$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8c90cf6a-b536-399c-a7ae-aa608a97c7be.roa File: 8c90cf6a-b536-399c-a7ae-aa608a97c7be.roa (raw, json) Hash identifier: BxxUUjZmcUv9v2GvzWsGCAiDIby60hisO1OfV5UNhVg= Subject key identifier: F2:B8:97:FC:82:51:8E:2B:10:34:86:50:9B:A2:C1:A5:05:F1:A9:40 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F43285849C67CB2C9FA9422668834D834 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8c90cf6a-b536-399c-a7ae-aa608a97c7be.roa Signing time: Wed 07 May 2025 15:15:08 +0000 ROA not before: Wed 07 May 2025 15:15:08 +0000 ROA not after: Tue 05 Aug 2025 15:15:08 +0000 asID: 399073 IP address blocks: 216.132.121.0/24 maxlen: 24 216.132.130.0/24 maxlen: 24 216.231.35.0/24 maxlen: 24 216.231.36.0/24 maxlen: 24 216.231.46.0/24 maxlen: 24 216.231.47.0/24 maxlen: 24 216.231.48.0/24 maxlen: 24 216.231.49.0/24 maxlen: 24 216.231.51.0/24 maxlen: 24 216.231.55.0/24 maxlen: 24 216.231.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c6:7c:b2:c9:fa:94:22:66:88:34:d8:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: May 7 15:15:08 2025 GMT Not After : Aug 5 15:15:08 2025 GMT Subject: CN=0e9e56b4-007a-4059-ac5f-67e51189209c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b3:db:74:de:21:65:29:e6:ff:b8:a1:87:d2: e5:20:8d:92:8c:62:db:ea:4e:d9:e8:05:e6:85:cc: a1:ce:e1:c6:0c:a4:1e:61:95:ed:c8:8d:40:fb:ac: 5d:1c:3e:e1:53:4d:5f:b9:40:e9:ea:00:57:14:8d: 34:d4:cd:5d:67:9c:7e:5f:d6:5d:f8:d2:55:1d:f0: f0:e4:53:bf:67:a2:d9:4e:2b:ab:84:a3:91:be:f8: 14:bb:62:27:5d:a9:e0:5d:b0:b9:eb:4d:91:92:9b: f9:01:62:33:44:7a:1f:f7:7d:57:c1:85:d6:b8:7a: bd:32:2f:32:e1:81:97:4d:8f:4e:56:59:44:54:3e: e0:4d:a5:c2:6a:fb:56:ba:0a:2e:9a:4a:74:8b:56: 62:c5:66:fb:94:b7:d5:99:14:96:b1:ab:a0:5f:bd: ec:6a:9f:12:63:c8:1d:ba:04:1d:e0:bb:84:d5:27: 64:e7:6b:71:75:90:a6:87:62:4b:e3:9c:8c:92:33: 99:ad:a8:7b:23:dc:48:51:fe:47:e4:7c:71:7b:80: 1f:ad:18:c7:93:d2:e6:0d:86:94:63:fb:15:e7:9a: 4e:5d:16:87:7d:b1:c3:1f:21:b9:a9:a7:00:03:6e: 24:7a:11:ff:9f:ed:69:66:33:f6:22:cc:2b:68:89: 39:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B8:97:FC:82:51:8E:2B:10:34:86:50:9B:A2:C1:A5:05:F1:A9:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8c90cf6a-b536-399c-a7ae-aa608a97c7be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.121.0/24 216.132.130.0/24 216.231.35.0-216.231.36.255 216.231.46.0-216.231.49.255 216.231.51.0/24 216.231.55.0/24 216.231.