$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/cb2313f0-298a-3e14-976e-8f20dfb6c43c.roa File: cb2313f0-298a-3e14-976e-8f20dfb6c43c.roa (raw, json) Hash identifier: QHx+Ndtqq26Qbt0VszNeg+7ykNW8ocTgVUIIkA2OD6k= Subject key identifier: 59:EB:A6:50:79:ED:A3:54:F7:43:6D:48:36:DC:65:0A:05:3B:4F:B3 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F43285848CC7B9D05C8B4A1C75CF4596C Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/cb2313f0-298a-3e14-976e-8f20dfb6c43c.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 11090 IP address blocks: 216.137.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:9d:05:c8:b4:a1:c7:5c:f4:59:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=663cb9b7-ec0c-44d8-9690-f501dfdd4612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:89:95:63:68:65:83:8f:bd:f5:c2:39:41:b7: f2:59:a2:33:54:17:a0:1a:88:2e:2d:a8:18:0a:78: 28:6a:38:1a:b1:a0:cf:71:c6:f7:84:03:ae:23:6c: 4b:75:2c:5f:a3:49:e1:ee:8e:e7:83:91:b2:c3:42: 9a:cb:8e:be:1c:80:35:04:69:93:97:d6:db:d7:19: 54:da:71:0b:d1:a4:e1:4b:59:7d:74:24:f3:6d:5d: 87:1b:f7:bc:d9:68:37:2d:e8:0c:3f:f9:1f:fb:65: dd:bf:ed:06:35:68:0c:bd:a9:9e:3f:f7:b9:86:3e: 68:3d:af:0e:99:58:da:61:a2:c3:6f:87:52:af:93: ac:86:00:1b:9f:6a:15:aa:c0:2e:b9:3d:61:b7:a9: e6:77:ba:92:b8:79:e1:1d:6d:27:53:bf:f8:04:b1: 0f:2c:5f:bb:d1:f2:e2:d6:35:af:84:b2:78:61:b9: a5:b1:60:62:bd:ea:1d:4d:7d:65:55:c2:77:6c:67: 63:cd:6b:9f:eb:1b:e2:83:3b:76:a9:bb:eb:2c:05: 96:7c:b7:f3:6b:c4:11:c9:1d:4b:51:1c:f7:42:1c: f4:c4:03:a7:dc:9c:e0:d6:de:04:48:50:54:1f:08: 5b:23:c0:f1:7c:fc:e4:c3:ca:70:48:22:f2:c2:53: f2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:EB:A6:50:79:ED:A3:54:F7:43:6D:48:36:DC:65:0A:05:3B:4F:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/cb2313f0-298a-3e14-976e-8f20dfb6c43c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.137.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:98:7f:ed:e6:f4:92:6e:85:3d:0f:65:6b:a5:47:c4:4d:f7: 11:80:ee:7c:37:da:03:14:b9:14:01:8c:69:42:b2:b3:30:fb: 4c:a8:ac:f0:7a:da:e8:d8:c5:46:f8:36:fb:0c:8b:d7:58:73: c1:b8:26:f2:14:b0:44:11:32:7b:38:58:6d:d9:a0:52:99:09: 03:c2:62:4f:bb:78:25:d7:51:50:c0:b8:4b:4d:a9:69:b4:9d: d6:c5:df:63:4e:14:58:ae:4e:2f:c3:7c:f2:11:93:29:bc:34: 90:22:1a:c7:e0:71:ff:c4:ac:f6:42:37:ee:1d:4f:ce:22:ba: 1b:38:3f:a7:37:69:c8:cf:56:12:90:0f:16:31:1e:08:88:92: 3b:6a:74:9c:70:90:a0:7e:37:7b:76:68:ad:a3:60:b5:bb:82: 5a:d9:bb:2f:c3:ec:7c:33:7a:8b:cc:8f:90:81:9b:97:22:6a: db:9f:71:a7:4a:bc:64:27:59:09:dd:8f:2f:a7:15:52:0b:3d: 4c:b4:a8:bc:0d:f8:2f:f6:fd:8f:41:3d:7e:30:f9:46:a4:0a: c3:28:ec:fc:2c:7a:16:4e:44:e4:a2:d0:33:af:a2:9c:6e:65: 55:86:11:36:cc:17:8e:a5:91:b0:db:b2:7f:02:25:e7:cd:8b: 5c:f8:f6:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe50FyLShx1z0WWwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk NjYzY2I5YjctZWMwYy00NGQ4LTk2OTAtZjUwMWRmZGQ0NjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04mVY2hlg4+99cI5QbfyWaIzVBegGoguLagY CngoajgasaDPccb3hAOuI2xLdSxfo0nh7o7ng5Gyw0Kay46+HIA1BGmTl9bb1xlU 2nEL0aThS1l9dCTzbV2HG/e82Wg3LegMP/kf+2Xdv+0GNWgMvameP/e5hj5oPa8O mVjaYaLDb4dSr5OshgAbn2oVqsAuuT1ht6nmd7qSuHnhHW0nU7/4BLEPLF+70fLi 1jWvhLJ4YbmlsWBiveodTX1lVcJ3bGdjzWuf6xvigzt2qbvrLAWWfLfza8QRyR1L URz3Qhz0xAOn3Jzg1t4ESFBUHwhbI8DxfPzkw8pwSCLywlPybQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnrplB57aNU90NtSDbcZQoFO0+zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvY2IyMzEzZjAtMjk4YS0z ZTE0LTk3NmUtOGYyMGRmYjZjNDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2InQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKYf+3m9JJuhT0PZWulR8RN9xGA7nw32gMUuRQBjGlCsrMw+0yorPB6 2ujYxUb4NvsMi9dYc8G4JvIUsEQRMns4WG3ZoFKZCQPCYk+7eCXXUVDAuEtNqWm0 ndbF32NOFFiuTi/DfPIRkym8NJAiGsfgcf/ErPZCN+4dT84iuhs4P6c3acjPVhKQ DxYxHgiIkjtqdJxwkKB+N3t2aK2jYLW7glrZuy/D7HwzeovMj5CBm5ciatufcadK vGQnWQndjy+nFVILPUy0qLwN+C/2/Y9BPX4w+UakCsMo7PwsehZOROSi0DOvopxu ZVWGETbMF46lkbDbsn8CJefNi1z49qI= -----END CERTIFICATE-----Generated at Sun Apr 6 07:03:02 2025 by rpki-client