$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8857701f-c693-3ac5-b93b-7e8a54024366.roa File: 8857701f-c693-3ac5-b93b-7e8a54024366.roa (raw, json) Hash identifier: b0UTir/cfzMXSIfIIwyTbdeOqxBzseiIeOYK1YFv8VQ= Subject key identifier: 38:DB:32:4E:6D:44:90:99:B0:03:69:AF:6D:AD:72:EA:48:2E:A6:22 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584971142E4806FC143A1E6A9B40 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8857701f-c693-3ac5-b93b-7e8a54024366.roa Signing time: Mon 07 Apr 2025 01:00:47 +0000 ROA not before: Mon 07 Apr 2025 01:00:47 +0000 ROA not after: Sun 06 Jul 2025 01:00:47 +0000 asID: 23473 IP address blocks: 216.171.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:71:14:2e:48:06:fc:14:3a:1e:6a:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Apr 7 01:00:47 2025 GMT Not After : Jul 6 01:00:47 2025 GMT Subject: CN=e4540373-6022-4395-96d4-71d7ecea863f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:13:8f:7e:ee:ce:08:1a:23:86:49:bb:5b:19: 7b:89:f0:af:31:8a:c3:2e:d1:0c:08:32:eb:d3:4b: 1f:0d:f9:61:36:8c:1f:2d:5c:c9:05:bb:7d:3d:7a: 68:39:eb:3c:11:97:99:bb:ab:f2:60:8b:e2:7c:47: 0e:f7:7e:e5:f2:e7:e4:b5:a4:a7:6d:93:b3:b7:6a: 92:1a:0b:e4:46:14:ae:a3:ef:1f:ba:24:fa:2c:3c: f6:21:3a:53:4f:5c:75:26:11:c7:42:24:3e:ce:29: 16:80:78:1a:18:07:ea:70:7b:37:db:47:54:3d:b2: 68:69:be:b3:97:44:20:1f:a8:60:f4:41:23:db:70: d6:34:38:13:f1:9c:6e:d5:b0:2e:e6:cf:32:fd:48: 13:35:76:fb:fc:fd:0c:1a:5d:79:89:92:f7:84:f6: 1a:64:b3:85:f3:ae:6a:b4:79:eb:c4:7a:ee:76:e7: c0:06:e7:e4:09:ff:64:b3:09:31:65:ca:75:94:b3: 64:70:60:df:9e:cc:72:f6:49:b1:31:ca:45:33:2d: 37:8e:0f:01:0a:78:ea:49:49:08:72:84:db:63:b9: 87:2c:c1:fc:19:7f:3e:fd:1d:bd:a2:e6:86:a4:57: 91:62:b1:92:f4:92:07:a4:cb:cd:2d:db:ef:2e:2d: aa:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DB:32:4E:6D:44:90:99:B0:03:69:AF:6D:AD:72:EA:48:2E:A6:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8857701f-c693-3ac5-b93b-7e8a54024366.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:3e:1b:0d:01:d5:11:f0:9c:38:e3:43:01:c3:99:27:b3:d7: 2e:e4:50:0f:90:47:6f:ea:35:96:35:b8:c7:bf:8c:10:ec:b5: 1d:b6:b6:c6:9b:3d:dc:31:fd:7b:e1:16:91:d2:95:c0:08:30: c2:77:1d:11:8e:a3:dd:69:f7:74:af:33:3b:0e:23:b8:19:2c: 57:88:ad:a3:b6:41:13:7b:12:92:fb:dc:37:9f:85:21:e1:bb: 73:ee:5e:5b:97:79:4f:46:c5:bb:e4:fa:69:95:d0:37:0e:cb: cf:bc:90:a0:dc:69:50:b3:f0:d4:1a:40:f5:f4:01:40:8b:1f: 47:40:69:00:4f:cb:26:5a:9d:92:59:05:27:8b:ab:a4:94:d5: de:6b:26:96:a2:d6:91:45:11:6d:72:59:78:d6:5c:b5:4d:61: 8f:08:7a:6c:5b:3a:d9:32:6f:ef:6c:e7:b4:c4:5c:b5:3a:73: 24:93:a3:17:fb:0c:83:43:a7:86:fb:1a:f3:5d:93:42:02:64: e1:fa:93:44:29:7d:cf:64:bf:a7:12:9b:91:64:80:24:bb:06: 7b:f6:18:8b:89:fc:3a:ca:23:74:27:1a:45:f7:87:f7:d0:0a: cc:f8:7e:e1:17:7e:3d:00:bc:97:31:f9:7f:65:f8:52:65:ba: e2:92:32:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElxFC5IBvwUOh5qm0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDQwNzAxMDA0N1oXDTI1MDcwNjAxMDA0N1owLzEtMCsGA1UEAxMk ZTQ1NDAzNzMtNjAyMi00Mzk1LTk2ZDQtNzFkN2VjZWE4NjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBOPfu7OCBojhkm7Wxl7ifCvMYrDLtEMCDLr 00sfDflhNowfLVzJBbt9PXpoOes8EZeZu6vyYIvifEcO937l8ufktaSnbZOzt2qS GgvkRhSuo+8fuiT6LDz2ITpTT1x1JhHHQiQ+zikWgHgaGAfqcHs320dUPbJoab6z l0QgH6hg9EEj23DWNDgT8Zxu1bAu5s8y/UgTNXb7/P0MGl15iZL3hPYaZLOF865q tHnrxHrudufABufkCf9kswkxZcp1lLNkcGDfnsxy9kmxMcpFMy03jg8BCnjqSUkI coTbY7mHLMH8GX8+/R29ouaGpFeRYrGS9JIHpMvNLdvvLi2q2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjbMk5tRJCZsANpr22tcupILqYiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvODg1NzcwMWYtYzY5My0z YWM1LWI5M2ItN2U4YTU0MDI0MzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Ks6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABE+Gw0B1RHwnDjjQwHDmSez1y7kUA+QR2/qNZY1uMe/jBDstR22tsab Pdwx/XvhFpHSlcAIMMJ3HRGOo91p93SvMzsOI7gZLFeIraO2QRN7EpL73DefhSHh u3PuXluXeU9Gxbvk+mmV0DcOy8+8kKDcaVCz8NQaQPX0AUCLH0dAaQBPyyZanZJZ BSeLq6SU1d5rJpai1pFFEW1yWXjWXLVNYY8IemxbOtkyb+9s57TEXLU6cySToxf7 DINDp4b7GvNdk0ICZOH6k0Qpfc9kv6cSm5FkgCS7Bnv2GIuJ/DrKI3QnGkX3h/fQ Csz4fuEXfj0AvJcx+X9l+FJluuKSMv8= -----END CERTIFICATE-----Generated at Sat May 10 13:46:29 2025 by rpki-client