$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/19990b9e-a7ee-3373-9416-e00b1e3c189c.roa File: 19990b9e-a7ee-3373-9416-e00b1e3c189c.roa (raw, json) Hash identifier: +sL/Uw7ekSJDY7caWRmszeHFkh8M5A771K7qDXVyzsQ= Subject key identifier: 9B:BC:AE:F5:91:85:A7:4E:DB:21:6F:9E:7E:A7:C0:8C:30:3E:68:EA Certificate issuer: /CN=91a20fbd-d241-4454-b2ba-4938f807efb0 Certificate serial: 010D0C9F43285848DEA4AAE2AB5B2ADB8B9F0480 Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/19990b9e-a7ee-3373-9416-e00b1e3c189c.roa Signing time: Thu 13 Feb 2025 14:08:08 +0000 ROA not before: Thu 13 Feb 2025 14:08:08 +0000 ROA not after: Wed 14 May 2025 13:08:08 +0000 asID: 32346 IP address blocks: 140.235.9.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a4:aa:e2:ab:5b:2a:db:8b:9f:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0 Validity Not Before: Feb 13 14:08:08 2025 GMT Not After : May 14 13:08:08 2025 GMT Subject: CN=bf4cd462-24f5-4c4d-808c-5ce2c3e8fd22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a0:98:49:95:23:09:e9:b8:df:76:7a:81:cd: 9a:72:4e:d1:70:2f:35:7d:fe:e4:06:14:e4:53:09: cf:86:f7:2f:3b:f6:ef:da:b9:5c:b3:d6:31:ac:41: 1d:36:27:07:0b:05:0e:ee:4d:53:84:4a:0d:27:34: ea:36:96:ac:58:42:8d:b7:ee:23:fb:60:94:4c:2b: 73:e1:5c:2a:83:c9:6a:3f:93:8d:3d:bf:d4:09:a7: e0:49:a5:f1:c9:00:73:9d:91:ef:be:4a:f7:f6:23: 92:12:06:72:57:86:98:27:5a:d0:a3:ee:4e:4d:cf: c9:c2:9a:7f:bb:5f:30:9f:5a:23:6a:05:cd:2b:a3: 50:3d:9b:c9:f9:bf:13:e7:8a:b8:59:76:87:4c:12: f5:80:61:96:a4:42:78:c9:e3:13:c1:93:0f:72:3b: bb:bb:40:96:16:7e:8c:1c:06:e7:11:b0:8b:68:66: 8f:22:59:08:49:44:0c:d9:10:89:53:e2:4e:d1:49: 94:54:63:3a:7d:cc:c1:67:c7:e9:76:53:92:5a:fc: c1:1b:65:bf:f7:ac:3f:5d:49:5d:07:d2:f3:cf:79: 7c:36:37:10:5d:c5:47:a3:4f:87:a1:c0:fe:c8:7e: 50:31:60:aa:30:0d:c4:e3:a1:25:37:5a:70:6f:c3: b9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BC:AE:F5:91:85:A7:4E:DB:21:6F:9E:7E:A7:C0:8C:30:3E:68:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/19990b9e-a7ee-3373-9416-e00b1e3c189c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl X509v3 Authority Key Identifier: keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer sbgp-ipAddrBlock: critical IPv4: 140.235.