$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/fae6d88c-9360-39b7-b231-1c61e8d380d8.roa File: fae6d88c-9360-39b7-b231-1c61e8d380d8.roa (raw, json) Hash identifier: 7B0YIiv6Ppynnhsyp9zkXa/ItkaeJ3xrjy4L+DTkGDo= Subject key identifier: 33:EE:59:86:C8:89:A8:EA:BE:26:C6:43:ED:36:F3:97:0A:9F:16:51 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B642F71888F5C930E76F300 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/fae6d88c-9360-39b7-b231-1c61e8d380d8.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 53708 IP address blocks: 216.243.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:2f:71:88:8f:5c:93:0e:76:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=abf2504f-e259-4228-a25f-0960710be9e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:36:35:bc:3d:ed:db:94:56:92:29:a0:06:63: 92:71:cb:74:f0:50:ce:97:86:a0:22:d4:69:7b:9e: e1:3b:a1:f9:a3:72:30:25:7c:ad:c2:d8:f0:fd:40: 51:77:d2:f2:dc:2b:ed:31:86:27:f3:e2:75:f6:5a: 21:a7:ad:6c:9b:36:72:95:dc:d0:83:ca:14:f9:9f: a2:d6:25:24:54:5c:94:0b:5c:53:1d:fa:47:95:98: 80:b4:33:1e:e8:18:00:ca:2d:82:32:73:b1:5f:5f: f3:47:fa:ea:00:4e:e0:1c:49:1f:b6:b1:35:9a:90: e1:2e:7f:0d:17:f4:d2:b5:8c:a9:98:4e:c1:dc:26: cf:85:e8:31:f6:3a:89:ea:3a:33:54:10:04:68:bb: c4:33:66:40:f8:19:aa:26:6a:28:e1:a6:37:5e:2b: 61:39:ef:d5:5d:a3:3a:ce:40:46:dd:fd:15:5b:6b: 12:6c:eb:00:6f:59:f4:46:1f:4d:8f:ce:68:24:29: d5:fb:fc:dd:d2:9b:79:4f:83:0f:84:dc:be:ab:4a: 50:b2:e5:d6:aa:59:49:34:e5:0d:ba:f8:e9:78:40: b7:d7:e6:3e:89:0f:36:88:09:92:fe:56:5f:8e:b1: 5b:c8:4a:ed:2d:f7:a7:90:00:17:b4:f2:ec:91:c2: 61:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EE:59:86:C8:89:A8:EA:BE:26:C6:43:ED:36:F3:97:0A:9F:16:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/fae6d88c-9360-39b7-b231-1c61e8d380d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 216.243.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:70:b8:68:9c:94:24:92:f8:d7:e7:13:a7:c0:5d:76:35:4a: 0b:14:55:d9:59:55:9c:2d:fe:0d:38:ce:0b:f0:0c:51:3f:e1: d8:be:8a:8b:75:46:74:34:9e:ba:5a:c8:d6:82:90:38:36:38: 1c:01:49:01:b8:ed:a4:ef:ad:e1:b5:a3:1e:67:f1:6b:08:d4: 02:3e:e9:b1:b7:ab:69:66:ea:aa:d1:45:62:82:05:01:10:6c: 7e:9c:3a:41:67:3b:7f:93:b7:73:fc:e7:62:b2:4e:6d:6e:94: 1e:1a:44:20:ca:37:79:19:4b:5b:4a:9a:a0:04:fd:58:f0:92: 18:f3:7e:ed:1a:ce:89:25:a5:96:1c:ea:45:c7:b5:fd:ca:fe: bc:3a:cf:3c:aa:1b:bd:11:53:65:94:7b:48:03:0c:a3:11:7e: 00:eb:91:b6:7c:be:a6:fa:88:f0:16:0b:f8:85:18:52:fe:01: 5b:df:47:f6:4a:64:9a:b8:cb:24:08:a8:52:9c:98:3b:c4:92: 9d:3a:2f:66:8e:06:3d:30:aa:b9:89:9d:b9:d9:99:17:39:2b: 65:e0:15:b2:e1:e9:6c:e2:ec:c0:0a:81:40:37:6d:cb:77:11: 89:1f:83:ea:e4:f5:0d:f1:34:5b:64:45:79:8b:6e:9c:e4:8d: ac:43:2b:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZC9xiI9ckw528wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk YWJmMjUwNGYtZTI1OS00MjI4LWEyNWYtMDk2MDcxMGJlOWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojY1vD3t25RWkimgBmOScct08FDOl4agItRp e57hO6H5o3IwJXytwtjw/UBRd9Ly3CvtMYYn8+J19lohp61smzZyldzQg8oU+Z+i 1iUkVFyUC1xTHfpHlZiAtDMe6BgAyi2CMnOxX1/zR/rqAE7gHEkftrE1mpDhLn8N F/TStYypmE7B3CbPhegx9jqJ6jozVBAEaLvEM2ZA+BmqJmoo4aY3XithOe/VXaM6 zkBG3f0VW2sSbOsAb1n0Rh9Nj85oJCnV+/zd0pt5T4MPhNy+q0pQsuXWqllJNOUN uvjpeEC31+Y+iQ82iAmS/lZfjrFbyErtLfenkAAXtPLskcJh/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPuWYbIiajqvibGQ+0285cKnxZRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZmFlNmQ4OGMtOTM2MC0z OWI3LWIyMzEtMWM2MWU4ZDM4MGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PMNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9wuGiclCSS+NfnE6fAXXY1SgsUVdlZVZwt/g04zgvwDFE/4di+iot1 RnQ0nrpayNaCkDg2OBwBSQG47aTvreG1ox5n8WsI1AI+6bG3q2lm6qrRRWKCBQEQ bH6cOkFnO3+Tt3P852KyTm1ulB4aRCDKN3kZS1tKmqAE/Vjwkhjzfu0azoklpZYc 6kXHtf3K/rw6zzyqG70RU2WUe0gDDKMRfgDrkbZ8vqb6iPAWC/iFGFL+AVvfR/ZK ZJq4yyQIqFKcmDvEkp06L2aOBj0wqrmJnbnZmRc5K2XgFbLh6Wzi7MAKgUA3bct3 EYkfg+rk9Q3xNFtkRXmLbpzkjaxDKyM= -----END CERTIFICATE-----Generated at Mon May 5 06:56:19 2025 by rpki-client