$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e218169e-d661-33ed-b65c-0a3b861e3023.roa File: e218169e-d661-33ed-b65c-0a3b861e3023.roa (raw, json) Hash identifier: I8UTfAOa9U0c/DB9F3P6guYrlaoiTvieHur2ZgNEA6s= Subject key identifier: D7:56:6A:00:58:95:D6:68:93:6B:C0:FA:ED:AC:02:1E:58:F9:F2:1F Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F43285848A830A83A9B03BA9604B32440 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e218169e-d661-33ed-b65c-0a3b861e3023.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 396253 IP address blocks: 136.228.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:a8:3a:9b:03:ba:96:04:b3:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=56ff2227-3fff-4a49-87f0-5ad0b98e8bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f9:b9:07:5a:15:05:5d:52:c9:ca:ee:1d:01: 75:ac:25:b0:07:47:4e:2a:97:39:3d:bf:7c:14:32: 45:bf:3c:6d:39:7b:cc:9d:ca:44:23:8b:8f:af:6a: 75:84:1c:9d:68:5c:e0:22:b2:19:26:bd:40:56:81: c8:1a:07:10:d2:d3:03:fb:e2:00:02:91:35:77:40: 69:cd:e9:ed:21:b9:41:72:98:95:f2:b8:11:ff:51: 40:ea:bf:41:a4:7b:05:95:00:61:51:94:ba:53:49: b6:0e:70:3e:3c:ed:c6:83:a0:4a:05:e6:22:05:be: a1:c9:be:f9:61:10:e8:ef:da:61:0a:c8:e7:67:87: ad:ab:5e:26:46:19:43:25:02:e7:60:f3:dd:28:29: 97:28:53:4c:fa:ee:2f:e6:9f:ac:82:50:f2:9a:99: 56:9d:c1:b5:55:72:49:2d:cd:61:3a:88:f7:ad:42: e9:74:b3:aa:8d:f5:e1:db:54:98:5e:9e:ae:0c:f0: 2a:26:a4:d0:c5:ab:bb:4b:97:85:11:1c:48:2c:d1: 58:54:1b:02:02:7d:e5:fc:5a:e6:1d:7b:76:2b:5e: b5:d1:9b:1c:5d:2d:aa:a9:96:48:56:7b:bd:9a:a1: 04:c6:62:c5:da:37:84:f7:7e:ab:1e:49:11:8c:d1: 89:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:56:6A:00:58:95:D6:68:93:6B:C0:FA:ED:AC:02:1E:58:F9:F2:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e218169e-d661-33ed-b65c-0a3b861e3023.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:a6:54:c9:2b:54:f1:bf:fc:43:ed:1f:97:26:fc:7b:ab:47: 0d:14:45:b5:12:8a:ec:4f:c5:f2:3e:7e:cc:5c:71:99:cb:df: c6:0a:a6:62:a6:bc:77:5e:e8:79:8c:bd:b5:07:a5:89:31:a9: b5:ca:57:fa:76:fd:e0:55:6d:c3:c6:98:80:13:89:4c:12:30: b0:be:47:22:a0:49:a9:d7:8f:86:4f:80:8f:f7:2f:1a:d7:47: 47:50:6c:d9:0c:41:a3:d2:99:c3:56:d7:29:ed:80:17:09:77: f0:82:a8:7c:75:e2:3b:3a:67:fa:8b:a3:5a:af:f3:63:e9:a9: 30:18:dc:12:8d:a9:1c:14:6b:32:f4:8c:b2:77:67:4b:58:43: 96:3d:d1:41:b2:26:94:59:3e:e1:67:33:36:f4:f6:ff:f8:c1: 09:c9:97:75:0b:92:3d:87:50:89:16:77:72:d6:25:09:87:1e: 6f:2a:17:39:a9:5a:2b:e7:01:d0:99:34:c9:37:f1:cb:7a:c1: 61:fc:97:9d:cc:ff:60:99:6c:25:91:a2:07:57:8f:bf:62:ba: 28:97:51:71:e3:07:38:3e:ae:ef:f7:f1:dc:af:dc:32:90:2a: 47:1c:f7:56:4f:17:d7:95:d6:96:fd:77:23:b3:38:50:53:18: 21:fe:c5:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMKg6mwO6lgSzJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk NTZmZjIyMjctM2ZmZi00YTQ5LTg3ZjAtNWFkMGI5OGU4YmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/m5B1oVBV1SycruHQF1rCWwB0dOKpc5Pb98 FDJFvzxtOXvMncpEI4uPr2p1hBydaFzgIrIZJr1AVoHIGgcQ0tMD++IAApE1d0Bp zentIblBcpiV8rgR/1FA6r9BpHsFlQBhUZS6U0m2DnA+PO3Gg6BKBeYiBb6hyb75 YRDo79phCsjnZ4etq14mRhlDJQLnYPPdKCmXKFNM+u4v5p+sglDymplWncG1VXJJ Lc1hOoj3rULpdLOqjfXh21SYXp6uDPAqJqTQxau7S5eFERxILNFYVBsCAn3l/Frm HXt2K1610ZscXS2qqZZIVnu9mqEExmLF2jeE936rHkkRjNGJTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdWagBYldZok2vA+u2sAh5Y+fIfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvZTIxODE2OWUtZDY2MS0z M2VkLWI2NWMtMGEzYjg2MWUzMDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiOT8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFymVMkrVPG//EPtH5cm/HurRw0URbUSiuxPxfI+fsxccZnL38YKpmKm vHde6HmMvbUHpYkxqbXKV/p2/eBVbcPGmIATiUwSMLC+RyKgSanXj4ZPgI/3LxrX R0dQbNkMQaPSmcNW1yntgBcJd/CCqHx14js6Z/qLo1qv82PpqTAY3BKNqRwUazL0 jLJ3Z0tYQ5Y90UGyJpRZPuFnMzb09v/4wQnJl3ULkj2HUIkWd3LWJQmHHm8qFzmp WivnAdCZNMk38ct6wWH8l53M/2CZbCWRogdXj79iuiiXUXHjBzg+ru/38dyv3DKQ Kkcc91ZPF9eV1pb9dyOzOFBTGCH+xQ4= -----END CERTIFICATE-----Generated at Sun Apr 6 02:09:54 2025 by rpki-client