$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/57de1a6f-2177-3036-8e1c-1f8d76c10484.roa File: 57de1a6f-2177-3036-8e1c-1f8d76c10484.roa (raw, json) Hash identifier: KSU56kjyuRrutwrDz1+zynY9ZSJ4GoLvp71Ly+m6RmI= Subject key identifier: 1A:EF:A7:30:E6:EE:C1:37:CB:93:CA:77:49:62:98:B2:3C:86:EE:5D Certificate issuer: /CN=efead3cb-1d38-407f-ba06-8e276b067238 Certificate serial: 010D0C9F43285849C4D4BCAE8F2E29F87BC4A300 Authority key identifier: 34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/57de1a6f-2177-3036-8e1c-1f8d76c10484.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 16509 IP address blocks: 216.238.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:bc:ae:8f:2e:29:f8:7b:c4:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efead3cb-1d38-407f-ba06-8e276b067238 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=49afb4ae-259b-4610-877a-3ee7ae833b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b7:1b:d8:88:3a:bf:33:fb:ca:96:46:e9:47: 78:bc:f8:2a:d2:0e:ea:d7:76:b4:1f:7c:2b:bf:d3: e4:09:c7:11:0e:4e:e2:e2:01:96:b3:3d:39:f0:89: 87:62:8a:78:9c:a8:97:50:a1:11:4d:82:e6:c9:7c: 67:d6:e8:b1:d6:b7:d2:d7:d8:41:22:12:ec:8b:46: 6b:36:0a:56:55:c8:f1:3e:34:4c:8b:bd:ee:a4:3e: c0:43:dc:af:33:32:13:69:66:51:3c:5c:e4:5d:b7: f7:88:72:ac:f1:74:3b:6e:d0:22:26:21:04:2e:ff: 5a:d8:e0:6f:06:4e:45:60:0f:7d:02:39:7a:2f:22: 34:bd:75:79:b8:90:05:bc:d9:cb:03:b8:2c:4b:65: 86:36:4d:b0:11:eb:0b:32:0a:23:16:61:09:67:c6: 5d:58:98:8d:a8:41:da:ff:aa:13:9e:23:06:1e:4f: da:81:0b:c8:a0:df:a0:94:09:ed:58:c4:bd:66:b4: 29:1a:7c:82:49:88:3b:0d:11:24:d0:c6:62:0e:2e: 84:2f:00:12:fa:29:44:ca:74:c0:7e:9e:66:f6:2e: 3b:9a:a3:7d:23:4c:f6:a6:43:e7:32:83:de:11:67: d9:31:cd:b0:2c:5c:85:0a:d0:a1:8a:49:4a:b7:d4: 3c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EF:A7:30:E6:EE:C1:37:CB:93:CA:77:49:62:98:B2:3C:86:EE:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/57de1a6f-2177-3036-8e1c-1f8d76c10484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl X509v3 Authority Key Identifier: keyid:34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer sbgp-ipAddrBlock: critical IPv4: 216.238.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:80:1f:17:af:0c:c4:73:c1:ff:c2:08:1b:10:0f:48:73:85: e0:4e:18:cb:a2:14:68:48:14:34:db:44:e2:f5:2b:d6:90:63: ed:0a:d7:83:2c:3f:25:be:2c:9d:25:d1:27:5c:22:5f:33:7e: ee:8a:7b:e2:d1:5f:85:d1:9f:ff:82:fa:f7:65:70:ff:6e:e0: c1:83:fb:34:2e:2d:9f:5e:89:41:66:37:73:bf:00:83:98:56: bc:e2:4b:51:2d:64:81:79:03:3c:84:ab:40:fc:8e:73:0c:bc: 11:2b:b2:00:b4:67:5f:9c:c5:1a:db:08:22:79:91:63:ca:c6: b7:12:e3:c5:82:26:cc:9a:1c:5a:98:9a:de:c7:12:cf:9c:ef: d8:3c:ad:f7:6f:0f:62:17:1d:62:a6:bf:e3:d1:d5:d7:20:78: 26:68:7d:ef:f2:69:d9:be:30:1b:d5:d9:20:50:87:e9:58:51: 96:7f:b7:4f:f1:fd:48:8f:56:10:e4:ab:2b:fd:26:d3:76:b2: cc:00:3a:27:7f:aa:8a:e0:bc:17:27:9f:ef:37:a5:47:43:30: 9a:b0:4c:28:08:ca:80:59:b9:8c:08:b8:20:27:8e:da:ff:a5: 39:bf:fd:a6:f9:74:72:e7:87:80:a4:04:74:99:f7:b8:47:84: 33:b4:68:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1Lyujy4p+HvEowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZlYWQzY2ItMWQzOC00MDdmLWJhMDYtOGUyNzZiMDY3 MjM4MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk NDlhZmI0YWUtMjU5Yi00NjEwLTg3N2EtM2VlN2FlODMzYjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLcb2Ig6vzP7ypZG6Ud4vPgq0g7q13a0H3wr v9PkCccRDk7i4gGWsz058ImHYop4nKiXUKERTYLmyXxn1uix1rfS19hBIhLsi0Zr NgpWVcjxPjRMi73upD7AQ9yvMzITaWZRPFzkXbf3iHKs8XQ7btAiJiEELv9a2OBv Bk5FYA99Ajl6LyI0vXV5uJAFvNnLA7gsS2WGNk2wEesLMgojFmEJZ8ZdWJiNqEHa /6oTniMGHk/agQvIoN+glAntWMS9ZrQpGnyCSYg7DREk0MZiDi6ELwAS+ilEynTA fp5m9i47mqN9I0z2pkPnMoPeEWfZMc2wLFyFCtChiklKt9Q8VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrvpzDm7sE3y5PKd0limLI8hu5dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZmVh ZDNjYi0xZDM4LTQwN2YtYmEwNi04ZTI3NmIwNjcyMzgvNTdkZTFhNmYtMjE3Ny0z MDM2LThlMWMtMWY4ZDc2YzEwNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWZlYWQzY2ItMWQzOC00MDdmLWJh MDYtOGUyNzZiMDY3MjM4L2VmZWFkM2NiLTFkMzgtNDA3Zi1iYTA2LThlMjc2YjA2 NzIzOC5jcmwwHwYDVR0jBBgwFoAUNPnajc3fX4CiVfX2aItPRyDBA9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZmVhZDNjYi0xZDM4LTQwN2YtYmEwNi04ZTI3 NmIwNjcyMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O69MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKAHxevDMRzwf/CCBsQD0hzheBOGMuiFGhIFDTbROL1K9aQY+0K14Ms PyW+LJ0l0SdcIl8zfu6Ke+LRX4XRn/+C+vdlcP9u4MGD+zQuLZ9eiUFmN3O/AIOY VrziS1EtZIF5AzyEq0D8jnMMvBErsgC0Z1+cxRrbCCJ5kWPKxrcS48WCJsyaHFqY mt7HEs+c79g8rfdvD2IXHWKmv+PR1dcgeCZofe/yadm+MBvV2SBQh+lYUZZ/t0/x /UiPVhDkqyv9JtN2sswAOid/qorgvBcnn+83pUdDMJqwTCgIyoBZuYwIuCAnjtr/ pTm//ab5dHLnh4CkBHSZ97hHhDO0aIg= -----END CERTIFICATE-----Generated at Sun May 11 15:14:05 2025 by rpki-client