$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/d8b9bbdf-01ff-3063-80c8-033d631124aa.roa File: d8b9bbdf-01ff-3063-80c8-033d631124aa.roa (raw, json) Hash identifier: /3QxU3/WeXLoA6QNQOLK7e1WQK7FkGjF6mKLz17dzeI= Subject key identifier: 01:4E:B7:35:48:ED:63:AA:C0:6B:A7:D9:43:F3:36:46:76:79:FD:39 Certificate issuer: /CN=90867e5c-2c8f-4999-a134-dc9418f84496 Certificate serial: 010D0C9F43285849AE2A1BA86363FEAB1D4B3F00 Authority key identifier: 7F:CC:4B:3E:97:1E:B5:00:F6:7A:41:32:9C:50:6F:B0:B7:61:9D:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/d8b9bbdf-01ff-3063-80c8-033d631124aa.roa Signing time: Mon 28 Apr 2025 22:09:19 +0000 ROA not before: Mon 28 Apr 2025 22:09:19 +0000 ROA not after: Sun 27 Jul 2025 22:09:19 +0000 asID: 2648 IP address blocks: 140.208.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:2a:1b:a8:63:63:fe:ab:1d:4b:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90867e5c-2c8f-4999-a134-dc9418f84496 Validity Not Before: Apr 28 22:09:19 2025 GMT Not After : Jul 27 22:09:19 2025 GMT Subject: CN=4c54635e-d53f-4453-9287-926b02e2bfe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:88:37:3f:b7:2e:2a:07:15:86:25:c7:b5:e9: f3:3a:9d:42:75:99:72:0c:67:20:7d:70:d4:96:4d: c2:57:e2:ad:b0:99:27:63:6b:47:34:12:76:64:32: 39:ca:7e:76:49:60:5f:20:f4:c9:1c:5a:cd:40:1a: e7:b2:f1:cb:3a:5e:7c:05:a6:97:9b:6e:df:ae:b1: 4b:f5:84:ba:bb:c7:f1:bf:25:b3:b9:02:2f:2e:1c: 40:f7:cc:6c:c1:2c:f4:00:68:48:1f:db:fd:00:39: 83:d9:0b:00:a7:4e:56:5b:2a:e8:29:2e:49:87:87: 8b:3d:85:d7:34:93:08:04:2e:48:0f:63:10:66:d8: 5d:c7:3a:58:36:da:d7:57:ee:c3:04:b4:bf:15:2c: 44:38:9b:25:03:e0:a4:c3:56:81:35:80:65:78:45: 01:70:18:7b:04:d9:9d:a2:bd:19:34:00:1c:8b:a5: c3:42:40:c0:ea:f0:be:73:c9:e4:9c:26:30:89:a7: a1:34:fc:d2:fc:e9:d8:b9:eb:2b:20:5e:c0:21:cf: 46:7a:8e:5f:ef:e8:62:15:96:e9:1e:b2:ab:98:96: 1e:46:6b:ba:88:4f:3e:ff:f8:a6:23:d5:0d:cd:7c: 9a:44:3f:83:71:2c:05:04:d5:29:89:93:b1:e8:7d: 90:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:4E:B7:35:48:ED:63:AA:C0:6B:A7:D9:43:F3:36:46:76:79:FD:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/d8b9bbdf-01ff-3063-80c8-033d631124aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.crl X509v3 Authority Key Identifier: keyid:7F:CC:4B:3E:97:1E:B5:00:F6:7A:41:32:9C:50:6F:B0:B7:61:9D:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer sbgp-ipAddrBlock: critical IPv4: 140.208.