$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2320306e-47da-30b5-acec-4856a8216f6f.roa File: 2320306e-47da-30b5-acec-4856a8216f6f.roa (raw, json) Hash identifier: HMzfnj5OVspQm4Qmb9gXZpdUZqld2xs5D9VC8jHHzns= Subject key identifier: 66:CD:19:FC:EF:3D:5E:E3:3C:83:A3:36:7B:25:56:2D:F1:44:43:29 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584937D92F16C4DB89AE612E7400 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2320306e-47da-30b5-acec-4856a8216f6f.roa Signing time: Mon 17 Mar 2025 13:00:52 +0000 ROA not before: Mon 17 Mar 2025 13:00:52 +0000 ROA not after: Sun 15 Jun 2025 13:00:52 +0000 asID: 13576 IP address blocks: 216.249.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:37:d9:2f:16:c4:db:89:ae:61:2e:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 17 13:00:52 2025 GMT Not After : Jun 15 13:00:52 2025 GMT Subject: CN=bcd33aeb-53cc-49ff-98c5-679fd30d192f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:de:8f:28:9a:87:32:d3:a1:a3:81:92:a5:90: 3f:9f:b2:b0:bc:9f:4c:5a:8b:a8:b0:0c:cd:79:aa: d9:93:91:3f:d1:1a:a0:df:a1:32:f9:20:16:15:b0: 17:65:36:59:da:e1:29:7d:a1:0a:b0:3f:ac:31:c6: ea:44:47:91:81:24:20:82:7f:de:d8:db:8b:02:d7: af:5e:a9:89:c2:d7:58:f1:9b:62:16:4e:f1:d2:a1: 69:c4:a4:63:fe:d0:34:3f:e7:7a:d8:b5:0a:f0:0e: df:1a:7b:fc:dd:80:0c:97:39:25:fe:be:ad:6d:99: d1:1a:40:be:61:d4:3b:27:2f:6d:c3:c0:a2:bb:cd: e5:fb:0b:ec:eb:da:60:55:b2:13:60:98:98:cd:20: 94:db:ef:a9:c3:66:fb:96:ff:7b:1a:f6:16:fd:3b: 92:ac:8d:90:5f:24:e5:2a:86:dd:26:a3:56:3c:38: 08:1c:33:7d:31:f3:4e:d5:0e:29:24:0e:55:97:82: 39:d2:3f:70:1e:32:18:73:be:f5:cd:ac:2a:d1:8b: 00:d6:45:f0:56:2a:71:ad:dc:85:49:84:d9:06:ce: b3:74:2b:5e:7c:67:2e:17:6c:eb:3d:8b:35:ce:61: e1:86:55:2d:b7:de:01:97:68:93:2b:ca:a1:32:4f: 72:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CD:19:FC:EF:3D:5E:E3:3C:83:A3:36:7B:25:56:2D:F1:44:43:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2320306e-47da-30b5-acec-4856a8216f6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:48:a5:4e:6e:6b:d1:a7:cc:b1:30:14:6c:29:66:44:ce:01: 49:4c:f2:1b:39:2f:84:02:96:4b:6b:6f:d1:e7:60:3f:21:be: 33:e1:b9:e3:57:dc:10:cc:4c:6b:24:fc:de:c3:38:6a:d8:52: e1:9a:19:c9:55:db:f9:ae:b5:d0:f4:af:80:54:c5:15:dc:93: e1:11:bb:99:37:21:ac:91:76:ef:32:c5:98:bf:07:06:e8:c3: 97:ec:aa:07:f1:24:1b:79:57:a5:64:5a:ce:10:2a:f9:3d:c4: fe:92:a1:a2:98:64:c2:a3:9b:20:ca:9e:bf:bf:70:f7:cf:41: 2c:08:a9:4e:6e:eb:fa:13:4c:8d:3a:94:3c:8e:50:88:c3:15: d7:de:39:b2:8a:83:d4:14:c2:98:cf:ba:c0:8c:2a:cd:bc:19: 69:69:42:c8:88:9a:e1:56:b4:59:4b:63:cf:60:ce:5d:67:77: 79:f5:d4:96:5c:fc:cb:28:09:7e:61:31:2a:d4:fc:a3:03:ad: 6a:d2:6e:3a:6a:d7:28:12:ac:84:3a:74:66:c0:65:bc:6d:9f: c8:a3:43:15:a1:e2:f2:ee:bf:44:78:f9:4e:20:f2:55:a4:0b: 32:ec:55:7d:de:8f:3b:cf:5c:ef:ae:7c:4d:2c:6e:2a:6d:20: 5a:42:dd:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32S8WxNuJrmEudAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk YmNkMzNhZWItNTNjYy00OWZmLTk4YzUtNjc5ZmQzMGQxOTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt6PKJqHMtOho4GSpZA/n7KwvJ9MWouosAzN earZk5E/0Rqg36Ey+SAWFbAXZTZZ2uEpfaEKsD+sMcbqREeRgSQggn/e2NuLAtev XqmJwtdY8ZtiFk7x0qFpxKRj/tA0P+d62LUK8A7fGnv83YAMlzkl/r6tbZnRGkC+ YdQ7Jy9tw8Ciu83l+wvs69pgVbITYJiYzSCU2++pw2b7lv97GvYW/TuSrI2QXyTl KobdJqNWPDgIHDN9MfNO1Q4pJA5Vl4I50j9wHjIYc771zawq0YsA1kXwVipxrdyF SYTZBs6zdCtefGcuF2zrPYs1zmHhhlUtt94Bl2iTK8qhMk9y+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbNGfzvPV7jPIOjNnslVi3xREMpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMjMyMDMwNmUtNDdkYS0z MGI1LWFjZWMtNDg1NmE4MjE2ZjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2PngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5IpU5ua9GnzLEwFGwpZkTOAUlM8hs5L4QClktrb9HnYD8hvjPhueNX 3BDMTGsk/N7DOGrYUuGaGclV2/mutdD0r4BUxRXck+ERu5k3IayRdu8yxZi/Bwbo w5fsqgfxJBt5V6VkWs4QKvk9xP6SoaKYZMKjmyDKnr+/cPfPQSwIqU5u6/oTTI06 lDyOUIjDFdfeObKKg9QUwpjPusCMKs28GWlpQsiImuFWtFlLY89gzl1nd3n11JZc /MsoCX5hMSrU/KMDrWrSbjpq1ygSrIQ6dGbAZbxtn8ijQxWh4vLuv0R4+U4g8lWk CzLsVX3ejzvPXO+ufE0sbiptIFpC3Zc= -----END CERTIFICATE-----Generated at Mon May 5 06:21:41 2025 by rpki-client