$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/c3b7805c-6e3b-3fd7-96d7-4cdd27a27931.roa File: c3b7805c-6e3b-3fd7-96d7-4cdd27a27931.roa (raw, json) Hash identifier: bUxPQhQ6kjwdDyucKsHIcX/3Fie6/EHMUmiPbwrcA5g= Subject key identifier: 45:08:35:C2:5F:C0:8F:EB:4C:6C:D2:EF:1B:66:00:85:3F:A4:29:B5 Certificate issuer: /CN=67d0730c-5dbd-466b-a70c-5267ec1b7359 Certificate serial: 010D0C9F43285848FD56B3DFDA2998A0C2A48480 Authority key identifier: 1D:C7:82:52:8E:1E:44:22:99:92:03:4E:5F:7D:7D:CC:A1:B7:AE:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/c3b7805c-6e3b-3fd7-96d7-4cdd27a27931.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 33132 IP address blocks: 216.99.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:b3:df:da:29:98:a0:c2:a4:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67d0730c-5dbd-466b-a70c-5267ec1b7359 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=325a50a6-fe47-4482-8392-ef7c1e55a3df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cc:85:98:45:2d:27:1f:6f:b4:22:05:1d:4a: b5:d9:e5:b0:e6:6d:f4:b7:e3:01:ce:ca:a8:7d:6f: dd:c5:9f:b2:72:71:49:ce:fd:c8:33:66:21:52:13: 3f:c5:87:3c:c6:2b:e2:a8:77:ca:a2:c0:41:b8:0a: 04:f8:e3:c6:42:1f:df:e5:4c:40:dc:80:78:b0:cf: bd:49:dd:67:ea:14:24:f5:7b:a1:f5:99:73:56:cf: a3:26:1f:5a:d9:e7:ab:de:fe:ea:a4:6d:33:ec:ef: 16:ff:e8:81:be:74:83:cd:d9:36:d0:be:ba:44:de: 35:65:8d:3c:ba:e7:98:b6:00:70:0c:2c:10:e1:6e: 35:54:42:eb:a5:45:99:6d:c3:7b:e7:c2:5d:e8:f1: 69:3f:12:40:01:49:55:9a:d5:42:34:00:21:44:90: f0:1e:12:ab:ce:36:66:53:ce:15:a2:99:bb:46:9e: ee:7a:12:7f:85:4b:ab:bf:89:9a:70:f9:22:a0:07: 7b:13:5e:5d:dd:20:ff:3a:03:f0:37:04:77:13:cb: 54:3e:7e:0c:ae:96:f0:c5:1a:e8:03:a7:89:30:23: e9:61:c8:1a:9d:e3:58:0f:13:14:26:8e:c4:ba:15: 98:27:5b:c2:4c:e6:df:e0:75:85:00:01:eb:f7:c1: 91:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:08:35:C2:5F:C0:8F:EB:4C:6C:D2:EF:1B:66:00:85:3F:A4:29:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/c3b7805c-6e3b-3fd7-96d7-4cdd27a27931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.crl X509v3 Authority Key Identifier: keyid:1D:C7:82:52:8E:1E:44:22:99:92:03:4E:5F:7D:7D:CC:A1:B7:AE:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer sbgp-ipAddrBlock: critical IPv4: 216.99.