$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/3ee16212-ace1-3836-9f78-e67462b4a3ba.roa File: 3ee16212-ace1-3836-9f78-e67462b4a3ba.roa (raw, json) Hash identifier: sNkEUDaZlw3tgKe3YdjNsLAlqrfvf6+3a3msJ0P2BSA= Subject key identifier: 6E:F3:70:DD:38:12:AD:C4:A7:16:65:0B:19:A9:8C:7D:1A:33:8B:96 Certificate issuer: /CN=1eba12ff-c221-4ab3-9aa6-d542d0812543 Certificate serial: 010D0C9F432858495EEEE6D266AFA75C9957A8C0 Authority key identifier: 3B:70:9B:73:AD:F2:99:6A:00:65:29:B1:43:4D:FC:F5:D2:40:52:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/3ee16212-ace1-3836-9f78-e67462b4a3ba.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 10973 IP address blocks: 216.128.96.0/20 maxlen: 20 216.128.96.0/21 maxlen: 21 216.128.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/1eba12ff-c221-4ab3-9aa6-d542d0812543.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/1eba12ff-c221-4ab3-9aa6-d542d0812543.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:e6:d2:66:af:a7:5c:99:57:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eba12ff-c221-4ab3-9aa6-d542d0812543 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=1da3d400-473f-495b-af1d-503180eaffda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:66:90:65:66:57:cc:8e:da:d4:6e:bd:0a:49: 75:e0:86:16:03:12:47:8b:23:f7:77:f8:a3:f9:b3: 66:07:68:dd:f0:db:53:b4:c8:9b:c4:79:40:58:e5: 23:25:21:18:e5:74:d0:b9:49:63:74:8e:c7:8a:89: 04:e6:6f:19:db:1c:14:2f:3c:a5:e6:2b:b6:2b:cc: 1f:a1:02:c5:d0:4e:b5:4d:f2:79:11:10:74:e9:34: 44:f8:9f:75:86:d0:a8:c3:18:63:25:a2:70:23:fa: 68:29:bb:17:87:2c:be:e4:d3:58:13:cb:27:0c:d8: ea:9f:9d:90:2f:ba:f7:bf:e0:a2:d1:6a:2a:31:c3: 1d:61:60:30:22:0c:ae:f5:51:5a:10:6c:a2:10:e3: 69:b7:1f:99:1d:ab:3b:79:ee:21:83:39:e1:9c:f5: 48:9d:fa:6d:2d:e4:0a:5d:1d:83:92:ea:53:66:ea: 43:90:49:d6:2c:c7:11:1c:ae:4a:54:e2:cf:f9:a7: 07:a0:6e:5a:51:60:c0:8c:4d:e5:d0:d3:47:32:55: a3:48:7f:a6:9f:1e:69:4e:81:a4:2e:3e:14:22:b4: 36:32:00:c4:16:15:81:95:dd:54:0d:62:b4:85:f5: c2:cf:bf:fb:d8:f3:78:b0:b8:ed:b0:94:74:cb:32: 3c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F3:70:DD:38:12:AD:C4:A7:16:65:0B:19:A9:8C:7D:1A:33:8B:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/3ee16212-ace1-3836-9f78-e67462b4a3ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/1eba12ff-c221-4ab3-9aa6-d542d0812543.crl X509v3 Authority Key Identifier: keyid:3B:70:9B:73:AD:F2:99:6A:00:65:29:B1:43:4D:FC:F5:D2:40:52:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543.cer sbgp-ipAddrBlock: critical IPv4: 216.128.