$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/6207f57d-7286-3e57-bd00-2ce12029aa76.roa File: 6207f57d-7286-3e57-bd00-2ce12029aa76.roa (raw, json) Hash identifier: rKeOLay+g8WgSdIHa3O2KcHeXw2HTBPPnBUGo5Y/fps= Subject key identifier: B4:AF:EF:B5:EF:F7:CE:3F:33:25:07:7B:55:D9:68:40:CF:F8:EE:E3 Certificate issuer: /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Certificate serial: 010D0C9F432858488A8045943D2032132483DC80 Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/6207f57d-7286-3e57-bd00-2ce12029aa76.roa Signing time: Tue 14 Jan 2025 10:46:53 +0000 ROA not before: Tue 14 Jan 2025 10:46:53 +0000 ROA not after: Mon 14 Apr 2025 09:46:53 +0000 asID: 23532 IP address blocks: 216.40.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8a:80:45:94:3d:20:32:13:24:83:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Validity Not Before: Jan 14 10:46:53 2025 GMT Not After : Apr 14 09:46:53 2025 GMT Subject: CN=3dc07a8b-cea2-48db-b57f-1fc4c55183d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:85:19:8a:55:7a:4e:39:34:fb:34:3e:39:1b: 5b:47:0f:12:10:2a:c2:38:d4:f1:4c:de:b8:bf:0e: 7e:a9:e4:97:5e:12:09:4e:c2:3f:de:02:72:70:f1: d7:a9:8a:07:c6:14:8f:16:48:45:fe:5a:fc:50:4e: 2c:35:49:43:20:71:50:1f:ce:c6:45:b9:ed:19:a2: a1:35:b7:96:9d:ec:3f:4c:93:8d:58:67:df:94:04: b1:b4:bd:26:0f:92:f1:48:27:aa:ae:5c:78:8b:77: 17:95:5d:c6:ae:3b:9c:ac:de:a5:07:fc:90:65:99: b3:d6:c4:37:1b:97:82:53:16:30:33:03:88:a6:4d: 35:ba:58:b7:81:c7:38:64:dd:77:f3:a6:27:7b:2d: 27:65:14:5a:6a:32:45:ae:af:44:69:e8:ff:2c:42: 90:73:2b:17:fe:86:44:3e:c9:8b:e4:63:44:71:f9: a6:3c:5d:5e:55:41:bf:18:1f:6a:04:0d:bd:49:da: aa:6c:f0:30:9d:d1:84:b5:8f:45:00:08:bb:8d:5f: 00:57:53:a1:ab:bd:be:23:af:20:f5:66:b2:a8:f4: b0:09:8c:69:e6:41:d0:3a:91:c2:ba:05:00:06:0a: 80:47:6a:85:6f:8b:a0:97:50:23:24:3e:c6:71:5b: 56:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AF:EF:B5:EF:F7:CE:3F:33:25:07:7B:55:D9:68:40:CF:F8:EE:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/6207f57d-7286-3e57-bd00-2ce12029aa76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl X509v3 Authority Key Identifier: keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer sbgp-ipAddrBlock: critical IPv4: 216.40.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:5a:60:85:61:eb:fd:b1:14:1d:94:d7:cf:34:02:8f:79:13: fe:07:5a:43:37:00:f5:12:ec:55:34:56:47:c9:c0:65:3e:5b: f1:b5:4c:6c:14:c4:73:db:e5:e1:03:20:d6:61:17:77:4e:7e: be:62:7e:5e:ef:10:cf:f2:46:e5:aa:cc:b6:62:cd:01:7c:f9: 82:cd:fc:e7:8c:a4:66:fc:7d:cd:58:3e:b7:1c:63:3a:6d:9f: 9d:97:6d:08:40:d7:04:4b:4a:30:64:a3:eb:64:92:53:d9:63: 75:66:67:95:02:89:f4:2a:52:d4:04:dc:e7:0a:36:ca:63:b8: 3b:04:a2:47:7e:af:27:5d:e2:49:0e:7a:32:b4:ae:d0:24:c0: d2:ae:e4:53:8c:5b:cd:82:d5:16:b2:50:af:68:85:55:b2:5c: 43:93:a7:ab:d9:3b:22:57:b9:71:7e:ac:cc:6c:5f:d3:7d:82: 87:12:ff:c1:f4:a6:80:25:f5:bc:82:b0:a9:4e:8c:d0:e7:44: 3a:10:fa:4d:5e:1f:c6:50:5f:1d:44:7f:33:1f:7a:9c:df:3e: ca:18:6c:67:d1:1b:8b:06:5b:7b:50:9a:c7:c4:73:52:b8:05: ff:41:86:5e:6c:b2:43:39:bf:eb:d2:f9:f5:03:cf:0f:7e:cb: 94:e6:d6:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiKgEWUPSAyEySD3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZjZGI2OTctZDIwZC00N2U3LTlmOWUtYzQxNzRkYmMw YmYyMB4XDTI1MDExNDEwNDY1M1oXDTI1MDQxNDA5NDY1M1owLzEtMCsGA1UEAxMk M2RjMDdhOGItY2VhMi00OGRiLWI1N2YtMWZjNGM1NTE4M2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIUZilV6Tjk0+zQ+ORtbRw8SECrCONTxTN64 vw5+qeSXXhIJTsI/3gJycPHXqYoHxhSPFkhF/lr8UE4sNUlDIHFQH87GRbntGaKh NbeWnew/TJONWGfflASxtL0mD5LxSCeqrlx4i3cXlV3GrjucrN6lB/yQZZmz1sQ3 G5eCUxYwMwOIpk01uli3gcc4ZN1386Yney0nZRRaajJFrq9Eaej/LEKQcysX/oZE PsmL5GNEcfmmPF1eVUG/GB9qBA29SdqqbPAwndGEtY9FAAi7jV8AV1Ohq72+I68g 9WayqPSwCYxp5kHQOpHCugUABgqAR2qFb4ugl1AjJD7GcVtWYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSv77Xv984/MyUHe1XZaEDP+O7jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNmNk YjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3NGRiYzBiZjIvNjIwN2Y1N2QtNzI4Ni0z ZTU3LWJkMDAtMmNlMTIwMjlhYTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzZjZGI2OTctZDIwZC00N2U3LTlm OWUtYzQxNzRkYmMwYmYyLzM2Y2RiNjk3LWQyMGQtNDdlNy05ZjllLWM0MTc0ZGJj MGJmMi5jcmwwHwYDVR0jBBgwFoAU4OlXFY9Fk7bv2cStPnfqph/s6jUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNmNkYjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3 NGRiYzBiZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ChEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpaYIVh6/2xFB2U1880Ao95E/4HWkM3APUS7FU0VkfJwGU+W/G1TGwU xHPb5eEDINZhF3dOfr5ifl7vEM/yRuWqzLZizQF8+YLN/OeMpGb8fc1YPrccYzpt n52XbQhA1wRLSjBko+tkklPZY3VmZ5UCifQqUtQE3OcKNspjuDsEokd+rydd4kkO ejK0rtAkwNKu5FOMW82C1RayUK9ohVWyXEOTp6vZOyJXuXF+rMxsX9N9gocS/8H0 poAl9byCsKlOjNDnRDoQ+k1eH8ZQXx1EfzMfepzfPsoYbGfRG4sGW3tQmsfEc1K4 Bf9Bhl5sskM5v+vS+fUDzw9+y5Tm1uc= -----END CERTIFICATE-----Generated at Wed Feb 5 09:58:34 2025 by rpki-client