$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/f36cbae8-381a-3187-ba77-7a2ef5f7faa1.roa File: f36cbae8-381a-3187-ba77-7a2ef5f7faa1.roa (raw, json) Hash identifier: 0O0eTlRgxJIF6BpJEpqRsGOCMuL2pmMtczWNAJ1e0YI= Subject key identifier: ED:B9:73:3C:AF:8F:23:01:13:84:AE:13:3E:9B:A5:C7:2C:61:43:75 Certificate issuer: /CN=e3fada49-b353-4a69-9b32-1b6ab3729db1 Certificate serial: 010D0C9F4328584925B3A2C7CD452BBF8FC89300 Authority key identifier: 26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/f36cbae8-381a-3187-ba77-7a2ef5f7faa1.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 3855 IP address blocks: 162.255.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:a2:c7:cd:45:2b:bf:8f:c8:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3fada49-b353-4a69-9b32-1b6ab3729db1 Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=3101e164-34e4-480a-83ea-c6eb1f64d381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:01:2f:08:47:12:79:1e:cd:07:5c:5a:86:78: e5:78:fa:41:76:70:43:e3:bb:51:2f:56:70:d3:3d: 3f:52:d8:90:85:a7:f5:2e:38:4b:c5:05:3d:0f:1f: 0c:81:95:ff:16:dd:bd:15:9f:e2:a1:11:3d:3f:35: e0:e0:69:25:93:24:4d:7f:4c:9b:5a:59:67:3a:d5: e5:c1:63:b5:86:90:65:38:3d:33:7f:23:71:45:9c: 0a:71:92:72:74:f4:3c:d0:48:e2:87:64:eb:71:e3: 7a:83:f9:eb:30:61:2b:1d:ee:10:22:65:e9:85:a7: 13:fe:f8:0b:00:03:f7:0a:1d:38:e1:03:fd:12:47: 73:fe:d7:36:fa:0d:c6:da:08:e2:aa:04:f1:ef:c1: e0:60:3c:e6:e2:82:b6:9a:d8:a6:b0:45:d8:3f:e6: 2a:ed:51:18:0a:a5:0b:7e:9f:46:b7:fb:1e:59:bb: 26:b7:ba:30:ad:d5:8d:45:6f:04:b5:c2:4a:5c:7b: ec:f7:6f:e5:11:95:8b:3b:8f:c3:54:d7:24:7d:d1: ce:57:d9:b1:ab:c8:3a:48:50:c1:66:c5:f7:06:50: 66:fe:2b:8f:1f:be:24:83:a2:12:fc:3b:f2:9a:95: a2:f4:da:d4:a5:ca:57:03:28:2e:ef:34:eb:00:d8: af:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B9:73:3C:AF:8F:23:01:13:84:AE:13:3E:9B:A5:C7:2C:61:43:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/f36cbae8-381a-3187-ba77-7a2ef5f7faa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl X509v3 Authority Key Identifier: keyid:26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer sbgp-ipAddrBlock: critical IPv4: 162.255.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:88:b4:7c:c7:4a:25:d9:ec:a9:4d:d4:5d:c5:5c:72:df:fb: 20:8b:f1:9e:9e:7d:54:41:ee:43:f8:68:35:1f:b4:65:57:e6: cc:ff:78:de:5d:23:cc:11:2d:be:4c:6b:a7:4c:17:9c:38:8f: b3:2a:cc:58:e0:8c:5c:80:9f:be:be:49:d3:8a:24:9e:12:fa: 14:68:57:81:ac:4f:89:27:6c:8b:02:42:c2:38:af:6f:2c:e1: c6:dc:6a:d7:9f:92:f8:44:73:9a:59:b7:0b:42:34:48:5d:7f: fd:3c:a9:d7:76:4a:15:63:c9:39:45:41:91:68:80:f4:df:9f: dc:f4:c6:8c:5d:98:72:52:27:85:2e:b0:06:a1:6d:b7:89:10: 4d:f7:cc:0a:e4:ca:bd:75:51:3f:43:f0:67:6e:04:bf:0c:20: 51:dc:58:2f:40:65:55:28:b9:a1:60:ec:50:74:18:50:f5:e3: 39:06:f6:ae:98:53:0a:02:90:0b:63:cc:5f:4f:50:5f:34:8d: 88:82:e9:3d:7d:f9:72:7c:cf:c1:ca:84:f1:64:c6:b6:04:7b: 8c:e1:51:d8:e6:d9:c3:e8:6c:eb:99:d1:3e:5c:c5:1c:4d:34: fd:dc:58:50:4d:36:72:dc:5d:82:1e:35:c8:7e:14:5a:72:b0: 11:c6:ab:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkls6LHzUUrv4/IkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNmYWRhNDktYjM1My00YTY5LTliMzItMWI2YWIzNzI5 ZGIxMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk MzEwMWUxNjQtMzRlNC00ODBhLTgzZWEtYzZlYjFmNjRkMzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgEvCEcSeR7NB1xahnjlePpBdnBD47tRL1Zw 0z0/UtiQhaf1LjhLxQU9Dx8MgZX/Ft29FZ/ioRE9PzXg4GklkyRNf0ybWllnOtXl wWO1hpBlOD0zfyNxRZwKcZJydPQ80Ejih2TrceN6g/nrMGErHe4QImXphacT/vgL AAP3Ch044QP9Ekdz/tc2+g3G2gjiqgTx78HgYDzm4oK2mtimsEXYP+Yq7VEYCqUL fp9Gt/seWbsmt7owrdWNRW8EtcJKXHvs92/lEZWLO4/DVNckfdHOV9mxq8g6SFDB ZsX3BlBm/iuPH74kg6IS/DvympWi9NrUpcpXAygu7zTrANivKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO25czyvjyMBE4SuEz6bpccsYUN1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lM2Zh ZGE0OS1iMzUzLTRhNjktOWIzMi0xYjZhYjM3MjlkYjEvZjM2Y2JhZTgtMzgxYS0z MTg3LWJhNzctN2EyZWY1ZjdmYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTNmYWRhNDktYjM1My00YTY5LTli MzItMWI2YWIzNzI5ZGIxL2UzZmFkYTQ5LWIzNTMtNGE2OS05YjMyLTFiNmFiMzcy OWRiMS5jcmwwHwYDVR0jBBgwFoAUJuly3fKragsPZSkTRy/Y3+UGPZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lM2ZhZGE0OS1iMzUzLTRhNjktOWIzMi0xYjZh YjM3MjlkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDov/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyItHzHSiXZ7KlN1F3FXHLf+yCL8Z6efVRB7kP4aDUftGVX5sz/eN5d I8wRLb5Ma6dMF5w4j7MqzFjgjFyAn76+SdOKJJ4S+hRoV4GsT4knbIsCQsI4r28s 4cbcatefkvhEc5pZtwtCNEhdf/08qdd2ShVjyTlFQZFogPTfn9z0xoxdmHJSJ4Uu sAahbbeJEE33zArkyr11UT9D8GduBL8MIFHcWC9AZVUouaFg7FB0GFD14zkG9q6Y UwoCkAtjzF9PUF80jYiC6T19+XJ8z8HKhPFkxrYEe4zhUdjm2cPobOuZ0T5cxRxN NP3cWFBNNnLcXYIeNch+FFpysBHGq9U= -----END CERTIFICATE-----Generated at Sun May 11 12:34:28 2025 by rpki-client