$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/35dd38da-ef2c-3aa2-965d-09739043ca44.roa File: 35dd38da-ef2c-3aa2-965d-09739043ca44.roa (raw, json) Hash identifier: kgMIB20TYFk4sp0mjtbPVsxl5wOiTAVG/B7q6kHQIuo= Subject key identifier: 5C:29:D8:C3:D0:A8:48:D9:77:70:B7:AF:A0:4B:1C:87:0C:14:A7:6A Certificate issuer: /CN=2d88838e-541a-4661-8501-3c7d2eb5849d Certificate serial: 010D0C9F43285849998F30FA2F9208E4929609E0 Authority key identifier: 4E:9D:73:3B:F6:0F:5A:F6:9E:37:46:28:53:09:C4:7A:42:49:58:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/35dd38da-ef2c-3aa2-965d-09739043ca44.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 395379 IP address blocks: 136.228.64.0/19 maxlen: 19 143.223.112.0/20 maxlen: 20 161.129.192.0/20 maxlen: 20 2604:e340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:30:fa:2f:92:08:e4:92:96:09:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d88838e-541a-4661-8501-3c7d2eb5849d Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=28c209c7-62cc-4f8c-9247-6b79b2f35346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c7:77:ba:23:df:74:1f:c1:18:f8:d7:8d:c5: a1:35:51:9c:57:d3:e9:66:02:87:e4:8a:6b:91:ec: ff:b1:15:12:e4:3a:b3:90:15:94:00:12:69:49:8f: e4:08:0c:50:55:96:3a:62:5b:3c:a8:cd:88:46:00: f0:81:f6:b5:f1:5c:4c:da:c4:8a:87:3f:14:1b:d2: d2:5b:51:22:fe:ed:86:45:cc:7e:ed:01:73:a0:7e: 50:57:8b:ca:18:19:04:02:dc:19:ad:4e:4a:ef:be: d0:b3:85:ee:e4:e1:80:62:ce:c9:40:52:96:35:ae: 7b:e7:40:5b:2f:c0:dd:66:dc:9e:68:48:7b:04:1f: d3:8c:a7:31:be:a2:a5:39:7a:a2:73:10:36:76:ff: 6b:64:f2:87:79:8b:05:06:dd:2e:94:37:f1:c7:e0: d2:a9:2f:cd:e2:67:1c:21:47:3e:21:0a:e5:13:b4: 17:6d:5b:54:69:ab:a9:72:10:87:c7:9b:4e:18:9b: be:e1:ee:79:44:6c:3a:d7:b8:6e:53:99:67:30:c6: 31:dc:ee:67:4c:de:a4:51:03:41:90:8c:64:1c:04: 13:b7:5b:b2:79:71:7f:df:66:95:13:5c:ab:4e:18: ae:50:22:c8:81:67:64:fc:5f:9a:a8:a4:38:04:27: 5b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:29:D8:C3:D0:A8:48:D9:77:70:B7:AF:A0:4B:1C:87:0C:14:A7:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/35dd38da-ef2c-3aa2-965d-09739043ca44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.crl X509v3 Authority Key Identifier: keyid:4E:9D:73:3B:F6:0F:5A:F6:9E:37:46:28:53:09:C4:7A:42:49:58:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer sbgp-ipAddrBlock: critical IPv4: 136.228.64.0/19 143.223.112.0/20 161.129.192.0/20 IPv6: 2604:e340::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:8a:67:8b:fb:d9:3c:87:61:ea:44:88:89:45:b9:e8:b4:14: 