$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/37c207ef-3109-390a-8c00-0f9195cf738d.roa File: 37c207ef-3109-390a-8c00-0f9195cf738d.roa (raw, json) Hash identifier: kQhrxDWQ859yBA42UllVot5wRoCeDzwgQ22gOlNUw+o= Subject key identifier: 33:66:C8:BB:7D:BD:7D:D4:2F:29:5C:1F:FB:B2:29:B6:BF:76:23:60 Certificate issuer: /CN=a20363da-11e1-47d9-ac51-fe156737c8bb Certificate serial: 010D0C9F43285848C6E6384EBF4FFF6CDF776F00 Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/37c207ef-3109-390a-8c00-0f9195cf738d.roa Signing time: Wed 05 Feb 2025 02:00:39 +0000 ROA not before: Wed 05 Feb 2025 02:00:39 +0000 ROA not after: Tue 06 May 2025 01:00:39 +0000 asID: 55039 IP address blocks: 199.231.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:e6:38:4e:bf:4f:ff:6c:df:77:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb Validity Not Before: Feb 5 02:00:39 2025 GMT Not After : May 6 01:00:39 2025 GMT Subject: CN=d4475b28-85dc-4912-8c0a-d425d2bfa779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c6:0f:ff:87:22:e8:ed:d2:4f:49:2c:9c:1b: a7:90:6d:73:83:28:71:e9:d3:79:7a:2a:aa:b7:b4: fb:06:72:88:a2:0c:d1:5d:cd:1c:fa:9b:d2:34:0d: d0:e2:63:e4:fc:b8:c9:3a:b7:a1:60:f3:37:08:50: 0f:0d:9d:f4:62:b9:21:37:d5:d7:9c:8f:b7:6b:89: 09:f5:1c:d1:c8:54:23:8b:00:17:ed:9e:f8:06:b7: 45:1f:92:1f:de:ff:4a:f3:58:4e:16:74:47:3b:29: 5c:ff:bd:2e:d8:72:45:0d:e7:6a:21:e1:94:23:63: 90:b4:f6:9e:08:87:13:eb:7d:14:4b:0f:4f:48:9e: 4e:09:5d:13:4d:c5:8a:b3:11:ff:f8:10:d6:ee:a2: ac:e9:78:03:79:01:be:97:b5:ad:18:a9:36:54:ab: ae:bc:17:e0:eb:1f:e4:3d:91:9c:c5:f4:74:9a:7c: 67:99:90:95:67:2c:a4:3a:35:0e:bb:8e:27:2c:c7: c0:9a:a5:c5:65:b1:c5:d9:e3:5f:2b:0d:e9:d2:40: 3a:9b:06:63:64:ba:e6:09:c7:f3:f1:cb:1d:92:8f: 15:13:3a:c5:bf:e5:4b:6b:07:95:c9:f3:a9:ea:6d: 13:58:c3:06:a9:13:2e:04:35:2d:8b:0d:de:45:28: f8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:66:C8:BB:7D:BD:7D:D4:2F:29:5C:1F:FB:B2:29:B6:BF:76:23:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/37c207ef-3109-390a-8c00-0f9195cf738d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl X509v3 Authority Key Identifier: keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer sbgp-ipAddrBlock: critical IPv4: 199.231.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:f8:43:d5:8d:f8:ae:c7:10:83:15:89:c3:30:ff:c6:b7:80: 0c:4c:0d:b6:94:d9:4a:6c:3a:27:19:90:4f:18:98:18:00:b3: 86:6c:82:84:c0:55:ad:44:12:ac:2c:2b:33:dd:f7:a9:9c:93: 6a:c9:18:05:82:b5:7d:86:c2:0a:30:41:d9:a4:2b:0b:47:dc: 68:7c:08:d3:0e:60:4e:33:0c:cd:b5:3a:05:9d:c4:f1:d7:73: 59:da:5b:44:30:b7:d6:fb:49:1b:ab:92:6e:dd:48:36:e2:33: f2:34:5c:6c:9b:82:33:dc:0c:e4:22:42:73:9d:84:6b:1e:81: cc:ce:e8:1e:92:3c:11:2c:8b:22:1f:5c:4d:09:bf:20:9f:91: 88:2f:74:8d:5e:94:05:ac:90:f9:8c:fa:23:39:8a:4e:10:6e: e5:c2:92:b3:15:8b:ab:97:86:97:6c:fb:8f:ca:ab:5e:67:51: 24:18:de:a4:0d:7d:bf:8b:dc:ca:ee:ae:a0:c1:0c:79:45:f3: c8:67:f0:6e:aa:ba:23:2b:40:23:a9:82:fe:f9:b4:c7:94:af: e6:50:ad:eb:e0:5d:40:33:e6:18:2f:62:9e:2a:13:05:37:a7: bd:4a:67:ec:6c:db:0c:c9:90:4b:65:a0:f6:2d:c4:00:fd:ac: 36:cc:bb:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5jhOv0//bN93bwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwMzYzZGEtMTFlMS00N2Q5LWFjNTEtZmUxNTY3Mzdj OGJiMB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk ZDQ0NzViMjgtODVkYy00OTEyLThjMGEtZDQyNWQyYmZhNzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsYP/4ci6O3ST0ksnBunkG1zgyhx6dN5eiqq t7T7BnKIogzRXc0c+pvSNA3Q4mPk/LjJOrehYPM3CFAPDZ30YrkhN9XXnI+3a4kJ 9RzRyFQjiwAX7Z74BrdFH5If3v9K81hOFnRHOylc/70u2HJFDedqIeGUI2OQtPae CIcT630USw9PSJ5OCV0TTcWKsxH/+BDW7qKs6XgDeQG+l7WtGKk2VKuuvBfg6x/k PZGcxfR0mnxnmZCVZyykOjUOu44nLMfAmqXFZbHF2eNfKw3p0kA6mwZjZLrmCcfz 8csdko8VEzrFv+VLaweVyfOp6m0TWMMGqRMuBDUtiw3eRSj46wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNmyLt9vX3ULylcH/uyKba/diNgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAz NjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1NjczN2M4YmIvMzdjMjA3ZWYtMzEwOS0z OTBhLThjMDAtMGY5MTk1Y2Y3MzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTIwMzYzZGEtMTFlMS00N2Q5LWFj NTEtZmUxNTY3MzdjOGJiL2EyMDM2M2RhLTExZTEtNDdkOS1hYzUxLWZlMTU2NzM3 YzhiYi5jcmwwHwYDVR0jBBgwFoAU00Sj8uDd7uXT1A4v3OrfYK5roBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAzNjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1 NjczN2M4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+f4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADj4Q9WN+K7HEIMVicMw/8a3gAxMDbaU2UpsOicZkE8YmBgAs4ZsgoTA Va1EEqwsKzPd96mck2rJGAWCtX2GwgowQdmkKwtH3Gh8CNMOYE4zDM21OgWdxPHX c1naW0Qwt9b7SRurkm7dSDbiM/I0XGybgjPcDOQiQnOdhGsegczO6B6SPBEsiyIf XE0JvyCfkYgvdI1elAWskPmM+iM5ik4QbuXCkrMVi6uXhpds+4/Kq15nUSQY3qQN fb+L3MrurqDBDHlF88hn8G6quiMrQCOpgv75tMeUr+ZQrevgXUAz5hgvYp4qEwU3 p71KZ+xs2wzJkEtloPYtxAD9rDbMu9I= -----END CERTIFICATE-----Generated at Sat Apr 5 05:30:03 2025 by rpki-client