$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ef167bf0-e97f-3b1d-8343-53f8aceab489.roa File: ef167bf0-e97f-3b1d-8343-53f8aceab489.roa (raw, json) Hash identifier: emMU7UIoVidiaX5O2nkxK8QYEShZd9pNudF7Kovyyqw= Subject key identifier: D1:95:E8:38:A5:11:6A:39:6E:BF:DF:AA:30:40:2D:E6:FE:88:B0:CD Certificate issuer: /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Certificate serial: 010D0C9F432858491D717764CDBEA4DA1B798E00 Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ef167bf0-e97f-3b1d-8343-53f8aceab489.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 174 IP address blocks: 216.21.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:77:64:cd:be:a4:da:1b:79:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=0cbf62eb-6d80-4149-bd5f-b523c08459bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ab:de:49:47:0f:2f:79:1d:f3:c5:90:2f:b5: 9a:85:59:3c:14:f4:cd:e7:a9:ee:56:bd:37:e5:e9: 86:ba:55:72:57:ca:89:68:c8:d7:da:71:59:97:49: ac:ba:30:47:81:c9:dc:d1:1b:95:a6:69:70:44:00: 0b:e1:e4:80:f2:0f:05:e3:2f:6b:9a:cc:5f:70:7f: b9:87:da:69:23:d4:37:56:39:43:96:40:da:23:ba: 54:58:36:fc:77:94:c6:dc:e0:8e:72:1f:81:65:bd: 28:89:1d:c2:8b:41:ea:4a:d4:c0:10:34:1d:4f:27: fc:c4:59:1c:24:c9:ff:fb:14:5d:ef:65:a0:b9:98: 40:82:a1:c2:ff:cd:bb:db:db:ce:69:ec:0e:a6:6b: 7d:ab:4d:18:8a:c3:d2:63:2e:31:fa:ea:40:fb:d8: 0d:66:e5:bd:e8:0d:1e:c7:39:01:d4:74:68:44:59: 5c:75:2d:b6:e1:9d:8c:1d:19:c0:93:f6:07:25:66: b8:33:e0:c6:f6:24:53:1a:17:2c:76:87:85:d0:f4: 36:00:5a:db:78:24:15:42:d1:86:02:2a:70:23:6a: cc:84:cb:53:63:92:1e:1d:18:e3:1b:0e:f0:d5:96: 87:c0:30:4d:6f:c6:67:98:29:96:cb:2b:cf:90:0c: ee:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:95:E8:38:A5:11:6A:39:6E:BF:DF:AA:30:40:2D:E6:FE:88:B0:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ef167bf0-e97f-3b1d-8343-53f8aceab489.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl X509v3 Authority Key Identifier: keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer sbgp-ipAddrBlock: critical IPv4: 216.21.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:a9:31:0e:91:36:6c:ce:e9:06:43:51:31:90:79:d7:18:45: 70:02:6a:bf:a7:c8:28:d3:a5:c3:2b:bf:bf:ed:b1:2f:90:d4: fc:c4:cf:47:5f:b5:a0:90:4c:2d:27:f2:17:c9:0c:2c:10:17: c9:ae:11:91:b1:eb:ae:37:57:c2:c7:09:62:88:53:b5:d8:c0: 18:22:1d:82:e3:05:f9:5a:45:58:43:f8:a4:72:33:9a:2c:56: 98:f3:2f:8e:39:58:e2:08:cd:92:b9:28:cb:35:fb:5d:93:34: 84:97:17:12:5a:76:33:2b:4a:8d:14:73:ec:7b:5c:8e:8f:61: 9f:0d:76:75:43:f8:45:a7:ac:82:57:ce:2a:e4:78:8c:84:85: 21:c7:18:7b:f9:86:b2:08:a7:41:85:ae:11:a0:1d:40:f6:00: cb:ef:3d:bd:e6:3e:8e:cd:15:d2:5e:3f:57:f5:56:fd:bf:51: b2:d2:5d:49:cc:26:7c:44:00:32:f8:e8:30:da:ab:76:73:3c: 66:31:81:28:5b:87:0e:93:68:00:40:a3:17:60:fb:c6:8a:8e: 50:c0:b0:11:7f:46:9c:5a:67:77:52:ed:7a:e5:2e:72:27:9c: d2:92:ba:13:3c:6c:37:4a:10:95:b4:44:35:e9:4f:30:24:8d: 9c:5a:2c:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcXdkzb6k2ht5jgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzExZjE5Y2MtMzQ0ZS00OGM1LWExZjEtNDc1OTNhYTU2 YjBkMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk MGNiZjYyZWItNmQ4MC00MTQ5LWJkNWYtYjUyM2MwODQ1OWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6veSUcPL3kd88WQL7WahVk8FPTN56nuVr03 5emGulVyV8qJaMjX2nFZl0msujBHgcnc0RuVpmlwRAAL4eSA8g8F4y9rmsxfcH+5 h9ppI9Q3VjlDlkDaI7pUWDb8d5TG3OCOch+BZb0oiR3Ci0HqStTAEDQdTyf8xFkc JMn/+xRd72WguZhAgqHC/82729vOaewOpmt9q00YisPSYy4x+upA+9gNZuW96A0e xzkB1HRoRFlcdS224Z2MHRnAk/YHJWa4M+DG9iRTGhcsdoeF0PQ2AFrbeCQVQtGG AipwI2rMhMtTY5IeHRjjGw7w1ZaHwDBNb8ZnmCmWyyvPkAzuCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGV6DilEWo5br/fqjBALeb+iLDNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFm MTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5M2FhNTZiMGQvZWYxNjdiZjAtZTk3Zi0z YjFkLTgzNDMtNTNmOGFjZWFiNDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzExZjE5Y2MtMzQ0ZS00OGM1LWEx ZjEtNDc1OTNhYTU2YjBkLzMxMWYxOWNjLTM0NGUtNDhjNS1hMWYxLTQ3NTkzYWE1 NmIwZC5jcmwwHwYDVR0jBBgwFoAUTdZg5uF1ESmUCvKCwba2rQLZYH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFmMTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5 M2FhNTZiMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2BXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSpMQ6RNmzO6QZDUTGQedcYRXACar+nyCjTpcMrv7/tsS+Q1PzEz0df taCQTC0n8hfJDCwQF8muEZGx6643V8LHCWKIU7XYwBgiHYLjBflaRVhD+KRyM5os VpjzL445WOIIzZK5KMs1+12TNISXFxJadjMrSo0Uc+x7XI6PYZ8NdnVD+EWnrIJX zirkeIyEhSHHGHv5hrIIp0GFrhGgHUD2AMvvPb3mPo7NFdJeP1f1Vv2/UbLSXUnM JnxEADL46DDaq3ZzPGYxgShbhw6TaABAoxdg+8aKjlDAsBF/RpxaZ3dS7XrlLnIn nNKSuhM8bDdKEJW0RDXpTzAkjZxaLEY= -----END CERTIFICATE-----Generated at Fri Mar 14 08:39:26 2025 by rpki-client