$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/37c207ef-3109-390a-8c00-0f9195cf738d.roa File: 37c207ef-3109-390a-8c00-0f9195cf738d.roa (raw, json) Hash identifier: pWIfJbq7K87KuwxFRfHMkS0n4xpeAlr1V42G6Efr5T8= Subject key identifier: 63:9E:A4:92:6D:5A:56:BE:49:86:4B:14:1A:20:A8:AB:6B:98:6F:9D Certificate issuer: /CN=a20363da-11e1-47d9-ac51-fe156737c8bb Certificate serial: 010D0C9F43285849A61F45ECE939FD96B1D7C400 Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/37c207ef-3109-390a-8c00-0f9195cf738d.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 55039 IP address blocks: 199.231.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:45:ec:e9:39:fd:96:b1:d7:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=c59a0efa-e0e9-411c-9e71-ac2460b7c9f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:af:99:5a:a1:95:33:22:8a:c9:39:75:df:c3: 52:84:2d:03:16:5c:ea:dc:e3:ca:dd:67:1e:8a:f6: 31:3b:ad:26:6d:6d:ac:90:a7:cb:bc:e7:e9:d0:24: fc:31:ea:06:c4:27:88:29:6d:e7:d2:6f:5d:be:e8: 7b:c2:d3:d9:fe:f2:cc:df:7e:92:d5:6b:e1:7c:88: a6:d5:40:cf:44:8a:c3:42:8f:1d:74:c1:52:45:df: 25:31:2e:57:79:9d:dc:31:43:6e:6b:18:0b:fd:3a: fc:4a:30:8e:c7:81:52:ed:a4:53:1c:78:87:45:6e: 3e:b2:f4:b1:38:08:92:f8:35:36:fa:ef:58:e6:e6: dc:12:13:96:1e:43:a4:e6:6a:cb:74:fb:4a:7c:93: 6c:6f:4e:62:21:f6:e9:2e:fd:a7:ac:2d:80:c6:ee: 44:d8:3e:f3:51:7d:86:db:3b:0c:6f:36:0a:92:c8: d0:4b:11:d1:0d:c9:9e:a4:e8:ef:da:3e:b4:1a:33: 9a:aa:7e:b0:6a:95:9c:dd:6d:ad:a9:d2:2e:99:16: 30:a9:08:e5:47:ce:01:b3:fb:9b:c6:6e:b3:ed:60: 79:2c:e9:4b:ba:1d:6c:2c:bd:fd:90:b7:6f:f9:51: c1:78:08:bd:dc:cb:1a:d9:01:04:58:b8:11:9b:22: c1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9E:A4:92:6D:5A:56:BE:49:86:4B:14:1A:20:A8:AB:6B:98:6F:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/37c207ef-3109-390a-8c00-0f9195cf738d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl X509v3 Authority Key Identifier: keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer sbgp-ipAddrBlock: critical IPv4: 199.231.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:7e:23:e6:b5:b1:58:3f:e5:ea:80:bc:34:14:12:4c:47:63: 50:fe:3e:9d:6e:8a:de:65:e0:db:40:08:6b:27:cb:3c:54:30: db:ae:7e:2f:7b:e0:99:37:99:59:ac:10:80:0a:49:9a:8a:4b: 48:49:ab:5e:8e:25:dd:82:8b:52:a2:02:cc:a6:ae:e2:12:28: e2:5f:fd:2a:6d:19:f5:e6:be:e9:2a:7a:ea:22:5b:66:81:5f: 15:af:99:53:d0:6c:44:57:a5:91:43:89:3d:8f:8a:71:04:15: 9c:14:68:f7:40:8a:25:12:bf:46:97:1e:f1:47:c0:02:fa:3c: e4:96:a8:ad:d0:c0:3c:3a:14:ec:d5:9d:e5:83:97:2d:18:8a: 0b:7f:5a:8f:94:a5:72:7d:8a:c1:21:24:76:d4:97:88:3d:af: 21:1c:9c:c3:c0:3b:e3:62:18:80:4c:c4:e4:95:c9:f7:cf:26: 5f:29:10:42:ae:48:3b:87:b7:d9:1a:cf:24:3f:62:27:89:e6: 76:e8:84:b7:ac:f1:f6:4b:b1:dc:df:32:d7:9f:9f:29:41:e1: e6:2d:14:54:37:bd:7d:3e:11:9b:4b:09:33:18:74:da:ac:fc: 18:f2:13:02:3f:81:d5:d8:cc:62:7b:8b:65:85:f3:1b:a4:82: ac:b7:03:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmH0Xs6Tn9lrHXxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwMzYzZGEtMTFlMS00N2Q5LWFjNTEtZmUxNTY3Mzdj OGJiMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk YzU5YTBlZmEtZTBlOS00MTFjLTllNzEtYWMyNDYwYjdjOWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgK+ZWqGVMyKKyTl138NShC0DFlzq3OPK3Wce ivYxO60mbW2skKfLvOfp0CT8MeoGxCeIKW3n0m9dvuh7wtPZ/vLM336S1WvhfIim 1UDPRIrDQo8ddMFSRd8lMS5XeZ3cMUNuaxgL/Tr8SjCOx4FS7aRTHHiHRW4+svSx OAiS+DU2+u9Y5ubcEhOWHkOk5mrLdPtKfJNsb05iIfbpLv2nrC2Axu5E2D7zUX2G 2zsMbzYKksjQSxHRDcmepOjv2j60GjOaqn6wapWc3W2tqdIumRYwqQjlR84Bs/ub xm6z7WB5LOlLuh1sLL39kLdv+VHBeAi93Msa2QEEWLgRmyLBjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOepJJtWla+SYZLFBogqKtrmG+dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAz NjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1NjczN2M4YmIvMzdjMjA3ZWYtMzEwOS0z OTBhLThjMDAtMGY5MTk1Y2Y3MzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTIwMzYzZGEtMTFlMS00N2Q5LWFj NTEtZmUxNTY3MzdjOGJiL2EyMDM2M2RhLTExZTEtNDdkOS1hYzUxLWZlMTU2NzM3 YzhiYi5jcmwwHwYDVR0jBBgwFoAU00Sj8uDd7uXT1A4v3OrfYK5roBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAzNjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1 NjczN2M4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+f4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEt+I+a1sVg/5eqAvDQUEkxHY1D+Pp1uit5l4NtACGsnyzxUMNuufi97 4Jk3mVmsEIAKSZqKS0hJq16OJd2Ci1KiAsymruISKOJf/SptGfXmvukqeuoiW2aB XxWvmVPQbERXpZFDiT2PinEEFZwUaPdAiiUSv0aXHvFHwAL6POSWqK3QwDw6FOzV neWDly0Yigt/Wo+UpXJ9isEhJHbUl4g9ryEcnMPAO+NiGIBMxOSVyffPJl8pEEKu SDuHt9kazyQ/YieJ5nbohLes8fZLsdzfMtefnylB4eYtFFQ3vX0+EZtLCTMYdNqs /BjyEwI/gdXYzGJ7i2WF8xukgqy3Ays= -----END CERTIFICATE-----Generated at Tue Apr 29 10:20:12 2025 by rpki-client