$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/325fc2dd-57ff-3ace-815f-642ede4b1381.roa File: 325fc2dd-57ff-3ace-815f-642ede4b1381.roa (raw, json) Hash identifier: HG+/9ozz4pTCvfxg3n3xWeoZkP4rnY+BA6q9sHCOERs= Subject key identifier: 45:E1:7C:50:3D:C0:C0:6E:4B:90:FB:A9:ED:D7:F5:8C:26:1E:67:03 Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F432858491AA6CEB5DCDF9D5B4745F7C0 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/325fc2dd-57ff-3ace-815f-642ede4b1381.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 15290 IP address blocks: 216.191.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:ce:b5:dc:df:9d:5b:47:45:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=034536f2-f7fa-4ec3-9426-fe7bffa626e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ab:74:8a:5a:6a:a1:8b:76:12:20:6f:a1:06: 1b:9b:0a:19:42:80:5d:1d:fb:30:62:5e:a5:87:24: e8:e8:df:3a:02:4d:c0:9a:aa:ce:af:d5:bf:f7:89: 90:40:1c:e8:99:ec:de:69:a9:39:a8:ac:f7:03:64: c8:4d:a9:79:b6:30:04:83:fb:a4:0d:42:ec:3d:1d: 55:35:1d:c2:39:ea:b1:ae:29:91:85:ba:20:f1:33: e8:33:1a:23:1b:1d:e9:26:df:99:89:cf:70:48:5f: ea:35:3f:02:7d:63:73:59:fa:2c:9c:55:67:e2:84: 63:e1:cc:c9:2e:89:78:f8:13:d9:d5:f4:79:84:00: fe:95:08:34:54:63:28:5d:11:6c:c3:98:73:7e:36: f6:e7:85:64:c9:07:d2:b0:f8:e1:55:79:a4:04:cb: ad:62:da:48:65:76:de:9a:62:a5:d3:1d:f8:9d:67: 05:28:e9:7b:64:e5:1b:1e:68:82:9b:6c:7e:71:4b: 42:c5:d9:13:f3:d5:08:77:0a:0a:51:8b:91:4b:35: 2c:96:8a:f7:18:26:0b:13:6b:79:e1:f2:91:26:b4: 62:3e:d6:51:b8:c8:3f:86:28:e4:1d:98:54:f4:fa: 81:24:70:1a:60:fb:af:5b:af:35:24:0f:72:7c:9e: 4d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E1:7C:50:3D:C0:C0:6E:4B:90:FB:A9:ED:D7:F5:8C:26:1E:67:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/325fc2dd-57ff-3ace-815f-642ede4b1381.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv4: 216.191.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:33:1d:f0:85:52:ef:ba:e4:58:cd:bd:0d:60:c6:f1:9e:b6: 33:0c:f4:e5:76:0e:9c:19:46:61:a2:65:3e:8c:d1:36:14:98: b1:1b:34:1d:76:62:68:59:b9:41:ce:63:6d:c8:11:86:da:e1: 2c:4b:f2:1e:e4:80:0d:36:c7:7c:22:9b:4e:20:b3:b3:71:55: 56:8e:96:2b:64:8d:5c:03:69:ae:22:a4:fd:ed:d8:f2:1e:d5: 3e:4d:9d:7f:cb:12:77:27:06:cf:73:95:98:53:9b:97:5e:45: 85:9f:6f:de:f4:51:47:ea:ad:96:94:af:35:c4:53:da:14:6e: 39:ce:4a:aa:2c:c7:15:fe:b5:78:61:9f:95:f8:c2:0a:bd:da: dc:a1:22:d2:a4:4d:d1:d3:6b:29:c8:65:75:88:d1:d3:36:aa: d8:e1:b2:a0:b1:3c:6d:e1:b0:25:f4:0c:50:e7:1f:ee:f2:b8: 6d:3a:de:6a:e7:68:63:b0:0b:72:6f:21:31:94:41:81:11:95: 81:a6:64:d2:a8:e4:55:56:59:de:80:d6:2a:7e:82:0b:cd:c7: c6:26:fd:b0:cf:fe:34:d4:5f:78:a8:1f:fe:d7:a7:3e:13:5f: 63:bc:0e:74:13:fc:13:16:4f:a8:cb:16:14:6d:b2:9c:f8:d0: e0:5c:2f:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaps613N+dW0dF98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk MDM0NTM2ZjItZjdmYS00ZWMzLTk0MjYtZmU3YmZmYTYyNmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKt0ilpqoYt2EiBvoQYbmwoZQoBdHfswYl6l hyTo6N86Ak3AmqrOr9W/94mQQBzomezeaak5qKz3A2TITal5tjAEg/ukDULsPR1V NR3COeqxrimRhbog8TPoMxojGx3pJt+Zic9wSF/qNT8CfWNzWfosnFVn4oRj4czJ Lol4+BPZ1fR5hAD+lQg0VGMoXRFsw5hzfjb254VkyQfSsPjhVXmkBMutYtpIZXbe mmKl0x34nWcFKOl7ZOUbHmiCm2x+cUtCxdkT89UIdwoKUYuRSzUslor3GCYLE2t5 4fKRJrRiPtZRuMg/hijkHZhU9PqBJHAaYPuvW681JA9yfJ5NxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXhfFA9wMBuS5D7qe3X9YwmHmcDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvMzI1ZmMyZGQtNTdmZi0z YWNlLTgxNWYtNjQyZWRlNGIxMzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2L/qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMzHfCFUu+65FjNvQ1gxvGetjMM9OV2DpwZRmGiZT6M0TYUmLEbNB12 YmhZuUHOY23IEYba4SxL8h7kgA02x3wim04gs7NxVVaOlitkjVwDaa4ipP3t2PIe 1T5NnX/LEncnBs9zlZhTm5deRYWfb970UUfqrZaUrzXEU9oUbjnOSqosxxX+tXhh n5X4wgq92tyhItKkTdHTaynIZXWI0dM2qtjhsqCxPG3hsCX0DFDnH+7yuG063mrn aGOwC3JvITGUQYERlYGmZNKo5FVWWd6A1ip+ggvNx8Ym/bDP/jTUX3ioH/7Xpz4T X2O8DnQT/BMWT6jLFhRtspz40OBcL+w= -----END CERTIFICATE-----Generated at Sun Apr 6 20:46:42 2025 by rpki-client