$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a6b52bfd-dd5d-32f7-a306-0f83074d5aa6.roa File: a6b52bfd-dd5d-32f7-a306-0f83074d5aa6.roa (raw, json) Hash identifier: IWSNiQavJe4vwjvCkjJyqV3bZS6/PuQEEvY5JoM9xpI= Subject key identifier: 47:98:0B:57:22:AE:E4:CA:32:97:00:A4:C1:A7:09:FA:B2:6E:F1:39 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F43285848A13611FBA7755143BAF1BA40 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a6b52bfd-dd5d-32f7-a306-0f83074d5aa6.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 14618 IP address blocks: 136.226.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:11:fb:a7:75:51:43:ba:f1:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=a151743e-269e-489d-9a19-fdb37d6feaa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:47:e2:f0:1b:66:62:6f:d7:31:e7:1a:90:35: 58:f3:e1:c1:58:ae:83:5b:3a:7b:f1:67:69:ff:0d: 67:c4:34:03:6d:2a:45:78:88:8f:9a:d3:50:ff:85: 08:12:92:e2:35:85:f6:af:3a:60:25:7a:79:06:80: 51:f3:f9:9c:ca:6e:62:41:45:67:3a:84:b1:4b:98: 92:10:5f:29:37:d4:c2:d2:38:82:c3:84:9b:cb:ce: eb:e5:6a:a4:28:3b:1f:df:5d:eb:fc:e1:73:64:6d: c8:a1:61:0d:2c:d0:fa:4f:6d:1c:56:ac:c3:82:a5: 44:5b:8b:45:d1:8e:95:cd:d5:2b:32:6d:f0:40:64: da:2f:7d:88:60:b0:b7:0a:39:ab:3b:ea:f8:36:f5: 69:96:83:71:0e:da:43:c6:90:36:68:f6:bd:c9:6b: 1c:2d:fd:91:ab:9a:15:c9:68:28:d4:31:cb:a8:5c: aa:51:ad:6b:be:43:75:24:41:0f:51:35:c3:b7:83: 83:27:a4:ca:c3:1a:f7:10:88:6a:a4:03:13:f7:c4: fd:0d:2a:a1:22:14:47:3c:8d:e3:56:c5:3b:0d:e3: 82:d1:55:5d:4c:a1:43:87:98:53:9f:92:47:94:27: 9a:c6:b3:69:ea:6b:45:bd:de:5b:5c:d9:d3:64:8d: b2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:98:0B:57:22:AE:E4:CA:32:97:00:A4:C1:A7:09:FA:B2:6E:F1:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a6b52bfd-dd5d-32f7-a306-0f83074d5aa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:fb:c0:06:60:3e:5c:ef:8a:fa:79:0d:30:6a:12:3e:b9:55: 88:c9:40:34:ce:d3:dc:e1:c9:43:6e:36:8c:df:af:48:47:d2: b3:3d:a4:9f:f5:f9:0d:75:3c:01:b8:a4:64:13:3b:24:98:23: 04:91:34:80:28:2c:e2:e4:e0:17:82:77:8c:59:6a:47:9e:30: e5:d6:6a:92:c9:5f:b9:8a:18:fc:f3:c8:86:59:06:32:e2:4a: a7:66:09:86:7b:ad:e0:95:a3:1d:d8:fa:f1:52:82:36:3f:b8: 9d:07:c5:b8:53:37:7b:84:2c:46:ca:4d:e3:cd:67:93:56:8e: 95:90:52:27:aa:ea:5e:12:c2:56:46:df:49:f7:74:90:1d:1b: 63:0c:45:52:07:bc:e6:8a:6f:ec:62:20:66:56:75:2f:3b:a1: 45:65:c0:9f:71:a2:e5:38:b2:fa:62:9e:66:40:d6:d0:e6:40: 9f:2f:c1:a6:17:0e:5f:83:a4:fa:9c:37:71:36:18:2e:ef:38: 9f:ef:70:9c:0b:cf:fb:01:c2:b1:d1:19:e5:30:1b:74:17:de: 75:fb:e6:47:a7:d0:98:a6:a5:62:ad:63:da:88:01:ea:30:93: f5:40:28:8f:44:29:61:70:29:fb:bb:53:1c:70:02:2f:14:28: e3:63:f3:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNhH7p3VRQ7rxukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk YTE1MTc0M2UtMjY5ZS00ODlkLTlhMTktZmRiMzdkNmZlYWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0fi8BtmYm/XMecakDVY8+HBWK6DWzp78Wdp /w1nxDQDbSpFeIiPmtNQ/4UIEpLiNYX2rzpgJXp5BoBR8/mcym5iQUVnOoSxS5iS EF8pN9TC0jiCw4Sby87r5WqkKDsf313r/OFzZG3IoWENLND6T20cVqzDgqVEW4tF 0Y6VzdUrMm3wQGTaL32IYLC3CjmrO+r4NvVploNxDtpDxpA2aPa9yWscLf2Rq5oV yWgo1DHLqFyqUa1rvkN1JEEPUTXDt4ODJ6TKwxr3EIhqpAMT98T9DSqhIhRHPI3j VsU7DeOC0VVdTKFDh5hTn5JHlCeaxrNp6mtFvd5bXNnTZI2yVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeYC1ciruTKMpcApMGnCfqybvE5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYTZiNTJiZmQtZGQ1ZC0z MmY3LWEzMDYtMGY4MzA3NGQ1YWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOLcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFP7wAZgPlzvivp5DTBqEj65VYjJQDTO09zhyUNuNozfr0hH0rM9pJ/1 +Q11PAG4pGQTOySYIwSRNIAoLOLk4BeCd4xZakeeMOXWapLJX7mKGPzzyIZZBjLi SqdmCYZ7reCVox3Y+vFSgjY/uJ0HxbhTN3uELEbKTePNZ5NWjpWQUieq6l4SwlZG 30n3dJAdG2MMRVIHvOaKb+xiIGZWdS87oUVlwJ9xouU4svpinmZA1tDmQJ8vwaYX Dl+DpPqcN3E2GC7vOJ/vcJwLz/sBwrHRGeUwG3QX3nX75ken0JimpWKtY9qIAeow k/VAKI9EKWFwKfu7UxxwAi8UKONj85M= -----END CERTIFICATE-----Generated at Fri Mar 14 09:13:22 2025 by rpki-client