$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/059111c1-8037-3bc2-ad66-f0d2659067c9.roa File: 059111c1-8037-3bc2-ad66-f0d2659067c9.roa (raw, json) Hash identifier: 5N8/uZ8DX5O9Vg3ek7v8I0y3j2FQmS4tXAOEQrdS6dg= Subject key identifier: 20:25:73:A3:A3:4E:8E:A9:8E:E7:75:F3:95:D7:61:20:65:D3:77:64 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926D8670914F11F624BA000 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/059111c1-8037-3bc2-ad66-f0d2659067c9.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 46872 IP address blocks: 216.66.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:d8:67:09:14:f1:1f:62:4b:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=4f0206ca-81c3-476b-adf8-24cf664f4f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:26:c5:82:4f:77:d2:cb:10:9e:5f:31:28:a4: f5:3a:21:2b:79:5f:9e:13:c9:32:38:a3:14:c1:0d: bb:4d:cf:3c:70:b0:76:6f:e4:df:9b:23:92:c6:9d: d7:f1:37:56:9a:24:70:b6:ef:e9:89:60:17:7e:da: b0:da:6b:4c:b2:cf:f1:d1:f6:37:f9:9b:f1:12:53: 6a:d3:4a:d2:f9:4b:46:ff:58:c4:b1:ef:88:b8:28: 11:80:fa:2e:43:e0:19:6c:0a:9d:23:0e:89:c9:1b: 9f:c4:5a:e3:a5:60:65:cc:77:ee:bb:3a:20:03:75: 5d:45:ee:3d:88:09:df:39:a1:ed:18:78:8e:f9:29: 82:9c:56:32:53:05:93:20:36:01:98:57:be:16:f4: 06:bb:79:b2:d3:b1:f5:f9:bf:46:71:7d:60:38:5a: 7a:6f:57:ad:40:23:d5:2c:34:90:6e:03:d5:cf:a7: 6c:39:eb:cb:ff:50:b0:af:40:82:1f:4e:ce:14:cb: 7f:57:f4:2a:29:12:56:4d:e9:6c:1f:9f:4b:7c:90: ee:48:ad:7a:42:c4:b4:ba:12:2f:40:6f:90:15:21: ed:1e:91:d3:15:89:d8:7a:32:fa:a3:fd:41:97:42: 9b:55:0d:17:d9:9d:1d:ed:b2:be:77:f9:08:67:3a: 51:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:25:73:A3:A3:4E:8E:A9:8E:E7:75:F3:95:D7:61:20:65:D3:77:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/059111c1-8037-3bc2-ad66-f0d2659067c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 216.66.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:0d:1e:de:a6:a1:4f:25:03:b1:33:ef:33:b3:3a:c7:77:44: a9:a9:1f:11:a1:ae:29:47:8d:3e:92:dc:4c:49:26:9e:08:a9: 5f:8d:62:00:3e:69:7a:d6:92:f0:6f:d8:e8:cf:d6:e4:c5:71: 74:bd:b7:df:31:78:6f:79:a9:d3:3c:28:3d:46:44:04:04:f0: ef:01:fc:13:ab:8a:61:e8:f7:89:3e:51:1e:fc:68:19:82:53: 05:9a:91:13:5c:3b:f4:21:7e:d3:a8:81:67:ed:9b:94:06:6b: 6d:35:90:e3:78:61:37:13:58:c6:f6:08:7e:b5:e7:2a:43:99: 13:a5:6c:d6:cf:fc:92:0b:e9:26:a8:fe:d6:ea:22:99:f0:23: d2:7c:f1:90:2e:b2:fb:5f:89:68:da:c0:35:6b:aa:43:52:c9: 62:62:f7:3b:ba:0a:43:e7:84:25:39:8f:64:b7:a6:5c:5f:c1: 9b:86:d0:ff:9a:ca:e3:03:c3:cc:f3:97:21:05:e1:be:3a:41: db:5f:85:86:75:f1:33:6f:51:ea:52:83:bc:be:3b:92:c2:9b: 72:de:f6:d8:61:33:b8:2f:66:fc:c2:db:32:89:e0:5d:a1:e1: 4e:5f:5a:51:9b:5c:27:f7:33:f8:82:de:55:89:d6:ca:e9:b7: 05:f0:8c:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JthnCRTxH2JLoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NGYwMjA2Y2EtODFjMy00NzZiLWFkZjgtMjRjZjY2NGY0ZjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSbFgk930ssQnl8xKKT1OiEreV+eE8kyOKMU wQ27Tc88cLB2b+TfmyOSxp3X8TdWmiRwtu/piWAXftqw2mtMss/x0fY3+ZvxElNq 00rS+UtG/1jEse+IuCgRgPouQ+AZbAqdIw6JyRufxFrjpWBlzHfuuzogA3VdRe49 iAnfOaHtGHiO+SmCnFYyUwWTIDYBmFe+FvQGu3my07H1+b9GcX1gOFp6b1etQCPV LDSQbgPVz6dsOevL/1Cwr0CCH07OFMt/V/QqKRJWTelsH59LfJDuSK16QsS0uhIv QG+QFSHtHpHTFYnYejL6o/1Bl0KbVQ0X2Z0d7bK+d/kIZzpRXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAlc6OjTo6pjud185XXYSBl03dkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDU5MTExYzEtODAzNy0z YmMyLWFkNjYtZjBkMjY1OTA2N2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EIqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADANHt6moU8lA7Ez7zOzOsd3RKmpHxGhrilHjT6S3ExJJp4IqV+NYgA+ aXrWkvBv2OjP1uTFcXS9t98xeG95qdM8KD1GRAQE8O8B/BOrimHo94k+UR78aBmC UwWakRNcO/QhftOogWftm5QGa201kON4YTcTWMb2CH615ypDmROlbNbP/JIL6Sao /tbqIpnwI9J88ZAusvtfiWjawDVrqkNSyWJi9zu6CkPnhCU5j2S3plxfwZuG0P+a yuMDw8zzlyEF4b46QdtfhYZ18TNvUepSg7y+O5LCm3Le9thhM7gvZvzC2zKJ4F2h 4U5fWlGbXCf3M/iC3lWJ1srptwXwjMg= -----END CERTIFICATE-----Generated at Mon May 5 02:27:18 2025 by rpki-client