$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/fb70b41f-bc77-3c74-8d1c-0dac0f2c1a79.roa File: fb70b41f-bc77-3c74-8d1c-0dac0f2c1a79.roa (raw, json) Hash identifier: gDlDVG6zZM15w0vk5eL6wWncHDYeeAaRdyTOi7Cnmuk= Subject key identifier: 4A:F0:39:58:58:88:54:7A:DA:31:1C:01:7B:37:25:DD:9D:2D:B5:6E Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F432858489E5764824EAB74A608DF4D00 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/fb70b41f-bc77-3c74-8d1c-0dac0f2c1a79.roa Signing time: Tue 21 Jan 2025 13:20:42 +0000 ROA not before: Tue 21 Jan 2025 13:20:42 +0000 ROA not after: Mon 21 Apr 2025 12:20:42 +0000 asID: 40509 IP address blocks: 37.16.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Feb 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:57:64:82:4e:ab:74:a6:08:df:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Jan 21 13:20:42 2025 GMT Not After : Apr 21 12:20:42 2025 GMT Subject: CN=a70c3504-112d-4a62-b0b9-ca45949711f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:68:40:db:9f:32:d3:ba:6e:15:d1:cc:23:fc: fb:28:9a:60:f9:3e:b6:6d:f0:ce:d1:58:f1:6b:0e: fa:45:01:59:27:51:82:67:34:39:d4:02:d2:85:ec: d6:57:66:85:04:2c:4e:7a:0b:88:1e:a3:e1:e4:7e: 3a:98:c5:9b:8a:90:4c:60:dd:7b:6f:d4:14:b4:23: b8:ce:6f:a1:c9:82:eb:c5:38:0b:61:5f:bf:f4:69: 19:37:f6:0d:5e:b2:c5:6c:f3:5d:c3:4e:a3:a6:ea: bc:b4:86:3a:6a:58:3c:66:ff:00:22:f4:45:a5:57: ef:a5:42:d5:53:13:e1:d1:42:51:57:2a:9d:00:6f: d2:b8:41:f8:f7:95:ae:51:a6:62:14:23:09:9f:7c: 42:54:0c:75:65:70:e7:9f:13:5a:40:b8:c4:a9:71: 14:c7:e3:6e:96:a1:0d:06:0c:1b:49:77:44:d3:27: 6e:30:76:a5:7e:79:64:50:c2:59:28:11:41:2a:ea: 00:66:68:44:48:72:44:03:bd:07:61:c2:46:e7:cb: 74:02:94:b5:80:69:33:11:af:a7:63:e5:d3:07:ee: 48:88:d1:14:ba:06:ee:7c:58:c5:4f:f6:47:94:14: b6:7c:8b:5e:b9:42:ff:93:c9:65:03:70:14:27:24: 44:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F0:39:58:58:88:54:7A:DA:31:1C:01:7B:37:25:DD:9D:2D:B5:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/fb70b41f-bc77-3c74-8d1c-0dac0f2c1a79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 37.16.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:e2:bc:68:61:54:e5:3a:de:27:47:09:85:00:e1:ef:f3:20: 64:d8:3f:e5:d5:05:80:ec:b4:dc:21:69:d6:5f:1b:7c:33:6a: ea:c8:cb:65:74:6c:eb:f9:43:b2:d7:86:e9:ee:ad:2d:40:eb: 53:3e:60:ae:96:57:f7:8d:92:b0:83:c2:93:15:20:3f:5b:6d: 61:0f:68:58:2f:73:71:16:72:11:80:e2:f8:39:dc:7d:61:8e: de:c4:33:3e:17:07:7b:71:a5:26:e6:bb:1c:c1:75:4d:8e:d4: c2:23:0e:6c:6f:1e:4c:81:90:bb:49:3c:ea:52:d6:98:cb:8d: ee:60:4c:bc:ce:27:e2:22:4d:10:a1:ee:39:17:3c:94:66:9a: eb:91:21:91:17:65:39:d8:d8:e2:63:b5:75:20:41:27:1f:55: 95:5f:76:65:f5:53:23:6a:ec:40:58:c9:92:11:71:2c:bc:db: 3e:f9:ef:a2:1a:a7:52:b8:2f:a8:32:96:77:d3:68:10:8a:30: 1f:97:12:2b:33:4b:4f:d6:e7:26:e8:e4:2b:e0:c1:58:2c:c4: f4:f2:f0:49:bb:11:39:8d:e1:57:06:1f:30:33:cf:95:3a:8f: cc:67:0a:1c:5f:03:27:3c:21:d9:4d:78:4a:05:a4:92:7d:d1: d3:9a:8c:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEieV2SCTqt0pgjfTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI1MDEyMTEzMjA0MloXDTI1MDQyMTEyMjA0MlowLzEtMCsGA1UEAxMk YTcwYzM1MDQtMTEyZC00YTYyLWIwYjktY2E0NTk0OTcxMWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2hA258y07puFdHMI/z7KJpg+T62bfDO0Vjx aw76RQFZJ1GCZzQ51ALShezWV2aFBCxOeguIHqPh5H46mMWbipBMYN17b9QUtCO4 zm+hyYLrxTgLYV+/9GkZN/YNXrLFbPNdw06jpuq8tIY6alg8Zv8AIvRFpVfvpULV UxPh0UJRVyqdAG/SuEH495WuUaZiFCMJn3xCVAx1ZXDnnxNaQLjEqXEUx+NulqEN BgwbSXdE0yduMHalfnlkUMJZKBFBKuoAZmhESHJEA70HYcJG58t0ApS1gGkzEa+n Y+XTB+5IiNEUugbufFjFT/ZHlBS2fIteuUL/k8llA3AUJyREOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErwOVhYiFR62jEcAXs3Jd2dLbVuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvZmI3MGI0MWYtYmM3Ny0z Yzc0LThkMWMtMGRhYzBmMmMxYTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFJRAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHivGhhVOU63idHCYUA4e/zIGTYP+XVBYDstNwhadZfG3wzaurIy2V0 bOv5Q7LXhunurS1A61M+YK6WV/eNkrCDwpMVID9bbWEPaFgvc3EWchGA4vg53H1h jt7EMz4XB3txpSbmuxzBdU2O1MIjDmxvHkyBkLtJPOpS1pjLje5gTLzOJ+IiTRCh 7jkXPJRmmuuRIZEXZTnY2OJjtXUgQScfVZVfdmX1UyNq7EBYyZIRcSy82z7576Ia p1K4L6gylnfTaBCKMB+XEiszS0/W5ybo5CvgwVgsxPTy8Em7ETmN4VcGHzAzz5U6 j8xnChxfAyc8IdlNeEoFpJJ90dOajN4= -----END CERTIFICATE-----Generated at Sun Feb 2 15:50:19 2025 by rpki-client