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:0e:b1:28:39:60:85:31:5d:a8:69:8d:5c:16:2d:ec:87:98: 8d:26:7f:9b:21:30:df:74:44:03:f2:f2:1e:b8:a3:e8:d3:bb: 45:02:5d:a7:82:75:1d:86:e2:1c:d2:63:cb:72:2e:a5:7c:9c: 97:6d:2d:bd:94:24:c4:ab:6c:e0:2a:60:63:46:9c:48:a1:ec: 5e:26:38:b6:ce:6c:f4:44:7c:f8:0c:9b:61:19:59:ff:49:f3: c7:dc:0f:21:8c:46:fa:a3:70:3d:36:6c:02:bf:02:66:75:5f: 9a:98:be:03:f6:68:68:86:47:26:06:4e:29:55:7a:cc:26:39: 5b:cd:11:fe:39:5e:65:2a:6f:01:25:90:17:bb:0b:be:e9:da: 10:f5:69:a9:71:4f:a1:59:19:f7:f7:e7:c2:ce:da:bc:58:a9: a5:d3:11:91:59:a0:b7:fd:3d:30:fd:55:fe:82:db:7a:0b:ee: af:1c:fb:4e:1d:2d:41:6b:b4:17:f2:ad:71:c1:37:44:e2:97: 09:de:3f:e4:51:27:e7:5d:35:5b:e8:16:2c:a6:67:5f:3f:12: 94:b1:d6:61:4d:9c:70:50:a9:da:c0:02:85:93:7f:55:67:d9: 11:a9:0e:ec:aa:4c:cf:ff:6b:e7:ef:c8:4f:f3:94:38:a0:25: 57:41:8f:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmuKhuoY2P+qx1LPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NjdlNWMtMmM4Zi00OTk5LWExMzQtZGM5NDE4Zjg0 NDk2MB4XDTI1MDQyODIyMDkxOVoXDTI1MDcyNzIyMDkxOVowLzEtMCsGA1UEAxMk NGM1NDYzNWUtZDUzZi00NDUzLTkyODctOTI2YjAyZTJiZmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYg3P7cuKgcVhiXHtenzOp1CdZlyDGcgfXDU lk3CV+KtsJknY2tHNBJ2ZDI5yn52SWBfIPTJHFrNQBrnsvHLOl58BaaXm27frrFL 9YS6u8fxvyWzuQIvLhxA98xswSz0AGhIH9v9ADmD2QsAp05WWyroKS5Jh4eLPYXX NJMIBC5ID2MQZthdxzpYNtrXV+7DBLS/FSxEOJslA+Ckw1aBNYBleEUBcBh7BNmd or0ZNAAci6XDQkDA6vC+c8nknCYwiaehNPzS/OnYuesrIF7AIc9Geo5f7+hiFZbp HrKrmJYeRmu6iE8+//imI9UNzXyaRD+DcSwFBNUpiZOx6H2QewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFOtzVI7WOqwGun2UPzNkZ2ef05MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MDg2 N2U1Yy0yYzhmLTQ5OTktYTEzNC1kYzk0MThmODQ0OTYvZDhiOWJiZGYtMDFmZi0z MDYzLTgwYzgtMDMzZDYzMTEyNGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTA4NjdlNWMtMmM4Zi00OTk5LWEx MzQtZGM5NDE4Zjg0NDk2LzkwODY3ZTVjLTJjOGYtNDk5OS1hMTM0LWRjOTQxOGY4 NDQ5Ni5jcmwwHwYDVR0jBBgwFoAUf8xLPpcetQD2ekEynFBvsLdhnSwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MDg2N2U1Yy0yYzhmLTQ5OTktYTEzNC1kYzk0 MThmODQ0OTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjNCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkOsSg5YIUxXahpjVwWLeyHmI0mf5shMN90RAPy8h64o+jTu0UCXaeC dR2G4hzSY8tyLqV8nJdtLb2UJMSrbOAqYGNGnEih7F4mOLbObPREfPgMm2EZWf9J 88fcDyGMRvqjcD02bAK/AmZ1X5qYvgP2aGiGRyYGTilVeswmOVvNEf45XmUqbwEl kBe7C77p2hD1aalxT6FZGff358LO2rxYqaXTEZFZoLf9PTD9Vf6C23oL7q8c+04d LUFrtBfyrXHBN0TilwneP+RRJ+ddNVvoFiymZ18/EpSx1mFNnHBQqdrAAoWTf1Vn 2RGpDuyqTM//a+fvyE/zlDigJVdBj+U= -----END CERTIFICATE-----Generated at Sat May 10 06:42:50 2025 by rpki-client