$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/e22cd4fa-5665-39d4-843f-a7ad97b70800.roa File: e22cd4fa-5665-39d4-843f-a7ad97b70800.roa (raw, json) Hash identifier: LCZ1xyQyxyfI1/eVPM7VuAAatdbXwDJmTimgDutjgrk= Subject key identifier: C6:D9:F3:1D:6B:15:C1:76:E7:E9:E7:B3:B0:30:89:6F:C4:51:06:02 Certificate issuer: /CN=40163235-a725-497c-92e8-c077e46672e7 Certificate serial: 010D0C9F43285848BB18FEE6FFD6440FF020D400 Authority key identifier: 09:85:22:05:AF:AE:B9:30:AC:FE:43:2E:92:53:EC:11:2F:B3:33:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/e22cd4fa-5665-39d4-843f-a7ad97b70800.roa Signing time: Fri 31 Jan 2025 20:33:25 +0000 ROA not before: Fri 31 Jan 2025 20:33:25 +0000 ROA not after: Thu 01 May 2025 19:33:25 +0000 asID: 33083 IP address blocks: 209.135.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:18:fe:e6:ff:d6:44:0f:f0:20:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40163235-a725-497c-92e8-c077e46672e7 Validity Not Before: Jan 31 20:33:25 2025 GMT Not After : May 1 19:33:25 2025 GMT Subject: CN=38882362-2bd6-447c-a928-4b2903def643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1e:ad:df:66:d9:76:18:ab:13:43:4f:58:0d: be:dd:cf:d9:4a:3e:db:94:b5:77:2d:69:ce:e4:8e: 14:f4:f1:1c:f2:83:94:1f:76:e1:4a:12:29:a7:f3: 52:ef:02:be:9c:d1:9b:23:d2:d6:b5:7d:d9:d2:94: 90:c8:26:25:78:12:da:1b:73:dd:0b:96:f4:a0:9c: 98:ea:fa:31:66:46:8f:0b:a6:1c:78:b0:1d:3b:8f: 88:db:ef:55:21:88:f8:b2:a2:be:14:7f:69:06:28: b0:4e:d9:6b:c2:b6:32:c2:3c:80:cb:e1:21:79:8d: e1:28:a2:a6:4f:4a:3e:b3:6b:d2:0e:53:7d:47:5e: f9:76:00:36:c3:f4:55:b8:81:92:de:a9:21:14:40: 92:1e:2d:28:77:7f:05:64:ab:48:bf:26:3f:0c:0f: 5c:ba:23:5e:ee:d4:02:8a:8a:56:7a:b0:d5:de:93: d5:41:68:26:b5:15:78:0b:33:94:ea:7b:9c:9b:21: 0d:52:7a:10:a2:f1:3b:b0:13:f5:de:24:77:53:1f: 8f:52:ed:4d:05:a6:67:7e:d4:32:bd:98:9e:e3:8c: 3c:b1:f1:12:c4:14:6a:e9:f0:8e:0a:64:c1:fb:73: d1:7c:e6:b7:aa:be:b9:0c:c5:dc:89:ec:8c:00:01: b8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D9:F3:1D:6B:15:C1:76:E7:E9:E7:B3:B0:30:89:6F:C4:51:06:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/e22cd4fa-5665-39d4-843f-a7ad97b70800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.crl X509v3 Authority Key Identifier: keyid:09:85:22:05:AF:AE:B9:30:AC:FE:43:2E:92:53:EC:11:2F:B3:33:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer sbgp-ipAddrBlock: critical IPv4: 209.135.