$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b2be8a68-693b-3abf-82e3-e543875ef412.roa File: b2be8a68-693b-3abf-82e3-e543875ef412.roa (raw, json) Hash identifier: 3mb2vqJRly2Y9P0ClohKvE8vtgPW7Op1WjKIXyA9tlM= Subject key identifier: 3E:60:27:71:9A:45:3D:37:5E:12:E0:AF:AE:DC:95:25:60:C3:07:61 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F432858488280859F7E20AC8DB39B1B00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b2be8a68-693b-3abf-82e3-e543875ef412.roa Signing time: Sat 11 Jan 2025 14:00:52 +0000 ROA not before: Sat 11 Jan 2025 14:00:52 +0000 ROA not after: Fri 11 Apr 2025 13:00:52 +0000 asID: 53813 IP address blocks: 136.226.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:82:80:85:9f:7e:20:ac:8d:b3:9b:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jan 11 14:00:52 2025 GMT Not After : Apr 11 13:00:52 2025 GMT Subject: CN=c3faed48-3e76-416e-94db-6f71f590b136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:03:c9:41:32:0b:35:cd:3f:c4:5b:4d:ce:bc: db:16:80:db:9e:12:b0:6c:07:9b:67:97:e6:8e:4a: ec:b4:2f:7c:1e:03:86:6e:28:fd:22:b5:ff:29:90: a4:db:61:33:d4:3b:3e:97:0c:90:c1:c4:16:05:30: c1:31:a2:42:48:e6:3f:31:ad:7d:73:cc:ef:f5:f9: 6f:cf:ac:ea:1b:9d:f0:e0:f4:64:0f:3f:b1:b6:b0: a8:9f:52:45:6b:42:27:2f:88:01:4b:22:a6:aa:87: 42:2b:22:c0:02:a5:f7:20:b5:6f:ba:dc:98:a7:9f: ec:31:6f:ab:a5:5b:b9:a7:8b:d9:60:57:26:58:e0: 94:ad:b4:8a:2d:f5:bd:95:09:bb:74:84:1f:17:f6: 2c:5c:42:31:09:59:d3:21:ec:93:41:61:fe:75:e9: 41:a7:e0:e5:d0:4b:a5:d8:a0:39:5b:be:b1:c2:c2: 00:81:55:80:26:f3:71:80:93:44:4c:18:3b:d4:42: 06:01:bc:ae:4d:a7:aa:e4:b2:c3:a2:20:64:06:a9: 2a:a5:5e:7e:56:c6:f8:44:1b:ea:ea:9e:5c:fb:fa: 97:fb:94:a0:e7:ac:1f:bc:94:23:b5:25:8b:18:a8: 43:12:71:6a:8d:1e:9c:28:df:5a:b0:3f:65:fc:87: 28:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:60:27:71:9A:45:3D:37:5E:12:E0:AF:AE:DC:95:25:60:C3:07:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b2be8a68-693b-3abf-82e3-e543875ef412.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:94:5a:53:2a:5b:a8:ef:a8:e5:9b:2f:df:a3:73:07:ee:2e: 53:de:59:ea:25:15:3a:60:39:33:15:c6:d2:80:68:a5:cd:29: 15:0d:56:0e:b7:d8:18:99:82:48:87:4c:3f:71:58:cc:a6:2f: 5c:0f:df:3b:9e:b8:1a:ad:bf:f0:67:91:d1:fc:b4:37:9a:4f: b4:df:be:7c:bd:bf:78:70:d2:a0:9e:88:62:26:ed:bb:55:49: dc:e0:8d:4f:45:ab:43:44:e4:4d:0a:93:98:b8:16:cd:35:e3: 04:79:37:72:4a:01:18:6a:7d:0a:4e:34:33:ac:3e:69:fc:6c: a1:44:7c:db:b4:90:3e:5e:ae:c7:00:0c:6f:40:cf:2b:b3:f1: c3:4d:e7:42:c4:02:86:c6:42:34:a1:9d:3a:77:a5:a7:e4:23: 7f:0d:bc:16:ea:c9:8e:97:4c:33:90:74:0f:22:e2:6e:af:ee: 24:6b:8a:fd:52:e0:31:a3:c5:96:01:5e:f9:63:b8:4c:04:c0: 34:36:06:cf:ad:f1:55:24:16:ec:9e:33:ce:88:8e:7f:b1:89: 06:7a:04:67:1c:97:5f:c0:2f:22:de:52:9f:a3:7a:3b:07:b0: 47:b2:44:7e:ec:9e:db:25:3f:3a:5c:7b:1b:dd:88:3e:e5:2e: ee:4c:cd:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgIWffiCsjbObGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk YzNmYWVkNDgtM2U3Ni00MTZlLTk0ZGItNmY3MWY1OTBiMTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQPJQTILNc0/xFtNzrzbFoDbnhKwbAebZ5fm jkrstC98HgOGbij9IrX/KZCk22Ez1Ds+lwyQwcQWBTDBMaJCSOY/Ma19c8zv9flv z6zqG53w4PRkDz+xtrCon1JFa0InL4gBSyKmqodCKyLAAqX3ILVvutyYp5/sMW+r pVu5p4vZYFcmWOCUrbSKLfW9lQm7dIQfF/YsXEIxCVnTIeyTQWH+delBp+Dl0Eul 2KA5W76xwsIAgVWAJvNxgJNETBg71EIGAbyuTaeq5LLDoiBkBqkqpV5+Vsb4RBvq 6p5c+/qX+5Sg56wfvJQjtSWLGKhDEnFqjR6cKN9asD9l/IcoCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5gJ3GaRT03XhLgr67clSVgwwdhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYjJiZThhNjgtNjkzYi0z YWJmLTgyZTMtZTU0Mzg3NWVmNDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSUWlMqW6jvqOWbL9+jcwfuLlPeWeolFTpgOTMVxtKAaKXNKRUNVg63 2BiZgkiHTD9xWMymL1wP3zueuBqtv/BnkdH8tDeaT7Tfvny9v3hw0qCeiGIm7btV SdzgjU9Fq0NE5E0Kk5i4Fs014wR5N3JKARhqfQpONDOsPmn8bKFEfNu0kD5erscA DG9Azyuz8cNN50LEAobGQjShnTp3pafkI38NvBbqyY6XTDOQdA8i4m6v7iRriv1S 4DGjxZYBXvljuEwEwDQ2Bs+t8VUkFuyeM86Ijn+xiQZ6BGccl1/ALyLeUp+jejsH sEeyRH7sntslPzpcexvdiD7lLu5MzVQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:19 2025 by rpki-client