$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594/adf2a19d-5608-3b19-bae1-1de2434104c6.roa File: adf2a19d-5608-3b19-bae1-1de2434104c6.roa (raw, json) Hash identifier: pSTlznqjrPsREn4/i9baMSo++ex4TfRPmvBlGfVpY3g= Subject key identifier: F7:FA:EF:59:1B:07:52:57:59:07:4F:6D:4A:0F:CE:6E:36:68:8F:AF Certificate issuer: /CN=ef238680-20ad-47df-89b5-7a55fae68594 Certificate serial: 010D0C9F4328584930DE7A6B6B1CF90A13C83480 Authority key identifier: 7C:FF:73:AC:9D:6E:BC:1D:25:7E:CD:8F:CE:E9:51:B2:B7:6A:F4:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594/adf2a19d-5608-3b19-bae1-1de2434104c6.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 53283 IP address blocks: 140.235.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594/ef238680-20ad-47df-89b5-7a55fae68594.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594/ef238680-20ad-47df-89b5-7a55fae68594.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:7a:6b:6b:1c:f9:0a:13:c8:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef238680-20ad-47df-89b5-7a55fae68594 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=14e713c0-c8ea-4143-9d67-4c721490c2f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e9:15:2f:8f:ef:df:ed:97:28:e7:d3:ad:ec: 42:a5:10:d1:94:20:39:0f:cc:96:91:f6:35:69:21: 48:55:86:22:bb:48:e4:ea:0d:37:a6:6e:41:63:93: fb:03:e8:f2:07:96:96:63:46:eb:24:74:1e:00:b2: b8:7d:49:bb:38:ef:de:5e:4d:a3:a3:31:45:74:db: 6a:44:a6:fb:0e:8e:71:a4:56:20:e6:58:8d:1c:8c: 26:49:c3:58:8a:a5:2f:ed:7f:16:8a:01:23:09:70: d6:0a:54:48:b7:bb:c1:f0:4b:54:e2:9d:ea:2c:fe: 19:fc:23:4a:6b:9b:23:ca:a4:d7:e5:8c:af:5d:4e: 5e:05:7e:49:b5:80:4d:f7:94:35:d0:c6:a0:e7:10: 88:89:13:47:43:e5:a5:92:dd:61:54:a1:34:ec:5e: 36:55:09:16:52:c3:1e:7b:e2:ee:a5:df:22:21:a1: f8:d3:ea:bd:d3:86:70:72:aa:1d:3f:fd:e6:78:58: 75:49:9f:04:a8:e9:d4:99:5f:cb:b0:82:8c:a1:a1: 64:63:2e:60:f1:e3:ec:ff:37:c4:83:25:b5:00:cd: bd:c2:45:aa:5b:a6:90:0d:53:aa:b7:39:d9:8c:8f: e6:5e:bf:12:69:0d:25:0b:5d:b1:12:69:10:57:4e: ed:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FA:EF:59:1B:07:52:57:59:07:4F:6D:4A:0F:CE:6E:36:68:8F:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594/adf2a19d-5608-3b19-bae1-1de2434104c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594/ef238680-20ad-47df-89b5-7a55fae68594.crl X509v3 Authority Key Identifier: keyid:7C:FF:73:AC:9D:6E:BC:1D:25:7E:CD:8F:CE:E9:51:B2:B7:6A:F4:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef238680-20ad-47df-89b5-7a55fae68594.cer sbgp-ipAddrBlock: critical IPv4: 140.235.