$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/2d8ff043-0fe8-3c18-900d-798f7801a2f4.roa File: 2d8ff043-0fe8-3c18-900d-798f7801a2f4.roa (raw, json) Hash identifier: h7Q1xE5vLBqEIxF8l7JlQn44QHaGY+MujwwkA9mg1+I= Subject key identifier: 7C:5B:1E:0A:75:33:BA:71:8A:A7:84:5F:73:E4:B4:07:D1:84:20:11 Certificate issuer: /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4 Certificate serial: 010D0C9F43285849A784C21696FFCD2E0930E880 Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/2d8ff043-0fe8-3c18-900d-798f7801a2f4.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 3280 IP address blocks: 174.136.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c2:16:96:ff:cd:2e:09:30:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=330e9575-f8df-4646-b074-c513bb2091b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:19:8c:fe:0d:a1:e8:02:5c:6d:80:ab:17:2a: e8:ac:92:6d:28:16:e5:28:7c:05:9a:f5:b0:21:ae: 1e:a4:d7:7d:7a:39:ca:b6:4d:db:3a:27:9d:05:d1: 3e:54:43:e6:da:da:14:1e:9f:51:4b:b7:a9:33:31: 10:26:ae:f5:c3:07:f8:37:73:9a:29:24:83:19:22: 0b:ba:33:62:07:68:ae:1c:65:3a:d0:60:2c:f8:0c: 56:6f:35:18:9c:6c:ad:d1:eb:3a:33:4f:26:db:04: 58:67:fe:28:4a:3f:a3:6b:79:2c:3c:ae:34:22:a6: 6f:b3:85:78:14:83:b3:94:29:9b:44:f0:dd:56:94: 92:6d:5d:0b:90:44:81:fa:8d:80:f1:ba:d0:36:78: 5e:9d:d5:e7:16:e2:06:d6:1c:8a:f1:c0:1f:cc:dc: cc:eb:6a:7d:53:48:5d:09:70:63:31:2f:71:69:cb: a3:76:a8:2f:3e:cd:0e:9d:8f:44:a7:0e:2a:55:cd: 52:ae:12:c3:51:24:54:9a:00:ac:f7:16:14:b7:03: 47:73:79:40:52:c6:2d:03:4f:b6:56:f2:39:52:9a: b0:a1:b1:e5:84:b7:c1:4b:de:92:47:bc:59:f6:52: ad:60:7b:ca:ea:7d:8a:b0:62:c3:1d:74:d3:25:65: 08:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:5B:1E:0A:75:33:BA:71:8A:A7:84:5F:73:E4:B4:07:D1:84:20:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/2d8ff043-0fe8-3c18-900d-798f7801a2f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl X509v3 Authority Key Identifier: keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer sbgp-ipAddrBlock: critical IPv4: 174.136.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:31:18:bc:ea:25:f3:da:7e:e3:e3:c7:f4:c9:01:2e:39:18: aa:3d:9a:f3:f2:e7:41:9f:bc:ff:81:08:41:48:cd:c2:43:53: 75:41:77:89:71:4e:1d:6d:86:bb:f5:e4:13:4e:a9:92:bf:99: 58:fe:36:ec:e9:02:0d:12:b2:f2:ff:95:20:c6:10:70:45:7c: 26:61:71:f5:cc:6a:c8:72:c4:d3:75:f2:30:9a:3f:20:77:40: 51:69:be:41:7d:4b:10:8a:c3:1d:56:78:64:7d:db:c0:60:01: 31:91:11:5f:f7:24:9f:fc:dc:ab:46:9e:2f:bd:39:45:34:cf: 06:6a:40:db:14:ef:78:6e:ea:c8:a6:af:31:98:bc:cc:4a:3c: 12:3d:0f:0c:5d:37:bd:40:b5:2c:e2:85:0e:d2:9c:2e:fa:99: d4:09:cd:c1:56:4d:73:e1:38:da:6b:5d:ee:81:b7:ed:20:ac: 85:b9:9f:78:49:35:ec:82:7b:13:e1:05:83:a6:16:e0:4e:6e: c6:42:58:38:0c:8f:02:ec:74:90:1d:d8:96:90:15:88:6c:28: f8:bc:27:5e:e2:f8:26:10:09:21:83:c4:92:90:5a:87:ea:ef: 18:e2:76:a8:1a:8b:10:5c:02:45:a6:1f:99:f1:1e:35:23:a3: 6a:30:81:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMIWlv/NLgkw6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhmODUzNGYtNTdjZC00NWJhLWJmYTQtY2U2MDg0MjQ2 M2E0MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MzMwZTk1NzUtZjhkZi00NjQ2LWIwNzQtYzUxM2JiMjA5MWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghmM/g2h6AJcbYCrFyrorJJtKBblKHwFmvWw Ia4epNd9ejnKtk3bOiedBdE+VEPm2toUHp9RS7epMzEQJq71wwf4N3OaKSSDGSIL ujNiB2iuHGU60GAs+AxWbzUYnGyt0es6M08m2wRYZ/4oSj+ja3ksPK40IqZvs4V4 FIOzlCmbRPDdVpSSbV0LkESB+o2A8brQNnhendXnFuIG1hyK8cAfzNzM62p9U0hd CXBjMS9xacujdqgvPs0OnY9Epw4qVc1SrhLDUSRUmgCs9xYUtwNHc3lAUsYtA0+2 VvI5UpqwobHlhLfBS96SR7xZ9lKtYHvK6n2KsGLDHXTTJWUITQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxbHgp1M7pxiqeEX3PktAfRhCARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80OGY4 NTM0Zi01N2NkLTQ1YmEtYmZhNC1jZTYwODQyNDYzYTQvMmQ4ZmYwNDMtMGZlOC0z YzE4LTkwMGQtNzk4Zjc4MDFhMmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDhmODUzNGYtNTdjZC00NWJhLWJm YTQtY2U2MDg0MjQ2M2E0LzQ4Zjg1MzRmLTU3Y2QtNDViYS1iZmE0LWNlNjA4NDI0 NjNhNC5jcmwwHwYDVR0jBBgwFoAU6FPdCXJVOiBqm33uUEZSal9iZggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80OGY4NTM0Zi01N2NkLTQ1YmEtYmZhNC1jZTYw ODQyNDYzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArojJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIxGLzqJfPafuPjx/TJAS45GKo9mvPy50GfvP+BCEFIzcJDU3VBd4lx Th1thrv15BNOqZK/mVj+NuzpAg0SsvL/lSDGEHBFfCZhcfXMashyxNN18jCaPyB3 QFFpvkF9SxCKwx1WeGR928BgATGREV/3JJ/83KtGni+9OUU0zwZqQNsU73hu6sim rzGYvMxKPBI9DwxdN71AtSzihQ7SnC76mdQJzcFWTXPhONprXe6Bt+0grIW5n3hJ NeyCexPhBYOmFuBObsZCWDgMjwLsdJAd2JaQFYhsKPi8J17i+CYQCSGDxJKQWofq 7xjidqgaixBcAkWmH5nxHjUjo2owgUY= -----END CERTIFICATE-----Generated at Tue Apr 29 07:03:00 2025 by rpki-client