$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa File: b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa (raw, json) Hash identifier: eq95Z0E9ihg1lIsq8LKZ//sp5YNdit1KhJ7GE6D7Hgk= Subject key identifier: A1:A0:D3:C8:E9:38:8D:F2:F1:B0:95:3B:C4:97:C1:2E:7D:E2:EF:D2 Certificate issuer: /CN=04c216c1-5924-4a66-9346-a1f215800ceb Certificate serial: 010D0C9F43285849912F2B8481D363C5B1A50780 Authority key identifier: 98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 399889 IP address blocks: 216.170.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:2b:84:81:d3:63:c5:b1:a5:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04c216c1-5924-4a66-9346-a1f215800ceb Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=103c8ccc-1abe-4fef-ba39-8c50ea6888e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e5:2c:9e:48:af:84:6a:88:29:24:85:b6:2a: 70:0b:18:f1:18:67:e6:70:63:06:4b:0c:d9:16:39: 93:86:f2:c9:52:bb:1d:af:b3:a7:95:19:bf:3c:e8: ff:e8:76:34:7f:ff:0a:d5:5a:5b:a3:f5:66:d8:e8: 5a:f4:9f:2f:9d:ea:0b:a3:81:22:a3:72:bb:e7:42: bc:50:ec:ba:65:8b:87:a6:cd:91:52:5c:6d:ce:ff: 9b:f0:98:e0:cf:a1:4e:40:51:66:84:04:bd:85:c1: 46:3e:79:05:e7:b8:96:14:94:fb:3f:05:83:c6:66: 35:15:9d:89:a3:fb:da:e0:0e:8c:3f:8f:36:ce:dd: e7:07:b2:c9:42:31:23:72:0c:a7:f7:26:21:c9:a3: c5:3f:d8:41:55:b5:73:9c:9f:33:15:c0:9e:48:3d: ef:b2:47:81:a3:14:79:08:e1:53:96:05:18:c6:2d: db:1f:70:cc:42:1a:46:c7:96:b4:2a:a3:7e:8e:4f: c5:16:93:d2:45:97:4e:33:92:ed:ea:24:0f:10:db: 49:48:4c:51:55:ce:47:00:71:9e:e5:76:4a:69:b3: 1c:5d:75:c3:d9:6c:ab:ed:ab:70:df:05:ad:59:81: 4d:fa:55:e1:f1:32:36:13:24:33:aa:04:9b:7b:71: 39:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A0:D3:C8:E9:38:8D:F2:F1:B0:95:3B:C4:97:C1:2E:7D:E2:EF:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl X509v3 Authority Key Identifier: keyid:98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer sbgp-ipAddrBlock: critical IPv4: 216.170.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:0a:8e:bc:09:20:c9:b6:83:64:df:84:ba:bf:43:34:ea:98: 6a:22:66:4b:6c:28:7f:49:f9:0e:67:ee:c2:39:16:d4:c3:71: f1:e9:ae:41:55:dc:da:42:c7:fc:2f:65:66:96:51:0f:68:df: 14:6c:b1:4f:42:43:8f:86:ef:c0:d2:8d:29:dc:4b:98:40:1f: b7:dd:ee:f8:55:0c:3f:6a:73:86:a2:87:bd:ea:f7:c6:b6:50: 8e:ac:55:72:e9:2f:43:76:de:70:5f:c0:2f:b1:b1:61:3c:67: a5:2a:26:aa:18:29:a8:11:b3:05:fa:86:3e:64:5e:0e:37:e3: 18:88:b9:27:9b:ed:50:98:37:d3:68:39:2e:26:f2:54:13:22: 6a:b1:b5:42:e2:a6:ea:46:c4:cd:e2:42:eb:a0:d5:5f:d0:dc: 0c:c5:5a:89:5a:21:ca:98:b2:eb:31:47:c2:02:37:66:63:c0: 12:c9:50:07:bb:19:b9:be:d1:d4:3f:e2:46:52:f6:c7:c5:0c: 2c:3c:ba:a6:ec:8d:a6:09:1e:e7:46:64:32:ee:2e:4e:48:88: 5d:2e:cd:c6:9c:b0:e8:f2:81:1e:d8:fc:49:ad:c6:e6:8f:a3: 47:ff:8b:28:34:26:db:16:b5:a6:7f:27:21:d0:26:49:21:b2: 5c:03:18:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLyuEgdNjxbGlB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRjMjE2YzEtNTkyNC00YTY2LTkzNDYtYTFmMjE1ODAw Y2ViMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk MTAzYzhjY2MtMWFiZS00ZmVmLWJhMzktOGM1MGVhNjg4OGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleUsnkivhGqIKSSFtipwCxjxGGfmcGMGSwzZ FjmThvLJUrsdr7OnlRm/POj/6HY0f/8K1Vpbo/Vm2Oha9J8vneoLo4Eio3K750K8 UOy6ZYuHps2RUlxtzv+b8Jjgz6FOQFFmhAS9hcFGPnkF57iWFJT7PwWDxmY1FZ2J o/va4A6MP482zt3nB7LJQjEjcgyn9yYhyaPFP9hBVbVznJ8zFcCeSD3vskeBoxR5 COFTlgUYxi3bH3DMQhpGx5a0KqN+jk/FFpPSRZdOM5Lt6iQPENtJSExRVc5HAHGe 5XZKabMcXXXD2Wyr7atw3wWtWYFN+lXh8TI2EyQzqgSbe3E52QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGg08jpOI3y8bCVO8SXwS594u/SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNGMy MTZjMS01OTI0LTRhNjYtOTM0Ni1hMWYyMTU4MDBjZWIvYjRhYmFmNTEtNDJlMi0z OTRkLTgwZTEtYmM2M2Y1NGMwZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDRjMjE2YzEtNTkyNC00YTY2LTkz NDYtYTFmMjE1ODAwY2ViLzA0YzIxNmMxLTU5MjQtNGE2Ni05MzQ2LWExZjIxNTgw MGNlYi5jcmwwHwYDVR0jBBgwFoAUmLhMbN09mwrXBph9YXSVqxVUBDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNGMyMTZjMS01OTI0LTRhNjYtOTM0Ni1hMWYy MTU4MDBjZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2KpoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoKjrwJIMm2g2TfhLq/QzTqmGoiZktsKH9J+Q5n7sI5FtTDcfHprkFV 3NpCx/wvZWaWUQ9o3xRssU9CQ4+G78DSjSncS5hAH7fd7vhVDD9qc4aih73q98a2 UI6sVXLpL0N23nBfwC+xsWE8Z6UqJqoYKagRswX6hj5kXg434xiIuSeb7VCYN9No OS4m8lQTImqxtULipupGxM3iQuug1V/Q3AzFWolaIcqYsusxR8ICN2ZjwBLJUAe7 Gbm+0dQ/4kZS9sfFDCw8uqbsjaYJHudGZDLuLk5IiF0uzcacsOjygR7Y/EmtxuaP o0f/iyg0JtsWtaZ/JyHQJkkhslwDGF0= -----END CERTIFICATE-----Generated at Thu May 8 04:48:43 2025 by rpki-client