$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c86adb36-4e6e-3387-9571-1d8eeec36b91.roa File: c86adb36-4e6e-3387-9571-1d8eeec36b91.roa (raw, json) Hash identifier: tZ+xTJo/UVdDBj5PkIG+OjriJPnAcHOsrXh0jtMRpsA= Subject key identifier: 9C:69:DD:FA:08:38:C9:93:90:7D:91:D5:E4:2B:EB:EA:1C:B7:B2:DE Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F43285849AF13E08D2AFA905FFA14B640 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c86adb36-4e6e-3387-9571-1d8eeec36b91.roa Signing time: Tue 29 Apr 2025 06:00:20 +0000 ROA not before: Tue 29 Apr 2025 06:00:20 +0000 ROA not after: Mon 28 Jul 2025 06:00:20 +0000 asID: 54113 IP address blocks: 140.248.108.0/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:13:e0:8d:2a:fa:90:5f:fa:14:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Apr 29 06:00:20 2025 GMT Not After : Jul 28 06:00:20 2025 GMT Subject: CN=52b41a33-bf51-41ee-8349-1a10a449fa01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b2:f8:8d:7f:05:47:0e:5d:85:4e:10:a7:fb: 32:b2:fb:94:c7:68:11:be:b2:32:74:49:7b:8b:3f: b7:8d:0d:a7:b1:71:a3:80:f0:92:2f:19:98:32:b9: a5:7e:4c:eb:b0:84:a2:15:ad:01:f5:52:c2:fb:4c: 88:c3:1d:59:af:5d:f5:13:ec:34:08:33:c7:bc:d5: 23:7f:0d:8c:3b:47:c2:71:f0:6b:c1:83:f5:3e:d0: 8f:27:0f:a2:62:16:c6:45:e2:9b:c8:bd:0c:31:08: 4c:45:ae:ad:4c:fc:ff:1c:41:df:3c:78:a3:1e:2e: a6:3e:04:63:04:bf:1f:a5:8e:0c:2b:8f:d9:45:3f: e8:53:5f:12:75:cc:40:fb:08:cc:d2:7d:4b:a0:7e: f3:c7:94:05:47:83:ad:96:ff:ad:d7:4f:f1:2f:85: ff:b6:a2:9e:35:7f:8f:96:19:58:d3:95:be:4f:c7: c1:ce:4d:f2:b8:4b:22:80:3f:53:fb:6f:b3:8f:7f: e0:20:47:2e:49:c8:ab:f3:27:1f:ef:fc:ef:44:78: 9b:3a:ef:44:1f:22:cc:40:88:0a:e2:91:26:a5:f0: e1:86:8a:7e:f6:2e:6a:dc:4a:04:d9:90:0b:8f:20: ba:db:6f:90:02:bb:9a:64:9b:33:5c:0c:9a:54:dc: 8d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:69:DD:FA:08:38:C9:93:90:7D:91:D5:E4:2B:EB:EA:1C:B7:B2:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c86adb36-4e6e-3387-9571-1d8eeec36b91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.108.0/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:67:bf:03:27:f3:ce:98:41:89:08:56:4d:c7:97:3a:82:0b: 98:23:74:fa:06:e8:c1:6d:eb:98:61:e7:c4:24:87:2e:86:c2: 9f:75:b9:67:86:96:55:74:9b:00:20:4c:9f:3f:04:a4:b9:8e: 81:ac:c8:51:05:a9:81:f9:99:7f:cd:0c:1d:52:7c:aa:43:82: 62:53:4d:e3:86:cb:b8:ce:d2:cc:28:a9:0e:76:0f:a7:be:20: 62:9f:8b:0c:4c:f7:a2:fb:68:c3:66:b8:10:10:df:93:32:a0: cb:1a:a8:d9:39:ee:64:99:50:b9:a8:07:8d:c1:df:ae:bc:c1: c6:a9:fe:12:1d:e3:a8:f9:a5:48:95:13:df:5a:f2:1b:fd:57: 7d:22:45:a0:1d:59:aa:56:d8:fe:a6:fb:19:32:dd:5b:11:f3: ba:fa:a9:52:18:b6:28:c9:67:c1:81:3a:08:bb:b4:d8:03:e4: 3a:23:85:0b:f9:77:f4:cb:7e:a0:08:e7:6e:85:1a:18:fa:15: 30:7c:a6:7b:a6:e6:f2:c5:99:20:41:54:58:e1:c0:cb:a8:65: 7f:5f:fb:67:03:ad:81:d4:64:62:fd:d1:58:ec:56:ea:32:91: 1c:d7:00:ce:b0:a1:a0:59:83:a7:80:1b:12:dd:c5:c2:d3:a8: af:bd:37:78 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmvE+CNKvqQX/oUtkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDQyOTA2MDAyMFoXDTI1MDcyODA2MDAyMFowLzEtMCsGA1UEAxMk NTJiNDFhMzMtYmY1MS00MWVlLTgzNDktMWExMGE0NDlmYTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7L4jX8FRw5dhU4Qp/sysvuUx2gRvrIydEl7 iz+3jQ2nsXGjgPCSLxmYMrmlfkzrsISiFa0B9VLC+0yIwx1Zr131E+w0CDPHvNUj fw2MO0fCcfBrwYP1PtCPJw+iYhbGReKbyL0MMQhMRa6tTPz/HEHfPHijHi6mPgRj BL8fpY4MK4/ZRT/oU18SdcxA+wjM0n1LoH7zx5QFR4Otlv+t10/xL4X/tqKeNX+P lhlY05W+T8fBzk3yuEsigD9T+2+zj3/gIEcuScir8ycf7/zvRHibOu9EHyLMQIgK 4pEmpfDhhop+9i5q3EoE2ZALjyC622+QAruaZJszXAyaVNyN9QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJxp3foIOMmTkH2R1eQr6+oct7LeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYzg2YWRiMzYtNGU2ZS0z Mzg3LTk1NzEtMWQ4ZWVlYzM2YjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDjPhsADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB3Z78DJ/POmEGJCFZNx5c6gguYI3T6BujBbeuYYefEJIcuhsKfdbln hpZVdJsAIEyfPwSkuY6BrMhRBamB+Zl/zQwdUnyqQ4JiU03jhsu4ztLMKKkOdg+n viBin4sMTPei+2jDZrgQEN+TMqDLGqjZOe5kmVC5qAeNwd+uvMHGqf4SHeOo+aVI lRPfWvIb/Vd9IkWgHVmqVtj+pvsZMt1bEfO6+qlSGLYoyWfBgToIu7TYA+Q6I4UL +Xf0y36gCOduhRoY+hUwfKZ7pubyxZkgQVRY4cDLqGV/X/tnA62B1GRi/dFY7Fbq MpEc1wDOsKGgWYOngBsS3cXC06ivvTd4 -----END CERTIFICATE-----Generated at Tue Apr 29 18:08:21 2025 by rpki-client