$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/05aa2d51-4e9e-3228-8f1b-cf0e29430563.roa File: 05aa2d51-4e9e-3228-8f1b-cf0e29430563.roa (raw, json) Hash identifier: WE3AGTDNy0juAGrku2xcD8YN66BIf11OjpA3TS9dpYE= Subject key identifier: 11:7A:48:5D:EB:DB:44:7D:CA:D4:54:8E:B8:8E:0B:79:08:D0:01:05 Certificate issuer: /CN=a20363da-11e1-47d9-ac51-fe156737c8bb Certificate serial: 010D0C9F432858493B83DCCAD70ED025B141A500 Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/05aa2d51-4e9e-3228-8f1b-cf0e29430563.roa Signing time: Tue 18 Mar 2025 20:32:12 +0000 ROA not before: Tue 18 Mar 2025 20:32:12 +0000 ROA not after: Mon 16 Jun 2025 20:32:12 +0000 asID: 55039 IP address blocks: 136.242.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3b:83:dc:ca:d7:0e:d0:25:b1:41:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb Validity Not Before: Mar 18 20:32:12 2025 GMT Not After : Jun 16 20:32:12 2025 GMT Subject: CN=4328dab5-8c78-4044-ab44-041c674cd4b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:67:73:b0:6b:f8:35:5a:14:65:4c:90:99:35: 1d:66:4e:ab:0a:ed:89:b7:9f:61:e5:53:36:af:56: 4e:8f:a1:0c:ea:7c:c7:41:14:d8:88:ce:a1:95:72: 2f:ff:21:80:65:b4:cc:a1:11:a1:2b:a9:d3:9c:db: 69:35:5a:2a:b2:9a:0e:9a:bb:fa:69:55:2f:c2:35: 86:11:33:ac:85:a7:1d:17:69:43:42:50:62:c3:a8: 1a:83:77:e5:d8:65:23:e2:a1:fa:03:3f:ff:ef:c1: 8e:67:d9:54:31:3a:d2:f6:f2:b5:48:88:1c:62:a7: 04:98:73:04:e6:a3:75:9a:9c:90:87:8b:72:0b:82: b2:f9:8f:7f:55:74:d0:f6:45:fd:f5:4c:7f:ed:10: 05:5a:bf:90:f1:a1:c0:31:7f:d8:cc:8d:35:d1:d9: 70:fd:a4:bc:75:e8:09:9e:23:5e:e4:2c:98:0e:fb: 6e:95:76:46:3f:3d:cf:a5:87:4d:45:55:4b:e3:ad: 28:31:92:e2:7e:3e:af:59:66:3a:d5:f4:0b:69:d0: 85:0a:65:6b:85:4f:b5:81:15:1f:1f:46:0f:e0:b4: 30:e5:4f:d4:1e:15:51:b2:3b:4e:1e:b0:64:db:b1: 92:00:c6:7f:41:ad:c2:30:90:7c:9f:6a:d1:23:8f: e9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7A:48:5D:EB:DB:44:7D:CA:D4:54:8E:B8:8E:0B:79:08:D0:01:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/05aa2d51-4e9e-3228-8f1b-cf0e29430563.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl X509v3 Authority Key Identifier: keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer sbgp-ipAddrBlock: critical IPv4: 136.242.