$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/d5db2009-1fe6-3a7b-a729-f42e9b7b1c26.roa File: d5db2009-1fe6-3a7b-a729-f42e9b7b1c26.roa (raw, json) Hash identifier: 4ymh7mgncTkPKsjiPxkcPx7eaDZTVVa4SisPb1AolHU= Subject key identifier: 16:B3:FA:3D:72:40:C5:A0:5F:91:27:A3:37:A2:19:D6:1A:AE:44:33 Certificate issuer: /CN=3837995b-cc80-4e23-af07-cd422d0d37a9 Certificate serial: 010D0C9F43285849088195046CF7021A50C449C0 Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/d5db2009-1fe6-3a7b-a729-f42e9b7b1c26.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 394946 IP address blocks: 169.145.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:95:04:6c:f7:02:1a:50:c4:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=11c66e46-6ab3-4353-98e6-a23424ec69dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:36:bc:f8:45:50:f1:2f:eb:9c:5a:87:1d:09: fa:95:72:c4:f5:4d:b1:fc:30:ff:c0:14:c1:bb:77: 72:8c:7b:08:ad:59:ea:32:96:29:1f:39:e4:05:ea: 64:37:f8:74:18:3f:7a:2b:48:32:32:80:ff:43:73: cf:b8:5f:c7:94:61:5f:10:03:95:e3:09:b4:d0:9f: d5:b2:a0:7a:04:1a:1f:08:77:57:e1:97:08:a0:5c: c0:c7:05:1e:e9:b3:6e:90:38:4e:17:d6:d4:3f:35: d0:2f:be:3e:3e:3c:59:84:24:75:ac:d1:eb:92:58: 87:38:89:9a:9c:1c:07:5a:d1:50:d9:95:47:81:99: d8:07:b1:e2:23:d7:36:36:fa:fe:1e:38:67:f2:d6: cc:5b:47:65:20:ce:75:88:32:5e:32:be:c8:6f:88: bd:db:94:e9:a2:d8:f8:2b:66:cf:da:87:f6:90:ad: 59:fc:b6:28:17:8f:ba:6e:14:1b:66:aa:41:19:c7: ac:7b:04:89:2e:25:e8:5e:5a:c4:00:25:b9:bf:4e: d3:d6:cf:b1:67:57:f4:b8:97:1b:64:46:80:d8:38: 84:76:42:5a:45:b5:eb:40:be:9d:dd:2e:3d:5e:65: 34:86:1c:1c:85:72:84:99:d8:19:d7:7f:18:1e:56: 71:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B3:FA:3D:72:40:C5:A0:5F:91:27:A3:37:A2:19:D6:1A:AE:44:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/d5db2009-1fe6-3a7b-a729-f42e9b7b1c26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl X509v3 Authority Key Identifier: keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer sbgp-ipAddrBlock: critical IPv4: 169.145.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:7a:cf:88:b7:ce:2e:24:46:89:47:ef:45:48:cc:43:3d:5f: cb:c9:65:11:bc:64:ff:0a:56:b9:92:07:66:87:d5:62:00:df: 55:91:cd:32:e2:a7:a7:f1:ab:cf:91:13:1b:73:7f:46:5e:20: c5:ba:da:ed:e0:59:24:c9:1b:e8:f4:00:dc:34:62:59:68:95: c4:24:5f:7e:17:00:a0:13:55:5d:d4:01:60:cb:c0:3a:83:17: 58:b5:28:7c:ba:a3:ac:2a:f8:c7:67:82:e6:69:f4:85:df:c5: f4:07:ee:80:8d:98:6f:45:57:43:72:ea:9e:6e:42:e5:65:43: 13:5d:f5:b6:33:cd:c9:c1:38:de:83:80:3c:9b:19:d2:07:fb: 16:9d:0c:65:dc:3f:f4:25:fd:20:80:e9:c0:47:62:1f:47:91: 5a:80:13:e7:d6:85:2c:e1:7e:51:87:fa:91:7d:48:f0:79:b5: 1f:a4:d1:db:f7:06:db:b2:ac:c0:ad:fb:71:f1:5f:e1:30:f0: 11:f1:56:20:83:11:dd:85:09:c7:a4:ed:3a:87:51:23:3b:51: 66:c1:73:be:90:04:a8:23:1e:12:83:2a:1c:9a:3d:30:31:dd: 9a:1e:bb:fb:08:9c:76:83:45:8c:e0:fd:43:5a:2a:25:7c:bd: ba:2a:6d:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgZUEbPcCGlDEScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzgzNzk5NWItY2M4MC00ZTIzLWFmMDctY2Q0MjJkMGQz N2E5MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MTFjNjZlNDYtNmFiMy00MzUzLTk4ZTYtYTIzNDI0ZWM2OWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTa8+EVQ8S/rnFqHHQn6lXLE9U2x/DD/wBTB u3dyjHsIrVnqMpYpHznkBepkN/h0GD96K0gyMoD/Q3PPuF/HlGFfEAOV4wm00J/V sqB6BBofCHdX4ZcIoFzAxwUe6bNukDhOF9bUPzXQL74+PjxZhCR1rNHrkliHOIma nBwHWtFQ2ZVHgZnYB7HiI9c2Nvr+Hjhn8tbMW0dlIM51iDJeMr7Ib4i925Tpotj4 K2bP2of2kK1Z/LYoF4+6bhQbZqpBGcesewSJLiXoXlrEACW5v07T1s+xZ1f0uJcb ZEaA2DiEdkJaRbXrQL6d3S49XmU0hhwchXKEmdgZ138YHlZxCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaz+j1yQMWgX5EnozeiGdYarkQzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zODM3 OTk1Yi1jYzgwLTRlMjMtYWYwNy1jZDQyMmQwZDM3YTkvZDVkYjIwMDktMWZlNi0z YTdiLWE3MjktZjQyZTliN2IxYzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzgzNzk5NWItY2M4MC00ZTIzLWFm MDctY2Q0MjJkMGQzN2E5LzM4Mzc5OTViLWNjODAtNGUyMy1hZjA3LWNkNDIyZDBk MzdhOS5jcmwwHwYDVR0jBBgwFoAUTaXny8du945GEkC7oBxE2P5AZ0AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zODM3OTk1Yi1jYzgwLTRlMjMtYWYwNy1jZDQy MmQwZDM3YTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqZGIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALR6z4i3zi4kRolH70VIzEM9X8vJZRG8ZP8KVrmSB2aH1WIA31WRzTLi p6fxq8+RExtzf0ZeIMW62u3gWSTJG+j0ANw0YllolcQkX34XAKATVV3UAWDLwDqD F1i1KHy6o6wq+MdnguZp9IXfxfQH7oCNmG9FV0Ny6p5uQuVlQxNd9bYzzcnBON6D gDybGdIH+xadDGXcP/Ql/SCA6cBHYh9HkVqAE+fWhSzhflGH+pF9SPB5tR+k0dv3 BtuyrMCt+3HxX+Ew8BHxViCDEd2FCcek7TqHUSM7UWbBc76QBKgjHhKDKhyaPTAx 3Zoeu/sInHaDRYzg/UNaKiV8vboqbfA= -----END CERTIFICATE-----Generated at Sat Apr 12 13:32:40 2025 by rpki-client