$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/db240b6c-595b-339e-8c97-985b4f53d411.roa File: db240b6c-595b-339e-8c97-985b4f53d411.roa (raw, json) Hash identifier: PdWfSGDHZ8H2/5ZjqZrEY+4B4ANXa5hDg5sG2Ht5RS4= Subject key identifier: C2:25:A0:A3:CA:1F:CF:55:90:5B:56:C3:A5:A4:53:B2:AC:78:92:85 Certificate issuer: /CN=3976c091-1138-4917-9649-5575618ab7ea Certificate serial: 010D0C9F43285848C6E637D66624FC22112D2B00 Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/db240b6c-595b-339e-8c97-985b4f53d411.roa Signing time: Wed 05 Feb 2025 02:00:39 +0000 ROA not before: Wed 05 Feb 2025 02:00:39 +0000 ROA not after: Tue 06 May 2025 01:00:39 +0000 asID: 1239 IP address blocks: 134.202.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:e6:37:d6:66:24:fc:22:11:2d:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea Validity Not Before: Feb 5 02:00:39 2025 GMT Not After : May 6 01:00:39 2025 GMT Subject: CN=8fa76173-6968-4b2f-a550-effdc373f70e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4a:a5:f4:88:e5:f9:2b:cc:8a:ac:8c:4e:24: 14:71:e8:a4:8d:f8:27:3d:09:38:37:6b:9c:04:38: c3:a4:f5:de:0e:23:48:54:d4:b8:bb:11:92:b5:d5: 52:a2:7b:dc:24:5d:49:0c:22:ef:f6:b0:76:6f:a0: 33:95:54:02:d6:1e:78:55:a9:29:4a:db:ca:d8:07: c2:8e:0f:db:88:70:6c:c0:bb:a2:6a:22:d5:fc:2c: 26:94:66:2a:52:b2:cc:01:f4:70:cc:c4:e4:fe:22: ea:63:e3:b0:eb:cc:c3:9d:59:89:05:98:d6:d4:99: dc:f7:8f:08:ab:cd:e0:03:ce:d4:6c:30:8a:db:89: bf:79:2c:de:25:0f:6f:84:cd:c3:1d:32:8c:39:e7: 47:c6:4f:e0:3e:39:ea:cf:07:84:d6:13:bd:98:73: a2:0c:65:cd:27:cc:61:75:ee:e6:13:1c:1f:18:b2: db:c3:2d:0d:4f:c8:86:fd:5b:05:eb:63:ad:43:c9: ef:12:cc:18:56:a1:4a:ab:46:b8:dc:57:72:9f:ed: 4a:7c:a5:88:89:9d:59:cd:54:0a:3f:25:06:75:78: f1:99:cf:e2:82:fc:9e:82:81:5c:e4:bd:1c:bb:0e: dc:9a:68:17:8e:31:0e:44:60:ee:f4:7a:48:0e:1f: 25:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:25:A0:A3:CA:1F:CF:55:90:5B:56:C3:A5:A4:53:B2:AC:78:92:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/db240b6c-595b-339e-8c97-985b4f53d411.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl X509v3 Authority Key Identifier: keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer sbgp-ipAddrBlock: critical IPv4: 134.202.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:66:de:a3:20:57:7a:cd:ea:b5:f9:32:26:a4:0a:57:37:d5: 2a:4e:77:be:ed:1f:dd:a6:3a:87:16:b8:f4:8f:d3:2c:6e:04: b1:72:34:70:74:24:fd:92:01:4f:ab:e9:7c:95:c1:e3:df:05: ed:4b:84:a8:3b:cc:dc:f3:a5:23:6c:dd:0c:81:4c:a2:2c:51: 31:27:2e:d9:0b:0d:90:b1:9b:22:98:88:8a:be:b3:97:fb:42: a6:48:77:a6:78:dd:41:58:62:54:51:49:f9:85:0b:ed:d9:86: 3e:b8:23:2d:77:ac:96:60:ac:9e:65:7e:d7:68:fa:9a:d8:9d: 15:62:ad:e9:02:b4:94:b4:5b:ad:fa:9b:80:99:80:9f:a3:1d: fd:d1:cc:4c:6e:0e:42:76:fe:ab:fe:3a:a2:d1:2e:26:12:53: bc:24:11:ea:8c:96:70:5b:e0:05:14:2c:25:e0:fe:b2:ed:d6: 2b:31:34:ef:28:66:2e:84:64:cd:0a:f2:d9:91:bf:89:3b:8c: 9e:f1:31:4e:98:1e:9c:87:3e:90:77:54:58:5d:bc:fa:b2:ef: df:16:7d:b5:46:ff:5b:ad:ea:5e:a5:e5:80:d6:ab:a1:07:e9: 2c:c7:d3:fc:a0:df:c4:34:91:02:21:6d:dd:59:ee:a3:a8:cc: 57:37:a7:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5jfWZiT8IhEtKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk3NmMwOTEtMTEzOC00OTE3LTk2NDktNTU3NTYxOGFi N2VhMB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk OGZhNzYxNzMtNjk2OC00YjJmLWE1NTAtZWZmZGMzNzNmNzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0ql9Ijl+SvMiqyMTiQUceikjfgnPQk4N2uc BDjDpPXeDiNIVNS4uxGStdVSonvcJF1JDCLv9rB2b6AzlVQC1h54VakpStvK2AfC jg/biHBswLuiaiLV/CwmlGYqUrLMAfRwzMTk/iLqY+Ow68zDnVmJBZjW1Jnc948I q83gA87UbDCK24m/eSzeJQ9vhM3DHTKMOedHxk/gPjnqzweE1hO9mHOiDGXNJ8xh de7mExwfGLLbwy0NT8iG/VsF62OtQ8nvEswYVqFKq0a43Fdyn+1KfKWIiZ1ZzVQK PyUGdXjxmc/igvyegoFc5L0cuw7cmmgXjjEORGDu9HpIDh8lKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIloKPKH89VkFtWw6WkU7KseJKFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2 YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1NjE4YWI3ZWEvZGIyNDBiNmMtNTk1Yi0z MzllLThjOTctOTg1YjRmNTNkNDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzk3NmMwOTEtMTEzOC00OTE3LTk2 NDktNTU3NTYxOGFiN2VhLzM5NzZjMDkxLTExMzgtNDkxNy05NjQ5LTU1NzU2MThh YjdlYS5jcmwwHwYDVR0jBBgwFoAUTla3pe8dsKcVPlQushcc4BOG8oEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1 NjE4YWI3ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhsooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJm3qMgV3rN6rX5MiakClc31SpOd77tH92mOocWuPSP0yxuBLFyNHB0 JP2SAU+r6XyVwePfBe1LhKg7zNzzpSNs3QyBTKIsUTEnLtkLDZCxmyKYiIq+s5f7 QqZId6Z43UFYYlRRSfmFC+3Zhj64Iy13rJZgrJ5lftdo+prYnRVirekCtJS0W636 m4CZgJ+jHf3RzExuDkJ2/qv+OqLRLiYSU7wkEeqMlnBb4AUULCXg/rLt1isxNO8o Zi6EZM0K8tmRv4k7jJ7xMU6YHpyHPpB3VFhdvPqy798WfbVG/1ut6l6l5YDWq6EH 6SzH0/yg38Q0kQIhbd1Z7qOozFc3p1E= -----END CERTIFICATE-----Generated at Sat Apr 5 07:00:38 2025 by rpki-client