$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/353d57dd-8746-3f46-856b-63fd1488aeae.roa File: 353d57dd-8746-3f46-856b-63fd1488aeae.roa (raw, json) Hash identifier: Yta/4naus+pQtV+BEcufZUuXti+f+8n8kiJghl2ZTUY= Subject key identifier: FE:82:6D:82:72:90:62:28:C9:52:48:0B:97:C8:A1:59:8A:13:FB:0B Certificate issuer: /CN=378928e8-c134-40aa-9858-3838053cbbe9 Certificate serial: 010D0C9F432858494733E66CBCC2CD952DD09780 Authority key identifier: 05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/353d57dd-8746-3f46-856b-63fd1488aeae.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 12261 IP address blocks: 173.242.240.0/22 maxlen: 22 173.242.244.0/22 maxlen: 22 173.242.248.0/22 maxlen: 22 173.242.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:e6:6c:bc:c2:cd:95:2d:d0:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=378928e8-c134-40aa-9858-3838053cbbe9 Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=0d378812-e461-45df-a56f-5e05e95ddec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d0:ba:5b:ad:99:46:d9:f9:c5:2b:e5:f4:49: dc:dd:6c:85:ca:93:22:d5:2d:c4:2d:cf:b2:4c:49: d4:5c:35:0b:13:a6:c5:bb:81:b5:ee:ec:0a:4a:93: 42:b3:9a:51:64:36:b3:e5:50:bb:8e:e0:19:07:6e: 2d:21:d1:5b:0c:0e:58:28:61:c8:9b:49:a6:ae:fb: ed:38:89:75:1b:84:f6:b9:65:87:33:ea:a2:8f:06: c5:3f:4e:80:12:48:f3:2f:6b:37:bb:84:6f:ec:4a: 9d:a5:96:c8:25:c1:c8:07:1a:1b:85:1e:ca:cc:12: b8:d2:bf:a0:3d:5a:0b:06:03:d0:59:04:4a:6e:43: 8f:e9:8c:ad:ab:c2:6f:bb:34:59:df:df:49:95:21: 21:8c:14:35:fb:1e:56:93:19:c8:7a:e5:9f:ad:6f: c7:8e:e0:d7:b7:ba:9c:64:e3:f6:46:f3:50:9a:59: a4:c1:f9:f7:4f:8f:36:cf:a8:7b:d8:2b:93:ac:7a: d4:f6:4b:7d:c4:d9:2d:14:8d:e3:09:12:11:b4:6b: 00:36:d4:25:bb:d6:d6:f3:34:bb:11:2a:f1:e6:25: 5c:b0:bc:09:4d:74:fa:23:ef:ed:19:e3:a0:6c:29: 52:32:ba:d0:2e:18:85:7e:34:8a:db:cd:32:f8:78: 74:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:82:6D:82:72:90:62:28:C9:52:48:0B:97:C8:A1:59:8A:13:FB:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/353d57dd-8746-3f46-856b-63fd1488aeae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl X509v3 Authority Key Identifier: keyid:05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer sbgp-ipAddrBlock: critical IPv4: 173.242.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:68:68:c4:f2:4c:04:fb:a1:51:69:20:c2:0f:f9:2d:5f:cc: 9b:ff:4c:45:91:c0:73:8a:76:19:18:34:5a:dc:91:61:25:88: 00:3b:66:1b:bd:16:36:e7:9c:e0:91:1b:37:03:07:46:63:56: ce:a0:e6:fd:9a:8f:d8:2f:0a:c6:e8:04:14:e4:eb:db:09:d1: 57:89:14:96:2e:68:36:ac:98:a9:b8:39:f9:c9:04:e6:78:cf: 61:5d:77:17:40:2f:fd:c4:3b:40:3d:b6:d4:78:08:52:f8:f4: 6f:b3:10:81:05:f6:9c:4a:bf:cb:d0:c4:ce:f2:be:d7:65:60: cf:2a:f7:ee:e0:5e:29:2d:fe:35:11:88:31:1c:a7:83:7d:92: 14:51:df:81:d4:07:c5:61:d3:7e:63:e6:32:24:1b:26:61:db: 72:69:31:b2:52:7e:c2:84:de:ce:37:b0:f2:6f:b6:79:17:a2: fa:85:57:b0:30:1b:01:23:75:79:78:88:b4:4c:5b:2d:0c:34: 60:a2:03:0e:b6:9f:6b:d4:c7:45:38:ef:ec:0e:d6:68:33:a9: 61:f3:ae:5b:41:8b:2f:c7:0e:82:53:a5:ab:2b:f5:69:3b:5d: 24:a6:da:d5:3f:36:f2:58:78:b5:a7:2d:42:4d:01:6d:78:4e: 9a:85:6d:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+ZsvMLNlS3Ql4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc4OTI4ZTgtYzEzNC00MGFhLTk4NTgtMzgzODA1M2Ni YmU5MB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk MGQzNzg4MTItZTQ2MS00NWRmLWE1NmYtNWUwNWU5NWRkZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9NC6W62ZRtn5xSvl9Enc3WyFypMi1S3ELc+y TEnUXDULE6bFu4G17uwKSpNCs5pRZDaz5VC7juAZB24tIdFbDA5YKGHIm0mmrvvt OIl1G4T2uWWHM+qijwbFP06AEkjzL2s3u4Rv7EqdpZbIJcHIBxobhR7KzBK40r+g PVoLBgPQWQRKbkOP6Yytq8JvuzRZ399JlSEhjBQ1+x5WkxnIeuWfrW/HjuDXt7qc ZOP2RvNQmlmkwfn3T482z6h72CuTrHrU9kt9xNktFI3jCRIRtGsANtQlu9bW8zS7 ESrx5iVcsLwJTXT6I+/tGeOgbClSMrrQLhiFfjSK280y+Hh06QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6CbYJykGIoyVJIC5fIoVmKE/sLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNzg5 MjhlOC1jMTM0LTQwYWEtOTg1OC0zODM4MDUzY2JiZTkvMzUzZDU3ZGQtODc0Ni0z ZjQ2LTg1NmItNjNmZDE0ODhhZWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzc4OTI4ZTgtYzEzNC00MGFhLTk4 NTgtMzgzODA1M2NiYmU5LzM3ODkyOGU4LWMxMzQtNDBhYS05ODU4LTM4MzgwNTNj YmJlOS5jcmwwHwYDVR0jBBgwFoAUBYTnTjebSl6FC+Qck2G4ZCYVGJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNzg5MjhlOC1jMTM0LTQwYWEtOTg1OC0zODM4 MDUzY2JiZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFoaMTyTAT7oVFpIMIP+S1fzJv/TEWRwHOKdhkYNFrckWEliAA7Zhu9 FjbnnOCRGzcDB0ZjVs6g5v2aj9gvCsboBBTk69sJ0VeJFJYuaDasmKm4OfnJBOZ4 z2FddxdAL/3EO0A9ttR4CFL49G+zEIEF9pxKv8vQxM7yvtdlYM8q9+7gXikt/jUR iDEcp4N9khRR34HUB8Vh035j5jIkGyZh23JpMbJSfsKE3s43sPJvtnkXovqFV7Aw GwEjdXl4iLRMWy0MNGCiAw62n2vUx0U47+wO1mgzqWHzrltBiy/HDoJTpasr9Wk7 XSSm2tU/NvJYeLWnLUJNAW14TpqFbZ4= -----END CERTIFICATE-----Generated at Mon May 12 01:27:10 2025 by rpki-client