$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/7afefba0-3caa-3b07-80ce-d673dc138967.roa File: 7afefba0-3caa-3b07-80ce-d673dc138967.roa (raw, json) Hash identifier: 42TrAUGRP/h37lVACFFU7VHItPkA+5Y06b8bJ5hcK5w= Subject key identifier: AD:1F:CA:01:9F:9C:43:EC:F5:9B:2E:DC:BD:F9:01:49:DF:FB:23:C0 Certificate issuer: /CN=29b74c4b-4f37-4598-ad09-a003a2e11fd3 Certificate serial: 010D0C9F432858490CB16E49801A64D406B97980 Authority key identifier: B5:62:04:76:20:A7:DD:E4:40:F9:F6:94:90:7F:05:B4:9C:1A:EC:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/7afefba0-3caa-3b07-80ce-d673dc138967.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 46392 IP address blocks: 216.215.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/29b74c4b-4f37-4598-ad09-a003a2e11fd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/29b74c4b-4f37-4598-ad09-a003a2e11fd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:6e:49:80:1a:64:d4:06:b9:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29b74c4b-4f37-4598-ad09-a003a2e11fd3 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=c087d8b4-967f-4950-b2af-6962e452f36a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ab:fa:c6:04:30:fe:b0:27:d5:bb:4d:ea:56: 59:e1:16:76:fd:7b:cf:1b:68:d7:4c:61:7e:17:8e: 37:bb:1a:cd:a7:99:cd:a5:68:1e:c6:cb:c9:ef:27: c7:a7:50:6d:5e:80:f9:9e:39:d1:7f:1c:86:5b:eb: 1b:72:b3:f1:5f:28:c5:80:c7:36:a6:4f:c6:d7:0a: 2d:a8:0b:28:cd:3e:87:55:85:3e:76:96:58:1e:7d: 7b:ac:5f:a6:77:56:88:40:ab:3c:7f:b4:70:e6:3e: d2:33:a7:7b:7d:47:0e:08:22:a1:07:80:2b:c3:c9: eb:24:32:87:1d:24:5d:28:97:3a:ee:4d:2c:51:13: 6a:6b:84:cf:0d:03:9b:8b:25:3c:6e:7e:3c:09:29: 50:b7:a0:da:ed:9f:9a:02:05:ee:ed:51:3e:a4:34: 0c:41:43:11:eb:c4:8b:77:38:4b:09:b3:15:2e:39: 9d:ee:c3:36:80:04:46:27:0d:bf:18:a5:bb:37:a6: 0b:48:db:44:84:e0:d7:c9:7c:47:c5:d1:00:6d:16: 05:32:21:fc:4f:54:e9:8c:89:2c:fc:4f:40:cc:0f: 59:78:ca:23:b6:78:c7:47:3a:b0:5f:4b:4a:25:42: 56:68:b3:b3:65:ea:c5:8f:3c:b1:61:a5:15:2a:b4: 81:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1F:CA:01:9F:9C:43:EC:F5:9B:2E:DC:BD:F9:01:49:DF:FB:23:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/7afefba0-3caa-3b07-80ce-d673dc138967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/29b74c4b-4f37-4598-ad09-a003a2e11fd3.crl X509v3 Authority Key Identifier: keyid:B5:62:04:76:20:A7:DD:E4:40:F9:F6:94:90:7F:05:B4:9C:1A:EC:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3.cer sbgp-ipAddrBlock: critical IPv4: 216.215.