$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/ea2e32e0-8b33-3c5d-b479-68b0a2ceec2d.roa File: ea2e32e0-8b33-3c5d-b479-68b0a2ceec2d.roa (raw, json) Hash identifier: w3McCsdgjBS0S76waCzgnwfq6h+OJXLMZT54IEwuUM4= Subject key identifier: CA:BA:BA:C9:03:BE:B6:CB:EF:1B:67:85:3C:6A:34:DD:06:8F:30:2D Certificate issuer: /CN=41b3b885-79da-40ed-ab0b-ce4a30f770db Certificate serial: 010D0C9F4328584917DC242FCFCC8AE788C71C88 Authority key identifier: D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/ea2e32e0-8b33-3c5d-b479-68b0a2ceec2d.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 3356 IP address blocks: 192.136.176.0/20 maxlen: 24 204.10.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:24:2f:cf:cc:8a:e7:88:c7:1c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41b3b885-79da-40ed-ab0b-ce4a30f770db Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=087a0f87-186e-49e6-8953-b406eed9f036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:df:69:08:d6:1f:41:6c:98:b7:17:45:d4:4d: 23:0c:f2:7e:89:37:b0:0b:52:61:e4:e0:b9:f9:ba: 06:a7:be:51:f2:ac:12:d5:c9:ba:d6:de:7d:08:b1: d5:02:f7:8a:f5:f3:1c:0a:15:1f:10:b9:f0:1b:f9: 9b:1b:07:f4:86:0e:4a:76:41:99:a0:77:06:e5:69: aa:2e:3e:a1:aa:46:1c:1c:c9:3a:7d:bf:e8:0e:6f: 4c:7f:08:13:4f:8e:a5:e3:8b:36:fe:5a:65:6b:4e: 47:e1:8f:36:68:08:06:79:23:a5:19:74:64:8e:02: ce:85:23:39:a4:ea:6a:7f:ce:e0:a7:a5:a4:55:1d: dc:ad:c0:66:f6:4f:0b:55:c8:00:2b:b5:9d:ec:32: 82:a7:07:49:5d:da:9d:51:a7:12:20:a2:af:c1:53: 79:e4:ef:42:5b:2d:c0:74:0d:a1:c7:f9:5a:06:01: b4:79:d6:01:45:1c:17:a1:bf:5f:9a:c6:4d:c0:85: 30:d1:94:ba:25:17:b4:04:7e:6d:6c:cf:81:9a:24: b9:0c:b6:88:43:13:5d:ba:62:a1:44:f4:b8:3e:69: 15:dd:3a:8d:e6:2b:49:2a:75:8d:d4:a8:38:7a:67: 8f:75:b3:db:a1:64:27:47:e9:a0:a7:09:b0:69:be: 00:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BA:BA:C9:03:BE:B6:CB:EF:1B:67:85:3C:6A:34:DD:06:8F:30:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/ea2e32e0-8b33-3c5d-b479-68b0a2ceec2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl X509v3 Authority Key Identifier: keyid:D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer sbgp-ipAddrBlock: critical IPv4: 192.136.176.0/20 204.10.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:e6:b0:e9:02:99:21:ed:8d:04:3d:35:fc:35:7c:cb:d4:74: f3:a9:8b:df:64:de:0f:36:43:9e:ad:8e:b7:56:d6:85:39:44: 36:22:e8:59:3f:a4:7f:49:54:4d:9d:7f:11:8f:3b:b3:99:3d: cd:22:64:41:83:82:74:f0:de:fe:b4:bb:9e:e1:2d:5f:52:dc: b0:be:7a:0e:9a:ff:60:d7:72:29:75:83:df:ec:f0:23:44:28: 27:90:1e:4b:38:04:86:cf:93:87:a3:88:00:fe:4f:64:bf:29: 98:7f:b8:f6:ee:40:b8:7a:eb:99:8e:9b:f7:eb:31:79:43:78: ad:71:6a:9b:a7:63:2b:d8:99:01:ce:6b:3a:ae:4c:60:f4:d1: 24:e7:59:8a:d8:79:43:d5:cf:36:2b:ca:91:a7:95:20:0a:54: 45:f7:56:f7:55:4e:44:d6:aa:70:0a:48:aa:79:d4:ab:04:1b: 3f:23:bc:02:9d:31:ba:8b:35:9a:88:5e:59:22:c1:b9:10:82: c6:3b:07:80:fb:84:3a:a7:01:34:06:77:11:a6:5e:1e:6a:85: f3:20:d1:3d:b7:fc:28:ee:f2:68:5b:2f:ff:ea:56:0c:9b:22: c6:0d:25:9f:9c:f8:b9:5a:2b:19:0c:04:ad:71:67:0d:34:8b: e3:45:01:84 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkX3CQvz8yK54jHHIgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFiM2I4ODUtNzlkYS00MGVkLWFiMGItY2U0YTMwZjc3 MGRiMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk MDg3YTBmODctMTg2ZS00OWU2LTg5NTMtYjQwNmVlZDlmMDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN9pCNYfQWyYtxdF1E0jDPJ+iTewC1Jh5OC5 +boGp75R8qwS1cm61t59CLHVAveK9fMcChUfELnwG/mbGwf0hg5KdkGZoHcG5Wmq Lj6hqkYcHMk6fb/oDm9MfwgTT46l44s2/lpla05H4Y82aAgGeSOlGXRkjgLOhSM5 pOpqf87gp6WkVR3crcBm9k8LVcgAK7Wd7DKCpwdJXdqdUacSIKKvwVN55O9CWy3A dA2hx/laBgG0edYBRRwXob9fmsZNwIUw0ZS6JRe0BH5tbM+BmiS5DLaIQxNdumKh RPS4PmkV3TqN5itJKnWN1Kg4emePdbPboWQnR+mgpwmwab4AwQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMq6uskDvrbL7xtnhTxqNN0GjzAtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MWIz Yjg4NS03OWRhLTQwZWQtYWIwYi1jZTRhMzBmNzcwZGIvZWEyZTMyZTAtOGIzMy0z YzVkLWI0NzktNjhiMGEyY2VlYzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDFiM2I4ODUtNzlkYS00MGVkLWFi MGItY2U0YTMwZjc3MGRiLzQxYjNiODg1LTc5ZGEtNDBlZC1hYjBiLWNlNGEzMGY3 NzBkYi5jcmwwHwYDVR0jBBgwFoAU0IYoSmXaLSFCYScW7q5E9ynm2/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MWIzYjg4NS03OWRhLTQwZWQtYWIwYi1jZTRh MzBmNzcwZGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEwIiwAwQC zAosMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAADmsOkCmSHtjQQ9Nfw1fMvUdPOpi99k3g82Q56tjrdW1oU5 RDYi6Fk/pH9JVE2dfxGPO7OZPc0iZEGDgnTw3v60u57hLV9S3LC+eg6a/2DXcil1 g9/s8CNEKCeQHks4BIbPk4ejiAD+T2S/KZh/uPbuQLh665mOm/frMXlDeK1xapun YyvYmQHOazquTGD00STnWYrYeUPVzzYrypGnlSAKVEX3VvdVTkTWqnAKSKp51KsE Gz8jvAKdMbqLNZqIXlkiwbkQgsY7B4D7hDqnATQGdxGmXh5qhfMg0T23/Cju8mhb L//qVgybIsYNJZ+c+LlaKxkMBK1xZw00i+NFAYQ= -----END CERTIFICATE-----Generated at Fri Mar 14 10:47:53 2025 by rpki-client