$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3231362e3231312e3230382e302f32322d3234203d3e203230343733.roa File: 3231362e3231312e3230382e302f32322d3234203d3e203230343733.roa (raw, json) Hash identifier: UfNtpjkqj8VGeUwUAjLZp216zfC9OWBv6BKfdNfZz/U= Subject key identifier: C6:01:C5:ED:28:33:F8:B7:78:1C:F7:0E:A3:76:2F:DB:25:FE:CA:EB Certificate issuer: /CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b Certificate serial: 251610BAD90D997C8EDD3FC9C2A5FB04B81C7E39 Authority key identifier: 1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3231362e3231312e3230382e302f32322d3234203d3e203230343733.roa Signing time: Wed 22 Jan 2025 16:28:26 +0000 ROA not before: Wed 22 Jan 2025 16:23:26 +0000 ROA not after: Wed 21 Jan 2026 16:28:26 +0000 asID: 20473 IP address blocks: 216.211.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Mar 2025 18:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:16:10:ba:d9:0d:99:7c:8e:dd:3f:c9:c2:a5:fb:04:b8:1c:7e:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b Validity Not Before: Jan 22 16:23:26 2025 GMT Not After : Jan 21 16:28:26 2026 GMT Subject: CN=C601C5ED2833F8B7781CF70EA3762FDB25FECAEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7e:2a:29:38:22:cd:ae:3e:8d:5c:40:c7:d6: 4b:9a:8c:49:38:48:c0:78:a9:58:9d:f3:d5:37:3a: 7a:53:50:c8:04:8b:09:2a:4c:0d:88:13:b1:ae:e3: e8:d3:32:7f:33:46:5c:d8:81:65:77:01:7e:d4:31: 9e:53:51:ae:ee:a4:35:25:b6:c2:30:49:7d:bc:f6: b3:9a:39:cd:21:95:f0:db:48:3b:e9:6e:0f:76:bf: 5e:2b:2e:a5:e2:e1:92:84:83:23:7c:d6:4d:2e:5d: 16:a3:0b:2b:68:cb:27:60:a1:6d:64:da:e5:2c:e8: 3a:d5:8f:2c:6a:9b:a8:d7:a0:02:2a:62:74:a7:6e: 8c:94:4c:49:22:f0:b7:5f:1a:b7:32:52:fe:b4:80: b3:60:60:d2:77:41:be:5a:5f:ef:ba:c1:33:2c:b7: 0c:2f:cb:26:b9:8d:90:e5:3a:09:6a:dd:44:a5:55: 90:93:62:39:e5:41:fa:12:a1:4f:5e:84:7b:70:ae: 5c:a3:32:4b:cf:a7:12:9e:7d:f0:75:0a:08:13:5a: e9:b5:35:d5:75:1f:61:20:6d:ef:00:d5:af:3f:3f: e9:e0:d9:0f:9c:7c:28:90:e0:db:71:79:67:15:cc: 5d:08:22:4d:78:d4:66:98:2c:4b:0d:86:df:0b:c3: b9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:01:C5:ED:28:33:F8:B7:78:1C:F7:0E:A3:76:2F:DB:25:FE:CA:EB X509v3 Authority Key Identifier: keyid:1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3231362e3231312e3230382e302f32322d3234203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.211.208.