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:5c:9b:f0:27:4e:76:c1:b6:ea:30:6e:3f:4b:47:10:9c:a6: 4a:29:00:2d:0a:a2:43:dd:0e:13:ce:56:fa:4c:58:1b:a6:f6: 1d:37:be:37:57:93:dd:32:ad:dc:d5:37:1c:04:64:45:90:5e: 50:4c:f0:33:cc:d7:01:5d:60:f6:b3:9d:a8:51:80:ac:b0:bd: 19:be:c7:a1:81:21:71:f9:82:45:d6:57:93:63:60:bc:71:de: 18:3a:98:ff:58:3e:4a:e0:f6:e3:32:5f:30:7c:26:cb:4f:d3: 9c:8f:fb:fa:c7:f9:fe:19:cb:59:05:db:c2:38:47:2a:e6:7a: cc:2f:ef:75:af:19:7d:d4:2d:f8:c2:2a:f0:43:e5:68:38:df: 67:d1:fb:d0:93:1f:9e:d7:c0:85:0e:5b:48:2c:5a:4a:76:75: 09:42:e8:b1:81:a7:cd:7d:7b:f9:be:8b:e4:56:d7:e0:a6:28: b4:47:5a:2f:7b:41:30:6b:c3:32:01:81:65:43:8f:72:1c:9e: 7d:f3:bc:2d:f2:bc:81:d7:dc:65:54:09:2a:ac:a5:c1:35:7b: 82:e8:2f:ee:0c:c6:26:b0:23:03:fc:ab:b0:9e:e5:f1:c5:0f: 05:8e:92:5f:b6:79:f0:78:39:45:bb:f9:4f:99:bd:1c:27:bb: d7:1c:35:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7ubSZq+nXJlXqMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWViYTEyZmYtYzIyMS00YWIzLTlhYTYtZDU0MmQwODEy NTQzMB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk MWRhM2Q0MDAtNDczZi00OTViLWFmMWQtNTAzMTgwZWFmZmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2maQZWZXzI7a1G69Ckl14IYWAxJHiyP3d/ij +bNmB2jd8NtTtMibxHlAWOUjJSEY5XTQuUljdI7HiokE5m8Z2xwULzyl5iu2K8wf oQLF0E61TfJ5ERB06TRE+J91htCowxhjJaJwI/poKbsXhyy+5NNYE8snDNjqn52Q L7r3v+Ci0WoqMcMdYWAwIgyu9VFaEGyiEONptx+ZHas7ee4hgznhnPVInfptLeQK XR2DkupTZupDkEnWLMcRHK5KVOLP+acHoG5aUWDAjE3l0NNHMlWjSH+mnx5pToGk Lj4UIrQ2MgDEFhWBld1UDWK0hfXCz7/72PN4sLjtsJR0yzI8awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7zcN04Eq3EpxZlCxmpjH0aM4uWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZWJh MTJmZi1jMjIxLTRhYjMtOWFhNi1kNTQyZDA4MTI1NDMvM2VlMTYyMTItYWNlMS0z ODM2LTlmNzgtZTY3NDYyYjRhM2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWViYTEyZmYtYzIyMS00YWIzLTlh YTYtZDU0MmQwODEyNTQzLzFlYmExMmZmLWMyMjEtNGFiMy05YWE2LWQ1NDJkMDgx MjU0My5jcmwwHwYDVR0jBBgwFoAUO3Cbc63ymWoAZSmxQ0389dJAUgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZWJhMTJmZi1jMjIxLTRhYjMtOWFhNi1kNTQy ZDA4MTI1NDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2IBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZcm/AnTnbBtuowbj9LRxCcpkopAC0KokPdDhPOVvpMWBum9h03vjdX k90yrdzVNxwEZEWQXlBM8DPM1wFdYPaznahRgKywvRm+x6GBIXH5gkXWV5NjYLxx 3hg6mP9YPkrg9uMyXzB8JstP05yP+/rH+f4Zy1kF28I4Ryrmeswv73WvGX3ULfjC KvBD5Wg432fR+9CTH57XwIUOW0gsWkp2dQlC6LGBp819e/m+i+RW1+CmKLRHWi97 QTBrwzIBgWVDj3Icnn3zvC3yvIHX3GVUCSqspcE1e4LoL+4MxiawIwP8q7Ce5fHF DwWOkl+2efB4OUW7+U+ZvRwnu9ccNWk= -----END CERTIFICATE-----Generated at Fri Apr 11 23:20:43 2025 by rpki-client