$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a38a1364-8201-35d7-b3cf-83ad2b23224a.roa File: a38a1364-8201-35d7-b3cf-83ad2b23224a.roa (raw, json) Hash identifier: 8pgKdUJxThLp2T/rDvWe4waWggbn+a2nxRQkLVLwXAA= Subject key identifier: 20:40:F7:69:98:8E:A7:19:90:8A:8F:DE:27:5D:23:DF:DF:D8:6C:B1 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584894A5E7439EC89FAE80BD1F80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a38a1364-8201-35d7-b3cf-83ad2b23224a.roa Signing time: Sat 18 Jan 2025 02:00:38 +0000 ROA not before: Sat 18 Jan 2025 02:00:38 +0000 ROA not after: Fri 18 Apr 2025 01:00:38 +0000 asID: 53813 IP address blocks: 136.226.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:94:a5:e7:43:9e:c8:9f:ae:80:bd:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jan 18 02:00:38 2025 GMT Not After : Apr 18 01:00:38 2025 GMT Subject: CN=de2159a3-aaf0-4727-9579-0c9948b21311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b7:25:e3:1d:7b:af:18:cb:86:65:5f:e9:5c: 9a:1b:74:e9:ce:68:cd:7e:2a:e7:17:72:ba:2d:84: be:63:85:56:2f:a2:d4:b7:3a:fa:ff:25:84:e1:c1: c4:84:28:38:d4:c3:65:d0:aa:ee:d3:61:dc:4d:f7: c6:d5:dc:4e:7f:79:5b:c6:f0:59:01:5e:d2:bc:fa: b6:42:43:8a:da:7f:db:82:a2:f9:34:1d:7a:98:e0: d7:da:68:ec:6d:3c:15:83:af:6e:f8:cd:12:3e:2d: 9c:c3:20:b0:fc:98:4b:d1:3f:31:0b:c6:d7:47:c7: 65:47:57:0f:d7:c9:ea:de:5a:f5:7a:6e:e3:5d:2a: 22:39:84:4b:be:ab:21:ff:4e:60:88:7e:43:59:a7: 8e:45:22:1b:11:dd:3d:53:19:b9:39:85:55:5b:f0: b1:a7:e5:e1:7d:d8:52:c6:83:bf:82:43:95:fc:dd: d9:69:cf:dd:37:30:21:06:82:65:15:5d:f5:09:6b: 80:8e:9b:df:68:f5:1b:75:db:e8:0c:46:d4:fa:ac: 0f:32:16:cb:d1:0c:69:6f:b2:77:66:a0:29:7f:58: 34:8b:ef:62:5b:0b:b9:22:20:ee:df:e5:26:36:6c: 2a:da:fa:10:79:53:ce:64:34:43:76:48:ee:ba:88: 5f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:40:F7:69:98:8E:A7:19:90:8A:8F:DE:27:5D:23:DF:DF:D8:6C:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a38a1364-8201-35d7-b3cf-83ad2b23224a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:c0:08:2c:5b:7f:a4:14:1d:01:e0:11:a0:7b:eb:3d:8d:51: 25:15:bd:1b:05:2d:31:09:bc:60:4b:55:02:c7:e7:d5:5b:bc: dd:72:5f:95:f7:e7:2c:9d:3c:95:11:e3:a0:23:73:7e:1b:8a: 92:9b:7d:dd:d2:29:c6:0e:3d:4d:28:90:72:21:a2:a9:0f:e0: 5e:75:97:00:92:74:28:f6:09:6c:d4:8d:fd:ba:5e:e5:5a:44: 12:ee:f0:98:c1:67:4a:dc:cb:8a:66:b6:c0:93:9e:ff:b5:ed: 52:c8:04:08:65:ae:c0:b9:07:e1:07:c2:64:6a:f2:44:7d:f2: 75:3d:98:43:4c:f7:80:fa:e6:74:62:07:91:28:3b:6c:e3:65: 0d:76:73:aa:3d:6f:9c:e5:fa:3b:cd:40:2b:96:f2:0c:26:cf: c8:32:54:ac:76:39:41:23:c2:2d:c9:29:77:c8:94:40:9c:bf: 2a:ef:58:3f:be:99:1d:42:86:7c:25:b7:67:e3:7f:e9:40:1d: ac:b9:fd:14:4f:7f:a7:1e:43:09:0b:b1:36:be:31:77:09:f8: 74:f0:26:65:2b:ed:d1:a4:41:66:78:36:bf:7e:c8:be:ea:93: 10:0d:46:2a:f9:2d:20:26:6d:da:ac:b3:4d:62:48:db:0e:d8: df:a3:6e:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiUpedDnsifroC9H4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk ZGUyMTU5YTMtYWFmMC00NzI3LTk1NzktMGM5OTQ4YjIxMzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLcl4x17rxjLhmVf6VyaG3TpzmjNfirnF3K6 LYS+Y4VWL6LUtzr6/yWE4cHEhCg41MNl0Kru02HcTffG1dxOf3lbxvBZAV7SvPq2 QkOK2n/bgqL5NB16mODX2mjsbTwVg69u+M0SPi2cwyCw/JhL0T8xC8bXR8dlR1cP 18nq3lr1em7jXSoiOYRLvqsh/05giH5DWaeORSIbEd09Uxm5OYVVW/Cxp+XhfdhS xoO/gkOV/N3Zac/dNzAhBoJlFV31CWuAjpvfaPUbddvoDEbU+qwPMhbL0Qxpb7J3 ZqApf1g0i+9iWwu5IiDu3+UmNmwq2voQeVPOZDRDdkjuuohfXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBA92mYjqcZkIqP3iddI9/f2GyxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYTM4YTEzNjQtODIwMS0z NWQ3LWIzY2YtODNhZDJiMjMyMjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOLoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHACCxbf6QUHQHgEaB76z2NUSUVvRsFLTEJvGBLVQLH59VbvN1yX5X3 5yydPJUR46Ajc34bipKbfd3SKcYOPU0okHIhoqkP4F51lwCSdCj2CWzUjf26XuVa RBLu8JjBZ0rcy4pmtsCTnv+17VLIBAhlrsC5B+EHwmRq8kR98nU9mENM94D65nRi B5EoO2zjZQ12c6o9b5zl+jvNQCuW8gwmz8gyVKx2OUEjwi3JKXfIlECcvyrvWD++ mR1Chnwlt2fjf+lAHay5/RRPf6ceQwkLsTa+MXcJ+HTwJmUr7dGkQWZ4Nr9+yL7q kxANRir5LSAmbdqss01iSNsO2N+jbuM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:50 2025 by rpki-client