$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4a8c576e-2136-3a2e-8425-173d38a4127a.roa File: 4a8c576e-2136-3a2e-8425-173d38a4127a.roa (raw, json) Hash identifier: k+j9OzllytUEGxWw0bHUMZJvwYUeNX+aqc2/ANw6gy4= Subject key identifier: E5:C7:85:B6:11:C1:69:88:BB:AB:81:F2:A2:A8:D6:97:10:AB:78:2C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D164FE5A7060D8E9517C8280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4a8c576e-2136-3a2e-8425-173d38a4127a.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 0 IP address blocks: 69.36.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:64:fe:5a:70:60:d8:e9:51:7c:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=f712ba73-2957-4ffe-9c5b-1089f5846144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cc:7a:e7:24:35:15:c9:e8:7d:0a:e1:e8:08: 56:96:cf:a3:43:54:b2:6a:d3:2e:2a:e2:32:57:bb: a8:4a:73:d8:a3:ea:61:57:29:dd:f9:72:98:df:d4: 30:b5:bc:b7:bb:fd:a2:1a:d7:2e:8b:5d:ec:9d:e9: aa:09:03:93:d7:b0:a3:1e:a2:11:00:b5:a0:fd:17: c0:e5:61:c3:46:51:a1:77:ad:d7:df:43:68:9d:5c: 8d:db:50:19:b3:14:08:3f:94:60:f3:40:83:af:6c: 4d:62:f2:c1:aa:f0:89:3c:87:08:b2:ab:6e:c8:57: d8:b5:da:b3:0f:d8:98:f7:92:6f:52:e0:cf:cc:6a: ec:e2:a3:bf:db:a4:57:7a:b5:7c:ab:ca:e6:96:69: 14:fd:51:18:3c:11:f7:fe:1e:9c:18:ee:84:0f:50: 28:d1:50:23:34:cc:01:0a:1d:12:29:c0:67:4e:26: 32:b6:ee:b8:24:8b:9f:95:e3:9b:02:d7:9c:16:f0: 18:b8:5f:1b:20:59:4d:39:e7:ce:1f:10:a1:99:f2: 47:f8:91:ba:d0:b8:2c:46:f0:d2:59:11:23:a4:f5: 6d:62:4e:8d:1a:fe:83:c9:12:6f:9b:1f:9a:82:36: 1c:2c:a7:05:03:0c:45:35:6d:e9:3f:12:4c:0a:18: fa:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C7:85:B6:11:C1:69:88:BB:AB:81:F2:A2:A8:D6:97:10:AB:78:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4a8c576e-2136-3a2e-8425-173d38a4127a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 69.36.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:b0:87:f9:69:7b:c8:aa:24:fd:22:a2:40:9a:f4:e9:aa:5c: 2b:d9:1e:45:83:a2:ac:01:76:39:db:4b:2f:c7:78:79:15:f2: 0e:cf:04:f2:3f:80:f1:20:e9:4f:04:95:be:53:8c:d8:84:a3: e0:a6:f9:92:47:ad:64:04:94:71:16:14:0a:fb:6a:4b:9d:7e: e5:d4:45:ba:33:f3:59:98:15:21:0d:d9:20:b9:29:c0:89:99: cc:9b:5c:20:74:a1:93:ed:99:19:44:07:2a:e3:ff:63:4e:ac: 52:4c:a4:cf:65:06:aa:43:d9:5b:de:55:a9:04:d2:9f:7b:0b: 00:76:a0:96:c8:d9:12:eb:1d:8c:a0:45:1a:e2:6c:ff:0a:27: 0f:46:9d:62:fa:8a:56:40:b4:29:63:8d:64:7e:7d:2d:45:d3: 2b:40:25:8f:96:b3:62:01:0e:a4:86:f3:df:f0:10:2a:22:d0: d9:1c:0d:86:3c:c4:ec:46:1f:71:ed:ea:fa:ba:70:2f:d6:86: fb:e9:29:c1:e1:ca:a4:ee:68:07:ae:43:42:35:ff:25:37:53: d5:fb:b1:7e:5a:de:66:c0:7e:d2:61:c8:09:ba:d9:97:64:ad: 1e:56:27:9a:31:be:e6:03:86:fe:d3:79:14:70:ac:e4:ce:a2: aa:f6:40:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZP5acGDY6VF8goAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk ZjcxMmJhNzMtMjk1Ny00ZmZlLTljNWItMTA4OWY1ODQ2MTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsx65yQ1FcnofQrh6AhWls+jQ1SyatMuKuIy V7uoSnPYo+phVynd+XKY39Qwtby3u/2iGtcui13snemqCQOT17CjHqIRALWg/RfA 5WHDRlGhd63X30NonVyN21AZsxQIP5Rg80CDr2xNYvLBqvCJPIcIsqtuyFfYtdqz D9iY95JvUuDPzGrs4qO/26RXerV8q8rmlmkU/VEYPBH3/h6cGO6ED1Ao0VAjNMwB Ch0SKcBnTiYytu64JIufleObAtecFvAYuF8bIFlNOefOHxChmfJH+JG60LgsRvDS WREjpPVtYk6NGv6DyRJvmx+agjYcLKcFAwxFNW3pPxJMChj6AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXHhbYRwWmIu6uB8qKo1pcQq3gsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGE4YzU3NmUtMjEzNi0z YTJlLTg0MjUtMTczZDM4YTQxMjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSSdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuwh/lpe8iqJP0iokCa9OmqXCvZHkWDoqwBdjnbSy/HeHkV8g7PBPI/ gPEg6U8Elb5TjNiEo+Cm+ZJHrWQElHEWFAr7akudfuXURboz81mYFSEN2SC5KcCJ mcybXCB0oZPtmRlEByrj/2NOrFJMpM9lBqpD2VveVakE0p97CwB2oJbI2RLrHYyg RRribP8KJw9GnWL6ilZAtCljjWR+fS1F0ytAJY+Ws2IBDqSG89/wECoi0NkcDYY8 xOxGH3Ht6vq6cC/WhvvpKcHhyqTuaAeuQ0I1/yU3U9X7sX5a3mbAftJhyAm62Zdk rR5WJ5oxvuYDhv7TeRRwrOTOoqr2QAQ= -----END CERTIFICATE-----Generated at Mon May 12 05:28:31 2025 by rpki-client