$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e21f367a-40c1-3c90-b30a-ec98806099f3.roa File: e21f367a-40c1-3c90-b30a-ec98806099f3.roa (raw, json) Hash identifier: 2Ji+1oenwKakPLf5PP5Ma6xezgdaRTWCPEEaW9Zb5gw= Subject key identifier: D9:CC:5A:24:84:D8:82:3D:2C:1F:E4:41:E8:0C:64:53:E7:10:6C:48 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584905B6B6659CC5A417AC3EED60 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e21f367a-40c1-3c90-b30a-ec98806099f3.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 16696 IP address blocks: 216.120.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:b6:65:9c:c5:a4:17:ac:3e:ed:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=28256ee3-8e7d-43ea-947f-46121516669e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d4:6a:b9:bd:2b:41:1e:75:1f:6a:09:91:ca: ea:3c:f7:94:bb:d0:58:7f:f8:0d:af:8a:3d:50:a5: bd:89:ab:20:4d:33:7e:c0:a4:36:26:54:86:f0:42: fe:7a:80:a1:19:8d:8f:03:f8:cf:3d:fd:25:6b:85: 16:f3:f9:67:1d:29:f3:3a:69:08:10:91:f5:77:81: 3e:54:e7:75:40:ac:cc:6e:64:c0:2a:c3:06:bc:c8: c4:d8:fc:c0:ce:32:1f:77:6c:c4:45:ef:0b:fa:a5: 19:d3:b9:42:d2:b2:35:90:81:7c:4c:13:ec:5f:ec: 37:d2:90:94:10:dd:84:12:35:5e:f6:e2:4d:30:0a: ed:46:cc:6b:94:a0:5f:e2:e9:99:10:51:37:1e:69: 44:88:42:8a:03:dc:ac:fa:d1:57:b2:52:c7:7a:9c: cc:ea:15:c0:10:15:f6:31:03:16:90:1d:12:0b:eb: 74:9a:77:49:ba:8f:43:84:8d:68:1f:65:84:67:3d: 6c:f2:64:6b:55:23:f4:4b:09:a6:09:2f:99:3d:57: c6:ac:5c:d9:76:94:6f:69:70:ae:f5:4c:20:63:fa: 4e:df:90:e3:3e:b0:4c:81:95:db:95:a5:20:95:60: 7c:6e:ef:2b:d9:1f:bd:84:03:fb:63:8f:f0:9a:5a: 67:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CC:5A:24:84:D8:82:3D:2C:1F:E4:41:E8:0C:64:53:E7:10:6C:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e21f367a-40c1-3c90-b30a-ec98806099f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 216.120.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:58:74:49:52:e5:04:27:07:76:0d:08:ff:66:51:f9:16:83: 28:45:da:f8:59:d6:53:b4:bc:60:29:7e:fc:1d:63:19:4d:1b: f4:d9:d4:73:5e:de:9a:5b:db:e6:0c:82:a6:e3:08:2c:87:d1: 8d:1a:a1:f8:bc:37:ab:b0:59:b6:35:2f:a4:c5:12:59:d6:8a: 7e:59:0f:65:e1:5f:4a:a5:9b:90:5d:76:36:de:03:20:50:88: 9e:2f:a3:16:8d:86:cd:9e:20:ca:ef:ce:1a:3c:89:92:22:49: 6a:d6:31:36:b4:cd:d9:af:f1:02:92:f1:95:96:e1:1e:98:52: 71:38:df:a2:56:24:80:db:88:ba:d6:7b:59:b9:45:ed:c2:ff: ce:70:bc:05:06:08:a1:41:63:d5:2f:a5:09:7b:7c:0c:31:66: 57:06:83:af:30:ca:97:9a:82:7e:83:ee:fd:38:34:29:dd:f1: f7:57:43:21:ef:dd:cb:f7:41:27:72:6c:e8:62:0c:6d:71:1f: 13:4f:b7:a1:50:b4:db:e7:d2:66:e4:6a:4e:8b:6e:6b:93:93: df:63:ac:1b:a4:76:e5:20:28:e5:c3:f9:58:17:e0:0f:3a:88: 30:83:6b:dc:f1:2a:ae:7a:f0:27:13:4e:5e:40:ac:a9:d4:91: a3:c3:5a:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrZlnMWkF6w+7WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk MjgyNTZlZTMtOGU3ZC00M2VhLTk0N2YtNDYxMjE1MTY2NjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldRqub0rQR51H2oJkcrqPPeUu9BYf/gNr4o9 UKW9iasgTTN+wKQ2JlSG8EL+eoChGY2PA/jPPf0la4UW8/lnHSnzOmkIEJH1d4E+ VOd1QKzMbmTAKsMGvMjE2PzAzjIfd2zERe8L+qUZ07lC0rI1kIF8TBPsX+w30pCU EN2EEjVe9uJNMArtRsxrlKBf4umZEFE3HmlEiEKKA9ys+tFXslLHepzM6hXAEBX2 MQMWkB0SC+t0mndJuo9DhI1oH2WEZz1s8mRrVSP0SwmmCS+ZPVfGrFzZdpRvaXCu 9UwgY/pO35DjPrBMgZXblaUglWB8bu8r2R+9hAP7Y4/wmlpnuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnMWiSE2II9LB/kQegMZFPnEGxIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZTIxZjM2N2EtNDBjMS0z YzkwLWIzMGEtZWM5ODgwNjA5OWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2HjMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRYdElS5QQnB3YNCP9mUfkWgyhF2vhZ1lO0vGApfvwdYxlNG/TZ1HNe 3ppb2+YMgqbjCCyH0Y0aofi8N6uwWbY1L6TFElnWin5ZD2XhX0qlm5BddjbeAyBQ iJ4voxaNhs2eIMrvzho8iZIiSWrWMTa0zdmv8QKS8ZWW4R6YUnE436JWJIDbiLrW e1m5Re3C/85wvAUGCKFBY9UvpQl7fAwxZlcGg68wypeagn6D7v04NCnd8fdXQyHv 3cv3QSdybOhiDG1xHxNPt6FQtNvn0mbkak6LbmuTk99jrBukduUgKOXD+VgX4A86 iDCDa9zxKq568CcTTl5ArKnUkaPDWgw= -----END CERTIFICATE-----Generated at Fri Apr 4 19:50:47 2025 by rpki-client