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:f0:c9:c4:1b:f2:15:3d:c6:61:29:45:2e:ab:a7:9a:c2:2a: 0c:75:63:33:c4:f9:ba:52:39:57:7e:42:77:ff:8e:f9:32:4a: 64:82:4b:d5:15:06:49:c6:75:a1:5d:cc:a6:a5:af:b5:a9:92: 16:43:76:a7:a0:ed:6b:4a:98:2d:6f:11:05:ad:45:8b:fe:52: 3e:77:cc:31:99:a7:cf:40:f2:e9:37:fd:89:22:cb:40:5c:dc: 2c:8c:6f:7d:e9:cd:ee:37:5b:56:ba:d9:69:5f:e8:d5:df:03: b2:f1:d5:a0:3f:70:f1:40:74:64:e0:06:da:4c:e7:ab:6a:62: f6:70:c3:b4:f0:49:6b:4b:e5:e8:12:b4:ef:bf:16:7b:25:d2: 5a:3c:fc:7e:b1:c5:e9:7a:76:0e:d0:ee:f6:e1:5e:64:bc:52: 69:a7:47:df:9e:05:19:c9:99:4f:76:17:a0:5c:e7:13:42:d6: a4:d4:fe:27:d7:62:f4:cb:4e:97:d6:40:ae:62:52:0f:86:0d: ba:cb:fd:69:6d:84:ee:1d:c1:2e:bb:05:f2:1d:20:02:3d:e9: d1:98:a9:eb:59:b9:31:5b:e7:17:a9:ac:8f:d3:9e:14:81:dd: 25:15:78:0f:06:ba:97:41:41:b0:b2:04:60:fa:bf:61:a8:d3: e6:78:00:9f -----BEGIN CERTIFICATE----- MIIGdzCCBV+gAwIBAgIUAQ0Mn0MoWEnGfLLJ+pQiZog02DQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDUwNzE1MTUwOFoXDTI1MDgwNTE1MTUwOFowLzEtMCsGA1UEAxMk MGU5ZTU2YjQtMDA3YS00MDU5LWFjNWYtNjdlNTExODkyMDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorPbdN4hZSnm/7ihh9LlII2SjGLb6k7Z6AXm hcyhzuHGDKQeYZXtyI1A+6xdHD7hU01fuUDp6gBXFI001M1dZ5x+X9Zd+NJVHfDw 5FO/Z6LZTiurhKORvvgUu2InXangXbC5602Rkpv5AWIzRHof931XwYXWuHq9Mi8y 4YGXTY9OVllEVD7gTaXCavtWugoumkp0i1ZixWb7lLfVmRSWsaugX73sap8SY8gd ugQd4LuE1Sdk52txdZCmh2JL45yMkjOZrah7I9xIUf5H5Hxxe4AfrRjHk9LmDYaU Y/sV55pOXRaHfbHDHyG5qacAA24kehH/n+1pZjP2IswraIk52QIDAQABo4IDiTCC A4UwHQYDVR0OBBYEFPK4l/yCUY4rEDSGUJuiwaUF8alAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOGM5MGNmNmEtYjUzNi0z OTljLWE3YWUtYWE2MDhhOTdjN2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQA2IR5AwQA 2ISCMAwDBADY5yMDBADY5yQwDAMEAdjnLgMEAdjnMAMEANjnMwMEANjnNwMEANjn OjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQCL8MnEG/IVPcZhKUUuq6eawioMdWMzxPm6UjlXfkJ3/475Mkpk gkvVFQZJxnWhXcympa+1qZIWQ3anoO1rSpgtbxEFrUWL/lI+d8wxmafPQPLpN/2J IstAXNwsjG996c3uN1tWutlpX+jV3wOy8dWgP3DxQHRk4AbaTOeramL2cMO08Elr S+XoErTvvxZ7JdJaPPx+scXpenYO0O724V5kvFJpp0ffngUZyZlPdhegXOcTQtak 1P4n12L0y06X1kCuYlIPhg26y/1pbYTuHcEuuwXyHSACPenRmKnrWbkxW+cXqayP 054Ugd0lFXgPBrqXQUGwsgRg+r9hqNPmeACf -----END CERTIFICATE-----Generated at Wed May 14 12:47:34 2025 by rpki-client