$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2e4aaccf-f8d1-3846-b380-c928ff85dcc4.roa File: 2e4aaccf-f8d1-3846-b380-c928ff85dcc4.roa (raw, json) Hash identifier: 1QsLn9ymLYdE4/2jZ4L7ShLcr+MuQVYEMr33WDAOtSY= Subject key identifier: A0:3E:E2:11:47:62:FD:77:C0:D4:29:1D:33:A5:E7:BA:40:55:7D:25 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849194175976A91B42FEC8F23C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2e4aaccf-f8d1-3846-b380-c928ff85dcc4.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 30036 IP address blocks: 216.108.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:75:97:6a:91:b4:2f:ec:8f:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=7c4d0c0c-a08d-4261-8364-46bbb8b9b0e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e3:c5:5b:a0:2a:1c:b9:cd:ff:82:69:f6:c6: 3a:0a:f6:8d:11:39:3f:88:82:f4:c0:81:70:7c:27: 22:7e:75:5c:e9:04:8e:c9:fb:39:85:2b:67:9f:a3: 5f:63:d9:4f:01:a8:7d:75:73:17:ec:fb:6a:8d:88: 2b:71:bd:5a:b8:b5:72:c6:92:e5:1d:15:14:53:52: 6b:08:4f:e3:df:dc:85:29:68:ff:de:09:dd:74:36: a2:d5:9a:bb:c9:59:f4:9d:8e:63:7d:73:62:ec:81: 40:cc:ba:86:e9:5a:8f:21:92:21:3c:9b:f8:9d:8b: 5b:8b:8f:d6:43:9c:41:0a:f4:59:86:cc:51:dc:a3: d8:c5:5e:df:5c:ae:0e:e4:02:c3:c4:cd:90:60:eb: 99:44:db:b7:d0:06:21:24:b8:fb:88:58:eb:af:24: 6c:f1:5f:f6:33:61:b8:06:a9:76:87:30:f8:c6:f6: 2c:d0:1e:1d:61:08:7c:e3:50:74:df:74:bb:ea:9c: 34:d6:da:47:3c:3b:85:0d:e6:7c:53:f1:f3:09:4d: 5b:45:8e:89:ee:dc:6b:7b:27:a8:81:23:82:87:24: 66:4e:33:50:4b:5e:a6:8b:8a:df:2c:b2:f7:8f:a5: 21:b2:a9:b7:ee:f5:cc:4e:64:48:d4:e1:0c:b5:5d: ef:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3E:E2:11:47:62:FD:77:C0:D4:29:1D:33:A5:E7:BA:40:55:7D:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2e4aaccf-f8d1-3846-b380-c928ff85dcc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 216.108.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:d4:4d:25:8d:f8:80:fa:85:2e:61:11:df:64:b7:3a:32:d3: 79:0f:d9:06:c0:a0:4f:2e:04:2c:7d:cf:b6:13:cb:cb:29:db: ce:70:79:44:14:e0:4f:15:25:26:2c:0a:99:f5:e6:47:91:86: 61:21:db:38:45:b2:63:11:7b:d7:a4:f0:d0:5f:9e:53:54:52: d0:b3:49:df:09:92:08:6e:67:84:cc:76:b3:59:17:d8:64:ba: 48:e3:20:ea:f3:ab:45:d0:92:62:91:dc:75:1c:5a:c5:a2:98: 64:79:a3:83:4c:8d:2a:dd:0c:f1:3a:e8:0a:73:68:77:e7:c0: e1:d9:15:52:70:7d:6c:52:ec:dc:ff:f6:30:c4:96:e9:b4:21: 46:f0:20:6b:f7:f6:b3:72:8e:75:39:81:b1:da:3c:74:94:d8: 51:f8:72:81:ff:6a:bc:06:11:8d:d1:1c:7d:17:54:00:aa:41: ab:e5:09:8d:b2:6b:2b:cc:55:e1:71:49:2f:30:1e:ce:69:cf: 71:df:5b:4b:79:c3:0d:ba:53:96:ab:cb:3a:06:63:84:0d:b1: dc:b7:e7:c7:ee:ad:bc:b0:2d:d4:86:d0:96:f7:25:8c:73:9e: fe:6e:50:6b:8e:c9:57:c3:f0:aa:9c:eb:34:f3:19:21:8b:86: c5:a5:ee:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQXWXapG0L+yPI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk N2M0ZDBjMGMtYTA4ZC00MjYxLTgzNjQtNDZiYmI4YjliMGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnePFW6AqHLnN/4Jp9sY6CvaNETk/iIL0wIFw fCcifnVc6QSOyfs5hStnn6NfY9lPAah9dXMX7PtqjYgrcb1auLVyxpLlHRUUU1Jr CE/j39yFKWj/3gnddDai1Zq7yVn0nY5jfXNi7IFAzLqG6VqPIZIhPJv4nYtbi4/W Q5xBCvRZhsxR3KPYxV7fXK4O5ALDxM2QYOuZRNu30AYhJLj7iFjrryRs8V/2M2G4 Bql2hzD4xvYs0B4dYQh841B033S76pw01tpHPDuFDeZ8U/HzCU1bRY6J7txreyeo gSOChyRmTjNQS16mi4rfLLL3j6Uhsqm37vXMTmRI1OEMtV3vMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKA+4hFHYv13wNQpHTOl57pAVX0lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmU0YWFjY2YtZjhkMS0z ODQ2LWIzODAtYzkyOGZmODVkY2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2GzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADUTSWN+ID6hS5hEd9ktzoy03kP2QbAoE8uBCx9z7YTy8sp285weUQU 4E8VJSYsCpn15keRhmEh2zhFsmMRe9ek8NBfnlNUUtCzSd8JkghuZ4TMdrNZF9hk ukjjIOrzq0XQkmKR3HUcWsWimGR5o4NMjSrdDPE66ApzaHfnwOHZFVJwfWxS7Nz/ 9jDElum0IUbwIGv39rNyjnU5gbHaPHSU2FH4coH/arwGEY3RHH0XVACqQavlCY2y ayvMVeFxSS8wHs5pz3HfW0t5ww26U5aryzoGY4QNsdy358furbywLdSG0Jb3JYxz nv5uUGuOyVfD8Kqc6zTzGSGLhsWl7rc= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:41 2025 by rpki-client