$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a38a1364-8201-35d7-b3cf-83ad2b23224a.roa File: a38a1364-8201-35d7-b3cf-83ad2b23224a.roa (raw, json) Hash identifier: 7XB7hp02azddLgnF5NeqVwtpnTbemv5gFTW9Tb/s6oE= Subject key identifier: 56:CD:3E:D1:9C:C6:F8:B0:12:91:C2:DB:41:C5:F8:1B:DE:6C:A4:71 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584973DEE546843D149938B29300 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a38a1364-8201-35d7-b3cf-83ad2b23224a.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 53813 IP address blocks: 136.226.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:e5:46:84:3d:14:99:38:b2:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=2e6aee0e-d099-4640-bb8c-854cf9ee8a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:68:bc:df:fe:e5:9c:9a:1a:6d:37:d1:90:89: a6:66:dc:d0:e5:d2:7e:e1:17:2e:5e:35:af:6d:ce: 85:76:4a:ac:12:64:9c:a1:d9:90:bf:81:5f:3f:a6: 8c:a7:5b:3a:2d:2f:d9:3c:fd:e5:9b:9f:95:ba:f8: 73:38:56:d1:d4:6d:e5:33:bf:a6:f8:0a:eb:66:74: 09:b8:72:9f:f9:6d:d5:e4:5e:02:69:df:fb:9e:2e: 7f:97:55:3a:39:da:c8:06:f1:54:f4:5a:f8:59:e6: ec:f1:49:15:2c:6a:92:0c:6d:15:1c:f5:48:a6:85: 3b:42:89:47:07:0d:05:67:b9:5f:f3:cf:9d:ba:b0: 74:2c:e9:63:f2:e9:45:71:dc:f3:b4:9d:26:12:af: 15:0c:9f:5e:1a:ab:ad:a1:70:7a:73:1a:a2:1c:06: 87:2f:d4:a9:f2:ec:98:b0:bf:7e:86:8b:c5:24:f5: 9e:bb:eb:fe:13:11:eb:4c:27:cc:72:ce:a6:0d:d3: c3:40:2f:08:b4:e0:88:f8:9e:38:10:d3:a9:97:45: 58:03:a0:bb:9c:3e:88:93:6b:e3:b7:5f:23:2a:d4: a2:36:d6:84:31:d7:d9:d5:ed:47:25:11:72:aa:76: 3d:ef:03:96:21:33:d1:64:fc:9a:9d:28:de:c2:34: 0d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:CD:3E:D1:9C:C6:F8:B0:12:91:C2:DB:41:C5:F8:1B:DE:6C:A4:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a38a1364-8201-35d7-b3cf-83ad2b23224a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:59:26:29:d8:20:3c:68:51:cd:13:2c:64:6c:8e:98:e4:0f: 23:ca:76:b0:20:fc:d1:7a:98:4c:62:5a:81:0c:48:ba:39:c5: 9d:ab:22:60:16:61:9c:be:17:08:f6:7d:5f:93:fa:89:9b:a8: f9:ce:bd:44:32:9d:79:72:f0:c3:8e:e9:75:9c:e0:a6:ab:df: b3:a8:e3:6a:af:68:c2:8e:21:88:16:94:fc:37:47:8e:eb:cc: e7:b7:99:9d:fc:4e:b4:29:68:c6:33:a3:4d:84:0f:c1:5b:26: 94:33:87:9c:81:78:02:f9:4f:3f:8c:90:71:c5:6d:d0:cc:a0: d7:74:a7:8b:c6:f8:9e:a4:c9:26:48:97:65:dd:ae:ae:3f:75: 9f:a8:7a:fd:52:9c:79:be:bb:1e:12:bf:48:e2:fb:57:32:e6: 73:07:b3:34:13:fb:d8:52:93:fe:cd:2d:1c:48:c6:96:4c:3f: c0:e7:e1:b6:b3:df:3f:97:77:8b:46:9a:87:e3:25:6c:a7:e5: d1:9e:7e:2f:6e:69:5d:30:d1:2a:f8:ee:eb:b9:49:90:0f:09: c6:61:c9:b8:5e:b5:a1:93:8c:8e:c6:61:f7:63:1c:0a:23:c9: 5d:1f:03:ee:1a:9a:65:92:6c:e0:2f:90:b0:28:aa:f0:ac:1f: fb:cf:d0:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3uVGhD0UmTiykwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk MmU2YWVlMGUtZDA5OS00NjQwLWJiOGMtODU0Y2Y5ZWU4YTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymi83/7lnJoabTfRkImmZtzQ5dJ+4RcuXjWv bc6FdkqsEmScodmQv4FfP6aMp1s6LS/ZPP3lm5+VuvhzOFbR1G3lM7+m+ArrZnQJ uHKf+W3V5F4Cad/7ni5/l1U6OdrIBvFU9Fr4Webs8UkVLGqSDG0VHPVIpoU7QolH Bw0FZ7lf88+durB0LOlj8ulFcdzztJ0mEq8VDJ9eGqutoXB6cxqiHAaHL9Sp8uyY sL9+hovFJPWeu+v+ExHrTCfMcs6mDdPDQC8ItOCI+J44ENOpl0VYA6C7nD6Ik2vj t18jKtSiNtaEMdfZ1e1HJRFyqnY97wOWITPRZPyanSjewjQNLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbNPtGcxviwEpHC20HF+BvebKRxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYTM4YTEzNjQtODIwMS0z NWQ3LWIzY2YtODNhZDJiMjMyMjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOLoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpZJinYIDxoUc0TLGRsjpjkDyPKdrAg/NF6mExiWoEMSLo5xZ2rImAW YZy+Fwj2fV+T+ombqPnOvUQynXly8MOO6XWc4Kar37Oo42qvaMKOIYgWlPw3R47r zOe3mZ38TrQpaMYzo02ED8FbJpQzh5yBeAL5Tz+MkHHFbdDMoNd0p4vG+J6kySZI l2Xdrq4/dZ+oev1SnHm+ux4Sv0ji+1cy5nMHszQT+9hSk/7NLRxIxpZMP8Dn4baz 3z+Xd4tGmofjJWyn5dGefi9uaV0w0Sr47uu5SZAPCcZhybhetaGTjI7GYfdjHAoj yV0fA+4ammWSbOAvkLAoqvCsH/vP0GE= -----END CERTIFICATE-----Generated at Mon Apr 28 08:35:16 2025 by rpki-client