$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/c0acfa2f-7274-3abb-abad-36132a4c20b9.roa File: c0acfa2f-7274-3abb-abad-36132a4c20b9.roa (raw, json) Hash identifier: IZBJYw3/C8LnHDWGVDrwez3EXuU0K4BQ0mJ196aT9u8= Subject key identifier: D6:EA:05:AB:88:B9:4D:F7:7E:3E:5A:B1:6F:AD:59:95:09:7A:AE:AC Certificate issuer: /CN=98161ef7-249b-450b-ba6a-5819e613ed63 Certificate serial: 010D0C9F4328584965E97949B08E4A68356F2580 Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/c0acfa2f-7274-3abb-abad-36132a4c20b9.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 21738 IP address blocks: 140.235.156.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:79:49:b0:8e:4a:68:35:6f:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63 Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=b1368336-fbd2-4332-8bdb-025ee184a161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:be:bf:ef:13:58:44:55:37:4e:c4:96:a1:23: 3e:7c:a8:e9:eb:6d:99:54:b9:90:96:39:4c:33:d9: e4:b7:52:17:96:d6:0d:28:72:8b:5e:a8:67:2f:60: b2:9d:c1:8f:79:9b:85:05:f8:ae:d0:43:0e:24:39: c7:59:64:31:ac:80:e2:ce:4b:aa:e7:16:25:76:57: fe:e0:8c:56:6f:6b:0a:ff:ec:55:55:97:7f:d9:34: 7b:23:f4:c0:61:d3:15:93:0f:d2:a9:44:c0:53:b6: 50:f4:10:cb:67:7a:eb:b4:b9:49:48:4d:6f:8c:a3: 98:17:57:3f:c7:f1:c4:8a:0f:85:14:58:54:6c:17: bf:a6:b2:09:96:c0:ab:8f:8c:48:60:f0:61:a6:18: d6:91:fa:0d:05:75:f0:bb:4a:75:ba:12:f6:ef:46: d2:10:a3:f9:a0:b5:0d:72:5d:f9:57:32:06:3e:43: 5c:92:eb:6a:c5:6a:92:01:95:55:7a:fe:1a:60:6d: 56:7a:b0:06:ce:2e:72:f1:0a:2a:4e:96:7c:f7:4b: 15:e0:d0:13:96:8d:64:cf:77:f8:59:d7:6c:f1:a7: 1b:50:c5:31:1a:bb:c3:55:7b:98:92:87:f1:14:72: 68:bf:db:77:c1:d4:45:d1:7b:90:5c:97:4e:8a:ec: 16:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EA:05:AB:88:B9:4D:F7:7E:3E:5A:B1:6F:AD:59:95:09:7A:AE:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/c0acfa2f-7274-3abb-abad-36132a4c20b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl X509v3 Authority Key Identifier: keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer sbgp-ipAddrBlock: critical IPv4: 140.235.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:a9:52:fc:82:c1:02:fc:c1:e5:6e:86:85:6d:3e:a7:38:66: ed:34:ea:e8:f4:60:c7:8d:90:92:14:1a:3c:a6:26:69:da:7d: be:03:d0:83:b5:7b:db:46:ea:06:80:14:b8:64:c9:ce:8c:b9: 81:b7:07:cc:ee:4f:93:50:84:b7:ae:b0:67:62:d7:cd:81:c6: f2:94:40:5d:22:b8:f2:f5:7d:83:74:b4:cb:f6:fa:4a:77:9c: df:94:1c:c8:65:ca:6f:73:53:07:5e:d4:3d:f9:02:2a:8a:8f: ba:4e:f9:00:7d:07:f8:90:d3:0a:93:ca:f4:e4:7e:6c:66:56: 94:cd:55:89:bd:40:de:ad:02:60:18:aa:79:8d:bc:6f:ea:56: 75:43:45:f4:10:5e:c6:67:4f:04:c3:b8:9f:34:3f:f6:4b:f2: 20:ec:84:5d:61:d3:1a:52:42:94:36:b7:1e:e0:5a:79:87:1d: ce:25:0d:86:f2:6e:db:06:05:e4:80:81:87:9a:a7:45:10:0f: 89:15:17:98:d0:62:c9:cc:88:86:a0:27:bb:dd:af:72:6f:2f: 0d:95:50:b7:83:5e:a8:b8:55:84:cd:ea:fd:ab:aa:f8:9b:10: 34:68:d9:82:58:97:46:fe:e8:b0:b7:9b:3d:95:56:07:7b:2d: 3c:3b:aa:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEll6XlJsI5KaDVvJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgxNjFlZjctMjQ5Yi00NTBiLWJhNmEtNTgxOWU2MTNl ZDYzMB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk YjEzNjgzMzYtZmJkMi00MzMyLThiZGItMDI1ZWUxODRhMTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3b6/7xNYRFU3TsSWoSM+fKjp622ZVLmQljlM M9nkt1IXltYNKHKLXqhnL2CyncGPeZuFBfiu0EMOJDnHWWQxrIDizkuq5xYldlf+ 4IxWb2sK/+xVVZd/2TR7I/TAYdMVkw/SqUTAU7ZQ9BDLZ3rrtLlJSE1vjKOYF1c/ x/HEig+FFFhUbBe/prIJlsCrj4xIYPBhphjWkfoNBXXwu0p1uhL270bSEKP5oLUN cl35VzIGPkNckutqxWqSAZVVev4aYG1WerAGzi5y8QoqTpZ890sV4NATlo1kz3f4 Wdds8acbUMUxGrvDVXuYkofxFHJov9t3wdRF0XuQXJdOiuwWnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbqBauIuU33fj5asW+tWZUJeq6sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODE2 MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5ZTYxM2VkNjMvYzBhY2ZhMmYtNzI3NC0z YWJiLWFiYWQtMzYxMzJhNGMyMGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTgxNjFlZjctMjQ5Yi00NTBiLWJh NmEtNTgxOWU2MTNlZDYzLzk4MTYxZWY3LTI0OWItNDUwYi1iYTZhLTU4MTllNjEz ZWQ2My5jcmwwHwYDVR0jBBgwFoAU1BnUREsRiVyMbWhl/etLT/KsGnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ODE2MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5 ZTYxM2VkNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOucMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOpUvyCwQL8weVuhoVtPqc4Zu006uj0YMeNkJIUGjymJmnafb4D0IO1 e9tG6gaAFLhkyc6MuYG3B8zuT5NQhLeusGdi182BxvKUQF0iuPL1fYN0tMv2+kp3 nN+UHMhlym9zUwde1D35AiqKj7pO+QB9B/iQ0wqTyvTkfmxmVpTNVYm9QN6tAmAY qnmNvG/qVnVDRfQQXsZnTwTDuJ80P/ZL8iDshF1h0xpSQpQ2tx7gWnmHHc4lDYby btsGBeSAgYeap0UQD4kVF5jQYsnMiIagJ7vdr3JvLw2VULeDXqi4VYTN6v2rqvib EDRo2YJYl0b+6LC3mz2VVgd7LTw7qjw= -----END CERTIFICATE-----Generated at Sun Apr 27 04:06:06 2025 by rpki-client