$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1f4af537-1f90-36f0-8518-32fd9f40edb6.roa File: 1f4af537-1f90-36f0-8518-32fd9f40edb6.roa (raw, json) Hash identifier: eajg5FBC+9rtcuI35j+iZdsXFluABLZmh3Wv65usGwE= Subject key identifier: 50:A4:0F:BA:F5:80:C9:80:4C:EB:BE:E1:24:1B:B7:8C:E3:4D:F1:B0 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F432858492AE982C396C31D314A5DA280 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1f4af537-1f90-36f0-8518-32fd9f40edb6.roa Signing time: Wed 12 Mar 2025 21:48:16 +0000 ROA not before: Wed 12 Mar 2025 21:48:16 +0000 ROA not after: Tue 10 Jun 2025 21:48:16 +0000 asID: 174 IP address blocks: 216.170.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2a:e9:82:c3:96:c3:1d:31:4a:5d:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Mar 12 21:48:16 2025 GMT Not After : Jun 10 21:48:16 2025 GMT Subject: CN=0e3bf8eb-f79e-46cf-956a-a432863e198d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0e:98:8e:37:fd:d5:58:93:d9:88:b7:fc:62: 9a:55:be:ba:af:94:c7:a5:2e:88:fc:5b:d0:55:63: 73:c7:be:1e:d3:51:d8:12:cb:82:78:e2:dc:f3:cf: 32:b6:79:c3:4c:7a:fe:50:15:00:e0:49:68:53:01: 7e:1c:c9:c8:0b:67:da:6a:88:6c:3e:97:5d:7a:eb: 5f:65:b9:0f:94:c2:38:bb:71:d1:1d:47:23:30:f6: 4d:d4:c6:86:de:d4:1d:9b:8e:99:4c:fa:a3:7e:79: 1c:04:44:44:db:de:fa:53:48:3d:07:52:4f:0e:70: 8b:a8:76:20:e3:91:7b:1e:b6:8c:1c:52:8f:4a:5b: ed:0d:95:93:8f:9b:05:40:1f:d4:a2:75:7b:5e:0d: 00:6b:a9:d1:7f:11:9a:51:8a:4a:1c:e3:12:d5:2d: 8e:4e:3f:92:d2:15:b9:86:d8:db:83:5e:87:a8:d5: 6f:0a:db:37:ca:8e:59:8c:cd:c9:d3:86:1c:02:65: 13:a6:5e:75:f4:cb:50:7f:84:01:d6:5e:02:4e:58: 77:bb:0a:fa:15:8f:fa:6a:fe:e1:0a:47:cf:fe:dd: f3:f6:84:54:f6:00:42:bd:48:4b:9e:b2:64:98:2d: 62:1a:69:b3:cf:20:9b:ef:0f:53:e6:bc:14:2e:f9: c0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A4:0F:BA:F5:80:C9:80:4C:EB:BE:E1:24:1B:B7:8C:E3:4D:F1:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1f4af537-1f90-36f0-8518-32fd9f40edb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 216.170.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:75:ec:e1:05:51:7f:75:6b:c5:b1:6d:3f:4d:23:0f:e1:fe: 44:44:ee:35:d3:df:ed:07:a8:8e:5f:da:5e:9e:11:57:8e:81: 3f:ea:70:74:04:3d:11:75:80:e3:86:16:06:a0:bf:17:81:29: 21:3a:c1:c8:a2:13:fb:9d:05:bf:c9:28:e8:18:e7:56:e7:a0: 4c:e9:d9:87:76:c2:cb:8c:3d:b6:43:7a:53:e1:f1:b5:cb:d0: d3:c1:20:c7:98:51:9f:b9:c4:c6:92:6f:b2:9e:b9:af:9c:5d: 52:3e:02:ff:34:98:e7:21:ba:4d:d3:f2:53:be:be:29:c2:96: 79:84:e2:8d:14:43:65:41:b5:32:47:5b:45:df:73:51:4f:29: 47:f3:32:ba:03:a0:6d:e3:fc:ce:f6:dc:57:9c:23:6d:2b:e7: ad:c4:53:b5:bf:1c:c0:ac:c9:dc:d7:a8:81:31:18:c8:3f:62: 4a:53:41:e8:23:00:1a:f8:ec:e4:ef:5b:b5:f4:8b:f5:7b:a6: 57:1d:b2:22:5b:cd:bd:f4:ea:35:68:c1:f2:b6:5d:f6:9c:55: 5a:94:ed:44:0c:3b:71:63:b1:77:cd:3d:0e:ce:2a:7b:2a:4f: e4:fd:b1:a7:96:1c:a4:7c:05:0c:e2:e7:34:90:25:86:a3:f3: 19:99:3c:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkq6YLDlsMdMUpdooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDMxMjIxNDgxNloXDTI1MDYxMDIxNDgxNlowLzEtMCsGA1UEAxMk MGUzYmY4ZWItZjc5ZS00NmNmLTk1NmEtYTQzMjg2M2UxOThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ6Yjjf91ViT2Yi3/GKaVb66r5THpS6I/FvQ VWNzx74e01HYEsuCeOLc888ytnnDTHr+UBUA4EloUwF+HMnIC2faaohsPpddeutf ZbkPlMI4u3HRHUcjMPZN1MaG3tQdm46ZTPqjfnkcBERE2976U0g9B1JPDnCLqHYg 45F7HraMHFKPSlvtDZWTj5sFQB/UonV7Xg0Aa6nRfxGaUYpKHOMS1S2OTj+S0hW5 htjbg16HqNVvCts3yo5ZjM3J04YcAmUTpl519MtQf4QB1l4CTlh3uwr6FY/6av7h CkfP/t3z9oRU9gBCvUhLnrJkmC1iGmmzzyCb7w9T5rwULvnAGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCkD7r1gMmATOu+4SQbt4zjTfGwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMWY0YWY1MzctMWY5MC0z NmYwLTg1MTgtMzJmZDlmNDBlZGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Kp6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACp17OEFUX91a8WxbT9NIw/h/kRE7jXT3+0HqI5f2l6eEVeOgT/qcHQE PRF1gOOGFgagvxeBKSE6wciiE/udBb/JKOgY51bnoEzp2Yd2wsuMPbZDelPh8bXL 0NPBIMeYUZ+5xMaSb7Keua+cXVI+Av80mOchuk3T8lO+vinClnmE4o0UQ2VBtTJH W0Xfc1FPKUfzMroDoG3j/M723FecI20r563EU7W/HMCsydzXqIExGMg/YkpTQegj ABr47OTvW7X0i/V7plcdsiJbzb306jVowfK2XfacVVqU7UQMO3FjsXfNPQ7OKnsq T+T9saeWHKR8BQzi5zSQJYaj8xmZPMU= -----END CERTIFICATE-----Generated at Mon Apr 7 11:58:17 2025 by rpki-client