$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/324d9e96-b18d-3c2b-b26b-b9779054c3b5.roa File: 324d9e96-b18d-3c2b-b26b-b9779054c3b5.roa (raw, json) Hash identifier: EM6+6wBjGqpdjlHRqgvZPRQzOM1i23dChvgvdqH3oZQ= Subject key identifier: 3A:86:DA:04:D8:7E:B7:75:66:1A:D9:D7:9C:E1:F8:67:28:BE:1A:1F Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584894A5E6936F03326EA25E67A0 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/324d9e96-b18d-3c2b-b26b-b9779054c3b5.roa Signing time: Sat 18 Jan 2025 02:00:38 +0000 ROA not before: Sat 18 Jan 2025 02:00:38 +0000 ROA not after: Fri 18 Apr 2025 01:00:38 +0000 asID: 202276 IP address blocks: 136.228.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:94:a5:e6:93:6f:03:32:6e:a2:5e:67:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Jan 18 02:00:38 2025 GMT Not After : Apr 18 01:00:38 2025 GMT Subject: CN=83decc79-fce5-432c-9326-9717c293d125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:bd:1d:55:c2:94:78:96:ae:4d:c3:98:e1:43: b7:8e:77:15:23:23:8d:74:89:4c:8b:6a:6e:e9:1e: 64:64:43:bd:a8:67:99:8d:af:11:82:c2:9d:60:b2: e4:cb:23:52:84:bc:00:cd:92:6c:86:95:d0:3c:07: ca:80:a1:70:43:7d:b1:86:9b:c9:6d:51:53:22:4d: bf:9c:5e:cb:bb:a1:2e:f0:ee:77:dd:d7:6a:35:a8: bf:6c:92:f7:df:e8:0b:71:26:62:b7:0d:bb:d4:93: 0b:3c:1d:68:33:7f:e8:30:d8:5a:c7:81:26:46:24: 62:42:a3:cc:2d:ed:fe:34:e0:92:01:21:fd:d1:b8: 1e:cf:66:23:ce:64:86:7a:5e:bc:3b:9a:29:0e:f7: 11:62:cb:d2:77:ce:e7:86:dd:f3:86:a2:eb:f1:6d: e6:9b:24:f3:5b:45:a1:4c:bd:fc:7a:cb:a3:78:18: 6a:76:79:24:5a:e0:4c:53:2d:79:d7:53:41:70:45: 1c:5d:2a:ce:77:9e:bb:06:ec:e0:a8:a3:f2:56:20: 6e:cc:a6:78:8d:f1:7f:9e:78:63:97:0e:58:3c:3e: b5:f1:cb:b9:24:a3:13:a8:c9:92:fe:c4:69:90:6b: ef:5e:67:6f:8e:67:64:16:2c:73:ab:4d:f9:23:c2: f4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:86:DA:04:D8:7E:B7:75:66:1A:D9:D7:9C:E1:F8:67:28:BE:1A:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/324d9e96-b18d-3c2b-b26b-b9779054c3b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:83:d0:1f:44:61:ea:d2:a4:cc:e6:50:26:49:e8:de:67:2e: 6b:24:af:c8:ce:74:1a:78:e4:ce:8b:14:67:d2:86:8a:66:6c: d8:7d:9b:7d:86:e9:c6:ce:eb:06:96:f7:72:d9:c2:49:ef:4e: aa:bd:e9:1c:ff:2c:a1:60:35:77:35:7d:e3:31:cd:e2:85:2a: d9:c8:2b:9d:e7:34:32:19:b6:7f:b1:70:d2:56:82:90:97:7f: d4:cd:ef:52:c3:10:a6:fd:21:60:ab:60:48:13:3d:ac:67:3c: 03:72:a5:f0:29:93:38:07:23:c2:5b:68:8e:da:5a:9a:3b:97: 60:54:39:36:c1:c6:93:b9:f3:fd:2e:99:4c:c7:a6:e7:23:b0: 93:fc:6d:5a:12:86:46:4f:57:b1:76:c2:d1:15:28:11:be:63: 70:29:8b:6b:a2:96:bd:4e:85:aa:fb:48:9a:6e:cf:e2:8f:97: 08:ec:42:eb:3b:09:62:6a:70:f6:4f:ff:d2:b9:42:8e:40:a8: 09:b7:36:fb:07:5f:28:60:cd:86:da:5b:de:41:0c:7f:ac:a8: 68:a0:70:74:32:ca:5d:f1:ef:e5:c9:6c:c0:1e:07:42:74:ac: 8e:f9:5b:1a:6d:19:53:0b:b1:28:06:19:33:e3:ec:47:2f:8b: ef:45:90:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiUpeaTbwMybqJeZ6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk ODNkZWNjNzktZmNlNS00MzJjLTkzMjYtOTcxN2MyOTNkMTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+b0dVcKUeJauTcOY4UO3jncVIyONdIlMi2pu 6R5kZEO9qGeZja8RgsKdYLLkyyNShLwAzZJshpXQPAfKgKFwQ32xhpvJbVFTIk2/ nF7Lu6Eu8O533ddqNai/bJL33+gLcSZitw271JMLPB1oM3/oMNhax4EmRiRiQqPM Le3+NOCSASH90bgez2YjzmSGel68O5opDvcRYsvSd87nht3zhqLr8W3mmyTzW0Wh TL38esujeBhqdnkkWuBMUy1511NBcEUcXSrOd567BuzgqKPyViBuzKZ4jfF/nnhj lw5YPD618cu5JKMTqMmS/sRpkGvvXmdvjmdkFixzq035I8L02QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqG2gTYfrd1ZhrZ15zh+GcovhofMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvMzI0ZDllOTYtYjE4ZC0z YzJiLWIyNmItYjk3NzkwNTRjM2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSD0B9EYerSpMzmUCZJ6N5nLmskr8jOdBp45M6LFGfShopmbNh9m32G 6cbO6waW93LZwknvTqq96Rz/LKFgNXc1feMxzeKFKtnIK53nNDIZtn+xcNJWgpCX f9TN71LDEKb9IWCrYEgTPaxnPANypfApkzgHI8JbaI7aWpo7l2BUOTbBxpO58/0u mUzHpucjsJP8bVoShkZPV7F2wtEVKBG+Y3Api2uilr1Ohar7SJpuz+KPlwjsQus7 CWJqcPZP/9K5Qo5AqAm3NvsHXyhgzYbaW95BDH+sqGigcHQyyl3x7+XJbMAeB0J0 rI75WxptGVMLsSgGGTPj7Ecvi+9FkPA= -----END CERTIFICATE-----Generated at Sat Apr 5 23:17:45 2025 by rpki-client