$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e218169e-d661-33ed-b65c-0a3b861e3023.roa File: e218169e-d661-33ed-b65c-0a3b861e3023.roa (raw, json) Hash identifier: SB5eiyZobUa5Bl9CaQgfDiCw+SqEOqnT/KHiSm1dcNY= Subject key identifier: D0:60:25:F1:FA:7D:B4:AD:BA:97:3D:88:A7:85:5A:A9:0E:E2:AD:75 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F432858498769AC7C2245DD56DCA73700 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e218169e-d661-33ed-b65c-0a3b861e3023.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 396253 IP address blocks: 136.228.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:ac:7c:22:45:dd:56:dc:a7:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=edc96b48-cd6f-4796-bf53-3f2e9514eea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ca:61:04:06:31:5d:77:69:42:1e:2c:fa:70: 07:01:23:39:e5:95:f0:9f:7d:69:d0:29:1d:24:2c: 94:1c:01:bd:ad:0b:22:d9:a1:a2:08:66:1f:8d:e4: a6:af:c4:a8:04:2c:5a:f8:22:ef:45:6b:0a:19:0e: 1f:99:e4:6c:8e:68:44:13:75:f7:85:07:3b:27:0a: 33:c5:ca:cc:82:b3:d8:06:12:b5:3a:a9:fc:0b:1e: f9:9c:5d:cf:fd:13:e8:cf:03:41:af:69:01:59:ab: a1:f8:89:76:2a:0d:7a:0c:48:33:31:5f:22:1a:3c: 4f:8d:45:35:49:27:65:d4:50:9f:6b:80:6a:74:fe: b6:6e:8a:d7:ad:b1:d6:6f:f2:28:92:f8:38:da:47: 33:be:0a:37:54:a8:71:7f:4d:80:c9:87:28:df:ed: da:20:33:1d:e2:7d:52:3e:e7:4c:21:22:37:63:24: 8b:1b:42:25:a2:a2:93:1f:00:07:55:61:d4:b8:56: 02:27:c1:31:a0:2c:62:44:8c:55:64:17:ec:7f:d8: db:29:a2:3f:8b:88:0a:6b:9d:10:10:7c:7c:14:65: 73:68:ab:99:c9:17:d2:09:a1:95:36:a3:c9:34:e0: dc:99:9a:0e:f9:79:9e:fc:e7:d9:1a:35:57:86:78: 1b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:60:25:F1:FA:7D:B4:AD:BA:97:3D:88:A7:85:5A:A9:0E:E2:AD:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e218169e-d661-33ed-b65c-0a3b861e3023.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 136.228.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:0a:48:89:7b:bc:58:67:c5:03:71:f7:09:82:af:28:0d:4b: 69:61:b1:b6:ef:50:6f:92:5e:bb:26:63:d0:59:35:04:63:ce: dc:1b:95:15:98:0a:27:05:bc:be:69:ad:ce:ba:ba:b3:68:1a: b4:fb:cf:c3:63:b8:17:8e:e0:2b:7f:64:b0:96:76:a9:ed:e0: d5:aa:89:8a:83:44:ba:59:6e:cb:e5:91:d0:fa:9a:09:f7:21: cc:be:01:9d:80:3e:9d:bb:ad:4c:a3:66:31:92:8c:df:cb:26: 73:30:a4:37:77:61:65:dd:31:89:2e:1e:4c:f6:ae:fc:39:c5: 99:2f:1b:ba:ff:55:81:6d:dc:5e:a2:90:59:33:91:3e:a6:1a: 3a:eb:f0:c4:fb:05:94:8f:b6:38:5e:eb:8e:a5:a0:77:5c:89: 8b:80:2a:86:30:16:d1:a4:0c:92:8b:8a:d0:03:4b:04:83:e9: 53:2c:5a:fa:36:a8:f2:e5:c0:f9:46:8a:ea:33:6c:a5:03:a2: 95:48:be:eb:fc:73:25:1f:1f:aa:bd:86:95:25:65:67:62:b9: 5c:b1:60:53:30:df:3a:a3:b1:50:b8:3c:a0:ad:ea:c5:41:74: c7:fc:4d:fa:7e:e1:e6:0a:35:d8:7a:57:de:d2:40:53:7c:6e: c6:1a:ba:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHaax8IkXdVtynNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk ZWRjOTZiNDgtY2Q2Zi00Nzk2LWJmNTMtM2YyZTk1MTRlZWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMphBAYxXXdpQh4s+nAHASM55ZXwn31p0Ckd JCyUHAG9rQsi2aGiCGYfjeSmr8SoBCxa+CLvRWsKGQ4fmeRsjmhEE3X3hQc7Jwoz xcrMgrPYBhK1Oqn8Cx75nF3P/RPozwNBr2kBWauh+Il2Kg16DEgzMV8iGjxPjUU1 SSdl1FCfa4BqdP62borXrbHWb/Iokvg42kczvgo3VKhxf02AyYco3+3aIDMd4n1S PudMISI3YySLG0IloqKTHwAHVWHUuFYCJ8ExoCxiRIxVZBfsf9jbKaI/i4gKa50Q EHx8FGVzaKuZyRfSCaGVNqPJNODcmZoO+Xme/OfZGjVXhngb3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBgJfH6fbStupc9iKeFWqkO4q11MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvZTIxODE2OWUtZDY2MS0z M2VkLWI2NWMtMGEzYjg2MWUzMDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiOT8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgKSIl7vFhnxQNx9wmCrygNS2lhsbbvUG+SXrsmY9BZNQRjztwblRWY CicFvL5prc66urNoGrT7z8NjuBeO4Ct/ZLCWdqnt4NWqiYqDRLpZbsvlkdD6mgn3 Icy+AZ2APp27rUyjZjGSjN/LJnMwpDd3YWXdMYkuHkz2rvw5xZkvG7r/VYFt3F6i kFkzkT6mGjrr8MT7BZSPtjhe646loHdciYuAKoYwFtGkDJKLitADSwSD6VMsWvo2 qPLlwPlGiuozbKUDopVIvuv8cyUfH6q9hpUlZWdiuVyxYFMw3zqjsVC4PKCt6sVB dMf8Tfp+4eYKNdh6V97SQFN8bsYaujM= -----END CERTIFICATE-----Generated at Mon Apr 28 14:28:07 2025 by rpki-client