$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/2ad0db3c-69cc-3026-980f-320e52e77092.roa File: 2ad0db3c-69cc-3026-980f-320e52e77092.roa (raw, json) Hash identifier: 5brs8tBaLM/QPEikrniNZ48eLqJrZaelxsVt1oyj1AM= Subject key identifier: E2:FE:07:B3:B9:18:6D:02:14:59:34:FD:6C:50:46:0E:DC:49:CE:4F Certificate issuer: /CN=7d6bea32-db4c-4326-93a0-713364b8aa44 Certificate serial: 010D0C9F43285849326B43F1D89B1A86C188F660 Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/2ad0db3c-69cc-3026-980f-320e52e77092.roa Signing time: Sat 15 Mar 2025 14:20:22 +0000 ROA not before: Sat 15 Mar 2025 14:20:22 +0000 ROA not after: Fri 13 Jun 2025 14:20:22 +0000 asID: 22351 IP address blocks: 216.250.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:6b:43:f1:d8:9b:1a:86:c1:88:f6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44 Validity Not Before: Mar 15 14:20:22 2025 GMT Not After : Jun 13 14:20:22 2025 GMT Subject: CN=d9adf1df-b393-4242-be51-8a144477b761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:11:09:38:6f:93:d0:b4:f5:20:91:b3:99:bb: 12:2d:2d:48:54:19:56:9e:64:6a:0a:c4:fd:d1:3a: 1c:ed:be:23:dd:13:0c:90:b6:92:01:e8:b9:be:50: a1:2f:4e:4d:49:e0:a4:f6:f5:73:ab:97:8d:b0:a2: 91:05:26:3a:80:f5:99:b7:a9:a0:dc:eb:81:7e:a4: 16:3f:a2:1f:b2:96:07:ac:75:4c:3a:e5:88:fe:d9: b3:85:ff:82:a4:92:ad:eb:00:cf:4a:20:d9:be:6b: 83:b1:18:40:3a:0b:1e:bd:f1:13:e4:a0:67:0c:7d: cd:d2:9f:6e:3c:fc:4e:09:1f:dc:08:ea:be:25:68: ae:ae:1d:4b:69:0c:06:c3:6d:f4:42:3b:75:5b:c5: d3:a9:b9:ef:03:95:06:5a:94:0b:53:7a:e6:23:49: d8:3b:18:b6:c9:32:6e:d9:cf:08:ac:a9:5e:6b:6f: 36:0e:e6:a8:4d:5e:57:c7:dc:93:e8:8d:91:90:ab: 05:f1:5e:01:03:c5:99:a8:d4:d0:a0:ab:ed:13:bd: 02:d3:fd:1c:59:ad:31:eb:9f:25:2d:35:33:2d:c4: aa:10:c1:c5:23:e5:0b:f6:01:b0:50:eb:86:a0:0b: 52:b4:f4:c8:46:01:41:54:23:52:2a:63:96:38:59: ab:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:FE:07:B3:B9:18:6D:02:14:59:34:FD:6C:50:46:0E:DC:49:CE:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/2ad0db3c-69cc-3026-980f-320e52e77092.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl X509v3 Authority Key Identifier: keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer sbgp-ipAddrBlock: critical IPv4: 216.250.