$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/3af0b3a8-2175-3ff5-9a4a-e134a4f16e10.roa File: 3af0b3a8-2175-3ff5-9a4a-e134a4f16e10.roa (raw, json) Hash identifier: PrQGryYMPN71v5koDeF/o3NVGDijweM24wRQq3G4mDw= Subject key identifier: 1C:64:1A:60:5F:CE:51:1A:9E:93:3B:70:A3:6A:24:BB:76:92:62:2E Certificate issuer: /CN=ccdced21-8f04-4273-8f8a-07593c3968fb Certificate serial: 010D0C9F4328584940F76CB416AA43DA0809BB00 Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/3af0b3a8-2175-3ff5-9a4a-e134a4f16e10.roa Signing time: Thu 20 Mar 2025 19:24:05 +0000 ROA not before: Thu 20 Mar 2025 19:24:05 +0000 ROA not after: Wed 18 Jun 2025 19:24:05 +0000 asID: 401243 IP address blocks: 140.235.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:f7:6c:b4:16:aa:43:da:08:09:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb Validity Not Before: Mar 20 19:24:05 2025 GMT Not After : Jun 18 19:24:05 2025 GMT Subject: CN=69d46365-bf98-4954-9538-538353fd3b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5e:be:81:65:31:d7:1a:aa:a3:92:8a:7f:b7: c6:76:a9:f8:f9:67:5e:f4:5c:46:49:f6:58:b4:8a: 36:f7:09:99:91:6b:76:36:52:87:01:60:40:7a:64: 3b:8b:e1:e3:d1:d7:25:e1:e0:5c:2d:fc:71:ce:d5: 18:2c:d2:7b:a2:e5:2c:40:a8:81:53:64:cf:21:e9: 20:db:15:c5:b0:a3:db:c0:23:dc:20:5d:c8:45:05: 69:1d:0a:1f:3c:df:15:e6:04:f4:d7:00:1b:4b:da: 7d:7f:d5:e5:f9:54:ad:45:0e:e4:7f:7f:01:38:7d: a6:b8:3e:3f:7a:a2:23:42:04:d2:16:8c:b2:0f:f6: d2:23:12:24:e7:f8:c3:d5:9b:d0:0f:61:c7:54:9e: 9a:a9:04:2d:f0:ea:37:f2:87:d1:19:9b:87:a7:57: ba:9e:b2:3b:ee:21:66:bc:86:fe:c2:80:a8:03:0e: 25:0e:77:25:74:54:ce:6e:e6:fd:40:5d:3b:47:20: 16:55:f3:65:21:12:f7:85:a2:41:54:e7:57:48:98: 75:a1:d7:44:3b:53:4b:86:c6:34:39:ba:01:5a:ed: b3:57:7f:d2:8c:03:90:d5:fd:01:e6:e3:37:2c:d8: d5:8b:1e:61:96:2d:83:ed:45:18:59:b5:7a:ef:1a: 69:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:64:1A:60:5F:CE:51:1A:9E:93:3B:70:A3:6A:24:BB:76:92:62:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/3af0b3a8-2175-3ff5-9a4a-e134a4f16e10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl X509v3 Authority Key Identifier: keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer sbgp-ipAddrBlock: critical IPv4: 140.235.