$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/3b9ae560-7df7-3f01-ab94-5cba5061ecee.roa File: 3b9ae560-7df7-3f01-ab94-5cba5061ecee.roa (raw, json) Hash identifier: 2VVUqLLqWBnj9+WHvJ4xrUa0xZn6KiEMAMMFApZL2qQ= Subject key identifier: 8D:A0:42:FA:15:34:CE:49:50:26:77:42:35:19:9F:F0:D7:05:66:A2 Certificate issuer: /CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17 Certificate serial: 010D0C9F43285848D07568CF8DA2A8DB6D187400 Authority key identifier: C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/3b9ae560-7df7-3f01-ab94-5cba5061ecee.roa Signing time: Sat 08 Feb 2025 12:11:35 +0000 ROA not before: Sat 08 Feb 2025 12:11:35 +0000 ROA not after: Fri 09 May 2025 11:11:35 +0000 asID: 36734 IP address blocks: 216.38.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:75:68:cf:8d:a2:a8:db:6d:18:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17 Validity Not Before: Feb 8 12:11:35 2025 GMT Not After : May 9 11:11:35 2025 GMT Subject: CN=d71fd34d-aa31-43a4-a1cc-bcf6acd5bb2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f9:70:31:4b:c8:fb:ae:49:0a:90:a0:c7:a3: ff:56:39:03:7a:28:8c:71:5b:2c:d7:6e:94:5f:bb: ae:68:7b:96:49:22:c5:b0:91:65:5f:df:7e:f0:3a: 3a:31:b5:68:8b:41:50:a1:bc:4d:50:6d:33:34:9d: 48:c3:59:e1:54:bf:98:d5:40:fd:f3:2b:f2:2b:7d: 6f:25:c3:95:fa:4b:be:4b:c1:df:db:94:2b:2f:1d: 6c:4b:e8:eb:a8:d1:e0:10:b2:bb:30:0a:5f:af:ff: 99:fb:ca:e3:e0:10:a9:1a:52:60:5c:23:1e:20:2d: 7f:4a:d2:b0:c5:dc:a6:93:ae:23:ff:e9:f9:59:2d: b6:17:55:52:c6:59:9d:e1:53:95:10:f1:de:f1:0c: 53:9b:59:01:82:10:2d:08:2f:51:12:12:88:17:9d: 72:7e:2c:6e:e2:7c:f8:67:d4:b0:d2:ea:b7:fe:0a: a1:fd:64:d8:82:4e:88:28:cc:30:fe:90:1e:7e:29: 7e:20:84:0d:c7:3b:f5:bb:88:d1:db:10:fe:00:d3: 57:84:cf:1d:52:23:a7:e2:bd:7c:e8:06:04:b9:6c: 13:d1:9f:18:79:e6:b6:fb:19:40:9f:2b:45:10:ae: ef:51:60:56:02:9f:03:06:23:40:82:af:ef:e3:6b: 3a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A0:42:FA:15:34:CE:49:50:26:77:42:35:19:9F:F0:D7:05:66:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/3b9ae560-7df7-3f01-ab94-5cba5061ecee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl X509v3 Authority Key Identifier: keyid:C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer sbgp-ipAddrBlock: critical IPv4: 216.38.