$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa File: bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa (raw, json) Hash identifier: ztedpZOSfzAK7F7VqPxlsHHmPOAqF6L78bZFJmlcbuE= Subject key identifier: 6A:AC:E1:B4:5C:16:DF:B6:E4:37:C2:BD:7A:06:91:A8:7C:AE:BA:06 Certificate issuer: /CN=344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e Certificate serial: 010D0C9F43285848D0ABB631D3AC3497D8A7DF40 Authority key identifier: D2:45:C5:55:D1:22:08:EA:2C:9E:16:94:D7:69:27:DF:D6:27:3E:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 55076 IP address blocks: 198.37.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:b6:31:d3:ac:34:97:d8:a7:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=d4b73cdb-1c13-467b-83f2-4d541ad39ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c1:3b:ed:46:08:c9:c7:ee:7c:70:ed:29:f3: 2e:35:f4:1c:65:e6:8f:bb:0d:c6:b0:a2:02:fa:cc: 80:7e:71:69:7d:f3:f8:fc:8d:71:dc:d0:c9:5e:8f: 94:da:bb:d1:d3:60:01:2b:7d:b7:54:5d:5e:e2:22: 4a:c8:a7:3e:60:e8:81:1e:8f:82:4b:d7:ba:a1:bb: 44:44:bd:9f:eb:2b:fc:8f:e9:a1:9b:7a:86:3d:35: 2c:75:9a:e7:8d:a2:a4:ea:7c:77:1f:ab:6a:45:49: 0c:6b:32:6f:a2:db:33:bf:12:55:bd:eb:2a:b6:b7: 76:00:d0:0b:73:17:26:e9:ae:20:97:37:73:a3:db: 0f:3f:cf:b9:d4:77:c8:79:1b:79:bd:00:d8:8c:09: fe:d3:45:db:07:fb:b4:bc:e1:25:ce:b4:6e:59:43: 3e:95:a0:25:91:32:1a:a5:c9:d3:77:c5:e7:b5:4a: 55:1b:17:6e:c9:2f:78:b2:50:a3:4b:b6:d8:3d:ba: ea:9a:bc:4d:b9:76:68:46:ff:18:73:3b:26:df:1d: ce:50:0e:60:e7:f4:dd:23:d6:db:9a:de:40:5e:4b: fd:40:9e:91:27:6c:c1:47:a2:d2:f5:25:37:77:23: ae:f4:d7:95:8b:bc:7b:89:bb:98:42:44:6a:d3:20: c8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:AC:E1:B4:5C:16:DF:B6:E4:37:C2:BD:7A:06:91:A8:7C:AE:BA:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/bf6594f7-1c16-36b8-bcc6-6f815b2ec6b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.crl X509v3 Authority Key Identifier: keyid:D2:45:C5:55:D1:22:08:EA:2C:9E:16:94:D7:69:27:DF:D6:27:3E:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer sbgp-ipAddrBlock: critical IPv4: 198.37.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:eb:52:78:49:37:7e:7c:1f:04:55:1a:ae:6e:14:77:21:5d: 0d:e6:2e:58:ee:49:f0:2f:57:08:77:e4:31:73:4f:d6:80:5b: ce:ba:f0:a5:e5:9a:8b:c6:52:4b:19:47:93:b2:dd:ce:47:b3: 26:9f:a7:87:36:38:8b:4e:79:d7:8e:5a:86:bb:49:ef:ed:aa: fd:2c:1a:78:f0:eb:1a:32:d5:10:f0:86:68:5a:98:72:87:8d: 2d:19:37:3b:f7:85:6d:8f:86:62:38:c6:4a:c4:e7:de:67:02: 0a:79:ac:73:73:64:3a:c4:ad:a5:5a:4f:ed:e5:a3:8e:28:bf: 97:b6:8e:cf:9a:d6:15:e0:62:0c:28:70:e7:22:c1:94:6a:03: a4:fc:7f:39:ab:6b:91:da:a7:a6:78:dc:a8:1c:fe:d9:4f:28: 59:10:6d:1b:af:75:20:2e:0e:e6:20:e0:a7:41:1c:fb:bb:1d: da:26:c2:29:87:cd:e1:18:93:f3:21:bc:b9:9b:2c:85:a9:5d: ec:db:91:f5:bc:a5:42:08:cf:3d:8b:ee:c5:3e:97:89:35:fd: 5c:c4:d5:67:3a:45:c0:41:06:18:2f:9d:5e:4d:09:87:68:50: 3e:c3:31:6a:23:19:18:a9:f3:86:ba:7e:50:86:df:2c:12:6b: 5d:db:09:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq7Yx06w0l9in30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ0YzY3MDQtYjNiYi00ZWQ4LWI2ZjctYjY1NmUyZmI5 ZTdlMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk ZDRiNzNjZGItMWMxMy00NjdiLTgzZjItNGQ1NDFhZDM5YWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcE77UYIycfufHDtKfMuNfQcZeaPuw3GsKIC +syAfnFpffP4/I1x3NDJXo+U2rvR02ABK323VF1e4iJKyKc+YOiBHo+CS9e6obtE RL2f6yv8j+mhm3qGPTUsdZrnjaKk6nx3H6tqRUkMazJvotszvxJVvesqtrd2ANAL cxcm6a4glzdzo9sPP8+51HfIeRt5vQDYjAn+00XbB/u0vOElzrRuWUM+laAlkTIa pcnTd8XntUpVGxduyS94slCjS7bYPbrqmrxNuXZoRv8Yczsm3x3OUA5g5/TdI9bb mt5AXkv9QJ6RJ2zBR6LS9SU3dyOu9NeVi7x7ibuYQkRq0yDIAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqs4bRcFt+25DfCvXoGkah8rroGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNDRj NjcwNC1iM2JiLTRlZDgtYjZmNy1iNjU2ZTJmYjllN2UvYmY2NTk0ZjctMWMxNi0z NmI4LWJjYzYtNmY4MTViMmVjNmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzQ0YzY3MDQtYjNiYi00ZWQ4LWI2 ZjctYjY1NmUyZmI5ZTdlLzM0NGM2NzA0LWIzYmItNGVkOC1iNmY3LWI2NTZlMmZi OWU3ZS5jcmwwHwYDVR0jBBgwFoAU0kXFVdEiCOosnhaU12kn39YnPlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNDRjNjcwNC1iM2JiLTRlZDgtYjZmNy1iNjU2 ZTJmYjllN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxiWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrrUnhJN358HwRVGq5uFHchXQ3mLljuSfAvVwh35DFzT9aAW8668KXl movGUksZR5Oy3c5Hsyafp4c2OItOedeOWoa7Se/tqv0sGnjw6xoy1RDwhmhamHKH jS0ZNzv3hW2PhmI4xkrE595nAgp5rHNzZDrEraVaT+3lo44ov5e2js+a1hXgYgwo cOciwZRqA6T8fzmra5Hap6Z43Kgc/tlPKFkQbRuvdSAuDuYg4KdBHPu7HdomwimH zeEYk/MhvLmbLIWpXezbkfW8pUIIzz2L7sU+l4k1/VzE1Wc6RcBBBhgvnV5NCYdo UD7DMWojGRip84a6flCG3ywSa13bCQY= -----END CERTIFICATE-----Generated at Fri Apr 11 21:09:08 2025 by rpki-client