$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/643bc75f-3310-37b8-a7ac-664e69139fad.roa File: 643bc75f-3310-37b8-a7ac-664e69139fad.roa (raw, json) Hash identifier: 4p7S756LbHxGrp2i+rffz2LXEHnZfyCWjlJ8VLYbZLM= Subject key identifier: 09:B7:B8:1F:47:5A:04:74:54:0F:F3:F6:15:94:D8:64:22:46:E1:D8 Certificate issuer: /CN=cf29ee7e-ea12-40e5-a68e-3d002c6aa258 Certificate serial: 010D0C9F43285848E2D11B6F99017B498A2B6680 Authority key identifier: 9E:35:72:19:4A:E3:A6:33:A8:71:F0:89:1C:28:05:63:6E:D3:9A:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/643bc75f-3310-37b8-a7ac-664e69139fad.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 16509 IP address blocks: 195.85.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:1b:6f:99:01:7b:49:8a:2b:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf29ee7e-ea12-40e5-a68e-3d002c6aa258 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=98a0e0a6-76b7-47b3-a033-49153b176b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:91:00:fd:9a:70:10:cb:7e:c1:99:d3:e1:2b: cd:6d:c4:0a:27:cd:7a:1f:8c:ce:7c:1a:24:ca:dc: d1:4e:b8:90:ba:65:1c:06:49:7e:e7:3a:0b:8e:d9: 97:3b:52:d2:32:a6:b9:59:fc:96:82:db:34:ce:10: 83:ed:29:21:e0:a3:4e:3c:40:92:95:6d:5e:ff:be: 76:f6:d0:4e:dc:f6:e6:3a:fb:13:d1:0b:c0:b1:7b: d8:e6:8d:f2:cf:9c:bc:80:07:9a:29:50:f9:2b:d2: 2a:46:ea:52:7a:90:b7:0e:b4:dd:35:19:b0:81:9a: 21:89:bd:40:ae:73:5e:34:c0:60:d9:b9:ed:fd:ef: 35:39:63:f1:ed:87:e6:5f:74:40:62:b2:e8:24:e7: 92:86:ce:e6:36:e2:40:c9:e8:28:7a:b3:42:58:83: a4:cc:50:21:d5:aa:7b:ed:94:77:fe:66:f0:02:eb: b9:60:e5:59:08:cb:81:43:55:0b:26:0d:9f:88:b3: 04:03:c4:5a:b1:d9:7f:45:69:6e:8e:c9:90:9a:ca: 9d:51:96:a0:1a:0b:38:bc:1f:44:d0:c9:54:8d:52: b0:a5:47:2c:dd:a1:40:83:dc:0f:4f:bf:cf:bc:c5: 88:7a:34:ee:ae:15:49:5f:4d:7d:ba:91:14:8e:f0: 5c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B7:B8:1F:47:5A:04:74:54:0F:F3:F6:15:94:D8:64:22:46:E1:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/643bc75f-3310-37b8-a7ac-664e69139fad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.crl X509v3 Authority Key Identifier: keyid:9E:35:72:19:4A:E3:A6:33:A8:71:F0:89:1C:28:05:63:6E:D3:9A:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer sbgp-ipAddrBlock: critical IPv4: 195.85.