$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/1eb4935a-e5f0-3ecd-ae10-f27ad706b31c.roa File: 1eb4935a-e5f0-3ecd-ae10-f27ad706b31c.roa (raw, json) Hash identifier: 56dPHUB/An9hUqcLp64vs/sdFSKJ4hQyt21fztiYW4w= Subject key identifier: A2:DC:45:B1:03:A8:72:C7:8B:53:7D:D8:E4:D1:BF:64:50:32:B8:25 Certificate issuer: /CN=6511a5cc-df0b-4c6e-a228-2902fbea4263 Certificate serial: 010D0C9F432858490CB170B2631ABC6951FE3100 Authority key identifier: ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/1eb4935a-e5f0-3ecd-ae10-f27ad706b31c.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 13462 IP address blocks: 140.98.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:70:b2:63:1a:bc:69:51:fe:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6511a5cc-df0b-4c6e-a228-2902fbea4263 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=d7666d6c-d135-4c4f-b2c2-8e4220879d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1f:d9:05:a8:82:53:4e:f0:0a:9b:75:43:f2: db:d6:73:50:0f:1a:6a:ca:4c:58:6f:50:bd:61:ef: 59:be:ca:4d:00:12:13:4d:ef:dd:97:6b:10:3f:35: 97:93:3f:e5:b0:db:a0:8c:17:8b:71:24:43:f7:a1: 14:4b:e2:35:c1:89:d5:97:60:67:7d:3b:83:63:52: 54:dd:d6:65:e0:0b:9b:32:1a:59:92:f4:c9:86:d5: 2d:36:67:6f:8a:a7:23:30:c8:68:ef:f4:04:b9:00: 07:ae:c0:1f:c3:2b:cd:67:d0:ac:91:de:86:47:91: 40:fd:a3:99:c6:32:aa:d9:0e:39:2d:a7:7c:09:82: be:3a:68:65:84:30:2b:c8:02:d6:61:01:83:69:8c: e5:39:17:40:1a:a7:3d:c4:03:4c:d5:39:2d:47:2e: fa:0a:40:79:cf:f0:51:2b:15:45:d7:5b:18:1c:26: ec:a3:10:46:0a:81:0c:dc:17:86:5a:fd:c2:45:4d: 93:06:b2:66:49:7f:a3:5c:7e:b2:e7:c1:de:d3:18: 01:a5:22:81:70:86:d2:77:cf:40:8c:35:59:bc:52: 9b:d9:af:86:d7:73:ce:52:71:1b:3b:42:53:00:9c: 4a:b8:f8:76:4b:1b:2a:17:c2:0e:59:0d:24:c3:0e: 97:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DC:45:B1:03:A8:72:C7:8B:53:7D:D8:E4:D1:BF:64:50:32:B8:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/1eb4935a-e5f0-3ecd-ae10-f27ad706b31c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl X509v3 Authority Key Identifier: keyid:ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer sbgp-ipAddrBlock: critical IPv4: 140.98.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:ca:9e:3a:7e:36:28:e6:2e:bb:f0:66:b6:c7:fb:57:83:0f: 90:ca:82:ce:3e:41:e6:16:29:47:55:20:e2:ed:2c:8f:20:4f: 72:80:ec:ab:0e:cf:d7:91:a8:d1:fc:1f:da:d8:3f:3b:45:b1: 7e:da:bc:21:c2:48:15:65:89:b2:d1:31:92:cd:5c:4d:7e:18: f9:5c:1f:df:ed:d1:e8:a2:a0:14:79:99:b1:f7:8b:5c:d7:81: 9e:24:e0:37:e9:e4:d9:75:18:58:a1:e9:77:e6:e9:d9:87:15: f9:28:70:c4:75:c6:86:bf:83:2e:ee:ce:d7:6a:d0:16:da:4d: 04:c9:4e:7f:26:74:33:43:75:09:a5:08:5e:78:5a:6d:5b:c9: 11:8c:ac:51:14:0d:5c:a8:35:28:8c:6a:bc:e2:8e:4c:f5:73: 34:62:e7:63:92:4c:0d:f7:75:0d:a4:8d:d4:2d:ad:a6:94:6a: 5c:85:28:1f:2b:e9:02:6a:ed:fb:8d:81:a5:6d:22:71:53:0d: 15:f5:72:81:5f:7b:83:69:19:f2:ad:d5:0a:e8:5d:76:5a:66: c8:ce:9a:4c:f2:ab:2f:0d:3a:d0:05:52:fe:70:70:28:88:69: f2:e9:da:8d:ea:08:16:ef:da:2d:6c:4a:70:6f:82:9a:90:32: cd:96:6c:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsXCyYxq8aVH+MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjUxMWE1Y2MtZGYwYi00YzZlLWEyMjgtMjkwMmZiZWE0 MjYzMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk ZDc2NjZkNmMtZDEzNS00YzRmLWIyYzItOGU0MjIwODc5ZDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlx/ZBaiCU07wCpt1Q/Lb1nNQDxpqykxYb1C9 Ye9ZvspNABITTe/dl2sQPzWXkz/lsNugjBeLcSRD96EUS+I1wYnVl2BnfTuDY1JU 3dZl4AubMhpZkvTJhtUtNmdviqcjMMho7/QEuQAHrsAfwyvNZ9Cskd6GR5FA/aOZ xjKq2Q45Lad8CYK+OmhlhDAryALWYQGDaYzlORdAGqc9xANM1TktRy76CkB5z/BR KxVF11sYHCbsoxBGCoEM3BeGWv3CRU2TBrJmSX+jXH6y58He0xgBpSKBcIbSd89A jDVZvFKb2a+G13POUnEbO0JTAJxKuPh2SxsqF8IOWQ0kww6XIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLcRbEDqHLHi1N92OTRv2RQMrglMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NTEx YTVjYy1kZjBiLTRjNmUtYTIyOC0yOTAyZmJlYTQyNjMvMWViNDkzNWEtZTVmMC0z ZWNkLWFlMTAtZjI3YWQ3MDZiMzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjUxMWE1Y2MtZGYwYi00YzZlLWEy MjgtMjkwMmZiZWE0MjYzLzY1MTFhNWNjLWRmMGItNGM2ZS1hMjI4LTI5MDJmYmVh NDI2My5jcmwwHwYDVR0jBBgwFoAU7bIECmX2igA0Jez8q6Ur+CaZGxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NTExYTVjYy1kZjBiLTRjNmUtYTIyOC0yOTAy ZmJlYTQyNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjGLSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7Knjp+NijmLrvwZrbH+1eDD5DKgs4+QeYWKUdVIOLtLI8gT3KA7KsO z9eRqNH8H9rYPztFsX7avCHCSBVlibLRMZLNXE1+GPlcH9/t0eiioBR5mbH3i1zX gZ4k4Dfp5Nl1GFih6Xfm6dmHFfkocMR1xoa/gy7uztdq0BbaTQTJTn8mdDNDdQml CF54Wm1byRGMrFEUDVyoNSiMarzijkz1czRi52OSTA33dQ2kjdQtraaUalyFKB8r 6QJq7fuNgaVtInFTDRX1coFfe4NpGfKt1QroXXZaZsjOmkzyqy8NOtAFUv5wcCiI afLp2o3qCBbv2i1sSnBvgpqQMs2WbIw= -----END CERTIFICATE-----Generated at Sun Apr 27 11:21:12 2025 by rpki-client