$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/d894e327-dd17-32e8-a5ca-0dd0c4765b8f.roa File: d894e327-dd17-32e8-a5ca-0dd0c4765b8f.roa (raw, json) Hash identifier: yShL+pHux5zyPvgo6IvuzodVoHw3HwcRd5hYj8w3ckI= Subject key identifier: 2A:09:71:51:A3:2A:70:67:E0:E0:86:37:4A:64:5C:2C:1E:F0:11:23 Certificate issuer: /CN=3976c091-1138-4917-9649-5575618ab7ea Certificate serial: 010D0C9F43285849C4D4CBE95D593D5D45E8F900 Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/d894e327-dd17-32e8-a5ca-0dd0c4765b8f.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 3356 IP address blocks: 134.202.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:cb:e9:5d:59:3d:5d:45:e8:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=6d24a06e-65f1-43cd-bf33-34bfd50b9253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:03:ee:95:bd:5f:f0:1b:55:5d:d7:11:02:51: fe:09:f4:15:88:1a:a1:67:8e:b7:80:1e:c7:ca:da: 76:ec:e4:b6:6a:0b:f4:2f:ef:45:4b:76:ed:bd:1a: 64:17:fa:6e:62:67:61:37:f6:7e:ef:3e:10:6a:e1: 8b:ba:43:d3:69:9f:51:a1:4c:b4:6b:bc:17:c0:07: e1:c2:4c:6e:10:5c:0d:86:bb:a9:b0:ff:cd:c5:d8: ff:e5:fb:bd:b7:a3:b7:e0:fb:05:35:29:6f:f7:c2: da:78:82:e6:4b:86:f5:d7:02:85:d7:5e:36:23:96: 4a:24:dc:9e:9e:b4:c8:27:1b:10:1d:47:9e:4f:9d: 18:49:e9:1e:c7:22:e0:c2:b4:2d:23:1d:f7:94:67: b6:10:02:c8:a5:17:47:16:b0:cf:b0:81:c4:89:a2: f2:a7:77:5b:4e:16:fd:8f:45:c7:fd:bd:88:6b:4e: 66:a8:89:14:61:b3:52:85:3d:1f:91:c5:4b:aa:31: 7e:47:44:6c:1e:2c:aa:75:3c:d5:d7:69:bd:e8:da: 24:41:5d:9e:ff:85:9b:d4:59:fc:85:4a:14:c0:02: 26:74:d2:d8:60:a8:cd:7b:b8:b3:7b:b2:a1:a5:ff: 48:06:e2:20:14:18:c0:91:4b:6a:fa:0e:9f:44:ec: a3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:09:71:51:A3:2A:70:67:E0:E0:86:37:4A:64:5C:2C:1E:F0:11:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/d894e327-dd17-32e8-a5ca-0dd0c4765b8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl X509v3 Authority Key Identifier: keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer sbgp-ipAddrBlock: critical IPv4: 134.202.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:76:96:3d:25:fa:ed:66:1c:20:4a:f6:9a:33:e6:ba:de:d7: 2b:0a:b6:be:39:37:94:3f:bd:a4:ca:1e:32:fa:50:ce:ff:7c: e0:c0:c9:7c:11:a4:91:05:4b:be:cd:5c:61:b3:55:1a:85:a7: 41:2a:b2:e7:a9:2f:b0:6e:cf:d5:6d:46:5b:b8:c8:78:63:2e: 95:ca:1a:72:bc:d4:73:7d:f1:55:c5:e3:42:5a:f5:7f:b1:02: 84:26:55:ad:c2:a0:91:c7:3d:f4:89:4a:d7:be:e4:d8:ab:a9: 7c:65:75:f7:ae:e0:95:5b:f7:d0:8d:a1:f1:f2:bd:41:98:51: 83:21:e8:26:63:c8:aa:69:d4:90:fd:85:a3:ff:6b:63:4c:d8: f6:da:69:22:78:a6:c8:21:5c:1d:e5:7d:1e:a2:01:86:ab:e2: 1b:1f:22:fc:2f:7b:25:67:09:0a:7d:01:44:0e:3e:33:d1:b2: dd:cb:fc:98:0a:27:d4:27:f7:93:27:a5:3c:45:b3:49:b0:5b: 3b:3e:86:3d:3f:67:e7:eb:a6:11:78:f4:f5:db:59:42:40:24: 2c:05:c3:48:f7:59:e3:8d:0c:88:13:b4:ed:65:8b:6b:5c:d8: 06:7c:f2:db:4e:a3:61:7c:8f:12:45:8f:39:31:06:30:a3:00: 67:40:2b:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1MvpXVk9XUXo+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk3NmMwOTEtMTEzOC00OTE3LTk2NDktNTU3NTYxOGFi N2VhMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk NmQyNGEwNmUtNjVmMS00M2NkLWJmMzMtMzRiZmQ1MGI5MjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigPulb1f8BtVXdcRAlH+CfQViBqhZ463gB7H ytp27OS2agv0L+9FS3btvRpkF/puYmdhN/Z+7z4QauGLukPTaZ9RoUy0a7wXwAfh wkxuEFwNhrupsP/Nxdj/5fu9t6O34PsFNSlv98LaeILmS4b11wKF1142I5ZKJNye nrTIJxsQHUeeT50YSekexyLgwrQtIx33lGe2EALIpRdHFrDPsIHEiaLyp3dbThb9 j0XH/b2Ia05mqIkUYbNShT0fkcVLqjF+R0RsHiyqdTzV12m96NokQV2e/4Wb1Fn8 hUoUwAImdNLYYKjNe7ize7Khpf9IBuIgFBjAkUtq+g6fROyjtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoJcVGjKnBn4OCGN0pkXCwe8BEjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2 YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1NjE4YWI3ZWEvZDg5NGUzMjctZGQxNy0z MmU4LWE1Y2EtMGRkMGM0NzY1YjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzk3NmMwOTEtMTEzOC00OTE3LTk2 NDktNTU3NTYxOGFiN2VhLzM5NzZjMDkxLTExMzgtNDkxNy05NjQ5LTU1NzU2MThh YjdlYS5jcmwwHwYDVR0jBBgwFoAUTla3pe8dsKcVPlQushcc4BOG8oEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1 NjE4YWI3ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhsooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGB2lj0l+u1mHCBK9poz5rre1ysKtr45N5Q/vaTKHjL6UM7/fODAyXwR pJEFS77NXGGzVRqFp0EqsuepL7Buz9VtRlu4yHhjLpXKGnK81HN98VXF40Ja9X+x AoQmVa3CoJHHPfSJSte+5NirqXxldfeu4JVb99CNofHyvUGYUYMh6CZjyKpp1JD9 haP/a2NM2PbaaSJ4psghXB3lfR6iAYar4hsfIvwveyVnCQp9AUQOPjPRst3L/JgK J9Qn95MnpTxFs0mwWzs+hj0/Z+frphF49PXbWUJAJCwFw0j3WeONDIgTtO1li2tc 2AZ88ttOo2F8jxJFjzkxBjCjAGdAKwc= -----END CERTIFICATE-----Generated at Sun May 11 17:03:42 2025 by rpki-client