$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/2bceb09a-8c68-38f7-9325-555d892ae3b0.roa File: 2bceb09a-8c68-38f7-9325-555d892ae3b0.roa (raw, json) Hash identifier: JV6bJcNOEJgpKrYzaagJ4tJRnenHic/Haoo9FhkhPFc= Subject key identifier: D3:5A:BF:C2:4D:70:7E:AD:4E:4B:F4:90:DA:A0:2F:F8:D0:16:F2:F3 Certificate issuer: /CN=9df142df-6de2-47dc-be4f-bf09bdec0551 Certificate serial: 010D0C9F432858489FD09BF582D76B7A48AD3FE0 Authority key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/2bceb09a-8c68-38f7-9325-555d892ae3b0.roa Signing time: Wed 22 Jan 2025 02:00:39 +0000 ROA not before: Wed 22 Jan 2025 02:00:39 +0000 ROA not after: Tue 22 Apr 2025 01:00:39 +0000 asID: 394453 IP address blocks: 199.253.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:d0:9b:f5:82:d7:6b:7a:48:ad:3f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df142df-6de2-47dc-be4f-bf09bdec0551 Validity Not Before: Jan 22 02:00:39 2025 GMT Not After : Apr 22 01:00:39 2025 GMT Subject: CN=b213130d-6e07-4bfe-9825-922201a8bc66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ce:a2:4a:2e:63:ba:4d:22:d6:69:16:89:57: 6a:59:36:56:b9:61:5b:6e:b9:1b:f3:6a:83:b2:14: 70:b7:23:9f:3d:fb:19:ca:45:4a:80:f3:d3:83:32: 59:37:5c:a6:c2:7e:19:dd:31:1c:db:8d:c4:50:7f: 44:d8:09:5d:4b:8e:1e:5d:bc:9c:0f:4f:e6:15:85: 62:7e:a8:54:0c:48:be:e8:ea:b3:61:73:af:fa:e8: 63:dc:f9:95:ce:97:c7:ee:00:ca:53:f7:22:a6:d6: 86:19:a8:ca:09:00:b6:64:36:6b:22:40:db:41:1a: bc:25:bc:1a:ce:51:08:f2:1e:32:fa:9c:09:ec:ff: 47:24:0a:e9:a5:11:c3:cd:08:30:3c:1d:0c:6f:b6: f6:ff:29:5d:9b:7d:5d:04:db:e5:6e:d6:ea:86:a4: c6:44:51:ea:07:38:53:e4:02:1b:21:ec:c7:1e:a1: d5:5b:e6:01:29:6f:8f:b5:a8:55:51:79:f2:a3:d9: 84:a9:28:57:d3:a3:1a:17:59:cb:cb:45:4c:88:b7: f9:5f:85:94:c5:3d:b5:27:cb:89:df:d5:93:f5:cc: 4e:10:35:f4:4e:18:77:9e:90:d2:9b:ab:e0:66:1a: 38:6d:f2:47:ac:4f:24:52:a1:83:20:c0:79:b7:6d: 5b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5A:BF:C2:4D:70:7E:AD:4E:4B:F4:90:DA:A0:2F:F8:D0:16:F2:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/2bceb09a-8c68-38f7-9325-555d892ae3b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl X509v3 Authority Key Identifier: keyid:F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer sbgp-ipAddrBlock: critical IPv4: 199.253.