$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/e92cdb64-47cb-3fac-8940-fe72b2f480d4.roa File: e92cdb64-47cb-3fac-8940-fe72b2f480d4.roa (raw, json) Hash identifier: ebz37vFBR90BU9w9gwh/JI8PJY5M2gFFJgqpZ7wrZH4= Subject key identifier: 1C:AB:77:49:FA:4B:1A:CC:B3:80:D7:E0:AB:B7:3B:76:22:C2:B7:8B Certificate issuer: /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Certificate serial: 010D0C9F432858494CC94E860FAB743AC336B5C0 Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/e92cdb64-47cb-3fac-8940-fe72b2f480d4.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 19740 IP address blocks: 204.8.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:4e:86:0f:ab:74:3a:c3:36:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=d939bf0f-b9a8-4e51-8c6e-433eaa67d59b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:25:93:41:17:d4:1d:37:61:c3:36:3e:7b:71: 53:ed:3e:3c:f1:60:54:04:90:32:04:1d:ea:fb:81: 79:05:81:49:c3:0b:88:23:88:ce:25:8e:90:95:89: a2:db:a2:66:06:66:7c:8f:d6:dc:12:e1:34:68:e0: d2:83:52:02:e2:57:0c:61:e4:12:ed:ce:0b:a8:1b: f6:2f:6d:9e:8a:2e:c8:4a:88:9a:95:29:d8:f3:41: fd:80:5b:af:eb:c5:77:ef:64:ed:c0:17:41:f0:e2: 55:05:ab:fd:c2:0b:1f:3b:91:04:17:1d:08:91:fb: f0:6b:ee:e3:aa:b0:d2:1a:3e:6e:7d:35:ca:10:60: 33:2e:1a:dd:1c:30:30:af:03:c3:6e:09:3e:31:56: e5:36:b1:90:1f:db:89:ca:ba:0b:bf:96:b8:c0:4c: a0:25:57:b8:0a:05:05:ed:62:48:97:46:99:ad:44: cb:2d:fd:3d:f5:71:39:12:9b:ee:92:72:2f:08:13: 0c:40:6a:d2:49:a3:63:6f:76:22:a3:7c:61:df:fc: 8a:ca:74:82:c0:f8:3a:9a:f0:bf:e7:f5:4e:71:f3: 58:0e:40:12:f2:17:4b:33:e8:29:bc:c4:ad:da:b7: ce:6c:8a:4c:98:ed:e9:a1:b1:53:1b:a9:99:3b:2e: 07:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AB:77:49:FA:4B:1A:CC:B3:80:D7:E0:AB:B7:3B:76:22:C2:B7:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/e92cdb64-47cb-3fac-8940-fe72b2f480d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl X509v3 Authority Key Identifier: keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer sbgp-ipAddrBlock: critical IPv4: 204.8.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:9a:1a:4b:f5:41:09:f8:1b:07:63:a3:9e:f2:89:2f:aa:d1: a1:7e:c6:d6:10:ba:ae:81:4e:e5:7a:e7:fc:43:bd:98:5c:e0: 02:10:56:17:a0:c1:45:22:dc:cc:8a:6b:a7:6b:c0:79:55:85: ad:a6:db:73:5d:03:bc:e4:ba:89:a1:30:f4:87:b0:04:9c:09: 14:e0:3b:4c:6e:4c:68:bc:47:23:39:2e:f3:fc:87:72:ed:90: 6a:2a:ee:a0:02:4b:28:ee:e4:b9:2f:2c:c8:67:79:17:78:69: fe:73:2a:59:a9:9b:33:39:a4:79:aa:26:47:a5:94:a4:c2:8d: 41:f7:f8:2a:f4:d7:fc:7e:e2:4d:96:aa:5d:52:f1:3d:c3:79: cc:9b:26:49:8c:48:b2:e8:83:73:88:58:cf:ac:bf:ff:97:60: a0:40:00:43:f2:62:a6:bf:01:c1:8e:5e:2b:02:ad:70:3a:34: a8:d8:73:3d:37:da:a1:86:10:08:3c:9e:8f:9f:e9:f5:dd:ea: 10:8b:7f:6d:fb:4a:a5:14:6c:fa:cb:bf:12:27:a6:c3:c7:a4: e1:73:28:9e:0e:e9:85:6f:36:dc:09:27:21:0f:a9:d8:61:86: 99:ae:0d:6a:5f:71:a0:20:4e:d3:71:f5:ba:68:37:7e:f6:8e: fc:76:b6:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyU6GD6t0OsM2tcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyZGM2ZTctZmExYS00YWNmLWEwMzYtNWI0NDg3MTAw ZGU5MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk ZDkzOWJmMGYtYjlhOC00ZTUxLThjNmUtNDMzZWFhNjdkNTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySWTQRfUHTdhwzY+e3FT7T488WBUBJAyBB3q +4F5BYFJwwuII4jOJY6QlYmi26JmBmZ8j9bcEuE0aODSg1IC4lcMYeQS7c4LqBv2 L22eii7ISoialSnY80H9gFuv68V372TtwBdB8OJVBav9wgsfO5EEFx0Ikfvwa+7j qrDSGj5ufTXKEGAzLhrdHDAwrwPDbgk+MVblNrGQH9uJyroLv5a4wEygJVe4CgUF 7WJIl0aZrUTLLf099XE5EpvuknIvCBMMQGrSSaNjb3Yio3xh3/yKynSCwPg6mvC/ 5/VOcfNYDkAS8hdLM+gpvMSt2rfObIpMmO3pobFTG6mZOy4HJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByrd0n6SxrMs4DX4Ku3O3YiwreLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJk YzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0ODcxMDBkZTkvZTkyY2RiNjQtNDdjYi0z ZmFjLTg5NDAtZmU3MmIyZjQ4MGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjAyZGM2ZTctZmExYS00YWNmLWEw MzYtNWI0NDg3MTAwZGU5L2IwMmRjNmU3LWZhMWEtNGFjZi1hMDM2LTViNDQ4NzEw MGRlOS5jcmwwHwYDVR0jBBgwFoAUzajON082SuE49vB+z212scrE6D4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJkYzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0 ODcxMDBkZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzAiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGaGkv1QQn4Gwdjo57yiS+q0aF+xtYQuq6BTuV65/xDvZhc4AIQVheg wUUi3MyKa6drwHlVha2m23NdA7zkuomhMPSHsAScCRTgO0xuTGi8RyM5LvP8h3Lt kGoq7qACSyju5LkvLMhneRd4af5zKlmpmzM5pHmqJkellKTCjUH3+Cr01/x+4k2W ql1S8T3DecybJkmMSLLog3OIWM+sv/+XYKBAAEPyYqa/AcGOXisCrXA6NKjYcz03 2qGGEAg8no+f6fXd6hCLf237SqUUbPrLvxInpsPHpOFzKJ4O6YVvNtwJJyEPqdhh hpmuDWpfcaAgTtNx9bpoN372jvx2tvU= -----END CERTIFICATE-----Generated at Sun Apr 27 12:59:45 2025 by rpki-client