$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/69d2dbc5-b24e-33f2-bfa2-2403850f04c6.roa File: 69d2dbc5-b24e-33f2-bfa2-2403850f04c6.roa (raw, json) Hash identifier: a9PPHv61lQiQx1l2kbztdqPcIn4UTeHimBc5PimZmcU= Subject key identifier: 7A:7A:65:06:E7:4E:E6:06:0E:81:85:B0:36:EA:7B:03:07:02:7B:A0 Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F432858491AA6C3470CE496E35E9C4C20 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/69d2dbc5-b24e-33f2-bfa2-2403850f04c6.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 21570 IP address blocks: 216.123.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:c3:47:0c:e4:96:e3:5e:9c:4c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=fed0da3d-567e-439d-8af4-8c3602d86c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:63:3f:68:9a:d1:00:f8:d3:83:a9:8f:ac:10: 78:89:a8:02:e5:d3:3a:20:9d:ea:11:91:27:61:6e: df:1f:9a:ac:d9:1a:b0:d0:1b:9e:f4:89:71:0e:c9: c5:9b:a9:e5:ea:19:3f:d4:74:7e:7c:bd:ee:21:94: 66:62:7f:21:79:9f:91:d9:b0:f2:4a:c7:5c:90:f5: 68:9f:74:28:70:a3:c1:aa:08:e2:44:1f:e3:85:08: 0d:21:e0:8c:50:b5:06:eb:05:36:e7:c8:1c:ce:40: ea:a3:82:aa:01:5b:cc:42:b3:70:de:5a:0f:ee:9e: 3d:98:bc:d3:85:fe:a9:b1:25:aa:92:8b:a7:53:9f: 88:34:f9:94:58:13:7c:50:c3:c8:05:6b:e9:28:10: 23:d5:2f:1c:2a:70:59:35:5b:c9:56:a5:14:a8:cc: 29:19:54:03:a0:bc:07:68:25:fb:a5:3f:5e:75:4b: 4b:51:4c:6e:74:ba:3c:fe:85:38:4c:73:7d:f9:9c: dd:96:e8:80:5a:c9:fd:8b:43:31:08:29:0f:cd:6a: 42:82:4e:83:e9:1f:d7:e6:29:8a:3f:8c:66:37:da: 90:d7:52:4a:74:ab:c1:8b:1e:ef:69:36:d1:4c:8a: 9d:2e:02:c0:81:49:42:1b:e3:08:f6:88:99:71:f5: 23:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7A:65:06:E7:4E:E6:06:0E:81:85:B0:36:EA:7B:03:07:02:7B:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/69d2dbc5-b24e-33f2-bfa2-2403850f04c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv4: 216.123.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:d5:b1:09:7d:8e:3e:f8:1b:7f:76:dc:85:1a:b8:74:d8:ca: 44:86:a3:1a:04:7f:62:72:e5:68:25:3d:d4:4c:31:ae:67:3e: b7:2d:10:fe:be:e1:b8:73:e1:bc:19:00:48:ad:df:dc:7f:c0: 82:16:4b:50:55:15:3a:26:1d:17:89:44:6c:12:4c:bc:61:74: 26:b7:f5:42:19:af:eb:3c:d3:23:fd:dd:45:76:e7:05:ef:6a: 7e:f1:28:ac:26:b2:a1:46:a0:1f:5e:c2:32:53:44:07:8d:9b: 14:76:ee:4d:e7:fb:05:35:77:dd:2a:b2:3d:e3:3d:6d:24:9f: bc:68:30:32:ac:f2:49:ee:a8:c7:f5:e3:c8:41:9f:82:f5:a8: 2e:cc:eb:9c:35:4a:8e:68:9d:b6:2e:27:5d:d5:ea:6c:32:f1: cb:14:87:03:38:bc:e4:21:58:40:55:01:b4:7c:88:d4:dc:05: d9:da:08:52:e1:85:44:98:4d:b2:69:54:e4:8a:dc:30:e1:cc: ab:e3:ba:5b:53:bb:a3:56:5a:e1:b2:20:ce:d1:63:7d:01:fd: 5d:95:65:e2:aa:a5:81:52:a1:4f:15:ae:92:e2:08:2b:65:97: 0d:db:ea:4e:c8:ef:94:8d:46:6d:46:12:98:fa:20:45:ff:69: 03:19:c2:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkapsNHDOSW416cTCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk ZmVkMGRhM2QtNTY3ZS00MzlkLThhZjQtOGMzNjAyZDg2YzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mM/aJrRAPjTg6mPrBB4iagC5dM6IJ3qEZEn YW7fH5qs2Rqw0Bue9IlxDsnFm6nl6hk/1HR+fL3uIZRmYn8heZ+R2bDySsdckPVo n3QocKPBqgjiRB/jhQgNIeCMULUG6wU258gczkDqo4KqAVvMQrNw3loP7p49mLzT hf6psSWqkounU5+INPmUWBN8UMPIBWvpKBAj1S8cKnBZNVvJVqUUqMwpGVQDoLwH aCX7pT9edUtLUUxudLo8/oU4THN9+ZzdluiAWsn9i0MxCCkPzWpCgk6D6R/X5imK P4xmN9qQ11JKdKvBix7vaTbRTIqdLgLAgUlCG+MI9oiZcfUj7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHp6ZQbnTuYGDoGFsDbqewMHAnugMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvNjlkMmRiYzUtYjI0ZS0z M2YyLWJmYTItMjQwMzg1MGYwNGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Hu6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrVsQl9jj74G3923IUauHTYykSGoxoEf2Jy5WglPdRMMa5nPrctEP6+ 4bhz4bwZAEit39x/wIIWS1BVFTomHReJRGwSTLxhdCa39UIZr+s80yP93UV25wXv an7xKKwmsqFGoB9ewjJTRAeNmxR27k3n+wU1d90qsj3jPW0kn7xoMDKs8knuqMf1 48hBn4L1qC7M65w1So5onbYuJ13V6mwy8csUhwM4vOQhWEBVAbR8iNTcBdnaCFLh hUSYTbJpVOSK3DDhzKvjultTu6NWWuGyIM7RY30B/V2VZeKqpYFSoU8VrpLiCCtl lw3b6k7I75SNRm1GEpj6IEX/aQMZwts= -----END CERTIFICATE-----Generated at Thu May 8 14:27:41 2025 by rpki-client