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:f3:f2:3b:1e:20:52:58:08:a4:5d:52:54:98:9e:95:d9:36: 79:9b:a9:68:f7:d8:c0:61:70:76:19:3e:25:57:66:28:70:3a: c5:2a:dc:1f:6d:ad:9c:f5:57:90:e6:18:99:38:61:23:4a:8e: ca:ad:7d:2d:20:0c:45:b7:91:76:6a:0a:49:19:bd:2f:0d:4e: 1f:a4:70:98:eb:89:cb:5d:28:38:84:28:3b:7b:32:e8:7d:7d: 28:55:62:ea:8e:ec:22:12:b3:54:63:b0:f6:63:16:a1:3d:98: 2b:84:d6:e7:9d:f4:86:cd:2d:45:40:f0:cf:f8:28:be:99:d1: 02:70:a1:bf:17:7a:4f:0b:00:23:df:e3:24:74:44:7d:03:13: 53:b0:91:09:c3:4c:d4:4d:3b:6b:40:c9:0d:3d:ae:9c:0e:4e: b6:7f:10:01:8c:58:dc:d0:bf:16:e3:82:98:9d:7e:aa:83:d5: 43:fd:cd:aa:61:ad:dd:38:6c:4e:e1:6d:03:b5:ef:1a:bd:a8: b7:ed:e5:83:61:0f:1f:c5:7d:45:81:8a:6d:8c:4d:e7:36:29: 76:d3:4f:18:f7:d1:ff:5c:69:38:9b:2f:e3:20:26:0c:dd:0e: 0f:27:71:21:8f:f1:33:9f:f9:08:86:9d:39:3a:85:78:7b:d5: f0:da:a0:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjepKriq1sq24ufBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFhMjBmYmQtZDI0MS00NDU0LWIyYmEtNDkzOGY4MDdl ZmIwMB4XDTI1MDIxMzE0MDgwOFoXDTI1MDUxNDEzMDgwOFowLzEtMCsGA1UEAxMk YmY0Y2Q0NjItMjRmNS00YzRkLTgwOGMtNWNlMmMzZThmZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKCYSZUjCem433Z6gc2ack7RcC81ff7kBhTk UwnPhvcvO/bv2rlcs9YxrEEdNicHCwUO7k1ThEoNJzTqNpasWEKNt+4j+2CUTCtz 4Vwqg8lqP5ONPb/UCafgSaXxyQBznZHvvkr39iOSEgZyV4aYJ1rQo+5OTc/Jwpp/ u18wn1ojagXNK6NQPZvJ+b8T54q4WXaHTBL1gGGWpEJ4yeMTwZMPcju7u0CWFn6M HAbnEbCLaGaPIlkISUQM2RCJU+JO0UmUVGM6fczBZ8fpdlOSWvzBG2W/96w/XUld B9Lzz3l8NjcQXcVHo0+HocD+yH5QMWCqMA3E46ElN1pwb8O5dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJu8rvWRhadO2yFvnn6nwIwwPmjqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MWEy MGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4ZjgwN2VmYjAvMTk5OTBiOWUtYTdlZS0z MzczLTk0MTYtZTAwYjFlM2MxODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTFhMjBmYmQtZDI0MS00NDU0LWIy YmEtNDkzOGY4MDdlZmIwLzkxYTIwZmJkLWQyNDEtNDQ1NC1iMmJhLTQ5MzhmODA3 ZWZiMC5jcmwwHwYDVR0jBBgwFoAUtn7s2ynC3v5dSgA3ROxJkNFVVs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MWEyMGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4 ZjgwN2VmYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOsJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfz8jseIFJYCKRdUlSYnpXZNnmbqWj32MBhcHYZPiVXZihwOsUq3B9t rZz1V5DmGJk4YSNKjsqtfS0gDEW3kXZqCkkZvS8NTh+kcJjrictdKDiEKDt7Muh9 fShVYuqO7CISs1RjsPZjFqE9mCuE1ued9IbNLUVA8M/4KL6Z0QJwob8Xek8LACPf 4yR0RH0DE1OwkQnDTNRNO2tAyQ09rpwOTrZ/EAGMWNzQvxbjgpidfqqD1UP9zaph rd04bE7hbQO17xq9qLft5YNhDx/FfUWBim2MTec2KXbTTxj30f9caTibL+MgJgzd Dg8ncSGP8TOf+QiGnTk6hXh71fDaoGA= -----END CERTIFICATE-----Generated at Mon Apr 28 00:02:20 2025 by rpki-client