$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e700d517-df73-3fd6-9d99-9c18beba1d57.roa File: e700d517-df73-3fd6-9d99-9c18beba1d57.roa (raw, json) Hash identifier: O1GKHqnuIjc6M7D4S/9S0jkCEfwJFvpRHQ5ThUS9pn4= Subject key identifier: 52:88:88:1C:7E:93:81:83:B8:5F:13:66:88:D5:9F:A9:5D:FF:2C:D3 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F43285848E16BD0661EC8E4892E4C0500 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e700d517-df73-3fd6-9d99-9c18beba1d57.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 396253 IP address blocks: 136.228.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:d0:66:1e:c8:e4:89:2e:4c:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=3ae31450-6fe8-494f-96ba-6288beadbff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2f:f4:d2:e3:c1:95:fc:75:04:ce:02:18:f3: 71:08:62:ac:ab:2e:d1:9f:97:1d:12:33:e6:63:9b: 90:44:17:98:de:72:1c:86:f5:e3:3b:3a:54:21:c0: d0:50:88:41:10:fa:a7:28:a7:2d:78:87:00:df:c6: 90:69:c7:28:19:12:c7:33:18:a6:bc:85:bd:8e:48: 20:ce:c7:89:ab:74:74:ef:59:25:30:60:1d:9a:ae: 3b:1c:21:0d:c9:8f:97:9b:fd:45:02:1c:9a:d7:50: 4e:d1:b7:66:fa:f5:65:7d:f8:e6:fc:9d:3d:a0:d5: a4:f5:18:6a:b0:db:cb:b5:7e:b0:32:6f:1c:33:95: e0:17:f1:c8:5f:a4:c2:f4:c7:d7:3c:e3:aa:79:e0: 0c:5e:3f:16:a7:50:a5:2f:bd:0c:53:f5:78:57:4b: b3:70:15:fb:c6:0c:01:26:92:b8:36:a9:3c:20:8c: 16:dc:c2:c8:03:e9:6a:23:1b:cd:5b:ad:84:bc:03: 84:3f:ce:27:4e:01:34:75:c3:f8:ad:0d:3e:a8:07: 6b:3c:f7:e3:f5:08:35:70:dd:54:a8:b6:21:d9:91: 66:2d:de:af:63:1e:9b:b4:66:eb:a2:4c:da:87:4a: 80:31:78:27:32:94:2d:a8:0c:ed:35:9f:96:cb:f3: 6e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:88:88:1C:7E:93:81:83:B8:5F:13:66:88:D5:9F:A9:5D:FF:2C:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e700d517-df73-3fd6-9d99-9c18beba1d57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:45:84:ff:aa:8a:45:02:ab:c7:32:a0:38:ec:78:c7:48:26: b0:31:2b:2f:06:2f:68:89:61:24:a0:f9:0b:7b:e9:09:06:04: d4:a1:93:8a:87:55:b4:5f:2c:d1:69:77:06:65:55:d3:1a:82: 6c:86:99:4f:bb:db:7e:b5:4f:bf:e2:57:b2:43:0c:43:b6:a1: a1:76:76:0f:d0:53:05:e4:56:c1:78:a8:70:0e:c4:16:d3:7c: 63:ad:75:bf:a6:7a:6c:b9:a0:f2:c8:65:88:f7:fc:03:7b:ac: 27:1a:2c:f1:f5:4e:d8:ca:db:fa:fb:bd:ac:f4:72:fc:ae:9d: f3:84:a9:75:a8:67:30:03:5f:7b:64:fb:c0:cb:82:1e:3a:52: 5d:7c:62:8c:47:26:2c:3e:1c:4f:56:e1:17:36:ce:bc:1c:87: 84:00:c0:09:34:8e:7c:b3:8c:ae:df:c5:54:87:7f:6f:db:c1: 3e:94:fb:60:3a:19:27:fb:d4:6d:5c:b3:c1:09:b6:0e:d4:b5: 91:89:7e:bf:90:a5:23:98:57:df:d8:ab:12:e4:52:95:d3:bf: 76:d1:c5:6c:03:9d:1a:5f:a6:e4:f8:23:d0:37:34:be:e3:2d: 86:17:42:d7:3a:c0:d1:02:5e:d0:48:c7:a4:c4:b4:77:18:ca: 6a:60:7d:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha9BmHsjkiS5MBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk M2FlMzE0NTAtNmZlOC00OTRmLTk2YmEtNjI4OGJlYWRiZmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi/00uPBlfx1BM4CGPNxCGKsqy7Rn5cdEjPm Y5uQRBeY3nIchvXjOzpUIcDQUIhBEPqnKKcteIcA38aQaccoGRLHMximvIW9jkgg zseJq3R071klMGAdmq47HCENyY+Xm/1FAhya11BO0bdm+vVlffjm/J09oNWk9Rhq sNvLtX6wMm8cM5XgF/HIX6TC9MfXPOOqeeAMXj8Wp1ClL70MU/V4V0uzcBX7xgwB JpK4Nqk8IIwW3MLIA+lqIxvNW62EvAOEP84nTgE0dcP4rQ0+qAdrPPfj9Qg1cN1U qLYh2ZFmLd6vYx6btGbrokzah0qAMXgnMpQtqAztNZ+Wy/NuMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKIiBx+k4GDuF8TZojVn6ld/yzTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvZTcwMGQ1MTctZGY3My0z ZmQ2LTlkOTktOWMxOGJlYmExZDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBFhP+qikUCq8cyoDjseMdIJrAxKy8GL2iJYSSg+Qt76QkGBNShk4qH VbRfLNFpdwZlVdMagmyGmU+72361T7/iV7JDDEO2oaF2dg/QUwXkVsF4qHAOxBbT fGOtdb+memy5oPLIZYj3/AN7rCcaLPH1TtjK2/r7vaz0cvyunfOEqXWoZzADX3tk +8DLgh46Ul18YoxHJiw+HE9W4Rc2zrwch4QAwAk0jnyzjK7fxVSHf2/bwT6U+2A6 GSf71G1cs8EJtg7UtZGJfr+QpSOYV9/YqxLkUpXTv3bRxWwDnRpfpuT4I9A3NL7j LYYXQtc6wNECXtBIx6TEtHcYympgfXU= -----END CERTIFICATE-----Generated at Sat Apr 5 20:32:23 2025 by rpki-client