$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4dfdea2d-a53b-3a3f-a191-48dd2145a7e9.roa File: 4dfdea2d-a53b-3a3f-a191-48dd2145a7e9.roa (raw, json) Hash identifier: 4M3xQNHa4xyPS1CnuONoflGeKkFozX+6s8Urv7fRSgo= Subject key identifier: FB:66:14:34:88:78:D3:9D:FF:24:B3:F9:B9:C8:ED:82:3D:AE:34:74 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F43285848A1360CC8440F390F4DF0DC80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4dfdea2d-a53b-3a3f-a191-48dd2145a7e9.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 136.226.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:0c:c8:44:0f:39:0f:4d:f0:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=bfb57278-4f31-4b61-9083-94336bf6f5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:72:56:8b:30:0c:e5:60:66:1e:c5:22:e1:70: cb:66:15:53:f5:3b:b8:4e:08:09:8c:f8:bf:b4:1b: 55:2a:cd:92:3e:13:ba:d8:a2:c3:7e:da:36:e6:42: 50:0a:0e:a8:4e:a6:fc:00:89:91:40:35:73:36:5a: 75:74:e3:4d:1a:9d:98:99:4e:83:44:62:4e:e8:55: 3d:0e:2b:5c:74:01:1c:1c:92:43:12:01:e4:37:2c: 61:15:cb:18:9e:39:39:5b:e6:ca:47:0a:35:90:be: ad:4f:17:fb:53:75:3b:09:c8:69:d6:ec:36:ba:fb: 93:cc:94:c5:72:84:5a:6e:bb:df:6d:e5:f1:7d:33: b9:55:e0:68:4e:44:e7:9b:dd:53:bb:90:99:f2:88: 66:89:60:ae:95:63:6a:80:0f:45:08:17:e0:3c:46: d9:42:9c:ec:4c:dd:23:10:a7:0f:d8:2c:ae:9a:25: 44:27:8e:66:ae:b6:9c:a8:3a:53:47:c7:ca:7f:54: e0:b4:07:b6:36:e9:c0:12:3d:59:89:c9:fe:0a:93: d0:5d:0f:9f:eb:28:bb:bb:40:1b:85:c1:e9:dc:3c: 57:f7:ae:49:f2:c3:49:bd:5a:b8:1d:62:20:48:10: 2b:aa:c2:5c:d3:05:6b:77:18:ad:aa:bb:f5:0a:4f: 34:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:66:14:34:88:78:D3:9D:FF:24:B3:F9:B9:C8:ED:82:3D:AE:34:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4dfdea2d-a53b-3a3f-a191-48dd2145a7e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:1c:67:d3:11:67:32:3c:a4:68:f1:bb:1b:40:eb:da:44:25: 66:29:12:69:99:07:e2:f5:08:8d:68:31:9a:93:ec:d7:e1:f3: 31:32:c0:68:30:30:34:ef:32:4b:9d:c9:1b:a4:96:4a:09:89: ff:76:c0:37:b9:25:f3:9c:64:91:b3:c1:a1:df:21:76:a1:71: 64:cf:40:95:c0:90:ac:76:32:99:23:d3:bc:db:26:f1:31:89: 96:39:2c:cc:97:b2:dd:a3:fd:c2:2e:6b:c4:80:06:75:73:71: 13:c3:63:ed:9f:00:71:c9:e5:4f:6c:5d:c9:5b:0d:46:9b:ba: 24:21:46:b4:62:ea:9f:79:34:cd:f9:e8:c0:b2:9f:c4:14:3d: 0a:42:95:91:33:b6:54:3d:b3:27:24:c6:60:8e:b2:44:83:28: d6:ec:3f:a0:a0:b8:2a:38:27:ab:db:a6:17:85:7f:b2:6e:0b: ad:1a:54:50:04:27:de:21:cc:f6:c8:94:83:e0:23:df:57:33: b2:08:33:0a:b9:a9:f8:f0:0b:b4:0a:ea:3b:ba:db:78:75:82: 19:5b:d8:d5:71:db:84:0f:8b:54:b8:33:7b:b1:fc:60:85:cc: ff:52:85:82:fd:a8:86:1a:5b:60:0f:07:16:be:5a:f3:a1:ae: fd:fd:e4:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNgzIRA85D03w3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk YmZiNTcyNzgtNGYzMS00YjYxLTkwODMtOTQzMzZiZjZmNWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHJWizAM5WBmHsUi4XDLZhVT9Tu4TggJjPi/ tBtVKs2SPhO62KLDfto25kJQCg6oTqb8AImRQDVzNlp1dONNGp2YmU6DRGJO6FU9 DitcdAEcHJJDEgHkNyxhFcsYnjk5W+bKRwo1kL6tTxf7U3U7Cchp1uw2uvuTzJTF coRabrvfbeXxfTO5VeBoTkTnm91Tu5CZ8ohmiWCulWNqgA9FCBfgPEbZQpzsTN0j EKcP2CyumiVEJ45mrracqDpTR8fKf1TgtAe2NunAEj1Zicn+CpPQXQ+f6yi7u0Ab hcHp3DxX965J8sNJvVq4HWIgSBArqsJc0wVrdxitqrv1Ck80sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtmFDSIeNOd/ySz+bnI7YI9rjR0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNGRmZGVhMmQtYTUzYi0z YTNmLWExOTEtNDhkZDIxNDVhN2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOLdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAcZ9MRZzI8pGjxuxtA69pEJWYpEmmZB+L1CI1oMZqT7Nfh8zEywGgw MDTvMkudyRuklkoJif92wDe5JfOcZJGzwaHfIXahcWTPQJXAkKx2Mpkj07zbJvEx iZY5LMyXst2j/cIua8SABnVzcRPDY+2fAHHJ5U9sXclbDUabuiQhRrRi6p95NM35 6MCyn8QUPQpClZEztlQ9syckxmCOskSDKNbsP6CguCo4J6vbpheFf7JuC60aVFAE J94hzPbIlIPgI99XM7IIMwq5qfjwC7QK6ju623h1ghlb2NVx24QPi1S4M3ux/GCF zP9ShYL9qIYaW2APBxa+WvOhrv395CM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:03 2025 by rpki-client