$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/b1b6f463-ecda-3aea-b723-e98a3572acb7.roa File: b1b6f463-ecda-3aea-b723-e98a3572acb7.roa (raw, json) Hash identifier: KYehMgxQsVqRl20HRW/f9gd32sVQW0SOL0SvKTop6i4= Subject key identifier: 07:63:2B:73:2C:B6:DC:85:1E:57:38:F9:3C:11:C0:6A:D8:B2:0D:1A Certificate issuer: /CN=57202e8d-d671-4fe3-bfa9-605e2ca32aa5 Certificate serial: 010D0C9F4328584930DE6C9BDC5CF5410659C180 Authority key identifier: 0A:70:00:4A:1A:A0:5C:A6:C4:C7:35:57:D7:4D:96:DF:DD:09:4C:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/b1b6f463-ecda-3aea-b723-e98a3572acb7.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 7311 IP address blocks: 216.126.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:6c:9b:dc:5c:f5:41:06:59:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57202e8d-d671-4fe3-bfa9-605e2ca32aa5 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=defc5193-0eab-4b17-befb-532070e2ab56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ed:b3:95:4a:35:52:da:73:3c:06:bc:db:4b: 65:0d:99:37:a0:f7:0f:51:a7:6c:60:0b:e8:61:fb: 37:84:e6:a7:43:4e:9b:a8:e4:15:44:8a:f2:fd:f9: 18:13:a6:46:5a:6e:42:42:ae:63:3f:d6:91:7f:76: 7f:23:7a:00:7b:3d:61:84:92:4a:75:f9:27:fe:7c: 34:60:c5:06:09:f4:2c:56:1d:42:8b:dd:fb:d8:db: 24:ec:f9:b9:80:64:ec:55:95:e5:6a:96:91:49:9c: 0f:f5:56:fe:68:d0:ae:c6:79:69:c7:72:f4:21:12: 96:77:71:72:1f:68:eb:4e:1d:b9:5f:05:46:90:f6: 0e:50:a2:85:c5:f9:8a:06:17:a9:70:2d:8f:2d:ce: 0a:ad:d1:e4:0d:67:8a:f3:91:50:46:6b:48:84:9c: 19:bd:f0:bc:fe:54:a0:ba:bb:23:73:86:6b:92:69: e6:5c:84:46:4f:9b:87:77:c7:0b:d7:86:83:68:35: e5:1e:dd:4b:2d:ee:bd:f0:fa:04:73:b8:db:28:92: 6b:9c:21:65:b7:cb:e5:71:f5:65:30:34:52:8b:67: 59:1f:69:21:fd:4e:5d:74:1b:20:f0:65:bd:8b:b5: 09:73:70:65:f1:ca:42:74:3f:80:52:61:f4:c4:45: 57:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:63:2B:73:2C:B6:DC:85:1E:57:38:F9:3C:11:C0:6A:D8:B2:0D:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/b1b6f463-ecda-3aea-b723-e98a3572acb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.crl X509v3 Authority Key Identifier: keyid:0A:70:00:4A:1A:A0:5C:A6:C4:C7:35:57:D7:4D:96:DF:DD:09:4C:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer sbgp-ipAddrBlock: critical IPv4: 216.126.