$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/259ef334-1b2b-3e6d-8a44-d75c735bb56d.roa File: 259ef334-1b2b-3e6d-8a44-d75c735bb56d.roa (raw, json) Hash identifier: qUPYMws2I97mQUTcSoLY8nr/ZBs5BfdHF6kSAMh9+f8= Subject key identifier: AF:14:75:33:0F:CF:87:13:18:CA:0D:F4:9B:C8:F8:66:82:6E:54:CD Certificate issuer: /CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78 Certificate serial: 010D0C9F43285849ADF183DBA8135A23E912BCC0 Authority key identifier: 1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/259ef334-1b2b-3e6d-8a44-d75c735bb56d.roa Signing time: Mon 28 Apr 2025 20:15:18 +0000 ROA not before: Mon 28 Apr 2025 20:15:18 +0000 ROA not after: Sun 27 Jul 2025 20:15:18 +0000 asID: 11721 IP address blocks: 140.235.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:f1:83:db:a8:13:5a:23:e9:12:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78 Validity Not Before: Apr 28 20:15:18 2025 GMT Not After : Jul 27 20:15:18 2025 GMT Subject: CN=8e328974-279a-47a9-9813-8fba541e991d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:38:9b:13:b5:73:b6:40:5b:e7:7b:b3:a5:9b: 87:4c:4f:e1:36:f9:80:26:fe:0f:f6:68:01:17:8c: 13:6d:b8:e2:32:0d:84:5b:12:57:a5:5f:f6:f0:12: c0:90:48:d0:a4:29:0e:c3:05:ab:21:99:69:fe:25: 48:d5:7f:af:02:71:a1:d1:a2:75:8f:57:48:b8:53: 75:02:b1:1b:a5:ab:15:a7:16:b7:bd:f1:0f:d8:f2: 8f:5b:76:5c:c3:7c:41:d5:29:6e:1b:f4:6f:1b:ae: 46:72:48:0a:1a:5c:47:68:f2:15:2d:2b:28:d5:8b: 12:1b:15:17:41:93:c3:57:1d:a8:e2:bd:9d:93:60: 46:56:72:46:29:8d:cb:cf:92:94:a6:2a:06:40:d2: 65:ce:94:3c:3a:03:30:e5:f4:9a:a2:fc:f9:b2:c7: 47:8b:4a:dc:85:a1:40:63:24:fd:8d:8a:80:f3:4f: 55:40:4b:e5:44:66:57:b8:ed:6d:76:2c:cb:24:3d: 72:07:89:04:63:1f:65:9b:1f:fb:c0:bf:b6:54:8f: e5:79:f9:96:28:e6:61:ba:a2:fa:99:df:ad:87:21: 75:ed:a5:87:9b:4c:09:28:46:33:0a:7a:93:c3:4c: 6b:b7:0b:d7:3d:c6:65:95:48:3b:d1:fb:5f:fd:92: 0e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:14:75:33:0F:CF:87:13:18:CA:0D:F4:9B:C8:F8:66:82:6E:54:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/259ef334-1b2b-3e6d-8a44-d75c735bb56d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl X509v3 Authority Key Identifier: keyid:1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer sbgp-ipAddrBlock: critical IPv4: 140.235.