$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/08ff9662-4609-3d2e-af6f-7a8538b797b9.roa File: 08ff9662-4609-3d2e-af6f-7a8538b797b9.roa (raw, json) Hash identifier: 2vt+zpulkG54slvb5vJLkOFgCFDwYaK+EjaVb2LptU4= Subject key identifier: AB:FC:E2:C9:A8:4E:67:56:66:23:F5:BC:16:00:8C:DC:E0:C0:D3:2C Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584953C42FA26E7854CFE19E7198 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/08ff9662-4609-3d2e-af6f-7a8538b797b9.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 54113 IP address blocks: 140.248.217.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:2f:a2:6e:78:54:cf:e1:9e:71:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=27787243-7919-4980-994f-d0550a4b0260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4d:e4:66:21:54:dd:15:34:2b:ac:29:31:3b: fd:84:03:62:79:0c:39:e6:a1:8e:62:24:79:22:25: 43:ed:b0:ec:02:2b:e8:b6:05:bc:09:a2:7f:92:d8: 00:58:e5:c6:87:e9:ee:e6:13:51:0b:fb:aa:6f:28: 3e:a3:37:9c:72:ba:1e:e9:64:50:12:93:0c:b8:f2: 85:e9:a7:31:7c:78:85:83:7b:df:8a:e9:aa:28:fd: dc:b1:53:66:4d:d1:32:e3:ec:f1:75:e9:b2:37:98: 96:e0:67:19:29:c4:73:15:ef:37:55:c4:b1:b7:15: 78:50:12:45:ab:50:0a:11:bc:9e:9f:46:2f:d4:0a: 41:52:e7:c0:f8:2e:15:e2:eb:c3:eb:2e:0d:df:e1: 72:77:4d:da:e5:13:1f:9d:de:0e:4f:e3:03:ec:e2: d5:6c:7c:33:07:87:7c:9d:ba:65:2f:dc:a0:ec:73: 08:00:54:4e:20:bb:95:f9:7a:4b:36:46:4f:72:0d: 7c:75:14:3e:51:0f:53:06:e4:3e:7d:b2:46:f2:5b: 21:62:6d:97:c9:b5:9b:ac:cb:08:13:cd:a6:97:0d: a0:5e:49:9e:1d:40:9d:e5:e5:91:80:a4:76:c1:86: 3d:ea:bd:c6:b4:3b:79:38:25:fa:f3:2f:c3:46:eb: e0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FC:E2:C9:A8:4E:67:56:66:23:F5:BC:16:00:8C:DC:E0:C0:D3:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/08ff9662-4609-3d2e-af6f-7a8538b797b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.217.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:93:e6:99:79:46:61:6a:42:28:7c:9f:5b:2e:75:df:cd:83: 04:21:d9:41:3a:01:c9:df:a5:84:47:0b:20:ad:63:a5:d8:ae: f3:eb:a2:c3:dd:de:e2:38:46:ed:66:70:e8:a1:44:9a:61:a8: 7a:b2:d0:86:2a:41:ac:8c:c3:90:57:61:60:71:60:81:d9:d9: 29:45:dc:bc:2c:87:d3:44:cb:93:1b:5d:31:77:da:23:d0:30: 91:80:dc:94:4a:d6:29:25:e6:bb:d1:7e:d7:35:89:d6:b6:e4: e2:f6:ae:00:f1:c3:db:19:9c:2c:db:4c:05:70:1f:81:1c:d8: 7a:5b:ba:ea:c9:cb:bd:60:da:8c:02:36:9e:38:79:a7:b8:bd: a2:ee:64:78:f9:bc:77:0a:1d:f2:ad:66:58:2a:a5:e3:24:5a: f7:7d:d1:88:64:89:f0:27:f9:f7:ec:c7:20:bc:80:ae:a6:2c: 8b:89:5a:51:15:73:34:5a:8c:24:ca:56:26:a0:02:df:29:6c: c8:49:39:a2:1b:82:18:a3:38:b4:de:d1:e6:22:84:6a:ae:bf: 34:7c:d0:ba:7b:bb:34:0b:fc:b1:fc:44:9c:f9:49:9a:ed:b3: a8:cc:34:bc:9c:89:d7:2e:97:1a:63:75:0d:09:11:f7:ad:14: 64:0f:0b:6b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElTxC+ibnhUz+GecZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk Mjc3ODcyNDMtNzkxOS00OTgwLTk5NGYtZDA1NTBhNGIwMjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt03kZiFU3RU0K6wpMTv9hANieQw55qGOYiR5 IiVD7bDsAivotgW8CaJ/ktgAWOXGh+nu5hNRC/uqbyg+ozeccroe6WRQEpMMuPKF 6acxfHiFg3vfiumqKP3csVNmTdEy4+zxdemyN5iW4GcZKcRzFe83VcSxtxV4UBJF q1AKEbyen0Yv1ApBUufA+C4V4uvD6y4N3+Fyd03a5RMfnd4OT+MD7OLVbHwzB4d8 nbplL9yg7HMIAFROILuV+XpLNkZPcg18dRQ+UQ9TBuQ+fbJG8lshYm2XybWbrMsI E82mlw2gXkmeHUCd5eWRgKR2wYY96r3GtDt5OCX68y/DRuvgXwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKv84smoTmdWZiP1vBYAjNzgwNMsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMDhmZjk2NjItNDYwOS0z ZDJlLWFmNmYtN2E4NTM4Yjc5N2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHjPjZADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB7k+aZeUZhakIofJ9bLnXfzYMEIdlBOgHJ36WERwsgrWOl2K7z66LD 3d7iOEbtZnDooUSaYah6stCGKkGsjMOQV2FgcWCB2dkpRdy8LIfTRMuTG10xd9oj 0DCRgNyUStYpJea70X7XNYnWtuTi9q4A8cPbGZws20wFcB+BHNh6W7rqycu9YNqM AjaeOHmnuL2i7mR4+bx3Ch3yrWZYKqXjJFr3fdGIZInwJ/n37McgvICupiyLiVpR FXM0WowkylYmoALfKWzISTmiG4IYozi03tHmIoRqrr80fNC6e7s0C/yx/ESc+Uma 7bOozDS8nInXLpcaY3UNCRH3rRRkDwtr -----END CERTIFICATE-----Generated at Sat Apr 26 19:12:05 2025 by rpki-client