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:3c:26:b3:99:5e:b6:19:0e:ff:87:1e:a7:3a:5e:ae:15:35: 6d:f9:86:81:04:7f:d3:2f:13:39:2c:4a:06:24:4d:93:c4:48: 3d:c2:93:a9:78:e0:f8:30:1a:a8:bd:e6:51:c7:98:53:7c:b9: 65:20:b5:23:3b:1f:d6:dc:92:bf:2a:b0:26:0c:19:b0:02:c5: eb:df:0b:a8:44:3d:e7:bb:0e:7f:49:12:ec:b4:59:b1:b1:31: e6:44:6a:a7:0b:bb:9d:df:40:1d:ac:47:91:2e:da:3b:b7:97: 82:bb:c4:2d:11:8d:69:b5:12:d3:6f:21:49:42:80:e9:30:ee: 90:4f:01:42:9c:a5:a1:e2:fc:cf:a2:06:b0:c5:2e:5a:8a:4d: 5a:7b:d9:8b:06:ad:01:cc:6f:5b:26:cc:01:d0:49:5e:e5:1b: 64:49:77:9e:d9:5a:3c:d5:44:ed:c7:ef:5f:6d:95:da:eb:47: a3:3f:75:ae:23:50:09:24:f7:42:7a:3d:d0:82:e3:a0:fc:6f: eb:07:44:77:00:55:5e:df:8f:4f:82:0a:25:bc:53:9c:2d:ea: 17:35:04:85:5c:9c:6c:5f:65:3f:94:d2:3e:eb:9e:ba:f8:94: db:ab:f5:82:bf:c3:9a:fb:44:8f:77:f2:f8:4a:26:a5:8a:7a: ea:e6:05:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEif0Jv1gtdrekitP+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRmMTQyZGYtNmRlMi00N2RjLWJlNGYtYmYwOWJkZWMw NTUxMB4XDTI1MDEyMjAyMDAzOVoXDTI1MDQyMjAxMDAzOVowLzEtMCsGA1UEAxMk YjIxMzEzMGQtNmUwNy00YmZlLTk4MjUtOTIyMjAxYThiYzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos6iSi5juk0i1mkWiVdqWTZWuWFbbrkb82qD shRwtyOfPfsZykVKgPPTgzJZN1ymwn4Z3TEc243EUH9E2AldS44eXbycD0/mFYVi fqhUDEi+6OqzYXOv+uhj3PmVzpfH7gDKU/ciptaGGajKCQC2ZDZrIkDbQRq8Jbwa zlEI8h4y+pwJ7P9HJArppRHDzQgwPB0Mb7b2/yldm31dBNvlbtbqhqTGRFHqBzhT 5AIbIezHHqHVW+YBKW+PtahVUXnyo9mEqShX06MaF1nLy0VMiLf5X4WUxT21J8uJ 39WT9cxOEDX0Thh3npDSm6vgZho4bfJHrE8kUqGDIMB5t21bnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNav8JNcH6tTkv0kNqgL/jQFvLzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85ZGYx NDJkZi02ZGUyLTQ3ZGMtYmU0Zi1iZjA5YmRlYzA1NTEvMmJjZWIwOWEtOGM2OC0z OGY3LTkzMjUtNTU1ZDg5MmFlM2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWRmMTQyZGYtNmRlMi00N2RjLWJl NGYtYmYwOWJkZWMwNTUxLzlkZjE0MmRmLTZkZTItNDdkYy1iZTRmLWJmMDliZGVj MDU1MS5jcmwwHwYDVR0jBBgwFoAU9p1ZPdpWapm9hqkVZ8a+YNfZvIcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85ZGYxNDJkZi02ZGUyLTQ3ZGMtYmU0Zi1iZjA5 YmRlYzA1NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx/2IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHs8JrOZXrYZDv+HHqc6Xq4VNW35hoEEf9MvEzksSgYkTZPESD3Ck6l4 4PgwGqi95lHHmFN8uWUgtSM7H9bckr8qsCYMGbACxevfC6hEPee7Dn9JEuy0WbGx MeZEaqcLu53fQB2sR5Eu2ju3l4K7xC0RjWm1EtNvIUlCgOkw7pBPAUKcpaHi/M+i BrDFLlqKTVp72YsGrQHMb1smzAHQSV7lG2RJd57ZWjzVRO3H719tldrrR6M/da4j UAkk90J6PdCC46D8b+sHRHcAVV7fj0+CCiW8U5wt6hc1BIVcnGxfZT+U0j7rnrr4 lNur9YK/w5r7RI938vhKJqWKeurmBS8= -----END CERTIFICATE-----Generated at Sat Apr 5 12:18:53 2025 by rpki-client