$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ce97c74-b9d2-32ef-83fc-60176c57c547.roa File: 3ce97c74-b9d2-32ef-83fc-60176c57c547.roa (raw, json) Hash identifier: j4LSAtKGoXmg+o4FUmyVuygGf5+IHiOrPG1x2hhK+3A= Subject key identifier: B0:BD:05:55:0A:7C:1F:94:27:DE:D9:90:A7:B5:2A:A6:BD:76:8D:18 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD29B3E9972554357B140 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ce97c74-b9d2-32ef-83fc-60176c57c547.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 216.239.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d2:9b:3e:99:72:55:43:57:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b0caba4e-f786-473e-9279-b0e0795281a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:04:4e:43:65:87:dc:01:2f:90:1c:29:a4:e1: 61:52:e0:25:2b:08:43:eb:33:5e:fe:9b:29:d5:e0: d1:dc:15:0e:fd:f0:41:19:e6:93:b3:46:ca:3e:3b: 03:ba:0f:ee:a8:c2:40:29:14:09:cb:bc:fe:d6:25: f6:15:fe:39:d9:af:2f:4c:48:44:c7:87:c3:70:cc: 7f:0b:5b:8f:ef:f5:75:92:47:f4:34:5e:a7:29:ac: 00:76:c4:47:f5:36:9c:2c:d7:67:0f:23:7a:69:85: d9:2b:7e:af:cb:80:dd:70:c7:cd:c3:ce:5a:ab:55: a7:03:3c:7e:2e:23:d6:b1:b0:52:02:c0:00:f8:4d: 31:b3:b9:ec:5d:cd:20:9b:34:40:b8:b3:9f:80:f8: 40:cf:eb:ef:ec:0b:63:48:d2:49:88:14:ee:ca:76: 50:df:9b:5c:dd:45:30:5a:35:14:4f:1d:29:30:1f: ad:45:b8:fd:3f:8c:8f:24:5d:45:52:3d:ec:26:b3: 18:25:44:8c:a8:4a:da:3f:88:5d:a6:c8:59:a2:b5: 04:ea:8d:6a:c3:c2:76:4f:90:3d:2d:5d:95:c6:45: a5:77:21:1a:82:41:39:31:dd:39:a7:a4:f1:2e:54: 7c:23:44:a3:34:11:ea:c8:86:85:63:a9:00:e4:0f: 27:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BD:05:55:0A:7C:1F:94:27:DE:D9:90:A7:B5:2A:A6:BD:76:8D:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ce97c74-b9d2-32ef-83fc-60176c57c547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.239.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:91:0e:f0:bd:96:aa:71:53:90:ed:b5:32:85:ae:f2:06:6c: 47:e4:80:64:fc:b0:bd:12:24:c0:6b:c9:4b:33:56:81:63:48: b9:2f:d2:a2:24:6d:3d:02:9e:06:91:e6:f3:91:b7:44:ea:9a: 25:e8:3c:b3:12:38:1b:8c:fc:2c:30:b4:64:c7:e4:81:b3:1b: f7:dd:55:35:09:79:9a:7d:3e:42:fc:55:70:dd:c9:0b:89:c2: d2:32:82:34:bb:6f:da:89:6c:9a:ea:3a:cf:d7:57:2c:95:10: 24:3c:ad:4b:73:da:31:2e:ef:f9:b0:cb:52:9e:b9:47:09:7f: 93:22:e0:96:a9:f3:36:e5:e4:df:ea:d6:d5:5a:70:21:64:12: 1d:ec:6e:14:2a:18:e8:c7:8a:d8:65:67:9b:f0:c6:f0:b1:24: d2:e2:c5:1c:cd:20:e8:37:22:8b:11:82:1a:72:fd:1a:66:2e: 07:50:8f:8b:70:49:18:ba:26:39:05:5d:e0:51:cc:b2:8b:0f: da:c4:37:63:37:33:66:37:5e:11:a7:53:61:9a:f6:30:05:cd: 66:11:92:89:a6:3f:0d:0f:c6:47:f7:36:d1:b1:2e:c6:ab:6d: 7f:5d:6d:ab:63:59:01:3a:9c:6e:82:9c:c5:0f:fa:14:c9:58: 5d:67:1b:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutKbPplyVUNXsUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YjBjYWJhNGUtZjc4Ni00NzNlLTkyNzktYjBlMDc5NTI4MWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAROQ2WH3AEvkBwppOFhUuAlKwhD6zNe/psp 1eDR3BUO/fBBGeaTs0bKPjsDug/uqMJAKRQJy7z+1iX2Ff452a8vTEhEx4fDcMx/ C1uP7/V1kkf0NF6nKawAdsRH9TacLNdnDyN6aYXZK36vy4DdcMfNw85aq1WnAzx+ LiPWsbBSAsAA+E0xs7nsXc0gmzRAuLOfgPhAz+vv7AtjSNJJiBTuynZQ35tc3UUw WjUUTx0pMB+tRbj9P4yPJF1FUj3sJrMYJUSMqEraP4hdpshZorUE6o1qw8J2T5A9 LV2VxkWldyEagkE5Md05p6TxLlR8I0SjNBHqyIaFY6kA5A8n7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLC9BVUKfB+UJ97ZkKe1Kqa9do0YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2NlOTdjNzQtYjlkMi0z MmVmLTgzZmMtNjAxNzZjNTdjNTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O8jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeRDvC9lqpxU5DttTKFrvIGbEfkgGT8sL0SJMBryUszVoFjSLkv0qIk bT0CngaR5vORt0TqmiXoPLMSOBuM/CwwtGTH5IGzG/fdVTUJeZp9PkL8VXDdyQuJ wtIygjS7b9qJbJrqOs/XVyyVECQ8rUtz2jEu7/mwy1KeuUcJf5Mi4Jap8zbl5N/q 1tVacCFkEh3sbhQqGOjHithlZ5vwxvCxJNLixRzNIOg3IosRghpy/RpmLgdQj4tw SRi6JjkFXeBRzLKLD9rEN2M3M2Y3XhGnU2Ga9jAFzWYRkommPw0Pxkf3NtGxLsar bX9dbatjWQE6nG6CnMUP+hTJWF1nG8I= -----END CERTIFICATE-----Generated at Sun May 4 10:27:54 2025 by rpki-client