$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a28bea83-903c-35cc-b99b-abae8db00cd3.roa File: a28bea83-903c-35cc-b99b-abae8db00cd3.roa (raw, json) Hash identifier: vymZFHF+5RfHD5rjtCPEddow1wGNVLArrFbbS5u+tP0= Subject key identifier: 90:13:77:85:FB:29:C2:71:B5:C3:C4:B5:D7:EA:09:54:0E:16:A7:79 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C558D9228FF67F3F286D27C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a28bea83-903c-35cc-b99b-abae8db00cd3.roa Signing time: Tue 04 Feb 2025 12:40:09 +0000 ROA not before: Tue 04 Feb 2025 12:40:09 +0000 ROA not after: Mon 05 May 2025 11:40:09 +0000 asID: 30036 IP address blocks: 216.108.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:58:d9:22:8f:f6:7f:3f:28:6d:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 12:40:09 2025 GMT Not After : May 5 11:40:09 2025 GMT Subject: CN=3a816d88-ef24-4892-a949-8b4130e973d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:20:a9:3c:1d:8e:e0:61:57:43:c4:f2:58:af: 7f:53:e6:9a:0c:12:bf:39:55:a2:61:6a:b2:fb:02: 4a:b5:89:f7:62:ba:54:8b:36:42:42:68:c9:dd:6d: af:13:15:41:ee:24:6c:ff:f2:91:cf:c0:b2:1a:5a: fc:22:2c:c3:f3:bf:80:48:ea:5d:48:18:9e:34:06: 4c:9f:87:be:16:30:08:e2:fc:6e:56:3b:e0:9e:4f: 84:2e:65:53:4c:ac:de:3a:8f:3a:39:9e:e4:30:ef: a1:b1:86:e7:ed:25:35:fb:f0:dc:75:3d:9e:77:73: f9:b1:59:51:b4:f1:5d:44:ca:fe:a7:e2:c9:3a:d7: 87:a5:03:7f:9b:b5:a0:b8:e9:ba:e2:43:cf:f5:5b: 35:a9:c4:74:6b:84:66:bf:c2:c7:cd:f3:44:30:3f: 15:57:fb:12:4b:cf:14:28:5c:1b:3b:7c:c5:54:01: 7d:e6:5c:5b:8f:32:26:17:96:f8:05:2a:90:b6:87: c8:e0:dd:b7:c5:92:7a:d8:a6:51:2e:38:e9:30:34: 55:68:0c:1b:a6:c3:7d:41:ff:78:9f:28:b4:2a:3e: df:6a:11:e6:a9:c8:a4:97:8a:9d:bb:c6:41:42:37: c5:0e:4c:7c:00:a0:a0:ff:37:c0:cd:08:19:dc:1b: 4e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:13:77:85:FB:29:C2:71:B5:C3:C4:B5:D7:EA:09:54:0E:16:A7:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a28bea83-903c-35cc-b99b-abae8db00cd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 216.108.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:31:b0:f7:5a:8a:32:04:ec:a4:13:3d:36:49:b1:d9:b6:05: 7e:22:f4:ff:1e:cb:b9:c5:a3:08:55:a3:8a:e8:fb:f0:be:a4: cf:05:93:93:90:09:04:a7:98:b3:a9:23:c5:a1:6f:11:02:cc: 22:30:43:38:32:e5:bd:0d:59:fa:a5:2f:3a:0a:f9:64:3a:af: 30:79:bd:37:78:ff:89:a5:e6:b8:dd:9b:7d:35:dd:2a:2a:1e: 01:0d:a3:a9:0c:91:e3:6c:0a:66:08:92:24:06:f4:df:fa:1d: 22:b0:2d:84:a7:ff:48:3e:ee:44:6b:d7:a3:ca:4a:e5:7f:53: 48:77:ef:af:ac:a6:7a:74:a3:05:0c:55:1b:e8:e6:d3:15:c3: b9:83:aa:fe:11:f7:0d:0c:ce:3c:c8:62:35:97:0f:72:21:cd: 2b:90:20:3d:31:d5:af:c7:a5:f1:b5:84:55:8a:95:69:2b:a4: 00:5b:c8:d7:90:3a:9c:9c:9e:ad:5a:bf:30:d8:d9:55:1b:bc: 91:80:8d:9b:10:5c:21:f2:bd:ac:90:1a:1a:6a:a7:47:80:f7: c3:d7:67:c6:d5:a0:1d:1f:7e:e3:63:33:28:34:9b:cd:1d:07: a7:3b:95:75:3d:a0:5f:77:68:9d:78:01:1f:4e:23:6e:8e:20: 2f:0c:bd:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFWNkij/Z/PyhtJ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEyNDAwOVoXDTI1MDUwNTExNDAwOVowLzEtMCsGA1UEAxMk M2E4MTZkODgtZWYyNC00ODkyLWE5NDktOGI0MTMwZTk3M2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyCpPB2O4GFXQ8TyWK9/U+aaDBK/OVWiYWqy +wJKtYn3YrpUizZCQmjJ3W2vExVB7iRs//KRz8CyGlr8IizD87+ASOpdSBieNAZM n4e+FjAI4vxuVjvgnk+ELmVTTKzeOo86OZ7kMO+hsYbn7SU1+/DcdT2ed3P5sVlR tPFdRMr+p+LJOteHpQN/m7WguOm64kPP9Vs1qcR0a4Rmv8LHzfNEMD8VV/sSS88U KFwbO3zFVAF95lxbjzImF5b4BSqQtofI4N23xZJ62KZRLjjpMDRVaAwbpsN9Qf94 nyi0Kj7fahHmqcikl4qdu8ZBQjfFDkx8AKCg/zfAzQgZ3BtOnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJATd4X7KcJxtcPEtdfqCVQOFqd5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTI4YmVhODMtOTAzYy0z NWNjLWI5OWItYWJhZThkYjAwY2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GzeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0xsPdaijIE7KQTPTZJsdm2BX4i9P8ey7nFowhVo4ro+/C+pM8Fk5OQ CQSnmLOpI8WhbxECzCIwQzgy5b0NWfqlLzoK+WQ6rzB5vTd4/4ml5rjdm3013Soq HgENo6kMkeNsCmYIkiQG9N/6HSKwLYSn/0g+7kRr16PKSuV/U0h376+spnp0owUM VRvo5tMVw7mDqv4R9w0MzjzIYjWXD3IhzSuQID0x1a/HpfG1hFWKlWkrpABbyNeQ Opycnq1avzDY2VUbvJGAjZsQXCHyvayQGhpqp0eA98PXZ8bVoB0ffuNjMyg0m80d B6c7lXU9oF93aJ14AR9OI26OIC8Mvck= -----END CERTIFICATE-----Generated at Sun Apr 6 05:57:37 2025 by rpki-client