$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d25fb3a8-25d0-4103-a2fa-c36eb6982909/d968aac2-1f7e-3a5f-bcc8-a92a5358bd66.roa File: d968aac2-1f7e-3a5f-bcc8-a92a5358bd66.roa (raw, json) Hash identifier: rDr1fuY1eLRbychCOXIogjw5+yD+Q6L4a68qcLxIYBg= Subject key identifier: 21:F1:A3:70:F0:4F:5C:E2:02:C7:81:FB:BF:89:EA:65:CF:CF:F9:77 Certificate issuer: /CN=d25fb3a8-25d0-4103-a2fa-c36eb6982909 Certificate serial: 010D0C9F43285849403944D8744237CD2E9C5880 Authority key identifier: 4A:8D:F4:69:C9:18:68:F9:C5:66:99:76:71:FF:A8:51:2F:91:48:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d25fb3a8-25d0-4103-a2fa-c36eb6982909.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d25fb3a8-25d0-4103-a2fa-c36eb6982909/d968aac2-1f7e-3a5f-bcc8-a92a5358bd66.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 395824 IP address blocks: 216.87.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d25fb3a8-25d0-4103-a2fa-c36eb6982909/d25fb3a8-25d0-4103-a2fa-c36eb6982909.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d25fb3a8-25d0-4103-a2fa-c36eb6982909/d25fb3a8-25d0-4103-a2fa-c36eb6982909.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d25fb3a8-25d0-4103-a2fa-c36eb6982909.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:44:d8:74:42:37:cd:2e:9c:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d25fb3a8-25d0-4103-a2fa-c36eb6982909 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=d4b48cf4-a168-4a04-89ba-f88fb7503e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:32:9f:74:82:1b:0c:04:27:c3:57:3d:a2:2b: 68:42:87:d5:33:51:45:db:18:89:3b:bb:cf:6a:96: 64:6d:94:f5:37:e7:fb:86:f4:f4:22:9e:f6:f2:5e: d9:50:4a:52:c3:ba:46:7c:33:7c:c7:8a:8e:38:72: a3:a8:a9:a2:f5:74:76:55:be:ff:8c:69:09:30:82: b6:b5:18:3a:9f:14:29:79:1f:f6:84:eb:de:f2:5e: db:6d:1e:51:85:5e:db:19:c6:2d:3d:5b:28:74:c4: 7b:a3:3c:a1:b7:2a:d2:46:16:e6:1b:e5:fc:9a:60: 99:9e:19:0d:73:8a:68:02:6a:1d:bb:9c:83:32:a0: 40:b8:32:15:06:ea:24:3b:ae:3f:db:07:ef:8b:29: 16:d8:69:f2:b3:01:f8:54:b0:f2:95:42:7a:72:2d: 26:7c:56:27:05:08:35:9a:57:fd:63:1e:7e:14:4f: 08:61:f4:8d:3c:95:f7:5f:6e:1f:00:58:3e:32:fe: f4:83:e0:58:18:9a:5e:2d:b5:a9:99:2b:da:9a:b9: c3:21:5a:47:53:d2:ae:27:20:ee:9e:14:8d:62:40: eb:ab:c4:10:a3:0b:61:16:e4:77:6f:52:c9:36:b3: 11:67:44:eb:af:d2:5f:d2:9e:0d:72:1a:44:d3:43: a0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F1:A3:70:F0:4F:5C:E2:02:C7:81:FB:BF:89:EA:65:CF:CF:F9:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d25fb3a8-25d0-4103-a2fa-c36eb6982909/d968aac2-1f7e-3a5f-bcc8-a92a5358bd66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d25fb3a8-25d0-4103-a2fa-c36eb6982909/d25fb3a8-25d0-4103-a2fa-c36eb6982909.crl X509v3 Authority Key Identifier: keyid:4A:8D:F4:69:C9:18:68:F9:C5:66:99:76:71:FF:A8:51:2F:91:48:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d25fb3a8-25d0-4103-a2fa-c36eb6982909.cer sbgp-ipAddrBlock: critical IPv4: 216.87.