$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/dd8077fc-d9c9-386e-b9d5-deab53026be8.roa File: dd8077fc-d9c9-386e-b9d5-deab53026be8.roa (raw, json) Hash identifier: +QKEXoztPuCZwasvTk4Vrzq+sy4Rpvt/Xeg7wN9H39U= Subject key identifier: A2:E6:B3:55:71:22:BD:A1:55:3F:4B:DF:BF:E1:68:18:3B:42:33:B3 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F43285849B9AA088886123024B6627880 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/dd8077fc-d9c9-386e-b9d5-deab53026be8.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 5645 IP address blocks: 207.136.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:08:88:86:12:30:24:b6:62:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=818c4ab6-4266-4606-988f-21fd7741b229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fc:96:30:3b:aa:fb:66:0e:bb:e9:80:62:6b: ac:73:12:ab:6d:8e:10:c0:eb:e6:0b:05:04:15:4b: 5f:34:27:e1:3a:f6:a3:89:6b:dc:cb:3f:9c:21:5f: ea:44:1e:c8:58:14:31:68:de:8f:bc:9f:86:fd:31: 86:39:97:24:69:58:57:82:84:36:0b:50:06:bd:a9: 73:0f:68:c6:2d:51:74:e6:7d:1d:ca:ed:96:ee:ce: 12:dd:10:25:ac:38:87:48:2b:d1:2c:08:a0:b6:12: 71:ca:2a:3f:6d:9a:16:59:46:5e:19:23:15:e7:b2: e9:ff:03:0c:83:4f:b7:90:fd:02:d9:1a:f0:55:4f: 52:0a:fb:41:46:83:9a:63:f3:e3:57:17:df:63:35: 55:bc:7f:49:50:a5:e8:bf:49:0d:06:c4:70:ec:99: f0:ff:56:16:6c:8f:d6:cc:19:d8:f0:94:1b:0c:d8: e4:93:d8:a5:70:62:50:58:33:be:b3:db:23:22:8e: 5c:4f:2f:1e:0a:61:c2:f3:bf:4e:bb:33:07:19:94: e9:3f:e1:5e:17:52:64:5f:d5:7f:6f:a1:5c:ad:91: b2:2e:fb:35:90:ad:c0:28:bd:6e:b0:85:19:99:bc: 94:85:1d:eb:cb:a0:d6:bd:60:79:09:1d:cd:91:34: 55:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E6:B3:55:71:22:BD:A1:55:3F:4B:DF:BF:E1:68:18:3B:42:33:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/dd8077fc-d9c9-386e-b9d5-deab53026be8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 207.136.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:94:b1:61:1b:a5:2a:8c:d6:b8:8a:2f:d8:26:e1:67:55:21: ac:b1:b5:49:e1:79:5f:52:df:44:39:1e:59:89:58:4b:f6:b0: f2:b6:9c:ed:1a:75:74:78:f0:8a:c3:54:57:1c:ae:e2:32:70: 50:3a:1d:55:c5:ed:f1:2e:4f:9d:f4:29:5f:3c:2c:14:50:62: 6a:8d:a5:20:5d:4a:23:62:cb:ed:c7:1a:01:73:59:f5:39:49: cb:d7:32:28:ea:89:b8:c6:1c:ee:8b:22:2e:42:06:88:3c:38: bd:6b:fe:76:82:1a:ca:3d:8b:27:21:b3:4f:f3:d2:1a:de:da: c3:72:5a:ee:f2:a7:37:35:21:cc:0d:34:02:a5:d8:f9:d3:90: 2e:e5:46:dd:4b:3c:d1:e6:5b:a1:fa:c1:53:ab:0f:73:3b:cd: ab:dd:55:94:0f:cf:5a:16:db:74:23:95:b0:37:2c:92:a1:d4: 9b:f8:8a:bb:19:39:9f:ed:f7:81:93:2d:d6:3a:ab:11:84:0b: f9:81:ce:f2:81:34:a8:05:2d:76:db:a3:f7:95:a9:9f:3c:32: ff:f4:83:32:29:49:71:56:2b:3c:72:ee:64:cb:6e:e3:88:67: bb:ba:7a:4f:fd:74:e6:b8:62:f6:8d:32:33:75:6b:60:26:6a: af:9d:6c:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgiIhhIwJLZieIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk ODE4YzRhYjYtNDI2Ni00NjA2LTk4OGYtMjFmZDc3NDFiMjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPyWMDuq+2YOu+mAYmuscxKrbY4QwOvmCwUE FUtfNCfhOvajiWvcyz+cIV/qRB7IWBQxaN6PvJ+G/TGGOZckaVhXgoQ2C1AGvalz D2jGLVF05n0dyu2W7s4S3RAlrDiHSCvRLAigthJxyio/bZoWWUZeGSMV57Lp/wMM g0+3kP0C2RrwVU9SCvtBRoOaY/PjVxffYzVVvH9JUKXov0kNBsRw7Jnw/1YWbI/W zBnY8JQbDNjkk9ilcGJQWDO+s9sjIo5cTy8eCmHC879OuzMHGZTpP+FeF1JkX9V/ b6FcrZGyLvs1kK3AKL1usIUZmbyUhR3ry6DWvWB5CR3NkTRVkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLms1VxIr2hVT9L37/haBg7QjOzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvZGQ4MDc3ZmMtZDljOS0z ODZlLWI5ZDUtZGVhYjUzMDI2YmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGz4hAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuUsWEbpSqM1riKL9gm4WdVIayxtUnheV9S30Q5HlmJWEv2sPK2nO0a dXR48IrDVFccruIycFA6HVXF7fEuT530KV88LBRQYmqNpSBdSiNiy+3HGgFzWfU5 ScvXMijqibjGHO6LIi5CBog8OL1r/naCGso9iychs0/z0hre2sNyWu7ypzc1IcwN NAKl2PnTkC7lRt1LPNHmW6H6wVOrD3M7zavdVZQPz1oW23QjlbA3LJKh1Jv4irsZ OZ/t94GTLdY6qxGEC/mBzvKBNKgFLXbbo/eVqZ88Mv/0gzIpSXFWKzxy7mTLbuOI Z7u6ek/9dOa4YvaNMjN1a2Amaq+dbKw= -----END CERTIFICATE-----Generated at Tue May 6 01:06:15 2025 by rpki-client