$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2366321d-3327-3eb1-aa83-61a80aefd3f4.roa File: 2366321d-3327-3eb1-aa83-61a80aefd3f4.roa (raw, json) Hash identifier: Bz4b6loxSt/j7twiVcIusFjc9Wtrv/GGXjLF8L6HimI= Subject key identifier: 5C:2A:BE:FD:05:AE:57:3B:CA:1F:09:A4:4A:03:5F:68:23:71:DF:98 Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F43285849BF3F660D90A79181A5BA1000 Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2366321d-3327-3eb1-aa83-61a80aefd3f4.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 16509 IP address blocks: 216.150.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:66:0d:90:a7:91:81:a5:ba:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=d2a29187-c99d-432e-be6e-9bd0ae8ad3af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ab:7c:21:b8:be:75:ba:3f:65:a7:8a:bf:87: 45:f4:29:ae:0a:44:60:f8:06:b9:6c:45:95:5f:44: ff:44:ab:d8:02:00:11:4c:08:26:1b:06:40:c6:e0: 5c:11:71:18:32:ed:6c:ed:cf:44:af:83:71:e5:3e: 44:d1:19:b3:8d:a6:f1:d4:0e:d9:49:1c:59:c1:d3: 59:e4:e7:53:c2:97:5e:a2:eb:b4:10:f6:22:ae:95: df:50:9b:cc:9b:a9:f7:25:49:09:b5:40:38:a9:4c: cd:5a:f8:f0:47:3e:af:64:35:71:05:6d:80:15:18: a0:b0:87:84:6b:52:d9:3c:46:17:4c:b4:f0:06:69: 26:03:67:90:d1:70:2a:8d:37:e5:49:9e:91:38:dd: dd:b9:4d:4f:50:28:75:dd:88:66:f4:e1:f0:6c:db: ac:ec:8f:79:f5:26:20:73:fb:9b:66:66:ca:48:e4: d5:7a:9a:58:af:bd:4a:01:4c:b3:da:ea:e7:8b:90: 98:c1:e6:22:5e:c9:a6:d6:a4:02:b5:a7:f0:12:ed: 0f:fb:fb:2f:8b:0a:cf:44:47:7e:9e:75:fa:e1:7e: 0b:ad:e8:69:4f:ca:62:1f:21:a9:5f:17:ac:0f:08: 44:27:af:4c:25:e7:8a:0d:2d:75:92:e0:9c:22:a2: b2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:2A:BE:FD:05:AE:57:3B:CA:1F:09:A4:4A:03:5F:68:23:71:DF:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2366321d-3327-3eb1-aa83-61a80aefd3f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv4: 216.150.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:8f:9b:64:03:ff:9e:bf:72:ba:20:14:c1:71:53:4c:dc:c3: 77:6d:e2:2e:72:1c:ef:82:90:58:3a:2a:22:ea:8a:41:6d:12: 96:e8:f7:d8:8f:a7:7e:4a:b2:53:0d:97:a6:a8:ce:2e:82:37: 49:32:8c:bf:20:ef:cc:18:d2:0b:51:cb:40:f9:d6:3a:99:3b: 8a:27:6a:28:08:19:2c:56:8f:78:14:c9:b1:a2:76:b0:3d:cd: ad:e3:b0:e9:22:29:ac:73:a8:e3:27:60:45:85:ba:f7:ea:f4: 03:bb:18:cc:16:eb:e7:e2:35:3b:66:cf:54:0c:37:66:61:a3: eb:a0:a8:84:3b:1d:2c:8d:ce:a4:70:c8:4a:22:1f:f0:f0:07: 3a:88:70:75:34:4f:52:8e:89:23:18:aa:e2:5e:8f:71:86:dd: 90:10:16:e9:66:6a:80:76:aa:52:17:ba:94:6a:56:f8:d3:59: b6:63:cd:c3:e7:9b:b2:7f:7d:10:4e:82:4c:3d:15:54:34:58: c7:78:9b:09:2b:35:2d:7a:59:92:ad:70:1a:c4:ce:bb:1d:8a: 91:d4:74:e8:83:50:ed:7a:c9:6c:13:a1:20:0d:35:bb:c6:c7: d6:ac:04:ed:45:ff:80:38:e6:30:d8:76:88:e4:1d:73:93:35: 15:2c:52:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P2YNkKeRgaW6EAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZDJhMjkxODctYzk5ZC00MzJlLWJlNmUtOWJkMGFlOGFkM2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKt8Ibi+dbo/ZaeKv4dF9CmuCkRg+Aa5bEWV X0T/RKvYAgARTAgmGwZAxuBcEXEYMu1s7c9Er4Nx5T5E0Rmzjabx1A7ZSRxZwdNZ 5OdTwpdeouu0EPYirpXfUJvMm6n3JUkJtUA4qUzNWvjwRz6vZDVxBW2AFRigsIeE a1LZPEYXTLTwBmkmA2eQ0XAqjTflSZ6RON3duU1PUCh13Yhm9OHwbNus7I959SYg c/ubZmbKSOTVeppYr71KAUyz2urni5CYweYiXsmm1qQCtafwEu0P+/sviwrPREd+ nnX64X4LrehpT8piHyGpXxesDwhEJ69MJeeKDS11kuCcIqKytQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwqvv0Frlc7yh8JpEoDX2gjcd+YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvMjM2NjMyMWQtMzMyNy0z ZWIxLWFhODMtNjFhODBhZWZkM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMWPm2QD/56/crogFMFxU0zcw3dt4i5yHO+CkFg6KiLqikFtEpbo99iP p35KslMNl6aozi6CN0kyjL8g78wY0gtRy0D51jqZO4onaigIGSxWj3gUybGidrA9 za3jsOkiKaxzqOMnYEWFuvfq9AO7GMwW6+fiNTtmz1QMN2Zho+ugqIQ7HSyNzqRw yEoiH/DwBzqIcHU0T1KOiSMYquJej3GG3ZAQFulmaoB2qlIXupRqVvjTWbZjzcPn m7J/fRBOgkw9FVQ0WMd4mwkrNS16WZKtcBrEzrsdipHUdOiDUO16yWwToSANNbvG x9asBO1F/4A45jDYdojkHXOTNRUsUhA= -----END CERTIFICATE-----Generated at Mon May 5 08:04:04 2025 by rpki-client