$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/8a110ca9-4317-37af-a1ec-02cabe42ead9.roa File: 8a110ca9-4317-37af-a1ec-02cabe42ead9.roa (raw, json) Hash identifier: 8SyB4qJ7KIr+qivGUW5SZ3lCr+jEhWVFwHTRPSYwhz4= Subject key identifier: 4A:ED:63:69:50:6C:77:19:3D:A3:1F:32:43:92:1B:0D:37:8C:C1:DE Certificate issuer: /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Certificate serial: 010D0C9F43285849002167A1FF33C48A76B1F500 Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/8a110ca9-4317-37af-a1ec-02cabe42ead9.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 7862 IP address blocks: 146.23.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:67:a1:ff:33:c4:8a:76:b1:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=2b7b0404-7abb-4074-a872-26a3dcc284c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:11:84:33:69:09:25:bd:fd:c0:9b:a8:3c:09: da:8f:ac:e0:a6:8f:bc:ab:7d:20:5a:87:41:94:06: 29:fa:bc:19:8a:0b:a9:cb:85:7c:64:2a:93:95:6c: 51:73:17:26:9e:60:5c:55:a8:a1:1a:8e:e2:08:cd: 9f:b7:55:90:14:1d:60:21:f7:ff:49:54:8b:8c:c2: 0a:e5:ba:d9:bf:35:91:ff:4e:80:69:67:76:bd:14: c1:85:c6:fc:a7:ca:8c:95:8c:cf:29:35:18:ff:c6: ae:9c:d5:71:76:dd:e3:ee:f9:1d:7d:55:91:32:1e: 06:a6:c3:f0:52:21:e8:fc:57:5f:60:3d:5b:3b:81: 12:11:06:cb:6f:84:3d:40:76:68:bb:5b:38:a1:d1: f8:36:e5:19:9a:36:17:1c:a4:86:3a:15:41:4a:26: bf:eb:32:24:71:72:c3:92:ab:e4:64:85:19:dc:8b: 8d:2b:f6:12:5c:77:3f:d8:8d:f7:0c:dd:14:0d:da: bf:d8:a7:da:aa:7c:88:f3:6e:93:da:b9:97:38:ec: cf:68:7d:d0:4c:1f:db:58:a7:21:29:a0:f1:9c:da: 51:8b:a9:62:81:e7:f5:5a:44:09:94:86:e1:cf:d8: 88:73:ed:a6:53:74:87:f2:a7:ef:b4:1b:66:01:15: 84:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:ED:63:69:50:6C:77:19:3D:A3:1F:32:43:92:1B:0D:37:8C:C1:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/8a110ca9-4317-37af-a1ec-02cabe42ead9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl X509v3 Authority Key Identifier: keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer sbgp-ipAddrBlock: critical IPv4: 146.23.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:0d:7b:1a:18:2c:89:62:e0:b2:69:c4:77:95:ab:2a:b9:c9: 56:81:53:c9:40:84:2a:51:c4:81:d8:b9:50:80:c1:a5:48:7f: 2f:32:3c:b2:15:43:ce:b7:4e:80:2a:2d:3f:a9:32:06:4e:d2: 1d:d9:8d:ca:65:ef:95:f2:bd:8c:1f:59:25:a1:69:dd:d0:92: 95:0b:19:61:7c:93:e8:3a:a3:19:c6:55:c0:53:66:e8:70:b0: 47:be:8b:b4:cb:06:31:22:a0:cd:dd:a4:3a:a1:1f:62:e2:77: c8:f2:a0:f6:6a:60:19:d0:29:d5:e1:ed:95:d0:20:33:0e:93: b0:96:4b:c3:f0:a9:10:b6:f3:c9:06:52:c6:55:b8:04:64:89: 1c:53:83:d0:7b:9b:61:c0:02:c3:f7:a7:ca:9a:53:3a:28:41: af:fe:67:f5:e3:3f:0d:e1:9d:72:f5:52:1a:70:3d:c4:a7:7b: e9:ed:31:4f:21:6b:d5:54:96:3a:3e:48:4b:95:f5:ba:9d:d2: 8e:3c:f3:ac:6c:27:8c:41:21:74:f5:a4:63:87:3b:51:3d:68: 70:37:5f:bc:0e:6e:26:7d:c8:a4:11:7e:ae:56:58:91:cb:31: 40:13:39:c5:02:36:27:5f:f1:8d:04:30:d8:af:8c:da:1b:50: f8:ef:4b:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIWeh/zPEinax9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlYTg5YjQtZWQ4NS00NjNmLTgzZDktODQ1MzMwMGJm MmJkMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk MmI3YjA0MDQtN2FiYi00MDc0LWE4NzItMjZhM2RjYzI4NGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hGEM2kJJb39wJuoPAnaj6zgpo+8q30gWodB lAYp+rwZigupy4V8ZCqTlWxRcxcmnmBcVaihGo7iCM2ft1WQFB1gIff/SVSLjMIK 5brZvzWR/06AaWd2vRTBhcb8p8qMlYzPKTUY/8aunNVxdt3j7vkdfVWRMh4GpsPw UiHo/FdfYD1bO4ESEQbLb4Q9QHZou1s4odH4NuUZmjYXHKSGOhVBSia/6zIkcXLD kqvkZIUZ3IuNK/YSXHc/2I33DN0UDdq/2KfaqnyI826T2rmXOOzPaH3QTB/bWKch KaDxnNpRi6ligef1WkQJlIbhz9iIc+2mU3SH8qfvtBtmARWE3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErtY2lQbHcZPaMfMkOSGw03jMHeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MWVh ODliNC1lZDg1LTQ2M2YtODNkOS04NDUzMzAwYmYyYmQvOGExMTBjYTktNDMxNy0z N2FmLWExZWMtMDJjYWJlNDJlYWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzFlYTg5YjQtZWQ4NS00NjNmLTgz ZDktODQ1MzMwMGJmMmJkLzcxZWE4OWI0LWVkODUtNDYzZi04M2Q5LTg0NTMzMDBi ZjJiZC5jcmwwHwYDVR0jBBgwFoAUAPoosGNeNAxamY5KWp40aTpaVmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83MWVhODliNC1lZDg1LTQ2M2YtODNkOS04NDUz MzAwYmYyYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkhcoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoNexoYLIli4LJpxHeVqyq5yVaBU8lAhCpRxIHYuVCAwaVIfy8yPLIV Q863ToAqLT+pMgZO0h3Zjcpl75XyvYwfWSWhad3QkpULGWF8k+g6oxnGVcBTZuhw sEe+i7TLBjEioM3dpDqhH2Lid8jyoPZqYBnQKdXh7ZXQIDMOk7CWS8PwqRC288kG UsZVuARkiRxTg9B7m2HAAsP3p8qaUzooQa/+Z/XjPw3hnXL1UhpwPcSne+ntMU8h a9VUljo+SEuV9bqd0o4886xsJ4xBIXT1pGOHO1E9aHA3X7wObiZ9yKQRfq5WWJHL MUATOcUCNidf8Y0EMNivjNobUPjvS88= -----END CERTIFICATE-----Generated at Mon May 12 12:30:13 2025 by rpki-client