$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/5d3f40c4-8a58-3671-b4db-9f752c8e8848.roa File: 5d3f40c4-8a58-3671-b4db-9f752c8e8848.roa (raw, json) Hash identifier: ylnzSIeQDesP8FIBohxtFfLA5T5VP7XJx+njNTN2GBk= Subject key identifier: 70:4F:1B:47:89:CF:59:5E:74:6D:50:48:7B:24:AB:A5:4F:C1:F1:26 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F43285848CC7B9C984F3F7D79F8226100 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/5d3f40c4-8a58-3671-b4db-9f752c8e8848.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 11090 IP address blocks: 216.137.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:9c:98:4f:3f:7d:79:f8:22:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=40d65fca-da6a-4813-88bb-dc6cbc809193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5d:5c:13:09:c8:95:5b:03:92:93:8b:a7:d3: b6:3b:92:da:4a:9d:e6:ce:eb:e0:67:fa:89:22:80: 5d:65:a1:b4:4a:56:80:ed:d2:5f:55:c6:fd:36:c5: ac:df:ef:9f:0b:1f:2e:44:e2:3a:12:10:0c:1c:3c: 9c:43:a4:ae:98:1d:98:94:63:b5:71:5b:fe:dc:8d: 1b:cd:e8:bb:ce:e0:82:5e:21:ed:db:12:e7:d1:de: e1:9f:c2:3a:2b:52:40:29:f2:7b:2a:a7:d2:b0:1f: ff:72:07:e1:32:c5:9e:c9:e7:75:5b:96:81:13:0f: 02:34:ef:8c:f9:93:8e:37:be:fa:48:44:b0:61:ba: d1:ae:40:28:9f:2b:3a:52:6f:05:97:fd:94:ce:74: 03:39:e8:9d:8c:1f:4a:39:f8:46:b3:2f:5a:5d:60: a8:2e:68:0b:61:af:56:ba:ab:d4:48:54:7e:66:65: 43:b2:de:f5:8a:bd:8c:52:17:d6:65:85:90:78:e8: 1b:7f:3d:b0:91:9e:b8:35:ae:2a:40:67:64:7b:bd: fa:66:f8:05:ce:69:fe:9b:53:85:6a:30:94:f3:81: 43:8c:67:73:b7:dd:ef:3c:68:d4:95:d2:29:38:eb: 26:fe:e8:53:25:ff:05:37:fd:b5:bd:c0:c6:73:22: b9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4F:1B:47:89:CF:59:5E:74:6D:50:48:7B:24:AB:A5:4F:C1:F1:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/5d3f40c4-8a58-3671-b4db-9f752c8e8848.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.137.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:7d:d2:67:2b:62:90:7b:b3:02:7b:d8:9c:1c:ce:46:63:10: 3e:f1:f7:66:f9:80:b8:09:0d:1d:6c:9c:4a:9a:99:a1:e7:92: 46:fe:66:af:d5:76:1e:e7:e9:6f:98:4a:02:c5:60:e3:c4:cf: 04:39:aa:82:3d:e2:9c:f1:3d:0c:81:7b:d5:a1:6b:f4:c4:19: af:0c:9f:46:a5:38:57:38:c1:f5:fd:cd:c0:ac:03:92:36:3f: be:c7:da:b8:32:51:2d:bf:48:4c:4c:e7:18:be:ed:0f:fa:b1: 63:18:ce:8d:3b:08:aa:10:6c:c6:26:49:64:77:5f:6f:75:51: b6:09:12:08:48:f2:24:15:d9:e8:55:19:39:cc:78:bc:45:3c: ed:70:0b:80:f5:5f:d7:ff:12:40:31:46:86:e2:6e:3c:e4:1c: 4d:e0:32:70:36:98:77:f7:f7:dd:80:c6:60:b5:71:22:4b:ce: 6d:a4:ad:ed:b2:a2:98:3a:ff:69:dd:47:41:7e:b6:40:a6:fd: 9c:05:3f:53:68:4f:ae:82:9c:d0:fc:2a:d2:da:2a:13:b9:96: db:13:db:cb:c8:e1:7f:5b:1c:f1:d4:36:d0:f6:5a:7b:a3:40: 35:55:77:50:34:47:37:61:76:7d:4b:78:cf:73:a4:69:de:6e: 2e:1f:95:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe5yYTz99efgiYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk NDBkNjVmY2EtZGE2YS00ODEzLTg4YmItZGM2Y2JjODA5MTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV1cEwnIlVsDkpOLp9O2O5LaSp3mzuvgZ/qJ IoBdZaG0SlaA7dJfVcb9NsWs3++fCx8uROI6EhAMHDycQ6SumB2YlGO1cVv+3I0b zei7zuCCXiHt2xLn0d7hn8I6K1JAKfJ7KqfSsB//cgfhMsWeyed1W5aBEw8CNO+M +ZOON776SESwYbrRrkAonys6Um8Fl/2UznQDOeidjB9KOfhGsy9aXWCoLmgLYa9W uqvUSFR+ZmVDst71ir2MUhfWZYWQeOgbfz2wkZ64Na4qQGdke736ZvgFzmn+m1OF ajCU84FDjGdzt93vPGjUldIpOOsm/uhTJf8FN/21vcDGcyK5DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBPG0eJz1ledG1QSHskq6VPwfEmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNWQzZjQwYzQtOGE1OC0z NjcxLWI0ZGItOWY3NTJjOGU4ODQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2In0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABt90mcrYpB7swJ72JwczkZjED7x92b5gLgJDR1snEqamaHnkkb+Zq/V dh7n6W+YSgLFYOPEzwQ5qoI94pzxPQyBe9Wha/TEGa8Mn0alOFc4wfX9zcCsA5I2 P77H2rgyUS2/SExM5xi+7Q/6sWMYzo07CKoQbMYmSWR3X291UbYJEghI8iQV2ehV GTnMeLxFPO1wC4D1X9f/EkAxRobibjzkHE3gMnA2mHf3992AxmC1cSJLzm2kre2y opg6/2ndR0F+tkCm/ZwFP1NoT66CnND8KtLaKhO5ltsT28vI4X9bHPHUNtD2Wnuj QDVVd1A0Rzdhdn1LeM9zpGnebi4flWY= -----END CERTIFICATE-----Generated at Fri Mar 14 11:05:43 2025 by rpki-client