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:4f:f6:86:5f:3b:46:67:a7:7a:c7:24:03:47:30:b0:ff:36: 4d:73:ae:32:85:b3:cf:f1:9d:0f:c0:5d:b6:c3:42:e0:6e:45: 61:ad:20:ef:e3:77:d7:69:d2:8f:5d:19:27:5c:46:af:e3:54: 0b:7d:15:1d:48:41:c0:2d:85:e6:e3:79:96:71:d1:25:56:f9: 6c:71:5a:f9:a1:8d:ff:01:f1:a4:ee:55:e4:a2:54:53:bb:7f: e9:55:f4:e3:f8:1a:79:07:e5:dc:eb:d5:8f:00:3a:93:4a:3a: bd:e6:eb:70:09:9f:05:0f:16:80:cc:5d:d2:69:22:9c:7b:f7: 58:a3:99:e9:56:7b:4c:35:c7:94:f9:0c:d0:0b:df:9c:6b:0a: f0:ae:9c:ba:74:14:12:6b:d4:96:b4:08:fd:36:d1:ac:42:c1: 60:0f:e9:44:06:5b:f7:20:7b:cd:90:aa:c6:79:c1:02:e8:f6: a6:0e:63:8f:e2:ff:36:1e:da:8b:da:6a:84:86:4f:98:f6:a6: 78:2b:fe:7f:50:3f:0f:77:d8:39:77:fc:04:87:16:a6:32:10: b5:72:35:e1:fb:75:d7:f0:f4:1f:ed:7b:ee:97:50:4f:bb:dd: 9d:d0:c2:76:62:f6:51:26:a7:19:99:8d:9d:af:17:0c:c3:94: 78:c2:a0:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOUTYdEI3zS6cWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDI1ZmIzYTgtMjVkMC00MTAzLWEyZmEtYzM2ZWI2OTgy OTA5MB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk ZDRiNDhjZjQtYTE2OC00YTA0LTg5YmEtZjg4ZmI3NTAzZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzKfdIIbDAQnw1c9oitoQofVM1FF2xiJO7vP apZkbZT1N+f7hvT0Ip728l7ZUEpSw7pGfDN8x4qOOHKjqKmi9XR2Vb7/jGkJMIK2 tRg6nxQpeR/2hOve8l7bbR5RhV7bGcYtPVsodMR7ozyhtyrSRhbmG+X8mmCZnhkN c4poAmodu5yDMqBAuDIVBuokO64/2wfviykW2GnyswH4VLDylUJ6ci0mfFYnBQg1 mlf9Yx5+FE8IYfSNPJX3X24fAFg+Mv70g+BYGJpeLbWpmSvamrnDIVpHU9KuJyDu nhSNYkDrq8QQowthFuR3b1LJNrMRZ0Trr9Jf0p4NchpE00Og5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHxo3DwT1ziAseB+7+J6mXPz/l3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMjVm YjNhOC0yNWQwLTQxMDMtYTJmYS1jMzZlYjY5ODI5MDkvZDk2OGFhYzItMWY3ZS0z YTVmLWJjYzgtYTkyYTUzNThiZDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDI1ZmIzYTgtMjVkMC00MTAzLWEy ZmEtYzM2ZWI2OTgyOTA5L2QyNWZiM2E4LTI1ZDAtNDEwMy1hMmZhLWMzNmViNjk4 MjkwOS5jcmwwHwYDVR0jBBgwFoAUSo30ackYaPnFZpl2cf+oUS+RSJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMjVmYjNhOC0yNWQwLTQxMDMtYTJmYS1jMzZl YjY5ODI5MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Fc/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5P9oZfO0Znp3rHJANHMLD/Nk1zrjKFs8/xnQ/AXbbDQuBuRWGtIO/j d9dp0o9dGSdcRq/jVAt9FR1IQcAthebjeZZx0SVW+WxxWvmhjf8B8aTuVeSiVFO7 f+lV9OP4GnkH5dzr1Y8AOpNKOr3m63AJnwUPFoDMXdJpIpx791ijmelWe0w1x5T5 DNAL35xrCvCunLp0FBJr1Ja0CP020axCwWAP6UQGW/cge82QqsZ5wQLo9qYOY4/i /zYe2ovaaoSGT5j2pngr/n9QPw932Dl3/ASHFqYyELVyNeH7ddfw9B/te+6XUE+7 3Z3QwnZi9lEmpxmZjZ2vFwzDlHjCoFI= -----END CERTIFICATE-----Generated at Thu May 15 13:44:56 2025 by rpki-client