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:8a:64:f4:84:e4:f4:21:1c:24:76:bc:3e:25:09:e3:36:e8: 00:9e:ce:16:10:6f:10:94:07:6b:e9:b4:8e:9f:43:35:bd:d2: e4:3d:37:1b:5b:72:ea:69:0e:f1:c1:5e:0c:e7:e2:d6:28:92: 94:fe:31:62:c1:86:77:16:88:03:a6:70:cf:78:04:55:6b:8e: 93:b9:46:d4:4d:2d:17:4a:0c:74:26:a3:3b:82:c6:36:30:47: 90:cf:83:d0:45:6d:f1:cf:1a:41:59:15:af:52:48:bf:ee:29: 7d:e4:89:ac:8e:2b:46:f4:c5:13:58:ba:5d:69:10:47:82:9b: 92:33:5b:b2:97:a8:f7:3a:df:aa:9b:c6:f4:80:a0:67:2d:2d: e0:df:49:2e:7f:af:91:65:4e:bb:1c:14:3b:38:dd:55:57:c3: d8:8a:2b:a6:bb:e4:8a:fc:9d:ca:ce:d5:50:4c:ca:47:f4:53: 37:71:38:41:44:ac:3a:7b:da:4e:3d:e2:8c:25:67:38:c1:bb: bc:e8:af:f9:81:ad:01:8b:a5:40:2f:8d:9e:49:ee:e2:f4:0c: 6a:f8:91:2b:63:9f:3f:06:ed:99:6f:04:12:e5:22:b8:76:dc: 8e:72:6e:d0:16:0d:be:53:87:e7:34:6e:7c:c8:10:c9:58:42: a2:fc:2b:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQdWjPjaKo220YdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU2YmVlZGYtYmM5OS00ZDdjLTlhMjAtNjBlYzkxM2E2 YTE3MB4XDTI1MDIwODEyMTEzNVoXDTI1MDUwOTExMTEzNVowLzEtMCsGA1UEAxMk ZDcxZmQzNGQtYWEzMS00M2E0LWExY2MtYmNmNmFjZDViYjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvlwMUvI+65JCpCgx6P/VjkDeiiMcVss126U X7uuaHuWSSLFsJFlX99+8Do6MbVoi0FQobxNUG0zNJ1Iw1nhVL+Y1UD98yvyK31v JcOV+ku+S8Hf25QrLx1sS+jrqNHgELK7MApfr/+Z+8rj4BCpGlJgXCMeIC1/StKw xdymk64j/+n5WS22F1VSxlmd4VOVEPHe8QxTm1kBghAtCC9REhKIF51yfixu4nz4 Z9Sw0uq3/gqh/WTYgk6IKMww/pAefil+IIQNxzv1u4jR2xD+ANNXhM8dUiOn4r18 6AYEuWwT0Z8Yeea2+xlAnytFEK7vUWBWAp8DBiNAgq/v42s6+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2gQvoVNM5JUCZ3QjUZn/DXBWaiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80ZTZi ZWVkZi1iYzk5LTRkN2MtOWEyMC02MGVjOTEzYTZhMTcvM2I5YWU1NjAtN2RmNy0z ZjAxLWFiOTQtNWNiYTUwNjFlY2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGU2YmVlZGYtYmM5OS00ZDdjLTlh MjAtNjBlYzkxM2E2YTE3LzRlNmJlZWRmLWJjOTktNGQ3Yy05YTIwLTYwZWM5MTNh NmExNy5jcmwwHwYDVR0jBBgwFoAUyQ4hHWXwKXwCsjkvnzZN9Y5CVlowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80ZTZiZWVkZi1iYzk5LTRkN2MtOWEyMC02MGVj OTEzYTZhMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2CaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiKZPSE5PQhHCR2vD4lCeM26ACezhYQbxCUB2vptI6fQzW90uQ9Nxtb cuppDvHBXgzn4tYokpT+MWLBhncWiAOmcM94BFVrjpO5RtRNLRdKDHQmozuCxjYw R5DPg9BFbfHPGkFZFa9SSL/uKX3kiayOK0b0xRNYul1pEEeCm5IzW7KXqPc636qb xvSAoGctLeDfSS5/r5FlTrscFDs43VVXw9iKK6a75Ir8ncrO1VBMykf0UzdxOEFE rDp72k494owlZzjBu7zor/mBrQGLpUAvjZ5J7uL0DGr4kStjnz8G7ZlvBBLlIrh2 3I5ybtAWDb5Th+c0bnzIEMlYQqL8K+s= -----END CERTIFICATE-----Generated at Sun Apr 6 19:05:13 2025 by rpki-client