$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/6207f57d-7286-3e57-bd00-2ce12029aa76.roa File: 6207f57d-7286-3e57-bd00-2ce12029aa76.roa (raw, json) Hash identifier: zw8OUpmXALlHVnW058q5cEweopxXzLDz8oUDp+VnoCA= Subject key identifier: 3E:D2:80:81:66:52:EC:62:88:5C:51:FB:F9:FF:FB:AF:7D:E4:FC:C7 Certificate issuer: /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Certificate serial: 010D0C9F432858496A19945BF964711CFE50C650 Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/6207f57d-7286-3e57-bd00-2ce12029aa76.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 23532 IP address blocks: 216.40.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:94:5b:f9:64:71:1c:fe:50:c6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=d19a2e93-9485-4044-885c-10c7070a8cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bf:64:d7:ea:17:0f:3d:a0:d0:bd:85:5b:e0: c2:db:04:a1:9c:48:ea:d5:26:d8:22:b5:b7:37:c4: 9f:cb:e6:22:c2:4c:a6:df:2e:89:75:20:95:3e:45: 1a:05:28:80:c2:64:2a:d2:0e:8c:1b:d8:e7:e7:b2: 3c:aa:39:c3:c3:f6:23:e5:51:24:75:45:62:71:36: 4c:e1:c1:2e:a2:31:e3:f0:6d:e7:03:10:7c:e8:f7: e6:b4:24:0e:60:27:ed:20:52:f6:1f:b7:7d:3e:8e: 8d:c3:69:3c:1e:76:53:0e:17:81:3a:5e:9b:4f:5e: 05:ca:ec:36:6e:bf:45:07:7e:ab:75:4f:24:97:a5: bc:14:0a:d0:ac:14:c2:bf:45:5f:65:4a:ba:bb:66: 00:5b:39:d7:14:b8:57:71:a0:f2:ac:0b:f7:f5:cd: 2c:09:6d:10:e8:02:38:ff:f2:45:3a:41:df:a0:86: 9e:e9:81:b2:50:40:2e:13:59:27:70:ca:3c:95:01: 46:99:b0:c5:67:c1:c1:e4:7e:0d:4c:22:77:5a:57: 53:47:eb:a4:ed:54:27:c8:d6:04:44:67:b9:c2:6a: f0:f0:f3:8e:1b:15:73:41:84:c1:8d:8a:10:56:4d: db:0a:6d:21:af:6a:d3:ea:ca:a2:e4:5b:5e:9a:ed: 88:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D2:80:81:66:52:EC:62:88:5C:51:FB:F9:FF:FB:AF:7D:E4:FC:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/6207f57d-7286-3e57-bd00-2ce12029aa76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl X509v3 Authority Key Identifier: keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer sbgp-ipAddrBlock: critical IPv4: 216.40.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:96:c5:e8:40:fa:ee:66:f4:f0:7b:f2:cc:f6:30:a9:a2:25: e9:3e:c0:fd:44:09:14:96:df:46:d0:1e:21:5e:6b:c6:f5:2c: 50:3c:1b:ae:2c:91:6b:41:07:51:c0:71:f7:51:d7:9d:77:eb: 0e:e4:c6:03:fb:65:7e:37:02:80:cb:d0:0e:04:aa:3f:12:59: 37:b0:d2:b4:62:7a:cc:46:dc:49:75:4c:93:fa:88:56:f1:0e: d8:7c:bf:da:7d:36:26:35:f6:8d:90:94:3e:c3:50:49:70:0d: 08:a2:80:1c:b0:51:4a:09:c7:c0:96:d1:59:82:e4:6b:5a:b3: c9:65:24:f4:d4:3e:b6:d1:70:80:3e:16:d8:50:f3:66:65:3e: e7:72:e0:bd:bd:c7:f6:5e:43:57:cc:ae:52:eb:6b:d3:5a:e5: 97:75:b1:4c:c5:88:7e:b7:55:5c:a7:0e:bc:0f:9d:5c:f3:f9: f8:18:7b:47:71:63:03:8d:3e:2d:28:3e:b4:20:a0:ac:1d:53: 1b:65:33:ed:00:e6:63:9f:34:80:6d:3f:45:21:81:aa:69:f4: ed:f0:79:97:d2:70:99:8d:39:84:74:bf:c9:c8:7b:e7:db:d9: bb:e7:53:13:50:44:f2:da:13:dc:7f:a3:da:69:1b:63:1c:89: 96:6b:c5:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGZRb+WRxHP5QxlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZjZGI2OTctZDIwZC00N2U3LTlmOWUtYzQxNzRkYmMw YmYyMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk ZDE5YTJlOTMtOTQ4NS00MDQ0LTg4NWMtMTBjNzA3MGE4Y2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2r9k1+oXDz2g0L2FW+DC2wShnEjq1SbYIrW3 N8Sfy+Yiwkym3y6JdSCVPkUaBSiAwmQq0g6MG9jn57I8qjnDw/Yj5VEkdUVicTZM 4cEuojHj8G3nAxB86PfmtCQOYCftIFL2H7d9Po6Nw2k8HnZTDheBOl6bT14Fyuw2 br9FB36rdU8kl6W8FArQrBTCv0VfZUq6u2YAWznXFLhXcaDyrAv39c0sCW0Q6AI4 //JFOkHfoIae6YGyUEAuE1kncMo8lQFGmbDFZ8HB5H4NTCJ3WldTR+uk7VQnyNYE RGe5wmrw8POOGxVzQYTBjYoQVk3bCm0hr2rT6sqi5Ftemu2IHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7SgIFmUuxiiFxR+/n/+6995PzHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNmNk YjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3NGRiYzBiZjIvNjIwN2Y1N2QtNzI4Ni0z ZTU3LWJkMDAtMmNlMTIwMjlhYTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzZjZGI2OTctZDIwZC00N2U3LTlm OWUtYzQxNzRkYmMwYmYyLzM2Y2RiNjk3LWQyMGQtNDdlNy05ZjllLWM0MTc0ZGJj MGJmMi5jcmwwHwYDVR0jBBgwFoAU4OlXFY9Fk7bv2cStPnfqph/s6jUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNmNkYjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3 NGRiYzBiZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ChEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACWxehA+u5m9PB78sz2MKmiJek+wP1ECRSW30bQHiFea8b1LFA8G64s kWtBB1HAcfdR15136w7kxgP7ZX43AoDL0A4Eqj8SWTew0rRiesxG3El1TJP6iFbx Dth8v9p9NiY19o2QlD7DUElwDQiigBywUUoJx8CW0VmC5Gtas8llJPTUPrbRcIA+ FthQ82ZlPudy4L29x/ZeQ1fMrlLra9Na5Zd1sUzFiH63VVynDrwPnVzz+fgYe0dx YwONPi0oPrQgoKwdUxtlM+0A5mOfNIBtP0Uhgapp9O3weZfScJmNOYR0v8nIe+fb 2bvnUxNQRPLaE9x/o9ppG2MciZZrxSU= -----END CERTIFICATE-----Generated at Thu Apr 17 09:07:11 2025 by rpki-client