$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/634590e3-58e0-332e-9bb0-08ef4137086d.roa File: 634590e3-58e0-332e-9bb0-08ef4137086d.roa (raw, json) Hash identifier: WKe2uP1fCtu8hsnDxGeA8zj8/ntw2HuCRBNMZqxJthc= Subject key identifier: D4:3F:D3:A9:92:35:59:EF:08:E0:06:BC:C0:7E:1A:D3:D8:8E:C4:9E Certificate issuer: /CN=57202e8d-d671-4fe3-bfa9-605e2ca32aa5 Certificate serial: 010D0C9F432858498CFF14F8246D90AE54177800 Authority key identifier: 0A:70:00:4A:1A:A0:5C:A6:C4:C7:35:57:D7:4D:96:DF:DD:09:4C:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/634590e3-58e0-332e-9bb0-08ef4137086d.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 7311 IP address blocks: 216.126.77.0/24 maxlen: 24 216.126.79.0/24 maxlen: 24 216.126.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:14:f8:24:6d:90:ae:54:17:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57202e8d-d671-4fe3-bfa9-605e2ca32aa5 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=b149510a-31d2-406b-8394-6b8a1a0eea49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c7:8c:4d:cb:c7:b3:5e:b7:c7:1b:85:68:ce: 9f:31:dd:8c:ec:c6:9f:b9:5a:df:97:40:dc:09:78: 41:62:ea:54:29:d3:30:01:52:78:fd:5f:a8:3c:63: 7c:b0:4e:94:83:58:54:c7:eb:d8:cd:5e:06:df:b4: d6:f3:a2:83:9c:21:0d:c5:55:83:07:35:18:9f:62: da:8b:ae:f6:5c:e2:86:2b:b2:5e:7d:da:ad:0f:1a: 5c:ad:b0:eb:43:c7:c1:5d:2b:8c:33:56:4c:11:d0: 00:f9:c5:39:e4:39:a6:cb:10:6d:6e:df:cf:2b:37: b4:82:e5:dd:d3:cb:de:98:8e:d9:1e:5c:74:52:aa: 52:d3:90:40:36:69:34:a5:1b:61:35:c6:98:be:ce: 0c:70:86:82:e4:a9:af:64:2d:73:66:85:06:2c:1b: d6:ce:c1:a2:80:62:5a:5c:8b:07:d2:ea:8d:ac:2d: 49:1c:5d:bb:36:63:d7:9f:49:80:f3:24:ef:03:26: 9a:54:96:0e:ee:d1:f4:d0:f1:58:43:60:03:5c:ac: 3f:a8:24:c8:ad:f7:2d:a0:60:17:53:2a:2a:6b:0f: da:df:a2:68:ae:a4:0e:08:9f:c2:fa:73:88:d0:6a: f3:d2:f9:d4:b5:58:9b:e2:f7:ff:03:00:9b:98:0b: bd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:3F:D3:A9:92:35:59:EF:08:E0:06:BC:C0:7E:1A:D3:D8:8E:C4:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/634590e3-58e0-332e-9bb0-08ef4137086d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.crl X509v3 Authority Key Identifier: keyid:0A:70:00:4A:1A:A0:5C:A6:C4:C7:35:57:D7:4D:96:DF:DD:09:4C:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer sbgp-ipAddrBlock: critical IPv4: 216.126.77.0/24 216.126.79.0/24 216.126.