$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ce5a1214-ed4b-397f-91ed-4961c09b7a65.roa File: ce5a1214-ed4b-397f-91ed-4961c09b7a65.roa (raw, json) Hash identifier: GzBaxNNdYUXEpQmxBnej8tckzg36RvjTOHhml+zJ2QM= Subject key identifier: D9:76:DD:A7:1B:11:F5:0D:AC:4D:64:1B:52:59:14:4E:B9:34:8A:A9 Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F43285849B9AA061F99F923E7DD5ABED0 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ce5a1214-ed4b-397f-91ed-4961c09b7a65.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 33724 IP address blocks: 216.230.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:06:1f:99:f9:23:e7:dd:5a:be:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=3776dab0-c823-45e3-833f-b14171a9cdf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:12:fc:8d:14:b1:ba:6a:b5:aa:49:a0:71:65: 27:1c:9c:5d:a9:ee:0b:ef:59:70:2c:e3:e7:b4:ac: 6b:7b:44:8a:d6:a2:88:f2:cf:c9:70:d7:69:08:11: fe:1c:0b:8e:01:97:39:4b:3f:7d:ee:82:6b:68:28: 59:ee:22:ab:a1:8e:98:e0:85:fd:f5:3c:2c:b4:7a: ed:a5:e3:bc:16:6d:bc:8c:f1:37:27:71:88:99:0c: 6d:f3:67:54:0a:b2:55:d0:28:58:3e:24:7f:00:b4: f3:96:50:9c:eb:76:8a:f0:11:a0:8d:bf:a8:2c:a7: 4e:06:b4:63:cf:44:d0:47:f5:35:12:d0:05:10:d5: 9a:9a:c1:47:db:d5:14:76:74:10:fa:a3:f4:8b:0f: 51:a2:85:e3:d8:79:fa:f9:eb:a8:0e:87:78:77:1b: a9:78:70:ff:79:e5:0a:b4:42:10:c2:19:20:5b:03: 2f:37:1b:56:b5:fe:45:59:b3:67:70:c2:a1:01:e4: 7f:73:e4:58:4e:9c:73:10:26:a2:09:84:66:2b:2d: 1c:a0:82:d2:81:c1:5c:f1:1d:8f:86:df:e7:03:eb: da:3c:da:b6:0d:2d:06:6f:1f:a8:58:06:04:0d:b7: b2:22:27:1f:70:4a:c6:ae:8d:82:bb:4d:84:aa:fd: 83:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:76:DD:A7:1B:11:F5:0D:AC:4D:64:1B:52:59:14:4E:B9:34:8A:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ce5a1214-ed4b-397f-91ed-4961c09b7a65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv4: 216.230.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:51:57:fd:65:3e:de:01:7b:2c:78:22:fe:4a:90:e2:fe:10: a5:e7:b5:cb:0f:39:a5:c1:6a:9c:5c:ee:ed:e6:a4:bf:d7:3b: ad:30:e0:2c:3d:4b:8e:42:cf:68:08:53:a4:66:4e:b1:75:d9: e5:91:26:82:6e:de:51:91:36:45:7c:1f:cd:52:0f:99:e7:32: 15:82:66:4d:fa:07:9c:18:46:35:c1:8a:15:32:a8:15:67:32: b1:f6:f6:13:e8:08:9e:11:6a:26:74:1b:e5:bb:9b:50:3e:0c: d1:d2:24:8f:e8:5e:c7:93:57:23:c1:93:60:04:9c:1d:5c:cb: 55:db:95:dc:07:3b:8e:28:3e:58:25:f4:39:a3:7e:8a:ab:b3: cc:e5:97:5a:fd:83:02:5f:c6:6a:97:e2:73:6a:bc:40:e2:8f: b4:9e:20:d2:ec:61:c6:e4:01:3f:50:de:a9:29:d6:e4:85:2f: 3d:c2:eb:f5:8f:4e:e4:25:4d:a5:04:65:a1:4c:c4:e3:8d:72: 9e:06:a5:79:cc:b1:2e:69:0f:3f:60:f0:86:a6:f1:ce:8c:a8: bf:98:75:9c:de:8b:9e:9a:b5:87:7b:e6:10:97:ee:5e:5c:b3: 99:e0:d1:b6:d8:9b:41:2a:ac:a8:16:56:91:34:e8:cd:1f:d6: 57:55:4a:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgYfmfkj591avtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk Mzc3NmRhYjAtYzgyMy00NWUzLTgzM2YtYjE0MTcxYTljZGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRL8jRSxumq1qkmgcWUnHJxdqe4L71lwLOPn tKxre0SK1qKI8s/JcNdpCBH+HAuOAZc5Sz997oJraChZ7iKroY6Y4IX99TwstHrt peO8Fm28jPE3J3GImQxt82dUCrJV0ChYPiR/ALTzllCc63aK8BGgjb+oLKdOBrRj z0TQR/U1EtAFENWamsFH29UUdnQQ+qP0iw9RooXj2Hn6+euoDod4dxupeHD/eeUK tEIQwhkgWwMvNxtWtf5FWbNncMKhAeR/c+RYTpxzECaiCYRmKy0coILSgcFc8R2P ht/nA+vaPNq2DS0Gbx+oWAYEDbeyIicfcErGro2Cu02Eqv2DBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNl23acbEfUNrE1kG1JZFE65NIqpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvY2U1YTEyMTQtZWQ0Yi0z OTdmLTkxZWQtNDk2MWMwOWI3YTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OYdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpRV/1lPt4Beyx4Iv5KkOL+EKXntcsPOaXBapxc7u3mpL/XO60w4Cw9 S45Cz2gIU6RmTrF12eWRJoJu3lGRNkV8H81SD5nnMhWCZk36B5wYRjXBihUyqBVn MrH29hPoCJ4RaiZ0G+W7m1A+DNHSJI/oXseTVyPBk2AEnB1cy1XbldwHO44oPlgl 9Dmjfoqrs8zll1r9gwJfxmqX4nNqvEDij7SeINLsYcbkAT9Q3qkp1uSFLz3C6/WP TuQlTaUEZaFMxOONcp4GpXnMsS5pDz9g8Iam8c6MqL+YdZzei56atYd75hCX7l5c s5ng0bbYm0EqrKgWVpE06M0f1ldVSgw= -----END CERTIFICATE-----Generated at Sun May 11 18:58:09 2025 by rpki-client