$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/38637c89-cc87-3358-8ba2-8284fe77e03e.roa File: 38637c89-cc87-3358-8ba2-8284fe77e03e.roa (raw, json) Hash identifier: wh/4YpgxI+qZHVcgM3Xz37UmpBfTAfBLPlCM0FhLP34= Subject key identifier: 64:CE:DF:B5:4A:18:42:05:D9:7F:34:8D:76:CE:5B:1B:00:26:28:D6 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F43285848C5820E3443595631AFCE2980 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/38637c89-cc87-3358-8ba2-8284fe77e03e.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 36492 IP address blocks: 136.22.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:0e:34:43:59:56:31:af:ce:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=721ccc7f-c446-4f20-a3a9-053bd95c1663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a1:4f:13:49:f8:2f:5a:6c:53:b8:ca:59:da: 68:70:fc:57:73:1c:fc:3a:7c:ba:bc:d7:16:d1:95: e1:2e:3e:f6:c3:6d:03:9e:20:df:dc:67:81:07:95: 0a:a2:b6:b1:95:f9:b6:d2:5f:2f:ee:fc:ee:3a:6c: a4:2c:01:d9:a6:e4:57:27:88:8b:0b:a5:0c:f6:47: 0f:49:36:8f:75:6e:a1:aa:6a:39:ec:8d:83:dd:d1: 74:b4:c1:02:84:21:89:95:3a:2c:2c:06:9c:db:3a: 8f:52:a8:22:7e:96:1e:4d:55:4d:2b:f1:de:2d:93: 7b:29:bd:c9:4b:33:ad:84:fb:c9:4d:70:d1:36:c3: e8:22:26:fd:0a:24:b6:b2:f7:7b:61:fb:8f:a6:8c: 22:65:37:b6:98:76:49:86:a8:f8:f0:f7:74:58:83: 3f:6a:56:0e:1c:36:b0:d1:d7:1c:ac:00:e2:e0:94: db:b5:98:7f:4d:0a:b7:59:60:ca:6d:c4:17:de:78: fa:77:7b:d8:6b:20:a8:66:08:e5:dd:e5:3c:ad:fa: db:30:98:11:07:98:2d:ab:96:9f:8f:9b:0d:d4:7c: 9e:d3:ad:68:fe:f4:8f:d9:63:f5:4e:f7:72:18:35: b7:10:a9:1f:20:0b:21:46:35:be:7c:8f:08:38:d3: f3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:CE:DF:B5:4A:18:42:05:D9:7F:34:8D:76:CE:5B:1B:00:26:28:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/38637c89-cc87-3358-8ba2-8284fe77e03e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:da:5f:3e:9e:69:db:a9:26:19:9e:cc:67:56:a3:f4:e7:fe: 1c:c2:29:78:29:3c:8f:a6:38:2e:a1:83:ca:6a:4c:b8:fc:62: 9f:c7:8f:98:82:25:ca:13:c8:6c:d5:fc:66:c0:fe:16:c3:cd: 52:df:98:ea:fd:62:48:06:32:18:48:75:0e:c3:b7:37:20:1c: e4:db:58:ac:a3:39:9f:66:be:d2:72:4c:81:93:3b:3f:4b:ad: 2a:69:c9:a6:32:db:aa:68:e3:c6:cd:69:5a:b5:78:76:ab:da: de:39:98:31:f2:19:49:a8:ef:cc:9e:0b:28:33:32:be:6e:c8: a1:d6:d2:1f:41:b5:f0:79:bd:fc:97:bb:63:2d:9b:d0:f4:3c: 71:41:70:57:d2:ae:c3:80:5a:39:0a:47:1a:dd:13:9a:88:ad: 94:de:e1:76:62:d2:03:04:24:ee:7d:5d:02:88:bd:26:fc:33: 84:c3:04:3e:e4:76:da:92:1f:71:b7:11:f2:09:58:6a:52:f1: bf:1c:a6:86:3d:23:46:17:ec:c2:20:c1:92:a6:0a:23:47:8c: fa:f8:9e:a5:e5:57:11:1b:8f:e0:16:36:78:2d:2b:07:9f:c4: b9:21:11:58:d3:52:3d:a6:a1:a1:2d:15:6c:a4:d3:38:44:e8: 33:cc:38:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgg40Q1lWMa/OKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NzIxY2NjN2YtYzQ0Ni00ZjIwLWEzYTktMDUzYmQ5NWMxNjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6FPE0n4L1psU7jKWdpocPxXcxz8Ony6vNcW 0ZXhLj72w20DniDf3GeBB5UKoraxlfm20l8v7vzuOmykLAHZpuRXJ4iLC6UM9kcP STaPdW6hqmo57I2D3dF0tMEChCGJlTosLAac2zqPUqgifpYeTVVNK/HeLZN7Kb3J SzOthPvJTXDRNsPoIib9CiS2svd7YfuPpowiZTe2mHZJhqj48Pd0WIM/alYOHDaw 0dccrADi4JTbtZh/TQq3WWDKbcQX3nj6d3vYayCoZgjl3eU8rfrbMJgRB5gtq5af j5sN1Hye061o/vSP2WP1TvdyGDW3EKkfIAshRjW+fI8IONPzSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTO37VKGEIF2X80jXbOWxsAJijWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMzg2MzdjODktY2M4Ny0z MzU4LThiYTItODI4NGZlNzdlMDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDaXz6eadupJhmezGdWo/Tn/hzCKXgpPI+mOC6hg8pqTLj8Yp/Hj5iC JcoTyGzV/GbA/hbDzVLfmOr9YkgGMhhIdQ7DtzcgHOTbWKyjOZ9mvtJyTIGTOz9L rSppyaYy26po48bNaVq1eHar2t45mDHyGUmo78yeCygzMr5uyKHW0h9BtfB5vfyX u2Mtm9D0PHFBcFfSrsOAWjkKRxrdE5qIrZTe4XZi0gMEJO59XQKIvSb8M4TDBD7k dtqSH3G3EfIJWGpS8b8cpoY9I0YX7MIgwZKmCiNHjPr4nqXlVxEbj+AWNngtKwef xLkhEVjTUj2moaEtFWyk0zhE6DPMOJ0= -----END CERTIFICATE-----Generated at Fri Mar 14 10:30:05 2025 by rpki-client