$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24c532a6-6f34-3db1-ab5e-d5bece943a35.roa File: 24c532a6-6f34-3db1-ab5e-d5bece943a35.roa (raw, json) Hash identifier: xtTn1M4bBhJWuzILxuxTjm7oLr1wqyUB3d6w+//MU/c= Subject key identifier: 86:55:B3:73:E0:F0:50:6A:E0:C0:6B:A3:28:36:74:45:F0:38:D8:0C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584919417654A0EA64A75F153600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24c532a6-6f34-3db1-ab5e-d5bece943a35.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 30036 IP address blocks: 216.108.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:76:54:a0:ea:64:a7:5f:15:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=2666e9ea-0a9c-4e2c-b3f9-84d99a609515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:79:18:da:96:8d:d2:d8:d6:d9:a5:e6:98:ec: 83:e8:df:25:e1:ac:6e:74:38:4a:59:89:95:00:3b: cd:78:ba:93:58:07:72:21:b2:3f:00:e4:ef:c0:29: ec:19:2e:61:25:2f:6e:28:e8:64:ad:cc:98:e7:6c: 7a:b8:e3:c8:56:df:bc:05:71:88:45:2a:e0:bf:42: ae:66:67:4b:e3:97:83:80:5c:a0:86:80:ff:31:ca: c5:b7:ab:89:df:24:32:77:44:ff:fd:18:91:be:83: 68:dd:7f:39:31:13:a9:56:a4:9e:a1:c4:fd:6e:1a: f8:f8:79:6f:6d:a7:c5:a4:87:cd:90:44:9e:06:14: 64:d1:55:86:9f:70:82:2e:be:12:a6:68:5e:f7:fe: 7a:81:36:67:5b:28:df:e5:7f:ab:fd:8f:37:d2:f3: 3a:ee:c8:e7:1e:bd:17:f4:ad:07:ae:6b:dd:1e:f8: 0a:19:d9:7f:98:8e:c9:0a:9a:9f:6d:88:f6:19:c6: f2:35:ff:6d:02:ec:a3:4f:44:12:6a:50:21:43:06: 53:13:96:28:d8:8b:0b:16:87:f3:01:d3:60:54:b3: 43:b4:e9:03:20:2c:bc:4f:0c:40:ca:b7:0e:95:57: 14:aa:84:69:e9:28:fb:93:09:6e:bb:36:61:7a:10: c2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:55:B3:73:E0:F0:50:6A:E0:C0:6B:A3:28:36:74:45:F0:38:D8:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24c532a6-6f34-3db1-ab5e-d5bece943a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 216.108.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:8f:20:d1:06:ab:b4:52:43:42:25:06:bc:b5:15:ab:4f:19: 17:b4:a7:a2:88:95:bd:9c:47:d2:81:6f:93:c5:08:40:1c:41: 3e:ab:c0:14:a4:85:bd:16:95:10:54:32:cd:2a:72:d1:80:74: fd:41:80:c8:ce:76:88:24:45:57:25:24:0e:a6:40:14:d2:f4: 4d:2a:63:b2:41:30:10:80:97:84:32:53:0e:33:b8:0e:ad:82: 41:07:61:e0:ab:56:b5:ed:c7:ba:8d:d2:0d:1d:f0:22:c5:37: 4a:98:9b:2b:f9:1d:45:6e:d6:71:45:75:52:96:84:82:f9:dd: 97:b2:8a:87:7e:a1:87:54:cf:bf:64:d4:6d:28:2b:05:8e:ed: 2a:24:77:bf:bd:66:63:f7:8f:74:54:de:b3:fb:a8:bf:6f:ba: 6c:b4:b9:c7:48:73:ab:20:98:fe:cb:5e:e9:f2:44:2c:67:97: 6e:1e:8d:6c:30:ff:6e:0e:9f:a7:12:5e:9f:74:4e:ac:af:86: 4e:78:bc:9c:6b:83:7b:bc:f1:ef:fe:61:e1:7f:91:02:2b:2e: f5:2b:be:c9:af:43:db:aa:14:69:f4:bf:c6:07:82:7b:2c:6c: 4b:92:6e:46:69:a4:41:e4:ca:31:1a:1e:6c:6b:a7:99:f5:eb: 9a:86:e1:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQXZUoOpkp18VNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk MjY2NmU5ZWEtMGE5Yy00ZTJjLWIzZjktODRkOTlhNjA5NTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnkY2paN0tjW2aXmmOyD6N8l4axudDhKWYmV ADvNeLqTWAdyIbI/AOTvwCnsGS5hJS9uKOhkrcyY52x6uOPIVt+8BXGIRSrgv0Ku ZmdL45eDgFyghoD/McrFt6uJ3yQyd0T//RiRvoNo3X85MROpVqSeocT9bhr4+Hlv bafFpIfNkESeBhRk0VWGn3CCLr4Spmhe9/56gTZnWyjf5X+r/Y830vM67sjnHr0X 9K0HrmvdHvgKGdl/mI7JCpqfbYj2GcbyNf9tAuyjT0QSalAhQwZTE5Yo2IsLFofz AdNgVLNDtOkDICy8TwxAyrcOlVcUqoRp6Sj7kwluuzZhehDCnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZVs3Pg8FBq4MBroyg2dEXwONgMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjRjNTMyYTYtNmYzNC0z ZGIxLWFiNWUtZDViZWNlOTQzYTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GzUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaPINEGq7RSQ0IlBry1FatPGRe0p6KIlb2cR9KBb5PFCEAcQT6rwBSk hb0WlRBUMs0qctGAdP1BgMjOdogkRVclJA6mQBTS9E0qY7JBMBCAl4QyUw4zuA6t gkEHYeCrVrXtx7qN0g0d8CLFN0qYmyv5HUVu1nFFdVKWhIL53Zeyiod+oYdUz79k 1G0oKwWO7Sokd7+9ZmP3j3RU3rP7qL9vumy0ucdIc6sgmP7LXunyRCxnl24ejWww /24On6cSXp90Tqyvhk54vJxrg3u88e/+YeF/kQIrLvUrvsmvQ9uqFGn0v8YHgnss bEuSbkZppEHkyjEaHmxrp5n165qG4Ss= -----END CERTIFICATE-----Generated at Sun Apr 6 05:52:39 2025 by rpki-client