$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa File: 7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa (raw, json) Hash identifier: mNtDkDurPQaOYpwaeMzsgzXyq0OSaHqqTR+KrE9EAVI= Subject key identifier: D5:3E:F9:A7:BB:C8:CC:2E:31:F4:67:F1:5A:43:46:42:70:11:9E:DC Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Certificate serial: 010D0C9F432858490E16CC1FBBB71FBFC10AE940 Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 396856 IP address blocks: 172.99.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:cc:1f:bb:b7:1f:bf:c1:0a:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=b9fa89b0-b483-43f5-bcd5-d5211e23599d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:78:53:92:71:80:81:e6:a9:cc:64:a3:25:74: 49:4a:8b:e8:9f:d0:1f:bb:b1:b8:6b:ae:41:f0:4d: 6c:fb:1f:d9:24:2c:a7:31:39:e3:dd:43:88:34:57: 5c:34:2b:27:f3:12:0a:df:3c:8b:13:93:c2:35:70: bf:47:84:e8:ca:50:2d:18:39:21:ab:eb:2f:97:1e: 11:64:be:56:14:15:3e:b9:25:51:f2:e6:4e:d0:69: 9a:b8:16:89:0e:d5:88:9e:4c:90:fa:fa:61:c0:d6: 5e:cc:9b:a4:d3:99:bc:7e:bd:3a:69:09:0e:0c:a5: f6:a4:64:c5:a6:dd:42:88:64:37:8d:38:ce:b1:b0: 35:3e:69:0e:f9:40:50:10:5d:3c:75:7e:06:8d:df: bc:67:4f:5d:47:25:a2:34:ec:09:9b:6d:08:26:16: 69:65:73:a2:5c:16:68:ab:93:64:24:65:f8:ab:fa: 75:b7:7f:b9:bb:f7:8b:97:57:0c:25:5e:67:17:cd: 53:80:59:6d:82:1e:65:26:40:52:70:e8:8f:5c:a8: 43:39:8e:08:8a:e2:9d:38:e1:93:64:d3:45:41:0c: 5e:65:d2:2e:91:c3:2c:20:eb:54:29:84:b3:63:60: 46:ff:32:6a:a8:b8:18:2a:98:01:59:90:dc:3b:c6: 61:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3E:F9:A7:BB:C8:CC:2E:31:F4:67:F1:5A:43:46:42:70:11:9E:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl X509v3 Authority Key Identifier: keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer sbgp-ipAddrBlock: critical IPv4: 172.99.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:d5:79:ea:5c:ec:aa:33:93:53:30:c7:08:ef:36:97:e0:75: ef:24:e1:3f:cd:23:43:db:c8:6f:49:9f:56:2b:56:34:1c:bf: 99:85:7a:de:05:90:7d:5f:cf:cb:fd:a0:23:fb:93:ce:b2:d0: 70:65:b5:bd:ed:48:8b:b7:e5:02:94:21:05:48:08:89:49:5a: b9:39:0e:a9:25:f0:21:f7:a2:29:1d:a0:17:e6:22:9e:0e:83: 0a:7c:ea:f6:de:b7:73:fb:25:8e:af:a6:d2:8d:00:1c:70:fd: d9:49:1d:08:4d:40:c7:ea:ab:64:bc:5d:eb:1b:e6:24:b3:18: 03:90:6f:5d:e7:a5:bc:e1:d5:ad:da:44:e2:aa:c1:9c:26:71: ad:8e:cb:df:36:dc:75:36:d7:ba:de:92:2f:e1:98:55:6d:8e: 9a:b4:fc:3a:4e:7a:40:c4:69:2f:5f:dd:69:18:1d:fe:0f:c7: a9:1b:4d:f1:9a:3b:09:f1:aa:65:9e:88:e7:ac:62:19:56:42: 9d:72:2e:e2:30:5e:5f:71:35:21:d3:8c:6a:24:b6:d5:08:d3: 4b:8d:05:6c:1a:fc:c0:a7:6d:8d:6f:f1:96:3e:d0:24:4f:71: f1:cd:fe:08:c6:e1:4f:0b:a7:49:e4:47:d5:e1:f5:49:23:b9: 65:39:a1:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFswfu7cfv8EK6UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3 ZTRmMB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk YjlmYTg5YjAtYjQ4My00M2Y1LWJjZDUtZDUyMTFlMjM1OTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXhTknGAgeapzGSjJXRJSovon9Afu7G4a65B 8E1s+x/ZJCynMTnj3UOINFdcNCsn8xIK3zyLE5PCNXC/R4ToylAtGDkhq+svlx4R ZL5WFBU+uSVR8uZO0GmauBaJDtWInkyQ+vphwNZezJuk05m8fr06aQkODKX2pGTF pt1CiGQ3jTjOsbA1PmkO+UBQEF08dX4Gjd+8Z09dRyWiNOwJm20IJhZpZXOiXBZo q5NkJGX4q/p1t3+5u/eLl1cMJV5nF81TgFltgh5lJkBScOiPXKhDOY4IiuKdOOGT ZNNFQQxeZdIukcMsIOtUKYSzY2BG/zJqqLgYKpgBWZDcO8ZhJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNU++ae7yMwuMfRn8VpDRkJwEZ7cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2 ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvN2I4YWJhMDYtZWFhYi0z N2NkLThlYzQtYzlhN2VhYTNjNGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvVeepc7Kozk1MwxwjvNpfgde8k4T/NI0PbyG9Jn1YrVjQcv5mFet4F kH1fz8v9oCP7k86y0HBltb3tSIu35QKUIQVICIlJWrk5Dqkl8CH3oikdoBfmIp4O gwp86vbet3P7JY6vptKNABxw/dlJHQhNQMfqq2S8Xesb5iSzGAOQb13npbzh1a3a ROKqwZwmca2Oy9823HU217reki/hmFVtjpq0/DpOekDEaS9f3WkYHf4Px6kbTfGa OwnxqmWeiOesYhlWQp1yLuIwXl9xNSHTjGokttUI00uNBWwa/MCnbY1v8ZY+0CRP cfHN/gjG4U8Lp0nkR9Xh9UkjuWU5oYE= -----END CERTIFICATE-----Generated at Sat Apr 5 22:39:39 2025 by rpki-client