9a:7e:d6:ce:85:91:99:3f:b2:2c:87:ef:4b:db:a0:6b:0d:7c: 30:cd:4e:08:fc:7d:73:c9:7a:7f:bd:cb:39:b2:cd:cf:b3:c8: 6c:93:74:62:ca:16:b8:7a:79:71:aa:90:21:27:e4:01:79:28: c1:73:fb:a9:63:56:09:90:1e:8c:2b:86:77:76:61:79:9e:10: ae:87:38:f9:d7:2f:23:ef:e9:ed:6d:6d:8b:9d:e5:04:cf:7d: e9:8c:38:53:a0:a5:6b:56:17:01:96:34:76:3e:dc:31:97:e1: f6:cc:d0:ad:13:36:c2:22:fd:33:7d:f9:ae:84:f4:3a:5d:2b: 7b:51:84:72:95:92:ed:46:e5:3f:31:db:6c:ad:bb:74:77:67: 09:33:d0:ab:e6:3e:6f:2b:18:06:3f:6e:cc:92:02:87:80:8f: f2:86:34:8d:0d:80:f1:72:6b:7d:ee:49:17:16:3b:e4:0a:44: 02:06:5c:e3:be:97:90:34:31:b8:72:30:9c:b5:4c:1a:c4:6e: 77:f1:c5:7d:92:45:ae:eb:b6:52:ff:4c:3c:31:58:dd:88:32: d3:ae:88:65:62:e8:85:f7:80:fa:d7:d1:1e:86:2b:fd:17:f8: e1:b8:4e:41 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEmZjzD6L5II5JKWCeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ4ODgzOGUtNTQxYS00NjYxLTg1MDEtM2M3ZDJlYjU4 NDlkMB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk MjhjMjA5YzctNjJjYy00ZjhjLTkyNDctNmI3OWIyZjM1MzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucd3uiPfdB/BGPjXjcWhNVGcV9PpZgKH5Ipr kez/sRUS5DqzkBWUABJpSY/kCAxQVZY6Yls8qM2IRgDwgfa18VxM2sSKhz8UG9LS W1Ei/u2GRcx+7QFzoH5QV4vKGBkEAtwZrU5K777Qs4Xu5OGAYs7JQFKWNa5750Bb L8DdZtyeaEh7BB/TjKcxvqKlOXqicxA2dv9rZPKHeYsFBt0ulDfxx+DSqS/N4mcc IUc+IQrlE7QXbVtUaaupchCHx5tOGJu+4e55RGw617huU5lnMMYx3O5nTN6kUQNB kIxkHAQTt1uyeXF/32aVE1yrThiuUCLIgWdk/F+aqKQ4BCdbmQIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFFwp2MPQqEjZd3C3r6BLHIcMFKdqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZDg4 ODM4ZS01NDFhLTQ2NjEtODUwMS0zYzdkMmViNTg0OWQvMzVkZDM4ZGEtZWYyYy0z YWEyLTk2NWQtMDk3MzkwNDNjYTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmQ4ODgzOGUtNTQxYS00NjYxLTg1 MDEtM2M3ZDJlYjU4NDlkLzJkODg4MzhlLTU0MWEtNDY2MS04NTAxLTNjN2QyZWI1 ODQ5ZC5jcmwwHwYDVR0jBBgwFoAUTp1zO/YPWvaeN0YoUwnEekJJWC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZDg4ODM4ZS01NDFhLTQ2NjEtODUwMS0zYzdk MmViNTg0OWQuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFiORAAwQE j99wAwQEoYHAMA0EAgACMAcDBQAmBONAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACuKZ4v72TyHYepEiIlF uei0FJp+1s6FkZk/siyH70vboGsNfDDNTgj8fXPJen+9yzmyzc+zyGyTdGLKFrh6 eXGqkCEn5AF5KMFz+6ljVgmQHowrhnd2YXmeEK6HOPnXLyPv6e1tbYud5QTPfemM OFOgpWtWFwGWNHY+3DGX4fbM0K0TNsIi/TN9+a6E9DpdK3tRhHKVku1G5T8x22yt u3R3Zwkz0KvmPm8rGAY/bsySAoeAj/KGNI0NgPFya33uSRcWO+QKRAIGXOO+l5A0 MbhyMJy1TBrEbnfxxX2SRa7rtlL/TDwxWN2IMtOuiGVi6IX3gPrX0R6GK/0X+OG4 TkE= -----END CERTIFICATE-----Generated at Sat May 10 10:25:45 2025 by rpki-client