$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa File: c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa (raw, json) Hash identifier: G9KYkD0RNVuxfOiUt9yq2b24WX2PnzM6mthWFVl2Zxk= Subject key identifier: 43:0D:C6:7C:63:B5:E5:D3:FC:45:19:FA:D7:E9:0B:08:43:0F:EE:16 Certificate issuer: /CN=71d08692-7de1-4973-b7ae-5a0397e6b60c Certificate serial: 010D0C9F43285849203C16C39AF954377FD97180 Authority key identifier: B1:8E:91:C4:9C:F2:47:68:BE:22:AA:7E:ED:92:C0:91:4E:BD:F7:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 398803 IP address blocks: 136.175.44.0/22 maxlen: 24 2602:fd08::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/71d08692-7de1-4973-b7ae-5a0397e6b60c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/71d08692-7de1-4973-b7ae-5a0397e6b60c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:16:c3:9a:f9:54:37:7f:d9:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71d08692-7de1-4973-b7ae-5a0397e6b60c Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=5b40fc12-2590-46d9-9d61-bb3c3e8f62a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cf:36:7b:d2:18:8f:71:4b:26:96:05:34:f8: da:d7:cb:35:df:ce:f0:b1:8a:70:7a:25:6a:fc:e5: fa:29:b3:ce:69:e4:d1:dd:ed:28:08:1d:97:68:81: f5:dd:3e:42:56:9a:2a:cc:aa:3d:b6:16:a3:5e:2c: 14:d8:ca:2c:22:f2:c6:db:52:0c:2a:bc:9c:57:8c: 75:c7:b2:54:c6:ee:25:85:71:db:ad:fe:48:0c:fe: fe:f2:23:fd:12:4d:34:23:98:73:eb:fc:01:67:b7: ff:09:06:4c:14:bd:f2:22:20:4a:c5:b2:a0:86:74: 05:27:c5:1a:18:6b:27:f3:28:d5:5f:e0:e3:ca:3e: ea:74:4e:0e:8f:ed:62:06:b7:f4:55:b3:47:1e:b8: be:ff:1e:ce:51:37:3a:8f:d3:6f:7d:4c:e5:76:c3: 27:27:e4:bc:43:98:17:14:51:c0:4c:c5:02:85:22: aa:63:6e:b4:c4:1f:d7:0d:5e:d6:1e:44:a2:e7:2d: bb:5f:7f:5a:cd:bd:96:50:4a:3a:c9:24:87:ff:ed: 45:f3:12:42:f1:c6:1c:4c:85:cf:3d:b8:e0:ba:2b: da:93:ac:f5:dc:d8:aa:e5:e1:30:d8:3c:61:82:41: 51:33:8b:6e:a5:41:11:d3:56:e4:07:4e:a8:38:29: 4f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0D:C6:7C:63:B5:E5:D3:FC:45:19:FA:D7:E9:0B:08:43:0F:EE:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/71d08692-7de1-4973-b7ae-5a0397e6b60c.crl X509v3 Authority Key Identifier: keyid:B1:8E:91:C4:9C:F2:47:68:BE:22:AA:7E:ED:92:C0:91:4E:BD:F7:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c.cer sbgp-ipAddrBlock: critical IPv4: 136.175.44.0/22 IPv6: 2602:fd08::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:f3:6a:b3:67:af:ce:6e:59:11:b4:3c:be:54:51:d3:dd:fa: ae:c3:7b:cf:3b:c1:c6:4d:fe:78:a7:39:74:0a:25:a2:96:49: 