$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/86a41c5c-76af-316b-af4a-ab3a1415c760.roa File: 86a41c5c-76af-316b-af4a-ab3a1415c760.roa (raw, json) Hash identifier: CD8jTH/df2aAbhaFQZ1cKOwAlxIN7NQOu0Tf00TDzvY= Subject key identifier: E8:E8:C2:A3:E5:28:A5:B8:D6:90:BD:71:5F:FC:3D:8F:78:6D:80:46 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F432858496CE45C31CB6C899D9390AAC0 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/86a41c5c-76af-316b-af4a-ab3a1415c760.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 53356 IP address blocks: 141.140.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:5c:31:cb:6c:89:9d:93:90:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=22a74bdd-93a6-459b-82b7-2c39e194c981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7e:32:64:d5:89:a0:2a:89:fc:37:53:02:cf: a6:0f:f5:da:1a:56:e3:af:2e:f6:55:44:90:aa:55: 27:99:74:ae:66:17:46:f2:8f:36:c3:43:4d:97:a8: 75:16:09:35:8f:9c:10:fd:b6:ec:b9:3b:0a:1e:78: 57:54:9b:5f:91:1b:46:33:e0:bd:ee:b9:ea:05:d5: 6f:a2:8d:5f:1c:3e:1d:bd:9e:6e:30:e5:88:b3:11: 82:36:67:9d:fb:29:62:c1:9a:f5:7d:85:15:2e:39: 53:4e:d2:1b:d8:e0:5a:15:98:d7:f9:aa:77:7f:d9: 2f:46:00:03:ee:d1:77:3c:c4:de:f8:a7:fe:c6:b6: 28:eb:41:16:e1:3b:2b:08:d4:d6:7c:e7:3d:91:05: a2:71:fd:ab:fe:e8:88:17:ec:d0:94:bc:6b:a9:0f: d3:6e:9c:ee:14:f0:dc:2f:1f:32:e8:91:26:a3:10: f0:ec:61:f6:ac:b4:d1:ee:b8:52:c6:a0:e0:1a:b1: 80:55:ed:d1:30:5f:c6:b5:eb:61:b7:65:18:c3:e3: f3:9e:02:dd:77:ae:60:c0:3d:07:51:38:02:49:37: 23:de:6f:b0:84:ac:c1:ef:ea:e8:87:5f:fa:d7:e5: df:ac:06:b2:69:a9:4a:d0:a2:0b:a7:ca:db:96:d4: 4c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E8:C2:A3:E5:28:A5:B8:D6:90:BD:71:5F:FC:3D:8F:78:6D:80:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/86a41c5c-76af-316b-af4a-ab3a1415c760.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 141.140.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:be:f1:c4:40:1d:7f:ed:3a:71:9a:ef:71:8f:dc:ec:2b:c9: 5c:77:9f:67:4a:f1:d0:31:fb:29:6c:0a:94:d3:cb:5e:cd:88: f9:86:e5:bb:17:8a:20:1d:55:e0:5a:8f:03:6b:a7:e9:e4:09: 0f:ed:84:d9:2a:f2:bd:c2:f6:16:14:58:04:4f:3f:84:7c:fc: 14:d7:9c:51:de:75:1f:63:9c:58:e5:89:66:30:e2:b1:98:6b: 02:84:4b:b7:84:00:4c:35:4b:3d:cd:4a:65:27:9c:25:58:53: ac:4b:a6:2c:36:4f:06:13:3d:0b:a0:71:2f:f3:19:0e:1f:e2: c7:ac:d1:48:02:68:4b:9f:7b:28:ab:e3:90:db:2e:8c:92:2a: 65:33:06:73:aa:4e:3e:ad:4d:e5:87:d9:91:c8:9e:70:f6:d6: 75:c1:39:4f:13:2d:dc:7b:04:0f:82:cd:ea:32:23:13:6c:4e: 8e:4e:0c:24:b4:20:45:3a:64:e1:a2:e8:f6:9b:76:49:76:63: bb:43:95:f9:3a:50:22:a7:41:26:4b:a4:4c:c7:e0:a4:f8:c4: 56:fe:d3:34:83:26:1c:3b:ab:80:dd:b7:3c:c0:24:5f:14:17: 69:98:cd:ec:cd:29:ce:38:86:36:30:3a:e9:0c:45:9d:b1:c6: 20:6f:68:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5Fwxy2yJnZOQqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk MjJhNzRiZGQtOTNhNi00NTliLTgyYjctMmMzOWUxOTRjOTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX4yZNWJoCqJ/DdTAs+mD/XaGlbjry72VUSQ qlUnmXSuZhdG8o82w0NNl6h1Fgk1j5wQ/bbsuTsKHnhXVJtfkRtGM+C97rnqBdVv oo1fHD4dvZ5uMOWIsxGCNmed+yliwZr1fYUVLjlTTtIb2OBaFZjX+ap3f9kvRgAD 7tF3PMTe+Kf+xrYo60EW4TsrCNTWfOc9kQWicf2r/uiIF+zQlLxrqQ/TbpzuFPDc Lx8y6JEmoxDw7GH2rLTR7rhSxqDgGrGAVe3RMF/Gtetht2UYw+PzngLdd65gwD0H UTgCSTcj3m+whKzB7+roh1/61+XfrAayaalK0KILp8rbltRMLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjowqPlKKW41pC9cV/8PY94bYBGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvODZhNDFjNWMtNzZhZi0z MTZiLWFmNGEtYWIzYTE0MTVjNzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjYwEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIC+8cRAHX/tOnGa73GP3OwryVx3n2dK8dAx+ylsCpTTy17NiPmG5bsX iiAdVeBajwNrp+nkCQ/thNkq8r3C9hYUWARPP4R8/BTXnFHedR9jnFjliWYw4rGY awKES7eEAEw1Sz3NSmUnnCVYU6xLpiw2TwYTPQugcS/zGQ4f4ses0UgCaEufeyir 45DbLoySKmUzBnOqTj6tTeWH2ZHInnD21nXBOU8TLdx7BA+CzeoyIxNsTo5ODCS0 IEU6ZOGi6Pabdkl2Y7tDlfk6UCKnQSZLpEzH4KT4xFb+0zSDJhw7q4DdtzzAJF8U F2mYzezNKc44hjYwOukMRZ2xxiBvaFM= -----END CERTIFICATE-----Generated at Mon May 5 05:35:02 2025 by rpki-client