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ed:50:14:64:9c:eb:d8:6d:4f:94:75:03:4f:6b:e6:bd:c8: 93:53:3b:88:5f:af:18:2c:98:80:c6:68:a7:eb:2f:84:62:84: 4e:0d:20:06:9a:11:f6:0a:d7:95:99:cb:7e:18:40:83:b9:00: ca:50:89:b0:ea:7d:19:06:e8:de:4a:76:8a:ba:05:5b:15:26: de:0b:d2:69:d9:85:08:43:65:01:05:02:7a:c6:b4:84:98:7b: 8d:30:73:ce:ab:5f:12:01:81:01:23:73:bc:50:eb:f8:7a:9f: d1:cf:af:0c:d7:fa:07:0a:5e:00:12:9c:6d:ae:a0:ab:61:08: e5:62:cd:fd:1d:3d:9b:b7:4c:d1:06:e6:fa:03:33:8a:b8:cc: 77:62:4a:31:c1:e5:85:cc:8c:77:16:6f:b8:11:9b:c2:34:52: 57:76:16:fa:f6:40:b2:d5:11:65:d5:a9:05:38:e0:00:0f:b1: a2:d1:4c:59:1c:6c:e0:96:cc:ac:ce:f0:95:8b:44:42:ee:64: 28:61:98:19:b6:7d:47:d8:5e:f4:7c:ef:4e:60:ee:03:9c:f8: e6:18:f4:3d:7b:a4:e0:0a:54:6d:5c:98:2f:16:be:6a:a6:db: ca:73:b8:b5:ef:a6:f0:9d:8e:00:0c:0f:a6:7a:3f:81:88:13: 65:d6:23:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsW5JgBpk1Aa5eYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjliNzRjNGItNGYzNy00NTk4LWFkMDktYTAwM2EyZTEx ZmQzMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk YzA4N2Q4YjQtOTY3Zi00OTUwLWIyYWYtNjk2MmU0NTJmMzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKv6xgQw/rAn1btN6lZZ4RZ2/XvPG2jXTGF+ F443uxrNp5nNpWgexsvJ7yfHp1BtXoD5njnRfxyGW+sbcrPxXyjFgMc2pk/G1wot qAsozT6HVYU+dpZYHn17rF+md1aIQKs8f7Rw5j7SM6d7fUcOCCKhB4Arw8nrJDKH HSRdKJc67k0sURNqa4TPDQObiyU8bn48CSlQt6Da7Z+aAgXu7VE+pDQMQUMR68SL dzhLCbMVLjmd7sM2gARGJw2/GKW7N6YLSNtEhODXyXxHxdEAbRYFMiH8T1TpjIks /E9AzA9ZeMojtnjHRzqwX0tKJUJWaLOzZerFjzyxYaUVKrSBOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0fygGfnEPs9Zsu3L35AUnf+yPAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOWI3 NGM0Yi00ZjM3LTQ1OTgtYWQwOS1hMDAzYTJlMTFmZDMvN2FmZWZiYTAtM2NhYS0z YjA3LTgwY2UtZDY3M2RjMTM4OTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjliNzRjNGItNGYzNy00NTk4LWFk MDktYTAwM2EyZTExZmQzLzI5Yjc0YzRiLTRmMzctNDU5OC1hZDA5LWEwMDNhMmUx MWZkMy5jcmwwHwYDVR0jBBgwFoAUtWIEdiCn3eRA+faUkH8FtJwa7IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yOWI3NGM0Yi00ZjM3LTQ1OTgtYWQwOS1hMDAz YTJlMTFmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Nc+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbtUBRknOvYbU+UdQNPa+a9yJNTO4hfrxgsmIDGaKfrL4RihE4NIAaa EfYK15WZy34YQIO5AMpQibDqfRkG6N5Kdoq6BVsVJt4L0mnZhQhDZQEFAnrGtISY e40wc86rXxIBgQEjc7xQ6/h6n9HPrwzX+gcKXgASnG2uoKthCOVizf0dPZu3TNEG 5voDM4q4zHdiSjHB5YXMjHcWb7gRm8I0Uld2Fvr2QLLVEWXVqQU44AAPsaLRTFkc bOCWzKzO8JWLRELuZChhmBm2fUfYXvR8705g7gOc+OYY9D17pOAKVG1cmC8Wvmqm 28pzuLXvpvCdjgAMD6Z6P4GIE2XWI/A= -----END CERTIFICATE-----Generated at Fri Mar 14 11:19:57 2025 by rpki-client