$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/dd8077fc-d9c9-386e-b9d5-deab53026be8.roa File: dd8077fc-d9c9-386e-b9d5-deab53026be8.roa (raw, json) Hash identifier: 2oKK5Jok6coLIO4bGkDCYQ7SjeHzzUn4sTAFbDz82Wg= Subject key identifier: CE:9D:7A:E9:44:3C:1A:80:D2:DC:8A:28:DD:4A:3C:75:6D:69:60:A7 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F43285848DA70FFBC3987519E8640C980 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/dd8077fc-d9c9-386e-b9d5-deab53026be8.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 5645 IP address blocks: 207.136.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:70:ff:bc:39:87:51:9e:86:40:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=eced0443-95b7-4b5b-9012-81a4ea65fe6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:95:4e:d9:b2:45:b8:c1:38:fd:06:e9:36:50: ed:06:74:ca:70:27:fd:81:a2:39:9e:f4:b5:99:00: 29:82:b5:0f:46:69:59:de:dc:85:86:11:2a:da:5d: cd:ea:c9:bb:c6:ab:51:9b:5d:41:49:c6:a3:9b:da: 8b:9a:84:e3:55:c9:e6:e5:69:a0:18:d9:66:d1:85: 73:22:36:57:06:76:39:b7:90:80:3c:de:58:42:3e: 01:e8:bd:80:b5:08:25:ae:a8:20:1a:97:fa:ff:7a: dd:e4:7a:19:84:91:5a:21:f9:99:bf:31:9e:62:4b: 66:30:ec:9f:28:ab:99:39:87:19:fc:75:8b:de:dd: 71:51:80:14:67:45:ac:32:6f:b1:cf:c2:f9:ff:ea: 81:61:f6:cb:59:4b:d8:86:3b:b1:bf:40:cc:42:1e: 41:07:ad:73:68:d9:33:a0:3e:47:1e:0b:33:bc:b4: c8:16:fc:a5:a6:80:90:6a:3b:37:b9:9d:0d:a9:6e: ac:e0:6f:d2:d4:19:b3:e0:f3:5b:fb:de:74:4b:37: 3e:b3:71:18:48:84:02:87:6f:e5:a9:b5:38:07:1e: 20:a0:7e:0d:c5:e1:c3:7d:ee:1a:b0:2b:87:cd:31: 0d:81:6a:b9:56:76:98:07:f3:d4:ce:c7:2d:5a:9c: c3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9D:7A:E9:44:3C:1A:80:D2:DC:8A:28:DD:4A:3C:75:6D:69:60:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/dd8077fc-d9c9-386e-b9d5-deab53026be8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 207.136.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:c9:85:20:78:0a:a4:52:81:6b:e0:03:41:79:00:ee:79:a0: 56:d5:04:03:1a:45:07:f4:a4:e4:63:f7:72:90:36:01:6b:db: 39:20:cb:d1:75:bd:38:23:26:b6:2b:a2:b5:a0:42:5c:e0:bb: 18:50:3c:9a:6f:16:e5:af:7f:08:0e:c5:86:fe:53:48:37:99: c8:b3:90:7f:aa:5d:03:51:22:9f:8f:59:4b:a0:cd:34:b3:e9: 04:43:22:f1:24:26:6c:e2:4a:32:3d:3c:33:2c:64:38:41:43: 08:89:f3:36:01:bf:f8:3a:62:cd:48:15:65:6a:51:6b:33:87: f7:7c:11:30:8f:eb:2c:4d:20:1b:86:75:7e:22:72:24:bd:07: 24:59:91:cf:db:c3:9f:0d:80:38:53:9f:e5:4b:f5:91:21:59: c0:80:50:95:23:bc:05:10:27:3f:dc:ee:39:ad:e5:e5:8d:44: 1e:b9:41:79:f7:90:6b:b1:d3:2c:82:63:7b:7f:53:07:eb:5b: bd:e7:c1:83:a4:a8:f8:07:18:8f:a3:43:6d:7d:97:ef:2a:a2: 89:6f:98:7b:1e:62:ea:af:9b:8b:75:06:17:3f:fa:e9:bd:b9: 7d:b1:3e:fa:87:48:6d:f1:e8:cb:56:ed:ab:27:1f:6e:fd:3f: 7e:54:e3:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacP+8OYdRnoZAyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk ZWNlZDA0NDMtOTViNy00YjViLTkwMTItODFhNGVhNjVmZTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJVO2bJFuME4/QbpNlDtBnTKcCf9gaI5nvS1 mQApgrUPRmlZ3tyFhhEq2l3N6sm7xqtRm11BScajm9qLmoTjVcnm5WmgGNlm0YVz IjZXBnY5t5CAPN5YQj4B6L2AtQglrqggGpf6/3rd5HoZhJFaIfmZvzGeYktmMOyf KKuZOYcZ/HWL3t1xUYAUZ0WsMm+xz8L5/+qBYfbLWUvYhjuxv0DMQh5BB61zaNkz oD5HHgszvLTIFvylpoCQajs3uZ0NqW6s4G/S1Bmz4PNb+950Szc+s3EYSIQCh2/l qbU4Bx4goH4NxeHDfe4asCuHzTENgWq5VnaYB/PUzsctWpzDswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6deulEPBqA0tyKKN1KPHVtaWCnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvZGQ4MDc3ZmMtZDljOS0z ODZlLWI5ZDUtZGVhYjUzMDI2YmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGz4hAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/JhSB4CqRSgWvgA0F5AO55oFbVBAMaRQf0pORj93KQNgFr2zkgy9F1 vTgjJrYrorWgQlzguxhQPJpvFuWvfwgOxYb+U0g3mcizkH+qXQNRIp+PWUugzTSz 6QRDIvEkJmziSjI9PDMsZDhBQwiJ8zYBv/g6Ys1IFWVqUWszh/d8ETCP6yxNIBuG dX4iciS9ByRZkc/bw58NgDhTn+VL9ZEhWcCAUJUjvAUQJz/c7jmt5eWNRB65QXn3 kGux0yyCY3t/UwfrW73nwYOkqPgHGI+jQ219l+8qoolvmHseYuqvm4t1Bhc/+um9 uX2xPvqHSG3x6MtW7asnH279P35U4xI= -----END CERTIFICATE-----Generated at Tue Apr 29 23:29:36 2025 by rpki-client