$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35711766-ec67-4522-8b80-6b8ef16d9bc2/ef27b772-2823-3f16-b7f6-809ab3be2500.roa File: ef27b772-2823-3f16-b7f6-809ab3be2500.roa (raw, json) Hash identifier: JA0bAZUAKX9+X7mBuR05QBJYMo6uLK4Ik3J3rPDv+1o= Subject key identifier: DA:A0:7A:A6:B0:2D:EE:0B:C3:09:55:79:D2:14:09:97:A1:A3:1C:0C Certificate issuer: /CN=35711766-ec67-4522-8b80-6b8ef16d9bc2 Certificate serial: 010D0C9F432858491D7179A8504728AB03C6D680 Authority key identifier: 5F:2E:0E:AC:30:C2:4B:A2:1B:3D:80:7A:28:AD:B2:07:CD:03:DE:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35711766-ec67-4522-8b80-6b8ef16d9bc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35711766-ec67-4522-8b80-6b8ef16d9bc2/ef27b772-2823-3f16-b7f6-809ab3be2500.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 165.140.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35711766-ec67-4522-8b80-6b8ef16d9bc2/35711766-ec67-4522-8b80-6b8ef16d9bc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35711766-ec67-4522-8b80-6b8ef16d9bc2/35711766-ec67-4522-8b80-6b8ef16d9bc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35711766-ec67-4522-8b80-6b8ef16d9bc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:79:a8:50:47:28:ab:03:c6:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35711766-ec67-4522-8b80-6b8ef16d9bc2 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=494a26bc-5440-4b35-a02e-9414a1efe43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d0:f9:6d:3a:f2:1b:33:36:9e:5e:39:2a:1e: 39:5e:64:47:69:a2:c6:44:d4:68:1c:f1:a6:97:c1: 1e:39:7a:30:a2:63:68:50:3c:df:85:38:00:af:01: be:f4:38:dd:5e:4b:20:be:7b:ae:46:29:e0:d0:20: 3c:41:57:35:1e:94:94:47:4a:88:b7:f7:00:05:4d: 3b:6e:31:bb:41:24:13:fd:e5:15:24:f9:0b:ed:d7: 9d:de:49:98:f5:7b:b5:0c:34:bf:55:04:07:da:4c: b3:b3:d7:52:93:b1:35:96:6d:4f:ce:71:94:cf:7a: c4:72:38:93:25:d8:2d:28:99:1c:e8:a3:44:a7:c7: 6a:f6:86:2f:41:6a:6e:06:69:4c:7a:0f:8c:c1:56: f1:35:0a:b2:ac:a9:8a:00:01:24:0f:63:96:1d:64: d3:4c:20:b3:fb:b2:21:3e:ff:35:09:83:1d:e3:33: 85:48:b7:c2:96:f7:45:1c:ba:bb:1d:b6:50:ff:fd: eb:da:0b:3f:b7:d7:7b:42:be:ce:83:13:62:bd:a1: 2f:e1:76:43:9b:e9:f5:30:1a:fc:02:e4:3b:a7:54: b3:56:21:6c:0d:93:47:d9:16:2d:3a:8a:f4:2c:2b: 9a:bc:54:90:2e:35:56:19:39:16:19:f7:c3:ba:5d: 90:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A0:7A:A6:B0:2D:EE:0B:C3:09:55:79:D2:14:09:97:A1:A3:1C:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35711766-ec67-4522-8b80-6b8ef16d9bc2/ef27b772-2823-3f16-b7f6-809ab3be2500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35711766-ec67-4522-8b80-6b8ef16d9bc2/35711766-ec67-4522-8b80-6b8ef16d9bc2.crl X509v3 Authority Key Identifier: keyid:5F:2E:0E:AC:30:C2:4B:A2:1B:3D:80:7A:28:AD:B2:07:CD:03:DE:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35711766-ec67-4522-8b80-6b8ef16d9bc2.cer sbgp-ipAddrBlock: critical IPv4: 165.140.