$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/3c900b67-1d99-32dc-857b-856cecf8fac7.roa File: 3c900b67-1d99-32dc-857b-856cecf8fac7.roa (raw, json) Hash identifier: oDD3hJzCAVA1YZqIuguxA6OzzIFhupzmyEx4QinsgHk= Subject key identifier: B3:9B:5E:87:4C:41:27:C7:27:D4:87:32:D5:1B:2A:1B:0F:C4:58:BC Certificate issuer: /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Certificate serial: 010D0C9F432858496CE443F7148ECABB696EA380 Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/3c900b67-1d99-32dc-857b-856cecf8fac7.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 10103 IP address blocks: 216.40.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:43:f7:14:8e:ca:bb:69:6e:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=87553a1a-d017-4920-aea2-6a9e201f758b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1a:35:98:a8:e7:fe:22:27:9a:31:2a:a9:c2: 58:a5:11:55:e9:6b:bd:af:27:48:78:a3:2b:a7:0f: a9:ed:0d:37:4c:be:12:e1:13:b6:4d:62:35:51:48: ed:f2:c3:4f:1c:2d:05:76:cf:c6:5e:db:39:79:75: 73:c3:56:27:8f:af:10:f8:94:4f:5d:46:f7:b1:a9: 79:25:b9:21:d7:b5:e1:13:84:b1:3d:2f:93:f7:e2: 50:9c:7c:6c:b2:18:64:09:51:7a:cc:76:9f:2c:b5: 1c:a1:f3:5a:be:53:f1:78:3a:18:16:03:f9:d8:88: 9f:44:58:e9:dc:02:f5:42:67:85:97:80:d5:8c:8c: 34:5b:b6:0f:b9:b4:04:73:82:c4:cc:7b:72:66:a9: e2:6c:2a:77:3a:a8:19:2a:71:c4:c2:b6:4d:57:14: 57:9c:c9:7d:bc:3d:5a:6b:a4:00:36:89:60:fb:e8: 05:38:6b:1c:79:31:8c:a6:d3:a8:80:01:e6:de:8b: cf:8d:c5:32:46:16:3a:67:72:8f:c5:51:ba:44:6e: 33:d8:63:33:75:6a:4c:75:05:a0:42:f0:e8:4b:c8: a0:97:0a:21:93:ff:0a:b7:b5:b6:94:e1:c8:c6:bf: 0a:3c:52:63:14:48:b3:82:5a:51:51:98:39:05:c9: 22:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9B:5E:87:4C:41:27:C7:27:D4:87:32:D5:1B:2A:1B:0F:C4:58:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/3c900b67-1d99-32dc-857b-856cecf8fac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl X509v3 Authority Key Identifier: keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer sbgp-ipAddrBlock: critical IPv4: 216.40.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:42:79:6a:cd:09:4f:02:59:dc:9f:72:91:2e:0a:e1:32:1e: 12:75:71:b5:b5:10:ce:81:b8:d8:ac:a0:83:29:8c:74:f3:8d: 03:9a:12:20:26:8d:8d:fd:e8:6e:02:aa:20:7a:45:03:8c:d8: 6f:34:52:e5:64:4b:8f:66:ff:d7:12:e8:04:5e:2f:40:b2:20: 16:ee:6c:31:04:eb:d4:cb:9e:ad:bd:be:6d:08:18:d4:08:23: a8:d0:ed:25:81:ff:a6:dd:68:23:62:09:d6:92:e7:c1:ed:c6: 12:aa:06:d1:59:11:b3:aa:b5:19:d5:60:eb:6b:3b:a8:e3:4f: b6:ba:10:d0:b3:a5:08:46:f9:85:c6:09:da:78:63:49:aa:59: 3a:cc:66:9d:88:9d:ba:1b:31:89:7f:a4:44:5b:b2:51:6e:7f: 46:35:7b:d9:c0:b6:bc:e9:d3:ce:94:bf:14:82:14:c8:99:04: df:c4:4a:6e:22:de:91:f3:ff:db:48:dc:db:42:d1:37:91:97: 5d:12:09:84:a1:fa:2e:5f:c5:17:e9:a2:dd:fa:62:40:23:cf: a2:6a:97:69:93:4e:8d:5a:f5:31:16:7a:df:8c:34:dc:75:33: 7c:aa:71:25:78:32:e3:33:43:0d:cd:c8:19:ea:a7:f3:1a:e8: 1f:81:9e:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5EP3FI7Ku2luo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZjZGI2OTctZDIwZC00N2U3LTlmOWUtYzQxNzRkYmMw YmYyMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk ODc1NTNhMWEtZDAxNy00OTIwLWFlYTItNmE5ZTIwMWY3NThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhho1mKjn/iInmjEqqcJYpRFV6Wu9rydIeKMr pw+p7Q03TL4S4RO2TWI1UUjt8sNPHC0Fds/GXts5eXVzw1Ynj68Q+JRPXUb3sal5 Jbkh17XhE4SxPS+T9+JQnHxsshhkCVF6zHafLLUcofNavlPxeDoYFgP52IifRFjp 3AL1QmeFl4DVjIw0W7YPubQEc4LEzHtyZqnibCp3OqgZKnHEwrZNVxRXnMl9vD1a a6QANolg++gFOGsceTGMptOogAHm3ovPjcUyRhY6Z3KPxVG6RG4z2GMzdWpMdQWg QvDoS8iglwohk/8Kt7W2lOHIxr8KPFJjFEizglpRUZg5Bcki7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLObXodMQSfHJ9SHMtUbKhsPxFi8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNmNk YjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3NGRiYzBiZjIvM2M5MDBiNjctMWQ5OS0z MmRjLTg1N2ItODU2Y2VjZjhmYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzZjZGI2OTctZDIwZC00N2U3LTlm OWUtYzQxNzRkYmMwYmYyLzM2Y2RiNjk3LWQyMGQtNDdlNy05ZjllLWM0MTc0ZGJj MGJmMi5jcmwwHwYDVR0jBBgwFoAU4OlXFY9Fk7bv2cStPnfqph/s6jUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNmNkYjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3 NGRiYzBiZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ChEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhCeWrNCU8CWdyfcpEuCuEyHhJ1cbW1EM6BuNisoIMpjHTzjQOaEiAm jY396G4CqiB6RQOM2G80UuVkS49m/9cS6AReL0CyIBbubDEE69TLnq29vm0IGNQI I6jQ7SWB/6bdaCNiCdaS58HtxhKqBtFZEbOqtRnVYOtrO6jjT7a6ENCzpQhG+YXG Cdp4Y0mqWTrMZp2InbobMYl/pERbslFuf0Y1e9nAtrzp086UvxSCFMiZBN/ESm4i 3pHz/9tI3NtC0TeRl10SCYSh+i5fxRfpot36YkAjz6Jql2mTTo1a9TEWet+MNNx1 M3yqcSV4MuMzQw3NyBnqp/Ma6B+Bngk= -----END CERTIFICATE-----Generated at Sat Apr 26 12:53:57 2025 by rpki-client