$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9abeb351-ad7a-33a7-8821-218970296a71.roa File: 9abeb351-ad7a-33a7-8821-218970296a71.roa (raw, json) Hash identifier: vdIRzqz+Ajfft9Bw8WSacbu2XCdzFaHs6FrphesNe0s= Subject key identifier: 5B:EE:98:EE:66:02:D8:E6:7B:C1:30:70:54:23:B4:7E:6F:5B:95:59 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F43285848A1360CB5D2D1AE15E20A9180 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9abeb351-ad7a-33a7-8821-218970296a71.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 136.226.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:0c:b5:d2:d1:ae:15:e2:0a:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=de5661f8-9810-4249-b6d2-75ed538e559c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a6:b0:27:57:36:b2:dc:e7:3b:fa:5a:ba:57: 01:22:b6:b3:fd:6c:53:ab:7f:fa:eb:23:03:0e:9e: ea:99:c2:26:dc:56:29:b7:b2:98:e5:7c:e0:29:85: fa:98:c9:ed:49:4a:f7:f0:ff:1b:55:a2:e3:d9:c8: c2:fa:2a:c4:d1:14:59:1f:22:d8:2f:2b:19:fb:03: 89:5d:02:58:24:7c:e2:3b:c3:e7:ec:39:50:14:a4: 80:68:38:23:c7:5f:48:c6:23:0d:47:7f:6c:34:cd: 70:ac:c4:34:4b:85:be:57:48:18:33:f1:f3:6a:36: de:07:54:32:f7:6c:97:41:cb:4f:5f:66:28:2d:ea: 46:f5:33:3b:a8:f6:bd:03:ac:3b:7c:11:8c:b5:b9: 4d:29:42:3f:39:78:8b:a3:af:d3:0c:3b:1c:bc:5d: 1c:c0:f9:69:04:5f:21:05:b1:2b:a7:9c:87:d4:70: f6:86:8b:58:2a:34:30:0f:65:48:bb:e6:54:13:58: ff:e6:1b:41:57:fb:c3:80:8c:27:41:ec:01:3b:7b: 2d:f4:0b:11:5c:a9:97:0f:30:9d:1e:16:b6:af:e0: f4:77:a0:c7:f5:bc:b2:d5:2e:5a:08:08:37:75:0d: 2d:4b:5b:a5:55:51:99:36:ea:8b:d9:39:61:40:80: 0c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:EE:98:EE:66:02:D8:E6:7B:C1:30:70:54:23:B4:7E:6F:5B:95:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9abeb351-ad7a-33a7-8821-218970296a71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:b7:56:a9:89:b7:8f:80:04:e0:fa:d1:a9:08:49:3c:02:0d: e4:45:26:4a:ca:02:54:42:38:cd:81:0f:e9:12:05:f2:50:b7: af:03:91:a7:96:a3:a8:95:92:8f:18:e4:40:51:d4:7b:17:a7: 21:ce:ff:97:85:73:73:90:aa:9c:89:39:d5:ef:ae:59:98:70: d6:d3:eb:bd:e5:c8:25:65:ed:40:0f:97:16:96:7b:30:80:43: b4:ca:9b:ad:27:fc:0d:6f:e1:7a:84:47:4a:b0:76:cb:91:13: 52:df:b3:a6:ae:38:01:1c:2b:d2:bc:b5:e2:a0:a0:13:9a:e7: d4:01:91:36:00:f3:29:4e:40:be:9d:75:64:3d:e8:c6:c2:71: 01:92:62:1f:6e:e6:a0:da:be:dc:7b:0b:74:f1:c4:d5:4d:d9: 28:ce:22:c8:d3:a6:c0:a1:00:33:0d:b0:2a:55:4a:f8:cc:3e: 95:81:93:be:53:1b:de:b9:48:35:7a:fb:e4:a7:aa:7b:68:05: c7:66:eb:85:44:0c:df:bc:4a:1f:c4:f3:ef:16:53:7a:b6:de: 80:fd:1b:21:d3:da:cd:49:07:a7:e6:90:3b:a2:0c:45:b6:8f: d8:ce:3f:1d:84:74:25:d3:51:c6:bb:67:73:a8:21:0f:44:2a: f7:1a:92:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNgy10tGuFeIKkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk ZGU1NjYxZjgtOTgxMC00MjQ5LWI2ZDItNzVlZDUzOGU1NTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKawJ1c2stznO/paulcBIraz/WxTq3/66yMD Dp7qmcIm3FYpt7KY5XzgKYX6mMntSUr38P8bVaLj2cjC+irE0RRZHyLYLysZ+wOJ XQJYJHziO8Pn7DlQFKSAaDgjx19IxiMNR39sNM1wrMQ0S4W+V0gYM/HzajbeB1Qy 92yXQctPX2YoLepG9TM7qPa9A6w7fBGMtblNKUI/OXiLo6/TDDscvF0cwPlpBF8h BbErp5yH1HD2hotYKjQwD2VIu+ZUE1j/5htBV/vDgIwnQewBO3st9AsRXKmXDzCd Hha2r+D0d6DH9byy1S5aCAg3dQ0tS1ulVVGZNuqL2TlhQIAM5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvumO5mAtjme8EwcFQjtH5vW5VZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvOWFiZWIzNTEtYWQ3YS0z M2E3LTg4MjEtMjE4OTcwMjk2YTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOLbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEm3VqmJt4+ABOD60akISTwCDeRFJkrKAlRCOM2BD+kSBfJQt68DkaeW o6iVko8Y5EBR1HsXpyHO/5eFc3OQqpyJOdXvrlmYcNbT673lyCVl7UAPlxaWezCA Q7TKm60n/A1v4XqER0qwdsuRE1Lfs6auOAEcK9K8teKgoBOa59QBkTYA8ylOQL6d dWQ96MbCcQGSYh9u5qDavtx7C3TxxNVN2SjOIsjTpsChADMNsCpVSvjMPpWBk75T G965SDV6++SnqntoBcdm64VEDN+8Sh/E8+8WU3q23oD9GyHT2s1JB6fmkDuiDEW2 j9jOPx2EdCXTUca7Z3OoIQ9EKvcakoE= -----END CERTIFICATE-----Generated at Sat Apr 5 11:21:02 2025 by rpki-client