$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/337f6349-eb96-3d85-8d88-4d78539f1677.roa File: 337f6349-eb96-3d85-8d88-4d78539f1677.roa (raw, json) Hash identifier: JWDMs/CUByMeeGviO/1rpRt5h7sJAyeAe2jCKBhxRzQ= Subject key identifier: 0C:8B:0C:27:27:80:8A:12:76:5C:4D:95:A8:3C:D5:A1:57:3C:60:CF Certificate issuer: /CN=3bb3e110-2f65-4e7f-8ffa-0a6719192f20 Certificate serial: 010D0C9F432858493C092261262D4670E0E01800 Authority key identifier: 5D:85:67:E2:D0:90:6B:9D:55:2F:8C:A2:02:A1:80:D0:38:74:11:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/337f6349-eb96-3d85-8d88-4d78539f1677.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 198949 IP address blocks: 162.129.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:22:61:26:2d:46:70:e0:e0:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb3e110-2f65-4e7f-8ffa-0a6719192f20 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=c0236518-d102-4b9a-851f-9b3e7f30468a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d6:f8:f7:6b:65:b8:c1:58:91:de:3a:0e:9c: 7b:09:2c:cd:3f:d8:04:7c:be:82:d7:37:00:58:f2: ae:3e:1e:9f:46:2d:a5:1c:03:6e:37:f5:9e:2b:ff: 44:1a:57:d4:9e:7c:81:6a:f7:35:35:85:45:eb:e3: 46:99:41:f7:b0:54:c3:7b:74:ff:5b:40:1d:69:43: ee:11:2a:7e:a4:bf:5f:74:0c:8a:44:9a:25:41:83: 1d:d0:82:1c:b8:58:fe:ea:99:2e:e7:2d:b6:c0:16: b5:09:56:d9:1e:a6:32:a6:91:77:fb:87:8f:da:52: 2d:80:c8:cc:c8:9c:d3:f7:68:06:09:d7:f0:30:3e: 72:b8:86:e0:de:9b:11:12:b6:fb:80:ab:0a:6b:22: c9:52:ee:e5:40:7a:59:c6:fe:52:5d:15:e2:86:d9: b1:ef:8e:40:3d:16:73:de:b9:c4:d1:c3:e5:f8:39: 1e:ab:aa:8c:cb:3f:9f:01:3b:00:f7:32:6c:8c:45: aa:c3:ee:c3:78:19:d1:93:dc:1c:0a:25:df:85:6e: 74:cb:f0:56:fb:a5:54:70:59:9f:0e:f2:9b:b7:4a: 2d:0a:4c:88:3c:46:f7:fb:ef:85:e0:88:07:48:e0: 94:e7:a4:3b:e8:29:a0:88:59:5a:b6:85:f5:70:01: 9b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8B:0C:27:27:80:8A:12:76:5C:4D:95:A8:3C:D5:A1:57:3C:60:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/337f6349-eb96-3d85-8d88-4d78539f1677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.crl X509v3 Authority Key Identifier: keyid:5D:85:67:E2:D0:90:6B:9D:55:2F:8C:A2:02:A1:80:D0:38:74:11:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.cer sbgp-ipAddrBlock: critical IPv4: 162.129.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:17:c3:1d:db:f4:a2:1a:a5:32:0f:58:a9:a8:4a:b7:14:84: d9:63:36:4e:bc:e5:d7:4e:7c:89:d2:38:7a:7b:b5:99:42:60: f7:ab:2b:ab:58:78:19:29:b5:58:df:24:60:38:64:d6:d3:6a: 5d:8a:3c:91:4a:81:72:38:0a:8e:27:c7:41:e1:4f:54:91:d1: 70:bb:97:26:62:9d:a3:45:0d:87:9e:8f:8b:6f:10:06:d6:a2: e1:fb:78:02:5f:b4:c8:9e:ff:ee:b4:1d:ce:5d:ed:b6:2f:0c: ca:41:29:4a:b4:fb:d3:f4:73:44:81:ef:ac:85:51:b0:40:1f: e6:b4:44:dd:07:eb:5e:21:5a:a6:df:37:d4:fb:51:a5:25:57: 1f:b8:44:5f:81:74:cc:74:1b:86:62:d5:ee:ee:7b:06:53:81: 18:de:99:17:84:e0:68:23:e2:28:05:de:37:bc:7b:d1:ab:e0: f3:06:09:dc:fb:cd:99:a9:2e:4b:1e:7b:24:3e:d8:49:ef:e8: 86:9d:ac:73:fd:20:2e:29:ee:5c:59:31:a5:05:47:12:c4:53: e5:ba:da:e5:2d:e3:0f:68:8a:af:76:9e:86:67:4f:42:ce:da: 5d:65:77:61:08:7d:7d:81:e9:5c:44:73:fd:09:b5:0d:af:59: cf:cf:e7:6c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEk8CSJhJi1GcODgGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiM2UxMTAtMmY2NS00ZTdmLThmZmEtMGE2NzE5MTky ZjIwMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk YzAyMzY1MTgtZDEwMi00YjlhLTg1MWYtOWIzZTdmMzA0NjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltb492tluMFYkd46Dpx7CSzNP9gEfL6C1zcA WPKuPh6fRi2lHANuN/WeK/9EGlfUnnyBavc1NYVF6+NGmUH3sFTDe3T/W0AdaUPu ESp+pL9fdAyKRJolQYMd0IIcuFj+6pku5y22wBa1CVbZHqYyppF3+4eP2lItgMjM yJzT92gGCdfwMD5yuIbg3psRErb7gKsKayLJUu7lQHpZxv5SXRXihtmx745APRZz 3rnE0cPl+Dkeq6qMyz+fATsA9zJsjEWqw+7DeBnRk9wcCiXfhW50y/BW+6VUcFmf DvKbt0otCkyIPEb3+++F4IgHSOCU56Q76CmgiFlatoX1cAGbFwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAyLDCcngIoSdlxNlag81aFXPGDPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYmIz ZTExMC0yZjY1LTRlN2YtOGZmYS0wYTY3MTkxOTJmMjAvMzM3ZjYzNDktZWI5Ni0z ZDg1LThkODgtNGQ3ODUzOWYxNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2JiM2UxMTAtMmY2NS00ZTdmLThm ZmEtMGE2NzE5MTkyZjIwLzNiYjNlMTEwLTJmNjUtNGU3Zi04ZmZhLTBhNjcxOTE5 MmYyMC5jcmwwHwYDVR0jBBgwFoAUXYVn4tCQa51VL4yiAqGA0Dh0EVswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYmIzZTExMC0yZjY1LTRlN2YtOGZmYS0wYTY3 MTkxOTJmMjAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAooEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAcRfDHdv0ohqlMg9YqahKtxSE2WM2Trzl1058idI4enu1mUJg96srq1h4 GSm1WN8kYDhk1tNqXYo8kUqBcjgKjifHQeFPVJHRcLuXJmKdo0UNh56Pi28QBtai 4ft4Al+0yJ7/7rQdzl3tti8MykEpSrT70/RzRIHvrIVRsEAf5rRE3QfrXiFapt83 1PtRpSVXH7hEX4F0zHQbhmLV7u57BlOBGN6ZF4TgaCPiKAXeN7x70avg8wYJ3PvN makuSx57JD7YSe/ohp2sc/0gLinuXFkxpQVHEsRT5bra5S3jD2iKr3aehmdPQs7a XWV3YQh9fYHpXERz/Qm1Da9Zz8/nbA== -----END CERTIFICATE-----Generated at Sun May 11 01:31:50 2025 by rpki-client