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:1a:43:c1:3f:49:a9:79:d6:74:fe:6a:b1:9f:ee:67:ef:8f: f8:41:f9:d4:77:d9:b7:8c:ed:bf:d9:21:69:61:f2:4a:13:2a: e8:65:fd:98:32:0c:74:73:4c:b4:8b:11:7a:e8:8f:8e:4f:14: c7:4d:24:b5:bb:7b:07:47:26:20:ba:31:13:7c:fc:a8:39:a2: 47:4f:c0:29:37:70:d9:20:95:39:62:2b:35:88:ba:19:1c:c8: 09:a7:03:aa:ee:09:9d:42:49:00:ae:02:78:b1:de:fb:6f:05: 71:1f:56:b0:06:17:c6:fe:27:1e:6f:24:2b:11:4c:03:2c:de: 72:44:42:9c:a7:ca:ba:d3:e0:6f:c8:5b:92:33:13:80:4e:ab: a4:d7:b0:86:0d:37:00:f4:6a:be:5f:2d:84:d9:52:72:c3:80: b9:05:8b:07:a3:c8:ac:b0:73:73:c3:f1:39:81:ad:67:b4:b2: 63:22:ac:d5:b5:f4:bc:15:98:48:3b:61:16:77:e5:a9:12:e4: 19:c5:00:69:0b:28:cd:77:8a:88:ff:81:f2:bb:98:86:fd:dd: 8b:80:72:35:39:0e:b4:62:38:7e:25:7f:df:d6:1b:e7:24:5c: 02:10:36:57:4c:25:23:1e:f5:7a:dd:39:cc:56:7a:c6:a9:e0: 5a:d9:38:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7GP7m/9ZED/Ag1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAxNjMyMzUtYTcyNS00OTdjLTkyZTgtYzA3N2U0NjY3 MmU3MB4XDTI1MDEzMTIwMzMyNVoXDTI1MDUwMTE5MzMyNVowLzEtMCsGA1UEAxMk Mzg4ODIzNjItMmJkNi00NDdjLWE5MjgtNGIyOTAzZGVmNjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB6t32bZdhirE0NPWA2+3c/ZSj7blLV3LWnO 5I4U9PEc8oOUH3bhShIpp/NS7wK+nNGbI9LWtX3Z0pSQyCYleBLaG3PdC5b0oJyY 6voxZkaPC6YceLAdO4+I2+9VIYj4sqK+FH9pBiiwTtlrwrYywjyAy+EheY3hKKKm T0o+s2vSDlN9R175dgA2w/RVuIGS3qkhFECSHi0od38FZKtIvyY/DA9cuiNe7tQC iopWerDV3pPVQWgmtRV4CzOU6nucmyENUnoQovE7sBP13iR3Ux+PUu1NBaZnftQy vZie44w8sfESxBRq6fCOCmTB+3PRfOa3qr65DMXcieyMAAG4eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbZ8x1rFcF25+nns7AwiW/EUQYCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80MDE2 MzIzNS1hNzI1LTQ5N2MtOTJlOC1jMDc3ZTQ2NjcyZTcvZTIyY2Q0ZmEtNTY2NS0z OWQ0LTg0M2YtYTdhZDk3YjcwODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDAxNjMyMzUtYTcyNS00OTdjLTky ZTgtYzA3N2U0NjY3MmU3LzQwMTYzMjM1LWE3MjUtNDk3Yy05MmU4LWMwNzdlNDY2 NzJlNy5jcmwwHwYDVR0jBBgwFoAUCYUiBa+uuTCs/kMuklPsES+zM88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80MDE2MzIzNS1hNzI1LTQ5N2MtOTJlOC1jMDc3 ZTQ2NjcyZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YenMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwaQ8E/Sal51nT+arGf7mfvj/hB+dR32beM7b/ZIWlh8koTKuhl/Zgy DHRzTLSLEXroj45PFMdNJLW7ewdHJiC6MRN8/Kg5okdPwCk3cNkglTliKzWIuhkc yAmnA6ruCZ1CSQCuAnix3vtvBXEfVrAGF8b+Jx5vJCsRTAMs3nJEQpynyrrT4G/I W5IzE4BOq6TXsIYNNwD0ar5fLYTZUnLDgLkFiwejyKywc3PD8TmBrWe0smMirNW1 9LwVmEg7YRZ35akS5BnFAGkLKM13ioj/gfK7mIb93YuAcjU5DrRiOH4lf9/WG+ck XAIQNldMJSMe9XrdOcxWesap4FrZOFM= -----END CERTIFICATE-----Generated at Sat Apr 12 16:17:33 2025 by rpki-client