$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/52b589e8-99f0-3b48-9395-f5736678ef4d.roa File: 52b589e8-99f0-3b48-9395-f5736678ef4d.roa (raw, json) Hash identifier: cFGTC+jjUD/QMx85yJKwUwv4QRroaCMYnIpmdWx3DO8= Subject key identifier: BB:BF:8E:E7:83:63:54:6C:35:5F:5F:81:C1:D7:98:43:72:6D:0C:55 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F432858491AA6C6EEC00FEEFA77B2C700 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/52b589e8-99f0-3b48-9395-f5736678ef4d.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 394708 IP address blocks: 216.255.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:c6:ee:c0:0f:ee:fa:77:b2:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=a92de3c1-2401-4dea-af02-348a999cb464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f0:ae:c2:47:16:ee:3a:c2:96:11:fb:1a:50: c8:8c:78:8e:91:1e:0f:62:b2:d3:20:81:37:9a:fa: 43:57:1a:ba:d3:25:a1:31:0d:8f:d8:3f:15:60:60: f9:fc:a6:e7:50:73:6e:97:a0:8f:42:28:0f:34:e3: a9:1e:c0:37:20:50:f5:fa:d9:f7:47:7b:62:1c:8a: a9:aa:43:ec:03:06:b7:df:46:18:e0:94:ec:40:af: 91:3f:cc:2f:5b:54:67:2e:f9:83:a6:cc:65:d9:16: 0f:4b:b8:40:96:20:64:ce:7d:e1:3c:c1:1b:f3:f4: 43:c6:a4:e3:3b:4b:f8:d8:86:8e:59:61:3c:1c:5d: 2b:8e:f4:8c:94:b5:52:c0:e8:23:71:0a:c5:ed:87: 6d:e1:29:8c:f4:0f:13:50:ac:e0:cc:73:a3:1e:d8: 3f:da:b0:fb:a5:f8:5d:15:6d:25:b6:c6:a9:29:e8: 55:b1:42:2f:34:ad:81:e2:44:99:ce:d1:75:a4:b9: 45:47:f8:4c:d3:89:69:9a:6d:3f:c6:12:bf:64:eb: 9e:7d:ad:4d:e4:da:12:86:a5:74:d4:a4:91:6d:24: e3:5c:e9:6f:6f:ad:93:b9:b8:42:22:48:53:37:10: 81:34:93:1a:1a:42:2e:86:69:22:14:22:91:2c:af: 44:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BF:8E:E7:83:63:54:6C:35:5F:5F:81:C1:D7:98:43:72:6D:0C:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/52b589e8-99f0-3b48-9395-f5736678ef4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 216.255.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:5b:fe:2c:ae:fe:cc:33:f7:38:56:04:48:ec:bd:cb:26:ea: 3e:b9:e9:08:3e:32:fc:91:97:59:65:6f:c9:81:49:ff:ad:b9: b5:d7:90:6f:bf:e3:7b:47:7a:69:ee:f6:e8:6f:2e:86:57:80: 79:37:32:99:7c:5d:20:2c:b1:b1:f3:ec:2d:a6:9a:63:de:72: 82:64:03:23:17:fe:f1:d1:d8:46:ce:02:06:7d:19:bb:6a:07: 25:40:10:91:df:29:21:d8:a4:c1:46:26:d7:cf:73:6e:82:4f: f0:27:70:96:21:1b:80:89:6c:ca:d4:fd:3c:fe:fc:d3:cc:4b: 3b:c6:18:3a:0b:31:19:51:fa:83:03:e9:8f:92:f2:e2:9a:b9: 6c:a4:af:78:d0:11:63:2b:d9:d1:54:f0:f0:63:58:46:b7:9d: 6b:b3:6b:45:62:a3:e3:3e:fb:34:ea:da:36:95:fa:64:55:af: 8c:bf:2f:c4:57:5c:93:9c:d9:5c:5b:73:37:28:88:a7:80:d9: 16:fb:1f:d5:d6:02:28:ae:d4:4b:6d:e5:ed:ab:9d:55:26:fc: 9a:b2:a0:45:4e:75:c1:64:fd:e9:ea:d3:8e:24:11:fc:44:a9: 93:07:79:c2:61:9a:43:97:22:f0:03:0b:d7:24:14:8e:b3:b1: 20:0f:ea:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkapsbuwA/u+neyxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk YTkyZGUzYzEtMjQwMS00ZGVhLWFmMDItMzQ4YTk5OWNiNDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofCuwkcW7jrClhH7GlDIjHiOkR4PYrLTIIE3 mvpDVxq60yWhMQ2P2D8VYGD5/KbnUHNul6CPQigPNOOpHsA3IFD1+tn3R3tiHIqp qkPsAwa330YY4JTsQK+RP8wvW1RnLvmDpsxl2RYPS7hAliBkzn3hPMEb8/RDxqTj O0v42IaOWWE8HF0rjvSMlLVSwOgjcQrF7Ydt4SmM9A8TUKzgzHOjHtg/2rD7pfhd FW0ltsapKehVsUIvNK2B4kSZztF1pLlFR/hM04lpmm0/xhK/ZOuefa1N5NoShqV0 1KSRbSTjXOlvb62TubhCIkhTNxCBNJMaGkIuhmkiFCKRLK9EeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLu/jueDY1RsNV9fgcHXmENybQxVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvNTJiNTg5ZTgtOTlmMC0z YjQ4LTkzOTUtZjU3MzY2NzhlZjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2P8CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVb/iyu/swz9zhWBEjsvcsm6j656Qg+MvyRl1llb8mBSf+tubXXkG+/ 43tHemnu9uhvLoZXgHk3Mpl8XSAssbHz7C2mmmPecoJkAyMX/vHR2EbOAgZ9Gbtq ByVAEJHfKSHYpMFGJtfPc26CT/AncJYhG4CJbMrU/Tz+/NPMSzvGGDoLMRlR+oMD 6Y+S8uKauWykr3jQEWMr2dFU8PBjWEa3nWuza0Vio+M++zTq2jaV+mRVr4y/L8RX XJOc2VxbczcoiKeA2Rb7H9XWAiiu1Ett5e2rnVUm/JqyoEVOdcFk/enq044kEfxE qZMHecJhmkOXIvADC9ckFI6zsSAP6rM= -----END CERTIFICATE-----Generated at Sat Apr 5 03:01:37 2025 by rpki-client