$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/d9066334-6b47-396f-b5fa-b1599e148736.roa File: d9066334-6b47-396f-b5fa-b1599e148736.roa (raw, json) Hash identifier: xwiYdlJxdcFy5kt8GmN/mWR/Pih0wHGmAJiugwqXzy0= Subject key identifier: C5:54:B0:4F:C1:6D:95:E1:45:AF:38:70:71:29:99:C5:63:A4:4A:AD Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F432858491AA6C71EFC9DE67783CC7200 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/d9066334-6b47-396f-b5fa-b1599e148736.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 394708 IP address blocks: 216.255.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:c7:1e:fc:9d:e6:77:83:cc:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=0f2bbd7c-cbcf-4b0d-ad89-a132d5bea48e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f9:19:94:dd:dd:67:49:8c:a1:e6:96:35:65: 9e:d5:7c:38:8e:52:e6:49:94:b1:b3:12:34:07:90: d5:91:fc:83:23:09:4a:7c:10:c9:ca:4b:b6:3a:20: a1:38:e2:e8:2f:19:38:30:27:3c:0a:b5:c7:78:19: 92:3e:ce:7c:b0:18:60:58:df:3c:75:06:e3:3f:12: 2d:91:6f:14:af:15:6f:ab:9a:51:ae:d2:b5:fb:dd: a8:10:a0:bd:e5:b8:de:a7:49:ba:5c:63:e9:8c:ad: 0c:6c:e7:52:98:4c:53:cb:95:78:ce:2f:1d:f0:e5: 9c:ac:8a:59:c4:43:7c:53:8d:50:a3:6a:29:c8:73: f6:56:c8:46:9c:e7:bb:30:60:11:a3:43:8c:0d:6f: 88:48:56:ee:68:75:95:89:bf:07:c9:a1:20:dc:94: 14:69:af:36:50:e2:b5:2a:fe:7b:4a:1f:cf:8a:db: 38:d5:7e:13:88:fd:b3:90:bd:67:4b:60:61:70:f1: 9f:1c:79:a1:cf:a2:d4:ab:22:53:a4:d1:47:5d:d7: e5:f8:21:c6:d6:cd:26:87:0b:43:46:37:6d:8e:a7: b8:9e:55:b2:2b:36:08:7c:80:d5:e6:6f:ac:b3:70: 42:d4:36:76:f6:db:f9:10:c6:bc:5d:70:e2:5a:12: c0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:54:B0:4F:C1:6D:95:E1:45:AF:38:70:71:29:99:C5:63:A4:4A:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/d9066334-6b47-396f-b5fa-b1599e148736.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 216.255.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:df:5a:38:46:2c:0f:41:9b:ac:78:bf:f0:34:0f:f3:b8:72: 6d:48:5e:6a:a9:93:ce:da:1e:b3:55:01:3b:0a:28:ab:28:e7: 2c:1e:05:f9:bb:37:0c:21:0b:c4:4a:ef:e4:a2:ff:81:b1:e7: bd:5c:82:3e:d5:f6:01:f7:35:1c:0c:48:a0:c8:10:17:03:ec: 81:72:a6:07:1a:cc:ed:ca:0f:4e:e0:63:fb:e9:58:ac:0c:0d: 80:14:e9:d3:e6:e2:02:16:e0:b8:11:98:40:29:30:30:2b:d0: f2:6c:f7:70:3d:6d:9c:59:bb:3a:0d:fa:30:89:fd:37:16:26: 23:e2:c1:d5:b8:a1:09:a0:f0:36:94:d9:65:e4:1e:38:76:23: 22:33:96:72:7a:c2:58:2b:3f:54:67:07:a0:c9:92:13:87:27: 21:53:96:a2:0b:4d:15:1d:20:fa:c9:1b:77:62:d3:f0:3c:d0: d2:fe:42:d0:b3:57:b1:ef:c7:2b:10:fe:91:69:78:df:51:d8: 3d:d4:a1:c6:b2:95:34:6e:af:25:22:9c:a1:07:60:6f:27:6e: 0a:0a:71:91:31:51:ee:44:c0:8b:98:02:35:ad:2b:05:7d:35: b4:29:cd:50:61:d6:9d:97:cd:3c:1b:20:a8:b4:b9:9e:bd:c2: d4:dd:ad:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkapsce/J3md4PMcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk MGYyYmJkN2MtY2JjZi00YjBkLWFkODktYTEzMmQ1YmVhNDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+PkZlN3dZ0mMoeaWNWWe1Xw4jlLmSZSxsxI0 B5DVkfyDIwlKfBDJyku2OiChOOLoLxk4MCc8CrXHeBmSPs58sBhgWN88dQbjPxIt kW8UrxVvq5pRrtK1+92oEKC95bjep0m6XGPpjK0MbOdSmExTy5V4zi8d8OWcrIpZ xEN8U41Qo2opyHP2VshGnOe7MGARo0OMDW+ISFbuaHWVib8HyaEg3JQUaa82UOK1 Kv57Sh/Pits41X4TiP2zkL1nS2BhcPGfHHmhz6LUqyJTpNFHXdfl+CHG1s0mhwtD Rjdtjqe4nlWyKzYIfIDV5m+ss3BC1DZ29tv5EMa8XXDiWhLAyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVUsE/BbZXhRa84cHEpmcVjpEqtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvZDkwNjYzMzQtNmI0Ny0z OTZmLWI1ZmEtYjE1OTllMTQ4NzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2P8FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHffWjhGLA9Bm6x4v/A0D/O4cm1IXmqpk87aHrNVATsKKKso5yweBfm7 NwwhC8RK7+Si/4Gx571cgj7V9gH3NRwMSKDIEBcD7IFypgcazO3KD07gY/vpWKwM DYAU6dPm4gIW4LgRmEApMDAr0PJs93A9bZxZuzoN+jCJ/TcWJiPiwdW4oQmg8DaU 2WXkHjh2IyIzlnJ6wlgrP1RnB6DJkhOHJyFTlqILTRUdIPrJG3di0/A80NL+QtCz V7HvxysQ/pFpeN9R2D3UocaylTRuryUinKEHYG8nbgoKcZExUe5EwIuYAjWtKwV9 NbQpzVBh1p2XzTwbIKi0uZ69wtTdrdY= -----END CERTIFICATE-----Generated at Sun Apr 6 11:56:53 2025 by rpki-client