$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/17cb60d5-3b92-3bda-a0e3-032197742f5f.roa File: 17cb60d5-3b92-3bda-a0e3-032197742f5f.roa (raw, json) Hash identifier: PucLaFrY8MRrYjL/GofgPgczkZm/h6MBO1W4yVa/1ag= Subject key identifier: 97:8D:44:84:A1:87:7A:D5:E2:96:79:E3:9F:16:C7:C1:78:10:21:17 Certificate issuer: /CN=25ec66d9-6873-4655-8a15-555b07c2edb4 Certificate serial: 010D0C9F43285848FD56BEEAE0E2550E9D883FE0 Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/17cb60d5-3b92-3bda-a0e3-032197742f5f.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 400400 IP address blocks: 216.181.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:be:ea:e0:e2:55:0e:9d:88:3f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=113cc555-73ee-46ae-9eb6-3fe1f95d3251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5d:d3:7b:48:99:8f:03:5f:1e:55:08:53:5c: 44:30:98:02:31:db:76:16:7a:80:75:d1:fe:6e:08: 17:9b:dc:f6:45:d9:d0:a5:76:d0:6a:9f:1b:8d:66: df:47:94:0d:a0:7e:e5:52:54:c2:d6:a8:de:7d:c5: b6:0d:ee:e9:da:1e:5e:71:47:92:cb:dd:1e:80:4e: 49:b4:4c:76:83:ea:12:b4:85:f6:57:de:ae:3a:d1: 95:77:bd:7f:05:ad:9e:a0:35:d7:04:37:1f:a8:a7: db:42:33:b2:05:eb:68:35:23:9b:37:46:ef:0c:cd: e5:09:2b:ce:c2:26:45:06:3c:81:31:38:98:9a:c1: 66:90:29:ca:3c:ab:b1:03:c2:5c:2b:a3:12:52:f5: 8b:ec:93:6e:46:83:ad:72:1b:fc:08:ea:a7:e3:32: 95:a4:dd:80:30:f2:f7:19:08:0f:94:ef:18:2f:6f: 89:34:e5:d3:7b:69:c9:81:5d:ca:ee:05:ba:38:1e: c1:ac:67:7d:17:aa:6b:2f:9a:59:5b:43:fb:ee:b2: 8a:39:a9:e3:ab:a2:e8:38:a0:5b:e0:7e:f3:e4:64: 88:6c:74:39:a1:2e:75:17:ce:1e:b1:c1:7a:1f:80: 73:45:eb:d9:16:b2:e4:0f:85:49:c8:34:69:fb:f5: 1c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8D:44:84:A1:87:7A:D5:E2:96:79:E3:9F:16:C7:C1:78:10:21:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/17cb60d5-3b92-3bda-a0e3-032197742f5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl X509v3 Authority Key Identifier: keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer sbgp-ipAddrBlock: critical IPv4: 216.181.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e3:55:3f:7b:a1:3f:9e:99:06:e8:48:93:c4:91:48:42:b0:c8: 47:e4:91:a4:a4:87:2c:2c:f9:50:da:a8:86:77:b4:fd:89:ea: 6e:eb:e6:92:26:03:de:83:70:af:89:76:78:9b:4e:43:c7:e6: 14:b5:2a:bd:2e:0a:b5:34:09:fc:30:6d:9e:17:21:9b:7c:91: 3a:7c:2e:67:7d:a2:3e:4f:b0:bd:f7:f4:64:9b:c4:f1:0c:51: 61:41:a6:9b:12:a3:3e:5c:99:7c:e8:48:b2:58:51:17:e2:16: f4:6e:42:55:7c:ea:ab:00:6d:52:75:c1:e2:05:8d:79:8e:46: 6d:94:7f:7a:c0:5d:47:d1:c1:d2:fd:b9:2c:93:1d:42:fc:ff: 84:4a:07:b6:fa:c2:16:df:5d:b1:89:05:1d:02:6a:0a:ae:b2: 3f:16:fe:a8:76:16:ad:3b:fb:fd:6d:69:50:98:7d:3e:ff:f2: 27:e8:8d:5e:53:df:ab:95:86:e7:1d:1f:0e:02:12:62:05:f0: 10:f2:b0:7c:52:44:82:2f:a3:c2:c2:b5:96:49:87:51:5d:ee: e8:1a:f7:e4:4e:bc:f8:06:1c:28:ef:20:42:a1:f9:a7:a0:81: d8:63:46:7f:ff:aa:6d:b5:ca:84:7f:3f:9c:c9:7f:6e:09:b7: ef:14:fb:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vr7q4OJVDp2IP+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVlYzY2ZDktNjg3My00NjU1LThhMTUtNTU1YjA3YzJl ZGI0MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk MTEzY2M1NTUtNzNlZS00NmFlLTllYjYtM2ZlMWY5NWQzMjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi13Te0iZjwNfHlUIU1xEMJgCMdt2FnqAddH+ bggXm9z2RdnQpXbQap8bjWbfR5QNoH7lUlTC1qjefcW2De7p2h5ecUeSy90egE5J tEx2g+oStIX2V96uOtGVd71/Ba2eoDXXBDcfqKfbQjOyBetoNSObN0bvDM3lCSvO wiZFBjyBMTiYmsFmkCnKPKuxA8JcK6MSUvWL7JNuRoOtchv8COqn4zKVpN2AMPL3 GQgPlO8YL2+JNOXTe2nJgV3K7gW6OB7BrGd9F6prL5pZW0P77rKKOanjq6LoOKBb 4H7z5GSIbHQ5oS51F84escF6H4BzRevZFrLkD4VJyDRp+/UchwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJeNRIShh3rV4pZ5458Wx8F4ECEXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVj NjZkOS02ODczLTQ2NTUtOGExNS01NTViMDdjMmVkYjQvMTdjYjYwZDUtM2I5Mi0z YmRhLWEwZTMtMDMyMTk3NzQyZjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjVlYzY2ZDktNjg3My00NjU1LThh MTUtNTU1YjA3YzJlZGI0LzI1ZWM2NmQ5LTY4NzMtNDY1NS04YTE1LTU1NWIwN2My ZWRiNC5jcmwwHwYDVR0jBBgwFoAU4SNp7dNw6XPTAABlwTj8t+2yeQYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVjNjZkOS02ODczLTQ2NTUtOGExNS01NTVi MDdjMmVkYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LUCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAONVP3uhP56ZBuhIk8SRSEKwyEfkkaSkhyws+VDaqIZ3tP2J6m7r5pIm A96DcK+JdnibTkPH5hS1Kr0uCrU0CfwwbZ4XIZt8kTp8Lmd9oj5PsL339GSbxPEM UWFBppsSoz5cmXzoSLJYURfiFvRuQlV86qsAbVJ1weIFjXmORm2Uf3rAXUfRwdL9 uSyTHUL8/4RKB7b6whbfXbGJBR0Cagqusj8W/qh2Fq07+/1taVCYfT7/8ifojV5T 36uVhucdHw4CEmIF8BDysHxSRIIvo8LCtZZJh1Fd7uga9+ROvPgGHCjvIEKh+aeg gdhjRn//qm21yoR/P5zJf24Jt+8U+z8= -----END CERTIFICATE-----Generated at Mon May 12 11:22:01 2025 by rpki-client