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:92:b6:23:be:f1:ae:31:2a:ba:50:82:85:76:94:76:45:23: 4f:d0:ac:4c:5b:bc:fc:1d:86:34:cd:f7:5b:a1:35:d7:15:6d: f9:6a:d0:47:c2:d5:4a:75:80:6b:40:1d:c2:28:24:c6:a7:69: 2a:b8:1a:97:da:b8:eb:68:33:70:3e:2d:c8:71:62:84:ef:dd: 3b:3b:a7:0d:ee:44:e7:bf:e4:79:d3:54:b4:54:ee:d5:e8:5b: 40:9a:22:9d:33:74:4f:80:da:52:fb:c7:d8:dc:f2:d0:c2:50: f1:3f:32:4b:8f:0d:d3:57:ed:98:4d:b4:b1:81:ba:f8:9b:b0: 0e:ab:22:cd:44:44:ab:0f:25:81:1e:cc:7f:77:41:1c:fa:8b: b4:7a:f7:3e:2e:00:ce:6a:1c:80:7a:ab:80:ea:f2:bc:b8:e8: aa:91:e9:e9:a5:d5:e8:b0:c5:7d:f1:4d:95:32:f5:77:0f:a5: bf:f7:72:0d:9b:06:02:c4:e2:6d:1a:62:a8:84:93:c8:1d:63: fd:75:65:e7:5b:2c:f0:81:f9:70:d9:3a:22:f9:84:b1:63:55: b7:2b:d4:45:05:e7:cb:72:d2:b0:d0:f3:9d:ca:99:4b:e3:2a: c8:4d:f5:cc:62:cd:69:20:a0:68:46:59:95:aa:00:a8:21:17: fb:4b:2e:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcXmoUEcoqwPG1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzU3MTE3NjYtZWM2Ny00NTIyLThiODAtNmI4ZWYxNmQ5 YmMyMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk NDk0YTI2YmMtNTQ0MC00YjM1LWEwMmUtOTQxNGExZWZlNDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltD5bTryGzM2nl45Kh45XmRHaaLGRNRoHPGm l8EeOXowomNoUDzfhTgArwG+9DjdXksgvnuuRing0CA8QVc1HpSUR0qIt/cABU07 bjG7QSQT/eUVJPkL7ded3kmY9Xu1DDS/VQQH2kyzs9dSk7E1lm1PznGUz3rEcjiT JdgtKJkc6KNEp8dq9oYvQWpuBmlMeg+MwVbxNQqyrKmKAAEkD2OWHWTTTCCz+7Ih Pv81CYMd4zOFSLfClvdFHLq7HbZQ//3r2gs/t9d7Qr7OgxNivaEv4XZDm+n1MBr8 AuQ7p1SzViFsDZNH2RYtOor0LCuavFSQLjVWGTkWGffDul2QhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqgeqawLe4LwwlVedIUCZehoxwMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNTcx MTc2Ni1lYzY3LTQ1MjItOGI4MC02YjhlZjE2ZDliYzIvZWYyN2I3NzItMjgyMy0z ZjE2LWI3ZjYtODA5YWIzYmUyNTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzU3MTE3NjYtZWM2Ny00NTIyLThi ODAtNmI4ZWYxNmQ5YmMyLzM1NzExNzY2LWVjNjctNDUyMi04YjgwLTZiOGVmMTZk OWJjMi5jcmwwHwYDVR0jBBgwFoAUXy4OrDDCS6IbPYB6KK2yB80D3pgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNTcxMTc2Ni1lYzY3LTQ1MjItOGI4MC02Yjhl ZjE2ZDliYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYyrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiStiO+8a4xKrpQgoV2lHZFI0/QrExbvPwdhjTN91uhNdcVbflq0EfC 1Up1gGtAHcIoJManaSq4GpfauOtoM3A+LchxYoTv3Ts7pw3uROe/5HnTVLRU7tXo W0CaIp0zdE+A2lL7x9jc8tDCUPE/MkuPDdNX7ZhNtLGBuvibsA6rIs1ERKsPJYEe zH93QRz6i7R69z4uAM5qHIB6q4Dq8ry46KqR6eml1eiwxX3xTZUy9XcPpb/3cg2b BgLE4m0aYqiEk8gdY/11ZedbLPCB+XDZOiL5hLFjVbcr1EUF58ty0rDQ853KmUvj KshN9cxizWkgoGhGWZWqAKghF/tLLkk= -----END CERTIFICATE-----Generated at Sat Apr 26 14:49:21 2025 by rpki-client