----Generated at Mon Apr 28 07:52:28 2025 by rpki-client