$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fc04f597-48fd-3668-9e04-24f3a053b7e3.roa File: fc04f597-48fd-3668-9e04-24f3a053b7e3.roa (raw, json) Hash identifier: QR77p4ZjnM+Y0xnuBw1HYXcRQJbw4NU151iyqBtP0xE= Subject key identifier: 26:9A:28:FC:7A:B3:60:D8:69:2C:04:1C:F2:A0:49:4E:07:89:7B:5C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAC08CC366F6B781B37200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fc04f597-48fd-3668-9e04-24f3a053b7e3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 216.239.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:c0:8c:c3:66:f6:b7:81:b3:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=fcceeea5-7776-4d13-8730-7a143208bac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:48:14:d0:d1:ae:9e:83:a6:59:7e:86:01:1f: 0e:89:87:fc:b5:92:6b:de:f6:ed:e5:2d:dc:03:81: 9c:4d:a6:70:ee:17:f5:ac:43:44:16:66:9e:b9:7b: a6:f2:40:df:0a:e8:a3:aa:78:4c:76:3e:0f:43:07: e4:2d:25:7a:9a:98:80:d0:60:aa:43:3b:37:6f:74: 9a:97:40:03:c1:e8:b6:cb:03:2c:17:c9:30:7f:f6: 5f:9c:13:03:d6:60:d0:fb:0f:8a:27:da:55:b7:12: 3d:0e:87:73:a7:d3:5e:2e:80:39:e2:13:96:a3:6e: bf:e9:5a:7e:b8:b5:d8:d6:bd:c7:f3:b9:bd:9e:64: 3a:45:8f:21:ab:8e:95:c1:9c:73:2f:a9:a3:96:ce: 37:cd:b5:72:57:59:d5:a8:6b:de:ae:84:35:66:04: c7:37:9e:59:04:e5:f7:f5:e8:82:bf:a8:0e:e4:58: 93:48:bd:46:e7:5d:e1:d9:c6:fb:89:06:d2:f8:ce: 10:45:b2:89:af:62:b8:d7:80:8d:f9:2e:dd:98:80: 4e:15:25:cf:fd:1c:82:31:46:f3:ac:26:d5:e5:a7: 3b:5f:4a:6a:27:bd:cd:1a:36:15:b6:b8:a4:d9:c2: 42:a3:da:c8:43:01:ad:ce:a9:23:f7:04:4d:72:82: a2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:9A:28:FC:7A:B3:60:D8:69:2C:04:1C:F2:A0:49:4E:07:89:7B:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fc04f597-48fd-3668-9e04-24f3a053b7e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.239.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:4f:18:5e:c7:fc:e8:d1:67:7b:c6:87:c5:ee:bd:1d:ff:51: c9:12:50:4c:78:9d:64:85:02:27:1d:82:f3:3e:a8:ee:33:68: 5f:ca:13:0e:30:87:b7:fb:ad:49:7d:58:f1:27:53:92:04:17: c6:ec:c8:a9:bc:36:fc:f6:55:d6:04:e4:83:31:ed:8a:31:18: 4c:a3:af:bc:79:b4:8f:b5:d7:ff:41:fd:56:06:09:e1:64:2c: 46:53:7c:b8:04:90:98:68:60:03:c7:51:d0:04:a9:de:34:f7: df:1f:4c:0f:f5:08:08:b8:14:59:8b:d2:c3:a5:76:01:e5:d7: 98:ae:c5:0a:d4:01:52:1e:61:fe:c4:59:69:e0:99:85:c4:9d: c0:6e:c0:ab:19:96:d5:36:14:8d:27:7c:e9:83:93:0c:55:e4: 76:a8:27:f9:97:61:65:f8:3f:ef:88:d6:62:c0:44:a0:d6:cc: c9:33:c3:c2:74:65:bd:cf:a5:21:78:e7:1b:a4:8d:a2:36:7b: 03:6c:ad:03:fc:d5:b1:ea:29:5d:86:d2:75:af:f0:22:d4:40: 27:bd:24:7a:8a:13:59:df:7a:ec:43:2b:8b:30:1c:24:84:0b: 74:3d:da:16:49:17:46:29:1d:6c:5b:ad:69:b0:06:8d:b1:22: c9:51:7a:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusCMw2b2t4GzcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZmNjZWVlYTUtNzc3Ni00ZDEzLTg3MzAtN2ExNDMyMDhiYWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0gU0NGunoOmWX6GAR8OiYf8tZJr3vbt5S3c A4GcTaZw7hf1rENEFmaeuXum8kDfCuijqnhMdj4PQwfkLSV6mpiA0GCqQzs3b3Sa l0ADwei2ywMsF8kwf/ZfnBMD1mDQ+w+KJ9pVtxI9Dodzp9NeLoA54hOWo26/6Vp+ uLXY1r3H87m9nmQ6RY8hq46VwZxzL6mjls43zbVyV1nVqGveroQ1ZgTHN55ZBOX3 9eiCv6gO5FiTSL1G513h2cb7iQbS+M4QRbKJr2K414CN+S7dmIBOFSXP/RyCMUbz rCbV5ac7X0pqJ73NGjYVtrik2cJCo9rIQwGtzqkj9wRNcoKiKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCaaKPx6s2DYaSwEHPKgSU4HiXtcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmMwNGY1OTctNDhmZC0z NjY4LTllMDQtMjRmM2EwNTNiN2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O8kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1PGF7H/OjRZ3vGh8XuvR3/UckSUEx4nWSFAicdgvM+qO4zaF/KEw4w h7f7rUl9WPEnU5IEF8bsyKm8Nvz2VdYE5IMx7YoxGEyjr7x5tI+11/9B/VYGCeFk LEZTfLgEkJhoYAPHUdAEqd40998fTA/1CAi4FFmL0sOldgHl15iuxQrUAVIeYf7E WWngmYXEncBuwKsZltU2FI0nfOmDkwxV5HaoJ/mXYWX4P++I1mLARKDWzMkzw8J0 Zb3PpSF45xukjaI2ewNsrQP81bHqKV2G0nWv8CLUQCe9JHqKE1nfeuxDK4swHCSE C3Q92hZJF0YpHWxbrWmwBo2xIslReik= -----END CERTIFICATE-----Generated at Sun May 4 11:08:14 2025 by rpki-client