$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/c97d76a7-e9ca-3812-913c-59f3ad8c9db7.roa File: c97d76a7-e9ca-3812-913c-59f3ad8c9db7.roa (raw, json) Hash identifier: 2p2lUgQaNq0NFGUrFGDjBE/IHz+UlwChmeZqRUYs6Dc= Subject key identifier: 98:17:55:03:34:DE:40:FC:8B:8F:D9:EE:50:7B:E7:46:A2:C9:F3:5F Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Certificate serial: 010D0C9F43285848EC9689202D16A26991070A80 Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/c97d76a7-e9ca-3812-913c-59f3ad8c9db7.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 136.228.0.0/19 maxlen: 32 139.60.200.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:89:20:2d:16:a2:69:91:07:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=096e23b8-4d3d-4a26-a998-36438ee73195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ad:af:50:17:1a:18:b1:01:01:18:1d:d9:c9: e1:3c:61:e3:69:83:3e:fc:28:3f:af:ca:46:60:12: 49:d0:2d:19:d0:07:21:c1:3f:ad:09:a5:77:88:8c: 28:80:ef:cb:83:6c:66:28:ce:73:f8:df:9e:e2:22: 64:f9:f6:7e:44:89:3e:8d:96:b6:a3:08:9d:c6:78: e3:39:f8:a9:78:d7:e5:f5:ce:b9:63:5f:05:37:6a: 2f:1a:28:8b:6e:21:e1:58:28:8d:a9:f6:41:f2:b3: 18:9a:ef:ca:2f:c6:20:b6:d0:cc:5c:49:f8:c7:5b: 2d:40:18:1e:48:f8:36:ae:f2:7c:9f:39:a5:e6:c2: 4f:95:05:55:b3:5e:67:29:9b:e4:60:2e:72:f3:43: a6:d5:07:58:4c:69:af:37:aa:4d:65:b1:3f:e8:39: ad:d1:72:07:e8:13:93:8f:ba:ce:40:16:b2:fa:3a: d7:df:ce:3c:01:89:17:e5:c0:41:be:0f:5b:98:d1: 38:56:c8:0f:e0:71:1c:9d:99:72:ec:7e:a4:17:80: 05:a8:3d:1e:e8:77:90:a0:77:62:62:8b:ff:09:49: 69:cf:4a:ae:91:65:53:d9:12:8d:6d:5a:cc:6e:8b: 70:da:59:a7:10:14:fe:13:e9:1d:27:5a:9b:60:b9: e5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:17:55:03:34:DE:40:FC:8B:8F:D9:EE:50:7B:E7:46:A2:C9:F3:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/c97d76a7-e9ca-3812-913c-59f3ad8c9db7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl X509v3 Authority Key Identifier: keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer sbgp-ipAddrBlock: critical IPv4: 136.228.0.0/19 139.60.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:50:44:71:4e:d9:14:ea:59:ad:b9:92:62:b2:c9:87:7c:1b: 80:1b:2a:08:93:cf:2f:4c:50:6b:17:71:0b:54:b7:6d:44:3f: f0:f1:dd:a1:4e:4d:f2:9a:e3:ce:72:6b:37:05:b7:38:d8:7d: 15:c3:c0:11:e4:75:66:1b:1f:5b:d1:b7:89:dc:90:89:b6:36: e4:f1:1c:53:37:68:fd:d8:35:ed:23:06:bd:1a:fc:0d:b7:a6: e6:54:61:78:ad:0e:3e:cc:1f:ee:5a:dd:d9:3a:40:cf:b2:03: f9:ec:ec:17:72:c7:39:07:20:b6:36:27:bc:bc:5b:bd:54:ac: 43:b3:d1:b7:8d:10:0c:a4:a5:79:be:98:1e:ca:cf:9c:57:3e: e7:f3:49:60:05:d7:5a:f8:c8:87:b8:c9:69:86:0b:a7:19:fe: 2b:dd:cb:e0:93:dc:0d:8c:81:bc:28:50:b9:c3:2a:d4:55:b6: f5:aa:02:ec:71:be:0e:3b:8f:ee:9d:a8:4c:53:85:0b:3b:70: 13:14:43:59:c5:f8:b4:44:17:45:f4:3d:7c:cb:f7:1f:fc:e8: 41:5a:f8:a8:90:0f:a9:d6:48:13:1d:2c:51:cf:8b:5d:40:0a: 1d:97:83:8b:6c:46:47:3c:34:34:fa:5d:38:85:12:9b:ac:2e: 5c:ff:dc:36 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEjslokgLRaiaZEHCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAyYTUyZTUtMmI3MS00MTI0LWJkMjktNjBlOTBlNTlm NDdkMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk MDk2ZTIzYjgtNGQzZC00YTI2LWE5OTgtMzY0MzhlZTczMTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlK2vUBcaGLEBARgd2cnhPGHjaYM+/Cg/r8pG YBJJ0C0Z0AchwT+tCaV3iIwogO/Lg2xmKM5z+N+e4iJk+fZ+RIk+jZa2owidxnjj OfipeNfl9c65Y18FN2ovGiiLbiHhWCiNqfZB8rMYmu/KL8YgttDMXEn4x1stQBge SPg2rvJ8nzml5sJPlQVVs15nKZvkYC5y80Om1QdYTGmvN6pNZbE/6Dmt0XIH6BOT j7rOQBay+jrX3848AYkX5cBBvg9bmNE4VsgP4HEcnZly7H6kF4AFqD0e6HeQoHdi Yov/CUlpz0qukWVT2RKNbVrMbotw2lmnEBT+E+kdJ1qbYLnlpwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJgXVQM03kD8i4/Z7lB750aiyfNfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJh NTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5MGU1OWY0N2QvYzk3ZDc2YTctZTljYS0z ODEyLTkxM2MtNTlmM2FkOGM5ZGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDAyYTUyZTUtMmI3MS00MTI0LWJk MjktNjBlOTBlNTlmNDdkL2QwMmE1MmU1LTJiNzEtNDEyNC1iZDI5LTYwZTkwZTU5 ZjQ3ZC5jcmwwHwYDVR0jBBgwFoAUauWbwwPnU/AIdM3iI5bDJH4557EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJhNTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5 MGU1OWY0N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFiOQAAwQD izzIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEdQRHFO2RTqWa25kmKyyYd8G4AbKgiTzy9MUGsXcQtUt21E P/Dx3aFOTfKa485yazcFtzjYfRXDwBHkdWYbH1vRt4nckIm2NuTxHFM3aP3YNe0j Br0a/A23puZUYXitDj7MH+5a3dk6QM+yA/ns7BdyxzkHILY2J7y8W71UrEOz0beN EAykpXm+mB7Kz5xXPufzSWAF11r4yIe4yWmGC6cZ/ivdy+CT3A2MgbwoULnDKtRV tvWqAuxxvg47j+6dqExThQs7cBMUQ1nF+LREF0X0PXzL9x/86EFa+KiQD6nWSBMd LFHPi11ACh2Xg4tsRkc8NDT6XTiFEpusLlz/3DY= -----END CERTIFICATE-----Generated at Fri Mar 14 09:15:05 2025 by rpki-client