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:cd:08:80:e9:b4:ce:95:c6:4d:dd:34:17:a9:84:f0:dc:68: 90:f5:1a:0f:ff:0f:6f:32:20:27:98:cb:e7:06:c0:76:31:8a: 8c:d5:83:65:45:07:29:5f:f1:8c:1f:e9:ed:bf:3b:a9:5a:a5: f0:af:b9:95:62:7f:77:1c:d7:09:36:ad:e2:bd:b7:37:74:c2: 89:e2:3a:4f:08:42:a3:6d:ab:9a:9a:1b:ae:2e:a8:35:19:b4: 22:a4:30:f8:95:dc:14:fc:b4:bc:c0:a7:49:1b:9e:9e:ca:e0: 33:75:35:4d:f4:31:c6:07:c9:54:e7:99:e0:73:65:0d:c9:a5: ba:b5:ad:7e:f5:32:a6:48:e4:a4:42:1e:cd:6e:82:b7:bc:8e: ad:4b:db:66:57:1d:61:f4:c4:ec:ef:db:67:28:f9:af:39:9f: cd:72:e9:8e:eb:87:26:8c:e9:3d:e0:21:a0:dd:46:19:58:35: ef:cb:48:67:62:3b:2f:30:21:8f:d6:60:ff:50:f6:6a:fd:d7: f8:b6:57:bf:69:52:5d:d4:7b:ae:3f:b8:6b:b2:44:0b:21:81: 67:a1:e1:3e:2d:be:ec:97:de:2c:f9:36:1f:aa:c1:f6:83:6e: c3:d1:9b:44:5b:92:cd:d7:0e:32:1f:b2:c2:03:8f:c7:42:5b: b1:e7:ab:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmt8YPbqBNaI+kSvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZmUzNjItODllNC00YWU4LWI5YTItNjFiMGU1NTIz Yzc4MB4XDTI1MDQyODIwMTUxOFoXDTI1MDcyNzIwMTUxOFowLzEtMCsGA1UEAxMk OGUzMjg5NzQtMjc5YS00N2E5LTk4MTMtOGZiYTU0MWU5OTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TibE7VztkBb53uzpZuHTE/hNvmAJv4P9mgB F4wTbbjiMg2EWxJXpV/28BLAkEjQpCkOwwWrIZlp/iVI1X+vAnGh0aJ1j1dIuFN1 ArEbpasVpxa3vfEP2PKPW3Zcw3xB1SluG/RvG65GckgKGlxHaPIVLSso1YsSGxUX QZPDVx2o4r2dk2BGVnJGKY3Lz5KUpioGQNJlzpQ8OgMw5fSaovz5ssdHi0rchaFA YyT9jYqA809VQEvlRGZXuO1tdizLJD1yB4kEYx9lmx/7wL+2VI/lefmWKOZhuqL6 md+thyF17aWHm0wJKEYzCnqTw0xrtwvXPcZllUg70ftf/ZIOXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8UdTMPz4cTGMoN9JvI+GaCblTNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85Mjdm ZTM2Mi04OWU0LTRhZTgtYjlhMi02MWIwZTU1MjNjNzgvMjU5ZWYzMzQtMWIyYi0z ZTZkLThhNDQtZDc1YzczNWJiNTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTI3ZmUzNjItODllNC00YWU4LWI5 YTItNjFiMGU1NTIzYzc4LzkyN2ZlMzYyLTg5ZTQtNGFlOC1iOWEyLTYxYjBlNTUy M2M3OC5jcmwwHwYDVR0jBBgwFoAUGtcHAlWwKq479wLsfcQu5WW9QqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MjdmZTM2Mi04OWU0LTRhZTgtYjlhMi02MWIw ZTU1MjNjNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOt7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALNCIDptM6Vxk3dNBephPDcaJD1Gg//D28yICeYy+cGwHYxiozVg2VF Bylf8Ywf6e2/O6lapfCvuZVif3cc1wk2reK9tzd0woniOk8IQqNtq5qaG64uqDUZ tCKkMPiV3BT8tLzAp0kbnp7K4DN1NU30McYHyVTnmeBzZQ3Jpbq1rX71MqZI5KRC Hs1ugre8jq1L22ZXHWH0xOzv22co+a85n81y6Y7rhyaM6T3gIaDdRhlYNe/LSGdi Oy8wIY/WYP9Q9mr91/i2V79pUl3Ue64/uGuyRAshgWeh4T4tvuyX3iz5Nh+qwfaD bsPRm0Rbks3XDjIfssIDj8dCW7Hnq7M= -----END CERTIFICATE-----Generated at Tue Apr 29 18:38:20 2025 by rpki-client