$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a9487ccb-1f17-30c5-9e67-7b8da6bf2cd5.roa File: a9487ccb-1f17-30c5-9e67-7b8da6bf2cd5.roa (raw, json) Hash identifier: L81meV3IeV1Y2ZDBRDnTZR6xlDdUYmfTBVWgI+Zzu9s= Subject key identifier: 2B:C1:60:A9:A1:3D:DB:5A:D7:F1:2F:22:B6:68:1F:9D:1F:F1:14:26 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584953C433C38915A0D9ECACB300 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a9487ccb-1f17-30c5-9e67-7b8da6bf2cd5.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 54113 IP address blocks: 140.248.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:33:c3:89:15:a0:d9:ec:ac:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=2bedf05f-8898-4f13-b32b-76c1a1f50801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:da:33:80:f0:a1:d3:c2:82:49:a7:06:d4:ca: d9:02:e1:40:4e:da:f3:24:0e:93:12:68:24:c1:8d: 1f:72:91:08:a8:ca:67:4a:ad:48:e5:18:35:2b:34: f9:a8:f1:ea:e2:c3:27:78:aa:f5:a5:0e:25:f0:5c: 81:ae:39:70:2e:fc:5c:02:56:6b:39:cb:aa:88:66: 11:31:df:7b:cf:f8:bc:9c:17:18:a5:1d:8d:1a:2c: 5a:ae:e2:87:74:63:81:55:c7:93:e3:eb:53:69:88: 92:b2:35:48:26:a1:e1:2b:99:4e:9d:bc:30:c9:11: 2d:30:2c:f2:d8:86:f8:35:56:b5:cb:1f:51:9d:3f: 76:e2:79:8c:32:ae:01:08:fc:d2:d0:05:97:47:80: aa:3c:ec:c5:2b:9b:b0:29:0a:c1:57:77:2e:fa:2f: 4c:9f:86:8e:1c:f7:9e:17:4b:3d:9c:4b:46:fd:da: fd:db:f9:db:94:48:c6:3a:e7:53:d1:87:24:94:84: 1b:0d:11:05:24:22:79:a2:ac:14:7d:28:8f:99:25: a6:9a:76:6d:a7:d0:aa:6d:c3:53:0c:77:5e:c5:13: be:01:43:be:4a:26:5f:44:f7:cf:2e:ac:4c:9c:84: 60:4c:7f:0d:79:72:b8:a7:14:e2:1f:08:27:95:35: 93:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C1:60:A9:A1:3D:DB:5A:D7:F1:2F:22:B6:68:1F:9D:1F:F1:14:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a9487ccb-1f17-30c5-9e67-7b8da6bf2cd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:22:f2:bf:b5:7c:d5:2a:a4:b2:04:d0:b2:7a:9d:f8:aa:57: c9:67:be:93:a2:8a:65:fd:65:cb:c8:d1:50:be:15:af:af:5a: ac:8a:cb:d6:af:ba:0a:7c:d7:aa:c4:59:51:95:38:80:b8:dc: 25:28:2b:f1:ef:41:52:d0:e9:9f:42:fc:5d:6c:33:bf:09:02: fb:8d:8d:b0:91:6e:8f:d3:0b:d4:56:74:22:a0:bf:c4:44:7b: c7:d5:2b:4d:20:cc:02:06:7a:c6:1d:ca:08:b4:d7:d6:6a:12: 3d:18:84:87:22:1d:11:6a:13:e8:d3:c9:24:b1:a5:9c:45:3c: a8:b4:4b:26:55:ff:58:8f:ba:16:b8:5f:32:8a:fa:91:88:13: 24:ac:4d:d7:1a:32:ff:c5:6c:db:12:50:ea:dc:4f:f0:9b:e1: 3c:60:49:9b:c9:b9:65:2b:08:ba:65:61:79:9f:fa:49:b4:25: 59:af:c7:87:8a:81:92:28:22:4b:8b:ba:92:dc:8f:56:05:1f: 1f:4f:76:20:1d:cf:e5:03:37:9a:bd:b5:d0:63:79:39:97:ff: f8:fd:68:19:e1:92:3f:0f:81:e7:1c:cc:fb:29:ca:f5:7f:54: 5b:ab:7b:fb:e6:f3:e0:b1:7c:f9:7c:13:c1:92:37:77:ff:1e: b2:69:e2:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxDPDiRWg2eysswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk MmJlZGYwNWYtODg5OC00ZjEzLWIzMmItNzZjMWExZjUwODAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitozgPCh08KCSacG1MrZAuFATtrzJA6TEmgk wY0fcpEIqMpnSq1I5Rg1KzT5qPHq4sMneKr1pQ4l8FyBrjlwLvxcAlZrOcuqiGYR Md97z/i8nBcYpR2NGixaruKHdGOBVceT4+tTaYiSsjVIJqHhK5lOnbwwyREtMCzy 2Ib4NVa1yx9RnT924nmMMq4BCPzS0AWXR4CqPOzFK5uwKQrBV3cu+i9Mn4aOHPee F0s9nEtG/dr92/nblEjGOudT0YcklIQbDREFJCJ5oqwUfSiPmSWmmnZtp9CqbcNT DHdexRO+AUO+SiZfRPfPLqxMnIRgTH8NeXK4pxTiHwgnlTWTPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvBYKmhPdta1/EvIrZoH50f8RQmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYTk0ODdjY2ItMWYxNy0z MGM1LTllNjctN2I4ZGE2YmYyY2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPgZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQi8r+1fNUqpLIE0LJ6nfiqV8lnvpOiimX9ZcvI0VC+Fa+vWqyKy9av ugp816rEWVGVOIC43CUoK/HvQVLQ6Z9C/F1sM78JAvuNjbCRbo/TC9RWdCKgv8RE e8fVK00gzAIGesYdygi019ZqEj0YhIciHRFqE+jTySSxpZxFPKi0SyZV/1iPuha4 XzKK+pGIEySsTdcaMv/FbNsSUOrcT/Cb4TxgSZvJuWUrCLplYXmf+km0JVmvx4eK gZIoIkuLupLcj1YFHx9PdiAdz+UDN5q9tdBjeTmX//j9aBnhkj8PgecczPspyvV/ VFure/vm8+CxfPl8E8GSN3f/HrJp4ms= -----END CERTIFICATE-----Generated at Sat Apr 26 19:21:02 2025 by rpki-client