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:b3:a4:fb:c7:1f:ba:b2:be:bb:06:e3:ba:76:bf:a5:d8:b3: 39:37:db:49:a7:4b:a1:59:13:58:7b:94:56:90:78:c3:13:32: 94:e4:ad:f0:b5:02:d6:7d:4f:ed:86:33:e7:74:96:ef:b7:b7: 73:0e:36:cc:43:72:89:13:7e:d0:22:61:04:8f:46:ec:e1:49: 93:b8:cd:17:af:05:4f:3d:c6:bd:a6:ca:10:f9:53:3c:21:bb: 9b:99:ff:d5:c5:18:22:44:96:3a:90:54:b8:dd:1c:ab:fd:55: c5:f7:ec:c4:a1:89:b1:c4:65:a1:d2:56:c6:5a:7f:a2:8a:9e: 57:32:34:08:20:a7:e1:d2:bd:85:39:95:09:e9:cf:e8:84:0f: b2:23:c1:13:b8:8c:20:8e:d2:4a:45:3c:e9:c8:06:0c:6a:f3: f1:1c:4d:4d:5c:60:5a:b6:b6:b6:33:70:88:f3:e2:b3:67:b0: 29:85:e9:1b:cb:94:2a:0d:cd:6b:ef:74:d2:b4:17:2e:e8:3e: 4f:c1:b7:97:2f:90:fd:0e:9e:2e:ee:05:eb:28:d3:1a:c1:25: 1b:30:df:84:6e:48:43:7c:a1:af:bc:22:9b:fd:97:5d:45:79: 66:4b:c6:af:7f:8d:20:37:e9:02:92:56:33:2a:88:40:de:b0: fe:e5:06:20 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEmM/xT4JG2QrlQXeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTcyMDJlOGQtZDY3MS00ZmUzLWJmYTktNjA1ZTJjYTMy YWE1MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk YjE0OTUxMGEtMzFkMi00MDZiLTgzOTQtNmI4YTFhMGVlYTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMeMTcvHs163xxuFaM6fMd2M7MafuVrfl0Dc CXhBYupUKdMwAVJ4/V+oPGN8sE6Ug1hUx+vYzV4G37TW86KDnCENxVWDBzUYn2La i672XOKGK7JefdqtDxpcrbDrQ8fBXSuMM1ZMEdAA+cU55DmmyxBtbt/PKze0guXd 08vemI7ZHlx0UqpS05BANmk0pRthNcaYvs4McIaC5KmvZC1zZoUGLBvWzsGigGJa XIsH0uqNrC1JHF27NmPXn0mA8yTvAyaaVJYO7tH00PFYQ2ADXKw/qCTIrfctoGAX Uyoqaw/a36JorqQOCJ/C+nOI0Grz0vnUtVib4vf/AwCbmAu9fQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFNQ/06mSNVnvCOAGvMB+GtPYjsSeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81NzIw MmU4ZC1kNjcxLTRmZTMtYmZhOS02MDVlMmNhMzJhYTUvNjM0NTkwZTMtNThlMC0z MzJlLTliYjAtMDhlZjQxMzcwODZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTcyMDJlOGQtZDY3MS00ZmUzLWJm YTktNjA1ZTJjYTMyYWE1LzU3MjAyZThkLWQ2NzEtNGZlMy1iZmE5LTYwNWUyY2Ez MmFhNS5jcmwwHwYDVR0jBBgwFoAUCnAAShqgXKbExzVX102W390JTPswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81NzIwMmU4ZC1kNjcxLTRmZTMtYmZhOS02MDVl MmNhMzJhYTUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA2H5NAwQA 2H5PAwQA2H5WMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACyzpPvHH7qyvrsG47p2v6XYszk320mnS6FZE1h7 lFaQeMMTMpTkrfC1AtZ9T+2GM+d0lu+3t3MONsxDcokTftAiYQSPRuzhSZO4zRev BU89xr2myhD5Uzwhu5uZ/9XFGCJEljqQVLjdHKv9VcX37MShibHEZaHSVsZaf6KK nlcyNAggp+HSvYU5lQnpz+iED7IjwRO4jCCO0kpFPOnIBgxq8/EcTU1cYFq2trYz cIjz4rNnsCmF6RvLlCoNzWvvdNK0Fy7oPk/Bt5cvkP0Oni7uBeso0xrBJRsw34Ru SEN8oa+8Ipv9l11FeWZLxq9/jSA36QKSVjMqiEDesP7lBiA= -----END CERTIFICATE-----Generated at Sun May 11 10:38:33 2025 by rpki-client