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:a6:c3:63:56:e6:08:43:5e:58:0f:d4:83:c4:64:dc:fd:0e: 69:63:5c:84:f3:b9:3b:d9:4e:d5:64:f4:ee:f5:3f:9c:a9:70: 08:69:d2:8f:09:79:ea:f0:e2:4e:57:bf:7d:0b:6d:db:27:0c: 87:f2:80:7b:82:c1:76:99:70:9c:70:55:02:67:ce:c4:85:eb: b5:95:64:47:89:76:0f:5b:14:e3:3d:44:f4:7e:0a:e1:e0:ad: 5c:b3:6e:c1:60:22:57:54:ce:fe:e7:f1:8c:3c:1a:a2:dd:3c: 08:8d:a8:fc:5b:08:2c:67:63:75:83:0d:94:a5:7e:ea:35:c4: b0:46:ce:22:cc:33:59:10:2b:4c:f9:6a:83:5a:69:49:f2:8b: 1f:7e:19:67:b9:b6:f9:7a:28:c2:da:56:e5:5a:52:ad:f5:ec: fb:fa:ed:de:10:f0:94:9f:5f:25:95:29:82:74:73:49:05:bf: 77:7f:8e:e2:c0:27:63:c4:55:28:a5:63:cc:ee:d0:55:6f:12: 46:7b:2c:2b:e0:7d:f1:1b:93:e4:a0:d1:62:f8:b5:0c:fc:c8: 7a:fa:65:52:e9:95:d2:c9:36:cd:a4:a9:0b:c6:ac:cd:4a:43: 4f:4f:ec:56:12:e1:a8:e6:58:81:f5:33:29:e5:16:21:f0:f9: bc:92:33:f9 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIUJRYQutkNmXyO3T/JwqX7BLgcfjkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4NWRkYzcyNDgwZjY5NzM2ZDBkYmZiNGZiN2JiYmJl YTMwMjU5NzdiYTk2YzMxNWIwHhcNMjUwMTIyMTYyMzI2WhcNMjYwMTIxMTYyODI2 WjAzMTEwLwYDVQQDEyhDNjAxQzVFRDI4MzNGOEI3NzgxQ0Y3MEVBMzc2MkZEQjI1 RkVDQUVCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX4qKTgiza4+ jVxAx9ZLmoxJOEjAeKlYnfPVNzp6U1DIBIsJKkwNiBOxruPo0zJ/M0Zc2IFldwF+ 1DGeU1Gu7qQ1JbbCMEl9vPazmjnNIZXw20g76W4Pdr9eKy6l4uGShIMjfNZNLl0W owsraMsnYKFtZNrlLOg61Y8sapuo16ACKmJ0p26MlExJIvC3Xxq3MlL+tICzYGDS d0G+Wl/vusEzLLcML8smuY2Q5ToJat1EpVWQk2I55UH6EqFPXoR7cK5cozJLz6cS nn3wdQoIE1rptTXVdR9hIG3vANWvPz/p4NkPnHwokODbcXlnFcxdCCJNeNRmmCxL DYbfC8O5MwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFMYBxe0oM/i3eBz3DqN2L9sl /srrMB8GA1UdIwQYMBaAFB6ScJf5Yc1ixoQiESBnkVhWiOprMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGNlYTJhYzYwMThkY2M2MWI0MjY1MWQ2LzAv MUU5MjcwOTdGOTYxQ0Q2MkM2ODQyMjExMjA2NzkxNTg1Njg4RUE2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzQwMTZhOWE1LTZlN2MtNDYzMy1hNGMzLTI0YWQxYjdmMDc4NS9kNTg1 ZGRjNzI0ODBmNjk3MzZkMGRiZmI0ZmI3YmJiYmVhMzAyNTk3N2JhOTZjMzE1Yi5j ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhjZWEyYWM2MDE4ZGNj NjFiNDI2NTFkNi8wLzMyMzEzNjJlMzIzMTMxMmUzMjMwMzgyZTMwMmYzMjMyMmQz MjM0MjAzZDNlMjAzMjMwMzQzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2NPQMA0GCSqGSIb3DQEB CwUAA4IBAQB6psNjVuYIQ15YD9SDxGTc/Q5pY1yE87k72U7VZPTu9T+cqXAIadKP CXnq8OJOV799C23bJwyH8oB7gsF2mXCccFUCZ87Eheu1lWRHiXYPWxTjPUT0fgrh 4K1cs27BYCJXVM7+5/GMPBqi3TwIjaj8WwgsZ2N1gw2UpX7qNcSwRs4izDNZECtM +WqDWmlJ8osffhlnubb5eijC2lblWlKt9ez7+u3eEPCUn18llSmCdHNJBb93f47i wCdjxFUopWPM7tBVbxJGeywr4H3xG5PkoNFi+LUM/Mh6+mVS6ZXSyTbNpKkLxqzN SkNPT+xWEuGo5liB9TMp5RYh8Pm8kjP5 -----END CERTIFICATE-----Generated at Fri Mar 14 00:10:23 2025 by rpki-client