$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d08e2bc4-06d0-35bf-9749-f8eff9086892.roa File: d08e2bc4-06d0-35bf-9749-f8eff9086892.roa (raw, json) Hash identifier: UpI99n8zFZBYIM58urBF3jxhTgpIhoRmn+HhHKIcKQg= Subject key identifier: 98:CB:EE:98:D7:03:2C:D8:78:86:15:A7:B1:F7:00:F7:DC:8B:B8:10 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858490E16D2B0CDBC69B3F4DF4080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d08e2bc4-06d0-35bf-9749-f8eff9086892.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 7342 IP address blocks: 216.168.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:d2:b0:cd:bc:69:b3:f4:df:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=6d512ce1-e6b4-48e7-981b-5f5f90e19dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3b:f1:1d:a2:fa:01:fc:48:e7:80:4a:0c:c3: 59:c0:b0:9c:c1:36:eb:a3:d7:a7:f4:1a:5e:c5:42: 15:ef:00:b5:33:52:ba:4b:5d:6f:98:2e:6f:26:60: d3:74:26:28:6c:8d:ca:dd:6f:9d:92:b1:36:56:cf: 50:5e:af:d5:43:0b:b2:2e:9e:99:12:77:c9:6d:a1: dd:18:c9:13:cd:8f:07:2a:2d:53:ff:d6:a4:e5:ae: b6:0b:d3:06:d0:45:97:ff:a3:a1:33:f8:ea:3e:c1: e2:b1:e1:d3:a6:12:d1:7a:76:82:d0:d5:1c:13:f9: a8:b9:bf:fc:40:b2:0b:88:6e:e9:48:1a:bf:6f:bc: 94:44:9e:4a:dc:9d:9c:0e:0f:ce:f9:48:a6:ee:3d: 79:0f:61:7e:27:1b:af:cb:80:68:93:95:18:9c:c3: 98:83:77:b6:95:8f:e0:cb:d0:79:cc:06:3d:2e:f4: 13:18:35:60:1d:a0:9c:d7:e8:57:8c:56:50:d2:2b: 0e:ba:81:db:be:10:b5:22:54:cb:3b:b6:40:f7:36: 53:ba:c0:ca:25:a2:07:85:fc:a3:87:62:0d:97:15: 76:f8:2b:44:19:d0:7a:2c:f1:c6:f7:b4:7d:cc:97: de:ac:25:fa:49:b3:f7:f3:0e:e9:d7:6e:b4:17:1e: d3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:CB:EE:98:D7:03:2C:D8:78:86:15:A7:B1:F7:00:F7:DC:8B:B8:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d08e2bc4-06d0-35bf-9749-f8eff9086892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:c9:c1:7d:60:83:8f:5f:54:48:bc:95:7b:6c:e6:fe:75:17: ea:ee:0f:5a:d0:c5:d8:79:82:0e:83:8e:cc:9c:bb:37:df:44: fe:9e:4b:51:55:b4:90:8e:09:1d:98:31:42:2d:18:ae:e1:c0: b2:0e:90:c2:56:9b:de:50:63:a3:34:fa:34:7f:06:82:ee:ec: 62:69:03:3f:f0:7f:b0:a1:8c:09:f2:91:10:46:8b:f3:2b:0d: 69:a7:62:7b:c4:a7:d3:df:04:e9:01:81:f0:09:76:52:9b:d8: 07:67:30:71:59:f9:54:93:07:6f:00:10:e9:ec:6a:b9:fd:19: 50:55:f3:3c:91:a5:8d:84:54:0b:89:5b:ee:c7:80:5b:4f:a7: 47:be:4c:8e:e3:f0:91:94:35:04:e5:43:64:2e:bc:1a:f1:05: 41:71:14:82:c6:73:e9:31:46:0f:5a:5c:bc:b6:92:a7:0b:c8: 8d:e5:54:f9:a1:40:dd:17:67:38:28:49:a5:15:6a:23:73:72: 36:bc:c4:3e:bd:f2:93:01:16:ca:9b:1c:8c:ec:6b:a6:31:24: e5:a1:01:8c:f9:8d:67:4d:a3:c2:f5:58:1e:67:4f:ee:0d:1b: fd:f1:f4:b0:90:84:a0:8f:8c:c0:f7:be:b6:94:a9:a8:f8:8f: b8:f3:ed:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFtKwzbxps/TfQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk NmQ1MTJjZTEtZTZiNC00OGU3LTk4MWItNWY1ZjkwZTE5ZGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTvxHaL6AfxI54BKDMNZwLCcwTbro9en9Bpe xUIV7wC1M1K6S11vmC5vJmDTdCYobI3K3W+dkrE2Vs9QXq/VQwuyLp6ZEnfJbaHd GMkTzY8HKi1T/9ak5a62C9MG0EWX/6OhM/jqPsHiseHTphLRenaC0NUcE/moub/8 QLILiG7pSBq/b7yURJ5K3J2cDg/O+Uim7j15D2F+Jxuvy4Bok5UYnMOYg3e2lY/g y9B5zAY9LvQTGDVgHaCc1+hXjFZQ0isOuoHbvhC1IlTLO7ZA9zZTusDKJaIHhfyj h2INlxV2+CtEGdB6LPHG97R9zJferCX6SbP38w7p1260Fx7TNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjL7pjXAyzYeIYVp7H3APfci7gQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDA4ZTJiYzQtMDZkMC0z NWJmLTk3NDktZjhlZmY5MDg2ODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7JwX1gg49fVEi8lXts5v51F+ruD1rQxdh5gg6DjsycuzffRP6eS1FV tJCOCR2YMUItGK7hwLIOkMJWm95QY6M0+jR/BoLu7GJpAz/wf7ChjAnykRBGi/Mr DWmnYnvEp9PfBOkBgfAJdlKb2AdnMHFZ+VSTB28AEOnsarn9GVBV8zyRpY2EVAuJ W+7HgFtPp0e+TI7j8JGUNQTlQ2QuvBrxBUFxFILGc+kxRg9aXLy2kqcLyI3lVPmh QN0XZzgoSaUVaiNzcja8xD698pMBFsqbHIzsa6YxJOWhAYz5jWdNo8L1WB5nT+4N G/3x9LCQhKCPjMD3vraUqaj4j7jz7ZQ= -----END CERTIFICATE-----Generated at Wed Apr 9 01:09:53 2025 by rpki-client