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:2a:47:a9:2c:c1:d4:94:3d:a4:58:e7:75:55:7f:ae:63:ec: e7:85:67:70:db:e3:c7:39:c6:fa:fc:df:98:02:9d:47:b0:a9: d0:ba:1a:6c:79:2b:f6:fe:ae:d4:33:09:7f:83:4f:b5:9b:5d: 33:f8:7b:99:50:bf:0f:f8:76:fc:79:ce:90:33:95:65:3b:18: bf:e7:54:35:15:9f:d8:ca:22:9e:22:66:97:f8:e4:df:68:57: bb:38:ed:1f:8e:5e:fb:20:2b:bb:66:8d:73:6e:42:63:a8:71: 99:15:66:9c:98:88:00:0b:9f:70:67:fd:b4:e0:e5:01:5e:ab: 5b:d8:33:94:21:1b:56:17:2c:e6:73:a7:6c:09:e6:2f:79:db: ca:0d:94:67:8d:fd:af:9d:a2:ca:ab:c6:ad:21:ca:4b:e6:85: 72:8c:f7:7d:e3:23:4f:44:3e:0b:44:1e:c1:db:ef:75:b9:2f: 10:81:69:f5:e1:59:9b:19:07:07:d9:63:95:f0:c9:ed:09:66: 78:f0:41:24:32:df:e9:8a:ba:c6:a0:93:3c:fb:7a:b7:28:2d: d9:e7:ca:18:32:10:3b:10:ff:04:8c:0e:11:8c:51:52:30:ff: 1f:ca:64:22:57:2d:7c:40:32:ba:9c:9b:64:1e:4d:42:89:ba: 02:25:f6:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VrPf2imYoMKkhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdkMDczMGMtNWRiZC00NjZiLWE3MGMtNTI2N2VjMWI3 MzU5MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk MzI1YTUwYTYtZmU0Ny00NDgyLTgzOTItZWY3YzFlNTVhM2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMyFmEUtJx9vtCIFHUq12eWw5m30t+MBzsqo fW/dxZ+ycnFJzv3IM2YhUhM/xYc8xiviqHfKosBBuAoE+OPGQh/f5UxA3IB4sM+9 Sd1n6hQk9Xuh9ZlzVs+jJh9a2eer3v7qpG0z7O8W/+iBvnSDzdk20L66RN41ZY08 uueYtgBwDCwQ4W41VELrpUWZbcN758Jd6PFpPxJAAUlVmtVCNAAhRJDwHhKrzjZm U84Vopm7Rp7uehJ/hUurv4macPkioAd7E15d3SD/OgPwNwR3E8tUPn4MrpbwxRro A6eJMCPpYcganeNYDxMUJo7EuhWYJ1vCTObf4HWFAAHr98GRFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUINcJfwI/rTGzS7xtmAIU/pCm1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82N2Qw NzMwYy01ZGJkLTQ2NmItYTcwYy01MjY3ZWMxYjczNTkvYzNiNzgwNWMtNmUzYi0z ZmQ3LTk2ZDctNGNkZDI3YTI3OTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjdkMDczMGMtNWRiZC00NjZiLWE3 MGMtNTI2N2VjMWI3MzU5LzY3ZDA3MzBjLTVkYmQtNDY2Yi1hNzBjLTUyNjdlYzFi NzM1OS5jcmwwHwYDVR0jBBgwFoAUHceCUo4eRCKZkgNOX319zKG3rlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82N2QwNzMwYy01ZGJkLTQ2NmItYTcwYy01MjY3 ZWMxYjczNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GPdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwqR6kswdSUPaRY53VVf65j7OeFZ3Db48c5xvr835gCnUewqdC6Gmx5 K/b+rtQzCX+DT7WbXTP4e5lQvw/4dvx5zpAzlWU7GL/nVDUVn9jKIp4iZpf45N9o V7s47R+OXvsgK7tmjXNuQmOocZkVZpyYiAALn3Bn/bTg5QFeq1vYM5QhG1YXLOZz p2wJ5i9528oNlGeN/a+dosqrxq0hykvmhXKM933jI09EPgtEHsHb73W5LxCBafXh WZsZBwfZY5Xwye0JZnjwQSQy3+mKusagkzz7ercoLdnnyhgyEDsQ/wSMDhGMUVIw /x/KZCJXLXxAMrqcm2QeTUKJugIl9nw= -----END CERTIFICATE-----Generated at Sat Apr 12 18:19:35 2025 by rpki-client