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:ed:d4:db:a0:68:89:55:84:0e:cc:e7:70:b2:8e:29:f5:d5: 6f:8b:06:ff:d7:6e:63:4e:2a:bf:de:37:59:67:a7:b4:3a:52: b1:13:f8:8a:e9:47:cf:4a:11:44:83:54:bf:2f:9e:57:b1:75: 6f:45:d3:20:f7:8c:32:4f:b0:f5:c9:92:3d:2f:b9:92:33:83: 62:88:c3:43:76:0f:b1:da:9d:41:e6:1c:91:44:86:0b:bf:0f: 7e:b0:52:e4:51:31:04:0c:89:e0:46:33:b5:c4:cb:bf:bd:b1: 98:3b:59:31:ca:2d:0c:61:09:ec:5f:2e:28:d5:9d:89:75:df: ea:80:31:4c:31:2f:63:72:55:fa:cb:f4:7a:62:0c:33:9e:25: 4e:d4:4c:f4:b7:29:a0:91:c6:58:0e:94:34:60:97:0f:bc:3c: a0:5a:0f:8e:29:1c:69:a0:a9:4f:a5:e3:84:c6:8a:2a:39:5a: 34:93:71:e4:c4:e9:0a:f1:89:48:45:02:5b:36:fa:41:f3:3c: 3f:53:d2:ce:ad:79:40:71:ed:d0:e4:aa:60:05:ff:aa:cd:19: a3:d6:b4:18:75:2c:12:c0:64:67:c8:6f:58:73:e1:20:a2:36: f0:bd:01:f2:53:5c:f2:e6:5b:21:86:82:86:60:39:76:be:e0: bb:22:54:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElA92y0FqpD2ggJuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2NkY2VkMjEtOGYwNC00MjczLThmOGEtMDc1OTNjMzk2 OGZiMB4XDTI1MDMyMDE5MjQwNVoXDTI1MDYxODE5MjQwNVowLzEtMCsGA1UEAxMk NjlkNDYzNjUtYmY5OC00OTU0LTk1MzgtNTM4MzUzZmQzYjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF6+gWUx1xqqo5KKf7fGdqn4+Wde9FxGSfZY tIo29wmZkWt2NlKHAWBAemQ7i+Hj0dcl4eBcLfxxztUYLNJ7ouUsQKiBU2TPIekg 2xXFsKPbwCPcIF3IRQVpHQofPN8V5gT01wAbS9p9f9Xl+VStRQ7kf38BOH2muD4/ eqIjQgTSFoyyD/bSIxIk5/jD1ZvQD2HHVJ6aqQQt8Oo38ofRGZuHp1e6nrI77iFm vIb+woCoAw4lDncldFTObub9QF07RyAWVfNlIRL3haJBVOdXSJh1oddEO1NLhsY0 OboBWu2zV3/SjAOQ1f0B5uM3LNjVix5hli2D7UUYWbV67xpprQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxkGmBfzlEanpM7cKNqJLt2kmIuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jY2Rj ZWQyMS04ZjA0LTQyNzMtOGY4YS0wNzU5M2MzOTY4ZmIvM2FmMGIzYTgtMjE3NS0z ZmY1LTlhNGEtZTEzNGE0ZjE2ZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2NkY2VkMjEtOGYwNC00MjczLThm OGEtMDc1OTNjMzk2OGZiL2NjZGNlZDIxLThmMDQtNDI3My04ZjhhLTA3NTkzYzM5 NjhmYi5jcmwwHwYDVR0jBBgwFoAUstSdhUSY71nqCHYPz711A7DiR8cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jY2RjZWQyMS04ZjA0LTQyNzMtOGY4YS0wNzU5 M2MzOTY4ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOuMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjt1NugaIlVhA7M53Cyjin11W+LBv/XbmNOKr/eN1lnp7Q6UrET+Irp R89KEUSDVL8vnlexdW9F0yD3jDJPsPXJkj0vuZIzg2KIw0N2D7HanUHmHJFEhgu/ D36wUuRRMQQMieBGM7XEy7+9sZg7WTHKLQxhCexfLijVnYl13+qAMUwxL2NyVfrL 9HpiDDOeJU7UTPS3KaCRxlgOlDRglw+8PKBaD44pHGmgqU+l44TGiio5WjSTceTE 6QrxiUhFAls2+kHzPD9T0s6teUBx7dDkqmAF/6rNGaPWtBh1LBLAZGfIb1hz4SCi NvC9AfJTXPLmWyGGgoZgOXa+4LsiVBo= -----END CERTIFICATE-----Generated at Mon Apr 28 14:20:36 2025 by rpki-client