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:4b:bb:a6:ad:2a:60:33:31:57:ed:ba:f0:38:ad:d8:e5:34: 43:4c:f1:d4:78:3e:a1:6d:57:fb:84:a0:6c:58:63:f2:7c:95: d9:cc:61:28:e5:9c:5a:cc:64:0d:64:f7:b5:c0:36:28:c2:5c: a5:8b:c8:74:c7:c0:38:0d:5c:c6:07:0d:7c:0d:d0:2d:4c:56: a5:b7:bf:4e:6c:dc:af:73:c8:c8:35:46:2b:f2:10:1a:9a:18: 1e:0d:55:a9:2d:6b:cf:12:2b:5c:ad:4d:54:93:d5:69:18:90: cd:a8:bc:49:83:4b:4c:c6:ff:86:17:16:e7:74:e2:83:bb:c8: 62:0e:b8:ca:94:a0:cc:6b:28:af:21:67:2e:bf:d8:34:54:e9: 43:a5:50:85:9c:cd:29:9d:a7:c2:d3:fe:ab:e9:8b:cf:c7:3c: fe:95:47:19:e5:dd:9a:c8:1f:4e:e9:85:a0:8f:5d:7c:a6:37: 1f:af:61:c8:5c:e5:e0:97:70:74:5c:36:46:55:7d:1a:95:cb: de:f9:68:38:17:c1:9e:80:50:74:a8:df:2b:14:11:c7:a9:67: 6c:9f:bf:78:a9:c4:b0:38:9f:8e:03:c2:c5:aa:44:8d:ad:1e: a6:5f:3f:24:fe:59:59:91:4c:66:d6:d8:f8:b5:62:3e:8f:e3: c4:ad:5d:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0RtvmQF7SYorZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YyOWVlN2UtZWExMi00MGU1LWE2OGUtM2QwMDJjNmFh MjU4MB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk OThhMGUwYTYtNzZiNy00N2IzLWEwMzMtNDkxNTNiMTc2YjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JEA/ZpwEMt+wZnT4SvNbcQKJ816H4zOfBok ytzRTriQumUcBkl+5zoLjtmXO1LSMqa5WfyWgts0zhCD7Skh4KNOPECSlW1e/752 9tBO3PbmOvsT0QvAsXvY5o3yz5y8gAeaKVD5K9IqRupSepC3DrTdNRmwgZohib1A rnNeNMBg2bnt/e81OWPx7YfmX3RAYrLoJOeShs7mNuJAyegoerNCWIOkzFAh1ap7 7ZR3/mbwAuu5YOVZCMuBQ1ULJg2fiLMEA8Rasdl/RWlujsmQmsqdUZagGgs4vB9E 0MlUjVKwpUcs3aFAg9wPT7/PvMWIejTurhVJX019upEUjvBckwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAm3uB9HWgR0VA/z9hWU2GQiRuHYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZjI5 ZWU3ZS1lYTEyLTQwZTUtYTY4ZS0zZDAwMmM2YWEyNTgvNjQzYmM3NWYtMzMxMC0z N2I4LWE3YWMtNjY0ZTY5MTM5ZmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2YyOWVlN2UtZWExMi00MGU1LWE2 OGUtM2QwMDJjNmFhMjU4L2NmMjllZTdlLWVhMTItNDBlNS1hNjhlLTNkMDAyYzZh YTI1OC5jcmwwHwYDVR0jBBgwFoAUnjVyGUrjpjOocfCJHCgFY27TmmkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZjI5ZWU3ZS1lYTEyLTQwZTUtYTY4ZS0zZDAw MmM2YWEyNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1UkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARLu6atKmAzMVftuvA4rdjlNENM8dR4PqFtV/uEoGxYY/J8ldnMYSjl nFrMZA1k97XANijCXKWLyHTHwDgNXMYHDXwN0C1MVqW3v05s3K9zyMg1RivyEBqa GB4NVakta88SK1ytTVST1WkYkM2ovEmDS0zG/4YXFud04oO7yGIOuMqUoMxrKK8h Zy6/2DRU6UOlUIWczSmdp8LT/qvpi8/HPP6VRxnl3ZrIH07phaCPXXymNx+vYchc 5eCXcHRcNkZVfRqVy975aDgXwZ6AUHSo3ysUEcepZ2yfv3ipxLA4n44DwsWqRI2t HqZfPyT+WVmRTGbW2Pi1Yj6P48StXe8= -----END CERTIFICATE-----Generated at Sat Apr 5 12:14:52 2025 by rpki-client