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:77:84:45:6c:2f:68:19:79:70:67:e4:00:5a:74:c0:8b:b3: 4d:54:3f:c5:e7:39:dc:d7:68:0f:da:04:57:be:83:69:a0:6d: a9:89:c5:f5:42:c7:4b:4f:f2:27:96:31:6c:59:e9:f8:26:f7: 5a:c5:3e:20:4c:9a:1f:bb:9d:f0:b2:8c:b7:8a:c3:33:80:35: 16:9f:a2:37:4f:bd:73:6c:e8:40:1b:29:cc:fe:ae:8e:0c:46: a0:8c:a6:f1:47:9d:b8:fd:b6:ab:86:b9:2c:9f:81:50:f9:7d: 7f:39:40:c4:25:78:28:29:ab:24:d8:9b:ce:72:e4:1d:71:fc: 08:49:31:5d:b1:fc:53:68:5e:1b:af:e4:7e:30:10:50:63:a1: c2:c4:4c:a6:65:aa:a3:3e:af:9a:b5:45:4c:9e:d7:95:c5:0a: c4:6f:4b:e5:29:67:47:4a:b8:4d:46:90:c0:e8:a8:5d:a5:78: 43:dd:de:eb:b7:e8:9e:44:e9:e4:8f:2f:a5:4f:70:30:67:c9: 72:c2:16:67:f7:91:7f:db:a8:78:d6:c4:b9:81:47:9b:35:a6: b1:42:94:f4:e2:7f:86:86:be:3e:af:f8:b4:c0:37:b7:f8:71: 82:54:61:e1:ac:e9:b6:1c:9e:53:f3:e2:27:83:b4:c3:b9:8d: 72:c7:48:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3myb3Fz1QQZZwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTcyMDJlOGQtZDY3MS00ZmUzLWJmYTktNjA1ZTJjYTMy YWE1MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk ZGVmYzUxOTMtMGVhYi00YjE3LWJlZmItNTMyMDcwZTJhYjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9e2zlUo1UtpzPAa820tlDZk3oPcPUadsYAvo Yfs3hOanQ06bqOQVRIry/fkYE6ZGWm5CQq5jP9aRf3Z/I3oAez1hhJJKdfkn/nw0 YMUGCfQsVh1Ci9372Nsk7Pm5gGTsVZXlapaRSZwP9Vb+aNCuxnlpx3L0IRKWd3Fy H2jrTh25XwVGkPYOUKKFxfmKBhepcC2PLc4KrdHkDWeK85FQRmtIhJwZvfC8/lSg ursjc4ZrkmnmXIRGT5uHd8cL14aDaDXlHt1LLe698PoEc7jbKJJrnCFlt8vlcfVl MDRSi2dZH2kh/U5ddBsg8GW9i7UJc3Bl8cpCdD+AUmH0xEVXpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdjK3MsttyFHlc4+TwRwGrYsg0aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81NzIw MmU4ZC1kNjcxLTRmZTMtYmZhOS02MDVlMmNhMzJhYTUvYjFiNmY0NjMtZWNkYS0z YWVhLWI3MjMtZTk4YTM1NzJhY2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTcyMDJlOGQtZDY3MS00ZmUzLWJm YTktNjA1ZTJjYTMyYWE1LzU3MjAyZThkLWQ2NzEtNGZlMy1iZmE5LTYwNWUyY2Ez MmFhNS5jcmwwHwYDVR0jBBgwFoAUCnAAShqgXKbExzVX102W390JTPswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81NzIwMmU4ZC1kNjcxLTRmZTMtYmZhOS02MDVl MmNhMzJhYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2H5IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACl3hEVsL2gZeXBn5ABadMCLs01UP8XnOdzXaA/aBFe+g2mgbamJxfVC x0tP8ieWMWxZ6fgm91rFPiBMmh+7nfCyjLeKwzOANRafojdPvXNs6EAbKcz+ro4M RqCMpvFHnbj9tquGuSyfgVD5fX85QMQleCgpqyTYm85y5B1x/AhJMV2x/FNoXhuv 5H4wEFBjocLETKZlqqM+r5q1RUye15XFCsRvS+UpZ0dKuE1GkMDoqF2leEPd3uu3 6J5E6eSPL6VPcDBnyXLCFmf3kX/bqHjWxLmBR5s1prFClPTif4aGvj6v+LTAN7f4 cYJUYeGs6bYcnlPz4ieDtMO5jXLHSNQ= -----END CERTIFICATE-----Generated at Mon Apr 7 20:03:04 2025 by rpki-client