$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/6a3dff99-2f62-304e-ae1f-aa03eabe7f8d.roa File: 6a3dff99-2f62-304e-ae1f-aa03eabe7f8d.roa (raw, json) Hash identifier: Wicb8f6Ds2ikK23DX+x2uNbfHgGgLPl6Cm7qRDYVfNo= Subject key identifier: 93:0A:2B:82:7C:D4:20:5D:0D:5A:E5:6E:7A:F5:35:92:05:D3:A5:A7 Certificate issuer: /CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247 Certificate serial: 010D0C9F43285848F22C66B4B5BE0E4AB39084A0 Authority key identifier: 42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/6a3dff99-2f62-304e-ae1f-aa03eabe7f8d.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 17216 IP address blocks: 192.151.136.0/21 maxlen: 24 198.24.12.0/22 maxlen: 24 199.47.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:66:b4:b5:be:0e:4a:b3:90:84:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=c67ca97f-8549-417b-9f27-c73c0dc9481e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7f:f7:eb:da:fe:3c:d2:df:c9:64:07:25:c5: 21:8c:c6:73:46:1f:30:0d:a3:49:35:f6:1a:65:f0: 36:ac:2c:35:f5:09:12:77:7d:48:36:c7:14:39:b7: c3:7f:be:ca:6a:15:76:fd:99:12:f9:f7:a6:6e:e3: 94:01:80:ab:f1:e5:36:0b:d4:76:97:db:91:ed:7f: 88:e8:a7:1e:fa:3a:eb:6a:df:31:07:99:7e:e4:ad: 76:bf:68:f9:31:a8:c6:f0:4d:19:9e:2c:18:d4:94: a3:05:9f:a7:f6:90:7c:fe:89:c0:9b:eb:1b:fb:a2: 8b:fd:2a:2c:c2:b6:ab:79:7d:45:74:ca:d5:33:54: 5d:34:16:dd:51:b2:59:d0:29:ad:91:ba:46:c4:96: 80:d7:99:28:0f:90:86:93:bc:cc:2d:ba:67:05:09: 6b:fb:f1:21:d4:e1:65:65:d9:ba:f9:5f:e9:f2:1a: 0f:7b:15:47:f2:e3:0f:fc:ea:c5:00:47:a5:0a:83: b6:ef:ce:9d:25:c7:6b:b8:2d:fa:79:b6:b9:cb:01: aa:3f:86:17:a3:32:52:3d:1f:ca:ec:cd:21:e6:a4: 75:ba:5d:62:d9:ca:16:f2:c1:64:67:6b:94:22:b5: a0:56:29:e3:9e:56:f8:51:07:4d:d1:5e:19:72:e7: 18:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:0A:2B:82:7C:D4:20:5D:0D:5A:E5:6E:7A:F5:35:92:05:D3:A5:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/6a3dff99-2f62-304e-ae1f-aa03eabe7f8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.crl X509v3 Authority Key Identifier: keyid:42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer sbgp-ipAddrBlock: critical IPv4: 192.151.136.0/21 198.24.12.0/22 199.47.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:68:ba:8f:31:41:fa:50:fc:d1:ac:d0:39:62:40:f0:04:01: 17:ca:df:8c:47:7b:fb:29:51:fe:94:f2:56:46:fd:36:47:1d: f2:9b:01:13:8f:6a:58:9f:95:5a:34:b4:bb:03:c8:21:8f:13: b8:21:1b:4b:e0:44:66:ef:8c:24:45:27:af:b0:88:9a:f4:a8: ce:b4:dd:12:51:61:80:07:53:1f:97:09:2d:66:bb:43:61:87: 85:2b:05:98:ff:8c:f6:78:0c:bd:a4:f4:cd:21:fd:2f:82:51: 00:3f:03:ed:cb:76:a5:ef:92:66:7a:88:5c:45:e5:52:c6:d7: 30:ac:23:bd:23:21:21:1f:99:37:c8:51:eb:3a:3d:f9:73:b9: 4d:58:fd:ea:c6:26:da:81:94:54:76:f7:45:e3:c2:55:ae:c4: 41:d7:a3:f8:5b:cf:c3:ec:b3:2e:8e:31:e6:a4:99:df:f5:d0: c6:5f:b2:78:c3:50:24:e7:75:f0:eb:2b:a8:d9:ec:0c:50:30: df:9a:5a:44:d0:d0:c3:32:b1:d8:ce:b3:fa:55:72:5c:42:a8: 2e:d1:19:9a:81:cc:dd:05:7a:be:01:4f:94:fb:a5:3f:f0:8e: bb:77:47:4f:4f:db:70:be:91:da:55:f8:fe:a2:d0:64:73:d3: 0f:b4:e6:8c -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEjyLGa0tb4OSrOQhKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiYjk3NzUtOTYzMS00YmU0LWE5YzYtMTFiOGRkZmU2 MjQ3MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk YzY3Y2E5N2YtODU0OS00MTdiLTlmMjctYzczYzBkYzk0ODFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3n/369r+PNLfyWQHJcUhjMZzRh8wDaNJNfYa ZfA2rCw19QkSd31INscUObfDf77KahV2/ZkS+fembuOUAYCr8eU2C9R2l9uR7X+I 6Kce+jrrat8xB5l+5K12v2j5MajG8E0ZniwY1JSjBZ+n9pB8/onAm+sb+6KL/Sos wrareX1FdMrVM1RdNBbdUbJZ0CmtkbpGxJaA15koD5CGk7zMLbpnBQlr+/Eh1OFl Zdm6+V/p8hoPexVH8uMP/OrFAEelCoO2786dJcdruC36eba5ywGqP4YXozJSPR/K 7M0h5qR1ul1i2coW8sFkZ2uUIrWgVinjnlb4UQdN0V4ZcucYowIDAQABo4IDYTCC A10wHQYDVR0OBBYEFJMKK4J81CBdDVrlbnr1NZIF06WnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lN2Ji OTc3NS05NjMxLTRiZTQtYTljNi0xMWI4ZGRmZTYyNDcvNmEzZGZmOTktMmY2Mi0z MDRlLWFlMWYtYWEwM2VhYmU3ZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTdiYjk3NzUtOTYzMS00YmU0LWE5 YzYtMTFiOGRkZmU2MjQ3L2U3YmI5Nzc1LTk2MzEtNGJlNC1hOWM2LTExYjhkZGZl NjI0Ny5jcmwwHwYDVR0jBBgwFoAUQs7CZnUe84HwJTWBQIOwBNdo65kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lN2JiOTc3NS05NjMxLTRiZTQtYTljNi0xMWI4 ZGRmZTYyNDcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDwJeIAwQC xhgMAwQDxy/gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAJxouo8xQfpQ/NGs0DliQPAEARfK34xHe/spUf6U 8lZG/TZHHfKbAROPaliflVo0tLsDyCGPE7ghG0vgRGbvjCRFJ6+wiJr0qM603RJR YYAHUx+XCS1mu0Nhh4UrBZj/jPZ4DL2k9M0h/S+CUQA/A+3LdqXvkmZ6iFxF5VLG 1zCsI70jISEfmTfIUes6PflzuU1Y/erGJtqBlFR290XjwlWuxEHXo/hbz8Pssy6O Meakmd/10MZfsnjDUCTndfDrK6jZ7AxQMN+aWkTQ0MMysdjOs/pVclxCqC7RGZqB zN0Fer4BT5T7pT/wjrt3R09P23C+kdpV+P6i0GRz0w+05ow= -----END CERTIFICATE-----Generated at Mon Apr 28 02:08:20 2025 by rpki-client