$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c28acd5f-5fa6-3c28-9b81-d888c1e73830.roa File: c28acd5f-5fa6-3c28-9b81-d888c1e73830.roa (raw, json) Hash identifier: /jrZey8uKOx/55hceQYsEZzXLk7S6wLUHrzx2q2v7x0= Subject key identifier: 43:C9:DB:D6:49:7D:20:98:CE:27:10:F1:DF:AE:B7:32:C5:E5:32:B9 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584953C42D2D16E0C32AF2E08600 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c28acd5f-5fa6-3c28-9b81-d888c1e73830.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 54113 IP address blocks: 140.248.253.128/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:2d:2d:16:e0:c3:2a:f2:e0:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=a37dc340-0260-48be-aaac-d7ad52152347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ba:94:f9:67:38:3e:4f:1b:36:c7:ad:0d:71: 63:8e:9a:b4:7e:cc:38:9d:4a:5e:cc:15:a1:05:33: 81:f2:24:5f:97:4a:08:d8:32:2e:18:a6:a5:8e:ee: 62:4a:34:bd:26:ff:eb:50:01:63:2a:75:ce:6f:89: a4:2f:2b:19:e3:d5:23:c1:ab:c0:01:44:1b:16:16: ca:0e:43:69:f1:ff:9d:01:79:ec:09:c4:ed:1d:c7: e9:94:48:3b:95:1f:26:95:9d:a4:a6:ec:52:c9:92: c7:32:70:64:22:e7:62:fc:7d:05:1a:32:40:15:1d: 7d:b4:b0:6f:26:77:4c:26:31:bc:82:3f:29:a2:bb: 66:1c:29:f6:a7:68:99:81:e6:e8:a5:81:12:15:2a: b2:0b:74:bf:14:1c:41:6e:58:60:4c:a4:89:4e:e2: 44:1d:77:1a:3c:b7:32:cf:0a:88:39:3b:5d:85:59: 1f:00:43:56:53:95:65:40:c5:4a:87:4b:47:c4:04: 10:d0:c1:28:1c:ca:83:35:3a:d4:8d:5d:b5:5e:a9: 02:b4:52:a7:af:1f:3c:f9:34:f2:0b:a1:45:22:34: ab:33:54:60:71:02:1e:c0:49:cb:b5:6c:8b:89:d2: 81:0a:79:e1:41:07:3a:9d:d2:10:c3:d6:02:e9:5d: 37:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C9:DB:D6:49:7D:20:98:CE:27:10:F1:DF:AE:B7:32:C5:E5:32:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c28acd5f-5fa6-3c28-9b81-d888c1e73830.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.253.128/26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:4d:8a:05:df:54:c6:3c:2e:33:65:59:1b:ff:3d:6f:0a:a0: 9d:1e:09:32:ea:f0:f4:9a:e3:c9:71:b4:68:95:b4:9c:2a:5d: 5b:ad:37:af:4c:c2:45:f1:91:40:ff:16:fd:2f:84:29:1b:de: 42:63:04:32:3a:e6:0a:9e:5f:aa:54:4d:ef:7c:1a:08:bb:28: f6:da:7b:0f:7c:ac:78:bc:5a:60:17:84:2d:b8:1f:16:9c:f7: da:9b:09:fd:85:fa:30:1b:fc:72:d1:a1:16:80:d0:62:00:43: 40:85:d2:6b:01:46:70:db:4a:98:81:97:c5:07:b7:01:27:3f: 71:bc:9b:51:d5:ed:34:d4:4c:c9:89:36:31:3c:dc:60:47:f4: 78:cd:96:a8:7a:fd:de:e1:7d:94:11:4c:b9:20:3e:91:19:f7: b3:9a:19:16:34:8a:67:96:a9:3c:69:6a:75:6a:60:a0:a3:c8: f8:76:ac:e1:2f:89:0a:13:2f:aa:5a:16:d1:cb:6f:7d:71:57: 0c:fd:44:c2:52:32:a9:73:80:a0:34:a3:42:55:69:37:d5:28: 5d:8d:9f:3c:44:74:77:9f:3d:89:c0:e9:54:b5:46:af:01:2c: 81:20:ef:2a:97:be:b1:60:6c:9f:a4:75:08:44:7f:89:b5:2d: 8e:19:0a:d9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElTxC0tFuDDKvLghgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk YTM3ZGMzNDAtMDI2MC00OGJlLWFhYWMtZDdhZDUyMTUyMzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bqU+Wc4Pk8bNsetDXFjjpq0fsw4nUpezBWh BTOB8iRfl0oI2DIuGKalju5iSjS9Jv/rUAFjKnXOb4mkLysZ49UjwavAAUQbFhbK DkNp8f+dAXnsCcTtHcfplEg7lR8mlZ2kpuxSyZLHMnBkIudi/H0FGjJAFR19tLBv JndMJjG8gj8portmHCn2p2iZgebopYESFSqyC3S/FBxBblhgTKSJTuJEHXcaPLcy zwqIOTtdhVkfAENWU5VlQMVKh0tHxAQQ0MEoHMqDNTrUjV21XqkCtFKnrx88+TTy C6FFIjSrM1RgcQIewEnLtWyLidKBCnnhQQc6ndIQw9YC6V03uwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEPJ29ZJfSCYzicQ8d+utzLF5TK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYzI4YWNkNWYtNWZhNi0z YzI4LTliODEtZDg4OGMxZTczODMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGjPj9gDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQABTYoF31TGPC4zZVkb/z1vCqCdHgky6vD0muPJcbRolbScKl1brTev TMJF8ZFA/xb9L4QpG95CYwQyOuYKnl+qVE3vfBoIuyj22nsPfKx4vFpgF4QtuB8W nPfamwn9hfowG/xy0aEWgNBiAENAhdJrAUZw20qYgZfFB7cBJz9xvJtR1e001EzJ iTYxPNxgR/R4zZaoev3e4X2UEUy5ID6RGfezmhkWNIpnlqk8aWp1amCgo8j4dqzh L4kKEy+qWhbRy299cVcM/UTCUjKpc4CgNKNCVWk31ShdjZ88RHR3nz2JwOlUtUav ASyBIO8ql76xYGyfpHUIRH+JtS2OGQrZ -----END CERTIFICATE-----Generated at Sat Apr 26 16:26:33 2025 by rpki-client