$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/3f81b61e-dc01-3108-a312-ead9f06fd18a.roa File: 3f81b61e-dc01-3108-a312-ead9f06fd18a.roa (raw, json) Hash identifier: tJR0MIlw6XIdbFTbA+okTsqqg7CsJBqDWianDeo5eM0= Subject key identifier: 9F:86:44:83:44:9C:DF:70:98:E9:68:33:68:CC:38:D9:2D:76:23:7C Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F432858491AA6C31A9973B33A45D1C900 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/3f81b61e-dc01-3108-a312-ead9f06fd18a.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 53338 IP address blocks: 216.123.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:c3:1a:99:73:b3:3a:45:d1:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=2341c66c-545c-47b6-91b3-02e43f48ad86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9e:8b:ec:97:bf:0b:a2:93:94:8f:10:00:9a: 18:26:df:b7:23:d8:72:a4:59:5d:2c:1c:bf:78:f7: 4a:16:ab:80:c0:1c:84:56:cf:0f:64:b4:51:33:8f: 6b:66:fc:64:a9:41:48:90:2b:90:0f:47:a1:97:38: e6:c1:80:cb:b3:c8:fb:48:80:84:43:30:b1:7d:17: be:89:14:c3:60:db:82:29:4f:8d:35:12:59:a0:91: c0:ae:fa:e1:16:d3:57:f5:a1:8b:12:f3:af:8e:dc: bf:e2:32:b3:6f:0b:b6:b5:f6:35:8c:06:db:bb:56: 97:af:56:55:b2:06:ff:4d:59:15:73:fd:72:0f:c3: e6:79:1f:7e:a7:7e:45:78:b2:1c:24:3e:ea:d2:98: c3:e7:45:fc:25:4f:df:ea:f3:71:c8:33:58:73:09: 90:ab:91:af:39:5b:98:05:13:78:d9:37:d9:3d:b0: 24:87:45:81:4b:eb:b0:2e:e1:f3:9d:ca:99:28:dd: c0:9f:99:11:b8:34:da:b4:b9:13:06:0d:17:bc:d2: 22:36:6a:8f:04:a1:08:13:cd:e5:89:50:9e:66:c2: 20:af:c3:dd:2e:35:cb:c1:cb:a0:57:8d:77:07:ac: fd:36:3b:91:da:5f:22:5b:a3:24:e9:49:59:b0:c1: 35:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:86:44:83:44:9C:DF:70:98:E9:68:33:68:CC:38:D9:2D:76:23:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/3f81b61e-dc01-3108-a312-ead9f06fd18a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv4: 216.123.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:49:29:c3:d0:f1:a6:d8:e0:c8:31:91:d9:c5:3d:d5:77:22: ee:a7:e5:a0:57:74:99:cc:c3:c4:77:41:02:24:87:25:25:72: b6:21:de:78:d5:8a:cd:18:1c:da:d6:38:9d:c0:98:f8:2a:42: 26:10:a6:4f:52:54:50:d9:c3:92:b2:07:95:47:49:9f:5a:f1: 9e:a1:31:c3:90:ae:d9:04:c3:6d:99:5c:c9:ee:cf:f2:18:9d: 91:2f:fd:2c:24:40:82:15:8e:4c:bd:5c:c8:aa:b3:50:7d:9f: f7:02:17:96:b3:d5:7a:2f:8c:7d:bb:c9:0c:82:17:aa:cb:0a: 06:3a:5b:0d:32:77:e1:6b:ee:1a:b3:1a:b1:9f:88:00:98:81: 22:10:28:02:1f:d2:23:2f:11:03:0a:0a:7d:70:8f:4f:42:20: 1c:25:6b:79:5b:9a:30:8b:3f:f0:30:0c:8a:71:4c:fb:07:ca: 71:ea:5c:b8:86:13:99:ae:82:3f:db:22:07:cb:55:9d:bd:45: 86:ff:cf:34:4d:b4:c4:9b:d0:f4:39:12:0a:77:1c:d5:b6:e0: 0a:1a:5e:86:10:30:14:35:e1:ec:35:26:b1:e1:b9:59:18:63: d1:94:f8:cb:31:a3:22:4b:7b:54:15:6c:38:77:3c:d5:ab:40: 68:08:86:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkapsMamXOzOkXRyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk MjM0MWM2NmMtNTQ1Yy00N2I2LTkxYjMtMDJlNDNmNDhhZDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp6L7Je/C6KTlI8QAJoYJt+3I9hypFldLBy/ ePdKFquAwByEVs8PZLRRM49rZvxkqUFIkCuQD0ehlzjmwYDLs8j7SICEQzCxfRe+ iRTDYNuCKU+NNRJZoJHArvrhFtNX9aGLEvOvjty/4jKzbwu2tfY1jAbbu1aXr1ZV sgb/TVkVc/1yD8PmeR9+p35FeLIcJD7q0pjD50X8JU/f6vNxyDNYcwmQq5GvOVuY BRN42TfZPbAkh0WBS+uwLuHzncqZKN3An5kRuDTatLkTBg0XvNIiNmqPBKEIE83l iVCeZsIgr8PdLjXLwcugV413B6z9NjuR2l8iW6Mk6UlZsME1WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+GRINEnN9wmOloM2jMONktdiN8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvM2Y4MWI2MWUtZGMwMS0z MTA4LWEzMTItZWFkOWYwNmZkMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HtDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItJKcPQ8abY4MgxkdnFPdV3Iu6n5aBXdJnMw8R3QQIkhyUlcrYh3njV is0YHNrWOJ3AmPgqQiYQpk9SVFDZw5KyB5VHSZ9a8Z6hMcOQrtkEw22ZXMnuz/IY nZEv/SwkQIIVjky9XMiqs1B9n/cCF5az1XovjH27yQyCF6rLCgY6Ww0yd+Fr7hqz GrGfiACYgSIQKAIf0iMvEQMKCn1wj09CIBwla3lbmjCLP/AwDIpxTPsHynHqXLiG E5mugj/bIgfLVZ29RYb/zzRNtMSb0PQ5Egp3HNW24AoaXoYQMBQ14ew1JrHhuVkY Y9GU+MsxoyJLe1QVbDh3PNWrQGgIhhc= -----END CERTIFICATE-----Generated at Sun Apr 6 20:23:08 2025 by rpki-client