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:61:d8:d0:fa:c8:9d:6b:3e:19:89:a0:4f:ed:78:e1:ea:86: 2b:72:bd:ed:7c:61:5e:1d:4f:5d:29:6c:5b:0e:20:71:ca:3d: 0f:42:8b:6a:2e:3d:05:bf:2c:94:3e:d3:eb:23:25:ce:36:b3: b7:f9:17:9a:7e:f8:d2:9a:0f:4f:bb:e2:97:32:ef:24:d0:cb: ca:b8:ad:8a:d9:6f:df:2b:10:c5:a2:6e:b4:27:5e:d8:66:e2: c2:f6:19:c3:59:3f:95:fc:29:56:0d:41:fd:ee:fb:ee:ea:fc: 8e:95:9c:2c:1f:e2:78:00:3e:1e:df:f0:1a:85:d2:44:a5:bd: a7:c0:93:7c:b4:6c:c2:a6:9d:e1:07:97:88:38:14:c2:19:2e: a2:b5:c9:78:81:26:b7:1b:ed:40:63:7d:7f:bf:e9:2a:82:b3: 57:0e:a1:93:26:b2:c0:79:7f:6f:c1:bb:ae:12:ee:0a:bc:d4: da:da:d5:26:72:d8:b3:97:70:36:2f:7c:c3:29:b8:b7:b8:45: 77:8e:27:4b:a8:4a:75:03:86:2a:ad:7c:94:5a:7d:1a:02:65: e5:79:42:bd:e8:45:5c:e4:d8:a0:2f:8a:2c:94:5f:ae:c3:6b: 7b:ea:55:77:34:44:3c:4b:9b:1b:74:37:dd:3c:be:35:a5:6a: b2:e9:7d:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkya0Px2JsahsGI9mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Q2YmVhMzItZGI0Yy00MzI2LTkzYTAtNzEzMzY0Yjhh YTQ0MB4XDTI1MDMxNTE0MjAyMloXDTI1MDYxMzE0MjAyMlowLzEtMCsGA1UEAxMk ZDlhZGYxZGYtYjM5My00MjQyLWJlNTEtOGExNDQ0NzdiNzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsREJOG+T0LT1IJGzmbsSLS1IVBlWnmRqCsT9 0Toc7b4j3RMMkLaSAei5vlChL05NSeCk9vVzq5eNsKKRBSY6gPWZt6mg3OuBfqQW P6IfspYHrHVMOuWI/tmzhf+CpJKt6wDPSiDZvmuDsRhAOgsevfET5KBnDH3N0p9u PPxOCR/cCOq+JWiurh1LaQwGw230Qjt1W8XTqbnvA5UGWpQLU3rmI0nYOxi2yTJu 2c8IrKlea282DuaoTV5Xx9yT6I2RkKsF8V4BA8WZqNTQoKvtE70C0/0cWa0x658l LTUzLcSqEMHFI+UL9gGwUOuGoAtStPTIRgFBVCNSKmOWOFmr7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOL+B7O5GG0CFFk0/WxQRg7cSc5PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83ZDZi ZWEzMi1kYjRjLTQzMjYtOTNhMC03MTMzNjRiOGFhNDQvMmFkMGRiM2MtNjljYy0z MDI2LTk4MGYtMzIwZTUyZTc3MDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvN2Q2YmVhMzItZGI0Yy00MzI2LTkz YTAtNzEzMzY0YjhhYTQ0LzdkNmJlYTMyLWRiNGMtNDMyNi05M2EwLTcxMzM2NGI4 YWE0NC5jcmwwHwYDVR0jBBgwFoAU13vCe9o3Nfdsvxl4cDowOSWIciMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83ZDZiZWEzMi1kYjRjLTQzMjYtOTNhMC03MTMz NjRiOGFhNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PrdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFh2ND6yJ1rPhmJoE/teOHqhityve18YV4dT10pbFsOIHHKPQ9Ci2ou PQW/LJQ+0+sjJc42s7f5F5p++NKaD0+74pcy7yTQy8q4rYrZb98rEMWibrQnXthm 4sL2GcNZP5X8KVYNQf3u++7q/I6VnCwf4ngAPh7f8BqF0kSlvafAk3y0bMKmneEH l4g4FMIZLqK1yXiBJrcb7UBjfX+/6SqCs1cOoZMmssB5f2/Bu64S7gq81Nra1SZy 2LOXcDYvfMMpuLe4RXeOJ0uoSnUDhiqtfJRafRoCZeV5Qr3oRVzk2KAviiyUX67D a3vqVXc0RDxLmxt0N908vjWlarLpfXQ= -----END CERTIFICATE-----Generated at Sat Apr 12 00:26:07 2025 by rpki-client