$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/e521cc84-931a-3bcf-9db3-c1e8a9c10d5c.roa File: e521cc84-931a-3bcf-9db3-c1e8a9c10d5c.roa (raw, json) Hash identifier: NxAZwRfaL7aEdHhnzp2pR0R1FNa7NVlrLDsFkMIrVxg= Subject key identifier: 38:CE:CA:71:B4:53:D8:2C:C0:A2:4E:80:A8:91:DE:A1:00:8F:BB:45 Certificate issuer: /CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5 Certificate serial: 010D0C9F432858499DBF323BB9AEDDDBF79385E0 Authority key identifier: 9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/e521cc84-931a-3bcf-9db3-c1e8a9c10d5c.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 7029 IP address blocks: 165.140.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:32:3b:b9:ae:dd:db:f7:93:85:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=50c30c7c-e0f1-4fe7-9c2f-d9c14fddba26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c3:20:d6:70:af:38:4d:af:44:d3:e9:f3:3f: c2:7d:e8:b7:1c:37:e5:e0:18:5e:3b:34:41:c3:41: e5:32:c6:e4:84:f5:bc:b8:43:43:ea:fb:db:f2:5a: e7:7c:17:62:3a:aa:a0:0e:f5:5b:c1:01:61:1d:e2: 01:1d:17:e1:aa:7f:97:0f:fa:ef:80:6c:b3:34:86: 3b:57:d1:08:cc:4c:f1:fc:6b:7f:9c:a3:ab:39:7a: 82:f5:5e:37:32:b1:b1:9a:c0:87:02:90:8b:50:66: 0e:f3:3c:ba:2d:da:25:60:d4:7f:c4:9d:0b:fa:00: ec:09:f9:16:ec:06:26:c6:eb:86:d5:e7:2e:92:3d: 26:3d:03:43:30:34:08:d5:2a:f0:5e:9b:ea:fd:1d: 20:53:4a:bc:0f:82:a5:81:53:02:44:15:b7:44:32: d3:7b:a8:58:e9:54:31:4b:59:d8:45:0e:a2:68:b9: aa:53:2c:96:40:02:bb:1c:2b:dc:c5:0f:3d:99:a4: b5:c3:5c:93:32:cb:02:11:9b:60:e1:8f:3d:52:f7: ae:d3:b8:72:2d:ae:00:dd:37:02:88:1a:4a:e7:74: 37:c9:39:b6:d6:43:33:89:aa:39:31:50:a3:ad:7b: f5:af:1d:1d:a4:6a:70:a8:f4:13:3c:1b:ec:df:03: 78:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CE:CA:71:B4:53:D8:2C:C0:A2:4E:80:A8:91:DE:A1:00:8F:BB:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/e521cc84-931a-3bcf-9db3-c1e8a9c10d5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.crl X509v3 Authority Key Identifier: keyid:9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer sbgp-ipAddrBlock: critical IPv4: 165.140.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:91:fc:c2:6b:a4:60:6e:c8:ec:76:45:8b:62:68:1e:21:40: 27:ea:88:59:4e:de:54:8b:59:85:0a:cc:e7:de:3d:66:60:13: af:d8:3e:0a:bd:88:f4:4b:73:37:bb:fc:d0:f9:c7:d9:12:3d: 07:33:8e:2e:a2:3d:dc:03:c8:7f:28:0b:6b:31:0c:60:aa:3a: 18:af:f0:12:f1:f1:8d:68:f0:f5:51:89:e4:0f:95:06:fe:cf: 40:b5:75:86:ce:31:45:06:c8:ed:8a:13:33:c5:57:62:ef:d9: 4d:63:33:86:ae:71:63:54:68:2a:b3:af:22:79:7d:c2:91:dc: d2:8f:7c:13:95:9c:17:01:03:6f:99:97:ee:f0:cb:67:40:d1: 29:6f:0f:17:40:2e:a4:be:7c:95:c0:ff:c0:66:ce:98:6e:ea: a0:ac:4d:69:54:26:3d:01:a8:46:ac:c8:3a:63:e8:f0:38:4d: e2:f4:5a:fe:56:c8:99:49:bc:16:89:a1:72:39:bf:30:53:4a: ac:19:ac:8a:b2:68:0d:96:e3:76:c2:27:d9:55:85:15:58:64: 28:4c:fd:96:d2:97:7c:b6:a4:b9:e2:82:94:c1:69:b2:93:a3: fe:35:a0:ad:ee:bd:ee:37:5c:97:a1:38:fa:57:f6:7e:68:25: 22:1f:c8:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzI7ua7d2/eTheAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAyM2ZmYWYtYjJiMi00MzgyLTg0OWMtMmJjNWJmZDFh M2M1MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk NTBjMzBjN2MtZTBmMS00ZmU3LTljMmYtZDljMTRmZGRiYTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8Mg1nCvOE2vRNPp8z/Cfei3HDfl4BheOzRB w0HlMsbkhPW8uEND6vvb8lrnfBdiOqqgDvVbwQFhHeIBHRfhqn+XD/rvgGyzNIY7 V9EIzEzx/Gt/nKOrOXqC9V43MrGxmsCHApCLUGYO8zy6LdolYNR/xJ0L+gDsCfkW 7AYmxuuG1ecukj0mPQNDMDQI1SrwXpvq/R0gU0q8D4KlgVMCRBW3RDLTe6hY6VQx S1nYRQ6iaLmqUyyWQAK7HCvcxQ89maS1w1yTMssCEZtg4Y89Uveu07hyLa4A3TcC iBpK53Q3yTm21kMziao5MVCjrXv1rx0dpGpwqPQTPBvs3wN4PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjOynG0U9gswKJOgKiR3qEAj7tFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jMDIz ZmZhZi1iMmIyLTQzODItODQ5Yy0yYmM1YmZkMWEzYzUvZTUyMWNjODQtOTMxYS0z YmNmLTlkYjMtYzFlOGE5YzEwZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzAyM2ZmYWYtYjJiMi00MzgyLTg0 OWMtMmJjNWJmZDFhM2M1L2MwMjNmZmFmLWIyYjItNDM4Mi04NDljLTJiYzViZmQx YTNjNS5jcmwwHwYDVR0jBBgwFoAUnjgJXihKxz4kSU7php5hSkIP7cowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jMDIzZmZhZi1iMmIyLTQzODItODQ5Yy0yYmM1 YmZkMWEzYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpYwEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyR/MJrpGBuyOx2RYtiaB4hQCfqiFlO3lSLWYUKzOfePWZgE6/YPgq9 iPRLcze7/ND5x9kSPQczji6iPdwDyH8oC2sxDGCqOhiv8BLx8Y1o8PVRieQPlQb+ z0C1dYbOMUUGyO2KEzPFV2Lv2U1jM4aucWNUaCqzryJ5fcKR3NKPfBOVnBcBA2+Z l+7wy2dA0SlvDxdALqS+fJXA/8Bmzphu6qCsTWlUJj0BqEasyDpj6PA4TeL0Wv5W yJlJvBaJoXI5vzBTSqwZrIqyaA2W43bCJ9lVhRVYZChM/ZbSl3y2pLnigpTBabKT o/41oK3uve43XJehOPpX9n5oJSIfyIs= -----END CERTIFICATE-----Generated at Mon May 5 04:10:34 2025 by rpki-client