25:45:1a:65:76:d3:6c:95:9f:20:ca:a6:7b:f6:df:8e:f6:c8: 0b:f2:8a:7a:1a:d3:cf:68:8d:5e:8a:c6:db:ea:f2:5b:f8:c8: 58:7c:b6:ba:1b:ac:23:41:79:12:e8:63:47:53:f2:2d:67:48: 74:ef:05:32:5a:ce:d3:17:fc:6e:b6:47:bb:e8:7f:ad:9a:85: 0e:6d:1e:5c:6d:3a:34:b1:b2:44:2a:d8:f9:32:cf:4a:5b:70: 07:d0:aa:b6:ef:be:68:39:0c:9f:60:b5:3c:3a:1f:0e:48:3d: 4e:f0:1f:a1:e8:b7:0d:9a:5c:bd:54:e4:4c:3e:31:0a:06:d1: db:78:56:e9:99:ea:13:4c:46:c8:da:7d:cc:65:de:8d:5d:cf: c2:df:07:1b:dc:e3:04:bb:37:66:cd:32:52:7b:68:8e:b4:54: c1:fa:62:3c:81:3e:66:2a:99:9c:5b:d5:84:41:35:af:e7:34: 65:5e:32:9f:87:6a:21:50:bc:95:a3:16:58:97:fc:04:91:10: cc:1a:84:93:db:31:b3:31:18:f6:b7:5e:4f:01:ec:2b:b2:55: 3a:77:38:57 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEkgPBbDmvlUN3/ZcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFkMDg2OTItN2RlMS00OTczLWI3YWUtNWEwMzk3ZTZi NjBjMB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk NWI0MGZjMTItMjU5MC00NmQ5LTlkNjEtYmIzYzNlOGY2MmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjc82e9IYj3FLJpYFNPja18s1387wsYpweiVq /OX6KbPOaeTR3e0oCB2XaIH13T5CVpoqzKo9thajXiwU2MosIvLG21IMKrycV4x1 x7JUxu4lhXHbrf5IDP7+8iP9Ek00I5hz6/wBZ7f/CQZMFL3yIiBKxbKghnQFJ8Ua GGsn8yjVX+Djyj7qdE4Oj+1iBrf0VbNHHri+/x7OUTc6j9NvfUzldsMnJ+S8Q5gX FFHATMUChSKqY260xB/XDV7WHkSi5y27X39azb2WUEo6ySSH/+1F8xJC8cYcTIXP Pbjguivak6z13Niq5eEw2DxhgkFRM4tupUER01bkB06oOClPsQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFEMNxnxjteXT/EUZ+tfpCwhDD+4WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83MWQw ODY5Mi03ZGUxLTQ5NzMtYjdhZS01YTAzOTdlNmI2MGMvYzNjZmJhYmItNDA1NS0z ZDhmLTg3ZTktMzM5YTIyZjQ2MzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzFkMDg2OTItN2RlMS00OTczLWI3 YWUtNWEwMzk3ZTZiNjBjLzcxZDA4NjkyLTdkZTEtNDk3My1iN2FlLTVhMDM5N2U2 YjYwYy5jcmwwHwYDVR0jBBgwFoAUsY6RxJzyR2i+Iqp+7ZLAkU6999swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83MWQwODY5Mi03ZGUxLTQ5NzMtYjdhZS01YTAz OTdlNmI2MGMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCiK8sMA4E AgACMAgDBgQmAv0IADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCM82qzZ6/OblkRtDy+VFHT3fquw3vPO8HG Tf54pzl0CiWilkklRRpldtNslZ8gyqZ79t+O9sgL8op6GtPPaI1eisbb6vJb+MhY fLa6G6wjQXkS6GNHU/ItZ0h07wUyWs7TF/xutke76H+tmoUObR5cbTo0sbJEKtj5 Ms9KW3AH0Kq2775oOQyfYLU8Oh8OSD1O8B+h6LcNmly9VORMPjEKBtHbeFbpmeoT TEbI2n3MZd6NXc/C3wcb3OMEuzdmzTJSe2iOtFTB+mI8gT5mKpmcW9WEQTWv5zRl XjKfh2ohULyVoxZYl/wEkRDMGoST2zGzMRj2t15PAewrslU6dzhX -----END CERTIFICATE-----Generated at Fri Apr 4 16:38:33 2025 by rpki-client