$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1af17e61-22ce-3f69-9779-16c55a995fea.roa File: 1af17e61-22ce-3f69-9779-16c55a995fea.roa (raw, json) Hash identifier: XRWpmg1++OkLW+20jH6K8dozssfW/TL4qw0nRiSS3PA= Subject key identifier: F5:F1:E5:FF:08:A8:3F:98:E5:E5:58:C1:1D:5D:A8:53:F9:08:F7:41 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858498CFF1D4C39ACE9C564BBD480 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1af17e61-22ce-3f69-9779-16c55a995fea.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 401415 IP address blocks: 216.106.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:1d:4c:39:ac:e9:c5:64:bb:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=0be4ce46-0f92-42e8-8d12-c6aa7ae2fc6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3b:46:36:2f:54:8a:b2:e8:37:8c:54:74:af: 24:6a:f5:5c:8c:6f:52:a4:de:cf:13:8f:45:da:2d: 65:e4:b4:35:7f:9f:29:81:66:5e:65:78:02:6a:aa: d1:22:8d:50:1a:a0:97:fa:35:46:26:b7:1a:64:4e: ea:13:cf:c1:e3:ef:fe:30:25:17:fe:82:22:6c:6f: f6:f1:42:95:95:b0:ae:5c:3a:fb:0f:19:65:d2:5e: f3:ea:2a:1f:0a:9a:93:df:7e:a1:41:bf:a4:a5:cc: b5:a3:23:13:1f:46:69:a5:a6:89:39:0e:be:bc:17: b7:ba:5e:d4:f5:13:2b:44:00:b1:1b:36:b3:a3:1d: 5e:5a:dd:b6:fe:15:09:54:23:31:46:e0:98:f5:60: 7c:62:e8:00:86:7d:15:cd:60:41:19:f2:1d:32:56: 81:09:35:b6:48:fa:be:dd:8a:b1:35:a4:f0:4a:f8: e4:05:72:db:27:ae:3e:6e:8a:37:f5:9e:31:eb:e5: 8c:31:74:74:23:a8:18:de:41:84:fa:b9:bf:db:3a: bf:69:29:dc:cb:a6:9e:56:07:b1:9c:16:32:0a:c3: c4:cf:1b:eb:f5:3d:9c:f7:f7:fb:66:83:c8:c8:49: 9f:0e:3c:51:95:b1:62:fe:3e:0d:99:83:97:24:4a: 2c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F1:E5:FF:08:A8:3F:98:E5:E5:58:C1:1D:5D:A8:53:F9:08:F7:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1af17e61-22ce-3f69-9779-16c55a995fea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.106.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:d8:39:64:b8:20:c1:1a:5f:db:a6:ce:47:e1:2d:5c:80:c5: 10:7a:23:77:7a:62:c0:90:52:8c:f8:81:52:5d:4f:69:07:81: 31:92:26:91:b9:a4:ff:64:a8:da:3c:3c:b8:ff:ba:6d:b9:f8: 81:c5:51:9f:f4:e8:a2:af:84:82:9e:1a:d3:26:c5:84:11:a8: be:67:75:36:0e:51:5a:f9:56:7b:c0:f0:cd:d0:d3:b0:44:c6: aa:1a:a7:71:e6:e3:b5:9f:68:b3:3f:aa:32:06:42:cb:a9:a6: 76:2d:98:cf:29:e5:78:07:00:e5:d2:c9:bd:2c:c4:88:13:e8: 7f:e7:15:8e:a9:2b:11:37:31:c1:55:79:01:e6:68:89:b1:ce: 4a:da:b8:f2:ae:66:a5:0f:b4:84:4f:75:f5:7e:c6:92:44:dc: 12:98:47:1b:1e:23:3d:62:41:40:3e:84:be:86:29:ff:3f:67: 33:32:10:b5:b7:54:8b:b2:7a:9b:18:d9:ab:7e:e5:03:61:aa: 3b:6d:44:c8:0e:1b:94:30:ef:f4:ea:4d:53:e4:77:db:29:5d: ff:21:99:93:1c:62:56:c8:50:fd:c8:49:67:d0:01:62:79:8a: c6:9b:27:91:2f:ea:fc:fa:5a:10:26:80:43:49:fa:3c:96:63: 99:8d:67:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/x1MOazpxWS71IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk MGJlNGNlNDYtMGY5Mi00MmU4LThkMTItYzZhYTdhZTJmYzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDtGNi9UirLoN4xUdK8kavVcjG9SpN7PE49F 2i1l5LQ1f58pgWZeZXgCaqrRIo1QGqCX+jVGJrcaZE7qE8/B4+/+MCUX/oIibG/2 8UKVlbCuXDr7Dxll0l7z6iofCpqT336hQb+kpcy1oyMTH0ZppaaJOQ6+vBe3ul7U 9RMrRACxGzazox1eWt22/hUJVCMxRuCY9WB8YugAhn0VzWBBGfIdMlaBCTW2SPq+ 3YqxNaTwSvjkBXLbJ64+boo39Z4x6+WMMXR0I6gY3kGE+rm/2zq/aSncy6aeVgex nBYyCsPEzxvr9T2c9/f7ZoPIyEmfDjxRlbFi/j4NmYOXJEosHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXx5f8IqD+Y5eVYwR1dqFP5CPdBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMWFmMTdlNjEtMjJjZS0z ZjY5LTk3NzktMTZjNTVhOTk1ZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GrUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXYOWS4IMEaX9umzkfhLVyAxRB6I3d6YsCQUoz4gVJdT2kHgTGSJpG5 pP9kqNo8PLj/um25+IHFUZ/06KKvhIKeGtMmxYQRqL5ndTYOUVr5VnvA8M3Q07BE xqoap3Hm47WfaLM/qjIGQsuppnYtmM8p5XgHAOXSyb0sxIgT6H/nFY6pKxE3McFV eQHmaImxzkrauPKuZqUPtIRPdfV+xpJE3BKYRxseIz1iQUA+hL6GKf8/ZzMyELW3 VIuyepsY2at+5QNhqjttRMgOG5Qw7/TqTVPkd9spXf8hmZMcYlbIUP3ISWfQAWJ5 isabJ5Ev6vz6WhAmgENJ+jyWY5mNZ94= -----END CERTIFICATE-----Generated at Mon May 5 14:08:14 2025 by rpki-client