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:0c:c7:52:ec:bb:96:66:00:e0:2f:b7:3d:2f:cf:39:0e:4d: b1:8a:5e:93:9c:cc:3d:b8:9c:13:21:70:43:b8:e4:38:1f:4b: 57:fa:25:32:d7:a3:09:82:25:80:d9:bf:ed:c4:20:c4:ec:98: 46:a2:70:29:7c:79:64:b9:28:12:c6:e8:f2:8b:5c:72:95:42: f0:aa:a9:9e:13:7c:05:aa:24:ac:ff:2b:23:bb:d1:08:0f:46: 7c:f9:03:a0:db:a3:20:2d:c8:56:62:51:e4:7e:98:3b:f3:71: 99:19:3d:a5:dd:71:de:86:5a:c7:03:cf:7b:d9:fe:1d:59:67: dc:ab:b0:42:35:92:8a:37:76:4f:a7:d2:fa:45:eb:92:0f:d5: e1:d0:18:46:7b:99:68:60:25:71:ad:9b:1e:e5:9a:58:dc:d7: ef:f3:27:f3:1d:c0:38:09:04:a4:54:86:06:75:d2:02:8c:a5: ec:a2:99:c9:ee:74:4e:99:07:ed:1f:02:09:23:ca:a1:18:0f: 59:a4:6e:fc:2d:dd:14:f2:2b:27:a1:f1:05:dd:83:9d:38:12: 9c:7b:3c:b3:72:0d:b5:86:ea:ce:e5:bf:2c:77:be:9f:b2:34: eb:94:27:c5:23:80:11:c4:a3:7f:0e:26:e8:76:3e:f0:98:9a: ab:98:31:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3npraxz5ChPINIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWYyMzg2ODAtMjBhZC00N2RmLTg5YjUtN2E1NWZhZTY4 NTk0MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk MTRlNzEzYzAtYzhlYS00MTQzLTlkNjctNGM3MjE0OTBjMmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+kVL4/v3+2XKOfTrexCpRDRlCA5D8yWkfY1 aSFIVYYiu0jk6g03pm5BY5P7A+jyB5aWY0brJHQeALK4fUm7OO/eXk2jozFFdNtq RKb7Do5xpFYg5liNHIwmScNYiqUv7X8WigEjCXDWClRIt7vB8EtU4p3qLP4Z/CNK a5sjyqTX5YyvXU5eBX5JtYBN95Q10Mag5xCIiRNHQ+Wlkt1hVKE07F42VQkWUsMe e+Lupd8iIaH40+q904ZwcqodP/3meFh1SZ8EqOnUmV/LsIKMoaFkYy5g8ePs/zfE gyW1AM29wkWqW6aQDVOqtznZjI/mXr8SaQ0lC12xEmkQV07t2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPf671kbB1JXWQdPbUoPzm42aI+vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lZjIz ODY4MC0yMGFkLTQ3ZGYtODliNS03YTU1ZmFlNjg1OTQvYWRmMmExOWQtNTYwOC0z YjE5LWJhZTEtMWRlMjQzNDEwNGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWYyMzg2ODAtMjBhZC00N2RmLTg5 YjUtN2E1NWZhZTY4NTk0L2VmMjM4NjgwLTIwYWQtNDdkZi04OWI1LTdhNTVmYWU2 ODU5NC5jcmwwHwYDVR0jBBgwFoAUfP9zrJ1uvB0lfs2PzulRsrdq9JMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lZjIzODY4MC0yMGFkLTQ3ZGYtODliNS03YTU1 ZmFlNjg1OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOvoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8Mx1Lsu5ZmAOAvtz0vzzkOTbGKXpOczD24nBMhcEO45DgfS1f6JTLX owmCJYDZv+3EIMTsmEaicCl8eWS5KBLG6PKLXHKVQvCqqZ4TfAWqJKz/KyO70QgP Rnz5A6DboyAtyFZiUeR+mDvzcZkZPaXdcd6GWscDz3vZ/h1ZZ9yrsEI1koo3dk+n 0vpF65IP1eHQGEZ7mWhgJXGtmx7lmljc1+/zJ/MdwDgJBKRUhgZ10gKMpeyimcnu dE6ZB+0fAgkjyqEYD1mkbvwt3RTyKyeh8QXdg504Epx7PLNyDbWG6s7lvyx3vp+y NOuUJ8UjgBHEo38OJuh2PvCYmquYMSk= -----END CERTIFICATE-----Generated at Sun Apr 27 13:18:10 2025 by rpki-client