$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dfe8b943-4d87-3623-b87a-9b92e05a2a90.roa File: dfe8b943-4d87-3623-b87a-9b92e05a2a90.roa (raw, json) Hash identifier: VIhD9W9H9czF2MhnYDFHUSWaEK4YGzy9oYAlWL7v8/g= Subject key identifier: 64:BF:B3:A2:C6:75:C9:B2:11:57:4F:DF:C3:4D:DA:34:D5:D1:64:9C Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F43285848BFEBCF440AE68A0105E12780 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dfe8b943-4d87-3623-b87a-9b92e05a2a90.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 36492 IP address blocks: 136.22.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:cf:44:0a:e6:8a:01:05:e1:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=859cd0e4-3e84-426b-b4d0-0887fcfba5ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:48:6f:3b:f3:a9:a4:e6:3d:1b:db:04:2b:b9: 9e:75:d5:84:d3:81:11:e5:86:65:35:dd:c8:37:fa: 8b:0d:24:73:75:94:4d:7d:50:2e:41:1e:0b:97:58: ce:e7:8e:d6:f1:36:4f:21:bc:1f:eb:a7:fb:95:39: 74:7d:42:68:75:7c:59:e2:42:7e:28:03:d3:c9:08: 24:94:97:57:a0:be:e7:0a:16:08:5e:7e:2d:a0:db: c3:37:36:6a:20:7e:cc:4c:3a:b2:b8:28:d9:c6:db: d5:13:5c:9e:b8:f1:25:36:3c:a2:8c:54:80:8f:b0: b2:30:85:b8:cf:19:e8:e4:9f:3c:57:d7:b6:2c:b4: 7a:a8:d1:54:77:0e:99:44:49:39:0a:c1:36:78:f0: 62:df:6d:0c:19:1c:b1:99:62:3e:04:b2:b2:1c:37: a1:62:bd:bc:ca:87:69:ef:61:b8:e0:92:59:e8:8c: dd:ca:8b:e1:8b:f1:97:67:18:38:86:0f:cc:cb:d0: ec:6a:fd:63:ec:a3:71:03:a4:c6:84:1a:67:96:d7: 38:40:a3:f3:bc:72:0e:49:73:02:b0:19:61:d1:76: d3:74:47:8e:52:d8:c9:ac:21:60:48:81:60:c5:3a: fd:71:89:f6:51:cd:2c:68:43:6c:a4:cf:66:df:11: 52:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BF:B3:A2:C6:75:C9:B2:11:57:4F:DF:C3:4D:DA:34:D5:D1:64:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dfe8b943-4d87-3623-b87a-9b92e05a2a90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:62:7e:f9:1f:7a:c7:98:61:4e:da:db:8b:79:f0:ba:68:d9: 93:34:5f:1c:6d:97:9e:10:bf:7c:d4:2c:02:fa:ad:c2:1f:ad: 7d:59:92:09:cc:46:48:c8:63:83:97:01:91:d2:16:0f:37:bb: ea:33:30:bf:c2:58:c6:c9:82:55:11:f5:8c:93:da:0a:eb:c4: f3:17:cd:a2:07:52:c1:0f:7b:0e:cb:50:0d:83:b3:78:fa:9a: 30:32:46:04:15:7e:4f:0d:d8:1d:12:b0:fb:97:55:5a:d7:02: 5d:9a:3d:30:45:c1:93:5d:90:93:dd:4e:62:cc:d1:9a:00:03: 0a:78:6a:91:f8:1d:37:06:87:94:54:c7:0a:be:a3:01:63:29: 88:2f:27:f0:bb:49:f4:73:20:9e:7f:f0:ae:fb:85:ba:07:b7: 0e:4f:1d:46:85:dd:16:60:ab:39:fc:5c:b6:f3:51:30:fc:41: f7:c9:21:2d:b1:e5:d9:86:0a:ab:86:54:b9:b9:37:70:64:53: a9:12:6e:1f:5d:c5:10:6f:99:3c:ec:5d:08:ad:e8:4f:b2:f0: 09:36:af:fa:4a:48:ac:e1:80:60:85:93:6e:3b:96:cd:62:42: a6:7d:e4:e8:79:8b:6b:fe:18:29:94:55:c8:b6:f0:42:86:1f: 6a:63:4c:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/689ECuaKAQXhJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk ODU5Y2QwZTQtM2U4NC00MjZiLWI0ZDAtMDg4N2ZjZmJhNWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEhvO/OppOY9G9sEK7meddWE04ER5YZlNd3I N/qLDSRzdZRNfVAuQR4Ll1jO547W8TZPIbwf66f7lTl0fUJodXxZ4kJ+KAPTyQgk lJdXoL7nChYIXn4toNvDNzZqIH7MTDqyuCjZxtvVE1yeuPElNjyijFSAj7CyMIW4 zxno5J88V9e2LLR6qNFUdw6ZREk5CsE2ePBi320MGRyxmWI+BLKyHDehYr28yodp 72G44JJZ6Izdyovhi/GXZxg4hg/My9Dsav1j7KNxA6TGhBpnltc4QKPzvHIOSXMC sBlh0XbTdEeOUtjJrCFgSIFgxTr9cYn2Uc0saENspM9m3xFSVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGS/s6LGdcmyEVdP38NN2jTV0WScMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZGZlOGI5NDMtNGQ4Ny0z NjIzLWI4N2EtOWI5MmUwNWEyYTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBifvkfeseYYU7a24t58Lpo2ZM0Xxxtl54Qv3zULAL6rcIfrX1ZkgnM RkjIY4OXAZHSFg83u+ozML/CWMbJglUR9YyT2grrxPMXzaIHUsEPew7LUA2Ds3j6 mjAyRgQVfk8N2B0SsPuXVVrXAl2aPTBFwZNdkJPdTmLM0ZoAAwp4apH4HTcGh5RU xwq+owFjKYgvJ/C7SfRzIJ5/8K77hboHtw5PHUaF3RZgqzn8XLbzUTD8QffJIS2x 5dmGCquGVLm5N3BkU6kSbh9dxRBvmTzsXQit6E+y8Ak2r/pKSKzhgGCFk247ls1i QqZ95Oh5i2v+GCmUVci28EKGH2pjTIQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:11:52 2025 by rpki-client