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:fc:f4:f0:41:bc:db:99:fc:17:30:42:ab:d3:4b:e4:4d:d6: cc:0b:fe:87:f2:d6:1e:3e:b7:f9:58:a1:5f:c6:c9:0e:67:6c: 71:34:63:12:a4:4f:17:1c:78:12:6b:b2:10:b9:c4:c9:80:a2: a7:0b:d9:ec:7d:f6:91:ac:da:e0:58:14:cb:48:6b:67:1a:cc: 09:f4:91:b6:96:ce:8a:43:51:4b:6f:29:4b:a4:8a:cd:7d:b2: aa:3b:ca:9a:1a:cc:1f:f3:65:d1:e8:45:a2:00:63:e6:d3:74: 53:02:31:e3:33:12:f6:70:06:c1:8e:94:07:79:1c:66:62:91: 9a:eb:62:44:5b:d1:8d:ae:19:5b:b6:6b:55:87:97:24:49:cf: ab:a8:35:3d:78:f0:da:b4:08:61:0a:ed:cc:25:6e:8b:0f:34: 09:d3:11:b3:b7:e1:ca:2d:fe:66:2c:98:56:9b:a5:a5:a7:e7: 7e:fb:dd:2d:9e:10:18:3a:ef:1a:9b:fa:7b:86:4b:74:be:71: 1d:29:4a:0c:de:b8:1f:59:fb:7f:2a:50:d0:88:a9:89:e4:c3: d1:50:65:b3:89:25:38:1d:23:0a:37:f9:5b:9e:42:a7:40:b8: c7:a0:bb:c3:31:9a:75:f9:4e:fb:b5:3a:99:97:91:ba:63:a8: d3:3b:6a:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk7g9zK1w7QJbFBpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwMzYzZGEtMTFlMS00N2Q5LWFjNTEtZmUxNTY3Mzdj OGJiMB4XDTI1MDMxODIwMzIxMloXDTI1MDYxNjIwMzIxMlowLzEtMCsGA1UEAxMk NDMyOGRhYjUtOGM3OC00MDQ0LWFiNDQtMDQxYzY3NGNkNGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmdzsGv4NVoUZUyQmTUdZk6rCu2Jt59h5VM2 r1ZOj6EM6nzHQRTYiM6hlXIv/yGAZbTMoRGhK6nTnNtpNVoqspoOmrv6aVUvwjWG ETOshacdF2lDQlBiw6gag3fl2GUj4qH6Az//78GOZ9lUMTrS9vK1SIgcYqcEmHME 5qN1mpyQh4tyC4Ky+Y9/VXTQ9kX99Ux/7RAFWr+Q8aHAMX/YzI010dlw/aS8degJ niNe5CyYDvtulXZGPz3PpYdNRVVL460oMZLifj6vWWY61fQLadCFCmVrhU+1gRUf H0YP4LQw5U/UHhVRsjtOHrBk27GSAMZ/Qa3CMJB8n2rRI4/pLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBF6SF3r20R9ytRUjriOC3kI0AEFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAz NjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1NjczN2M4YmIvMDVhYTJkNTEtNGU5ZS0z MjI4LThmMWItY2YwZTI5NDMwNTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTIwMzYzZGEtMTFlMS00N2Q5LWFj NTEtZmUxNTY3MzdjOGJiL2EyMDM2M2RhLTExZTEtNDdkOS1hYzUxLWZlMTU2NzM3 YzhiYi5jcmwwHwYDVR0jBBgwFoAU00Sj8uDd7uXT1A4v3OrfYK5roBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAzNjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1 NjczN2M4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiPJYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFH89PBBvNuZ/BcwQqvTS+RN1swL/ofy1h4+t/lYoV/GyQ5nbHE0YxKk TxcceBJrshC5xMmAoqcL2ex99pGs2uBYFMtIa2cazAn0kbaWzopDUUtvKUukis19 sqo7ypoazB/zZdHoRaIAY+bTdFMCMeMzEvZwBsGOlAd5HGZikZrrYkRb0Y2uGVu2 a1WHlyRJz6uoNT148Nq0CGEK7cwlbosPNAnTEbO34cot/mYsmFabpaWn53773S2e EBg67xqb+nuGS3S+cR0pSgzeuB9Z+38qUNCIqYnkw9FQZbOJJTgdIwo3+VueQqdA uMegu8MxmnX5Tvu1OpmXkbpjqNM7ahE= -----END CERTIFICATE-----Generated at Sat Apr 5 05:22:19 2025 by rpki-client