$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/6f3608bf-3d7e-3946-adc4-5ab836814644.roa File: 6f3608bf-3d7e-3946-adc4-5ab836814644.roa (raw, json) Hash identifier: KlNDfVHl3iCZRDUeQx1gPbxcohhrK/dMtEQElSrGk8w= Subject key identifier: A1:C5:6E:7E:D5:C4:C7:29:DB:2D:C8:51:8A:CD:22:0F:5A:59:3A:80 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F432858493ED3D575C838A792330D14C0 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/6f3608bf-3d7e-3946-adc4-5ab836814644.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 8635 IP address blocks: 16.1.38.0/24 maxlen: 24 16.240.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:d5:75:c8:38:a7:92:33:0d:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=0698f644-274f-4cb9-8f8a-c767f0f51625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5a:37:67:0d:52:08:d9:9a:15:7e:ac:76:44: 94:a1:3a:58:14:6b:98:ea:36:d3:54:03:bf:a2:55: 76:25:4b:1e:c9:15:4a:68:ba:3e:d1:4e:19:20:79: e1:89:54:33:29:57:67:92:1c:86:3d:47:d9:2f:a8: 35:4e:e2:8d:9f:45:5d:c0:d4:8e:ee:32:c7:35:66: b4:1e:aa:f5:60:1e:15:14:b4:91:39:a0:2d:f8:ea: f7:2f:6b:b2:d9:c2:b2:f6:57:b2:42:6e:42:06:f0: 8c:36:61:d0:4d:43:dc:42:d0:af:50:84:83:fe:2b: 14:11:0c:68:77:d5:ea:98:5c:b4:4d:f9:b7:a5:4b: ff:f7:ec:56:79:31:00:0c:17:e7:7e:cd:b8:39:5b: f1:67:2b:71:36:88:4f:af:1c:83:0f:a2:1e:12:5d: dd:d4:52:61:f7:0a:42:eb:c1:9d:07:9b:e1:a0:4d: 36:bf:69:0d:a2:92:fc:65:7f:e4:b6:5a:8b:27:97: 64:fd:55:f3:72:06:89:9e:24:4d:f3:6c:e8:d9:57: 10:23:1f:a7:4e:16:31:82:9f:ff:99:9f:b0:b5:8b: 0b:1c:0a:69:53:f2:7c:7d:ba:21:6a:a0:7e:3f:f8: 97:07:2c:51:17:60:8c:82:c6:c8:78:7a:53:d3:82: cc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C5:6E:7E:D5:C4:C7:29:DB:2D:C8:51:8A:CD:22:0F:5A:59:3A:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/6f3608bf-3d7e-3946-adc4-5ab836814644.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.1.38.0/24 16.240.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:53:dc:c8:79:51:aa:08:44:2d:eb:19:ce:83:55:55:99:af: 4f:67:44:27:d1:19:51:be:e8:3d:e7:98:c1:f8:5e:65:56:ce: 50:07:fa:80:3f:4b:19:8a:8a:48:b0:dd:0c:90:de:ec:44:0b: 57:24:ec:c2:7e:2b:e3:01:c0:25:c5:92:20:8f:97:7c:34:f5: 26:be:8d:23:37:46:57:5f:6a:bd:ac:04:6f:f7:d9:28:a0:f6: 1e:dc:6b:99:d9:6a:68:34:e8:e8:31:a2:d3:0e:4d:86:ba:b9: 59:3e:5d:1c:c9:5d:fb:d5:ed:ee:e2:15:6e:7e:83:38:72:dd: 16:7e:1d:9d:7b:75:69:f9:c6:de:80:f6:37:a6:93:91:f0:d4: 11:f5:7b:24:84:b4:a7:35:41:ed:97:42:19:b7:e3:76:0b:f3: d1:4b:7b:b2:83:fe:4d:c9:24:12:d7:af:c4:34:5d:f6:f8:15: b5:d8:f1:58:d8:22:b6:46:41:64:a0:b3:cb:8c:57:55:d7:80: 9e:71:99:cf:7b:03:17:71:1b:48:c4:b1:ca:eb:19:f5:de:8f: c8:cd:f9:cc:e8:c7:d4:a8:52:8e:d8:45:43:83:d0:a0:48:45: 93:fe:18:51:18:60:a1:fc:60:84:c2:7b:4a:00:72:2b:ad:ee: 9a:1f:02:8c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEk+09V1yDinkjMNFMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk MDY5OGY2NDQtMjc0Zi00Y2I5LThmOGEtYzc2N2YwZjUxNjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1o3Zw1SCNmaFX6sdkSUoTpYFGuY6jbTVAO/ olV2JUseyRVKaLo+0U4ZIHnhiVQzKVdnkhyGPUfZL6g1TuKNn0VdwNSO7jLHNWa0 Hqr1YB4VFLSROaAt+Or3L2uy2cKy9leyQm5CBvCMNmHQTUPcQtCvUISD/isUEQxo d9XqmFy0Tfm3pUv/9+xWeTEADBfnfs24OVvxZytxNohPrxyDD6IeEl3d1FJh9wpC 68GdB5vhoE02v2kNopL8ZX/ktlqLJ5dk/VXzcgaJniRN82zo2VcQIx+nThYxgp// mZ+wtYsLHAppU/J8fbohaqB+P/iXByxRF2CMgsbIeHpT04LMRwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKHFbn7VxMcp2y3IUYrNIg9aWTqAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvNmYzNjA4YmYtM2Q3ZS0z OTQ2LWFkYzQtNWFiODM2ODE0NjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAEAEmAwQA EPACMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABFT3Mh5UaoIRC3rGc6DVVWZr09nRCfRGVG+6D3nmMH4XmVW zlAH+oA/SxmKikiw3QyQ3uxEC1ck7MJ+K+MBwCXFkiCPl3w09Sa+jSM3Rldfar2s BG/32Sig9h7ca5nZamg06OgxotMOTYa6uVk+XRzJXfvV7e7iFW5+gzhy3RZ+HZ17 dWn5xt6A9jemk5Hw1BH1eySEtKc1Qe2XQhm343YL89FLe7KD/k3JJBLXr8Q0Xfb4 FbXY8VjYIrZGQWSgs8uMV1XXgJ5xmc97AxdxG0jEscrrGfXej8jN+czox9SoUo7Y RUOD0KBIRZP+GFEYYKH8YITCe0oAciut7pofAow= -----END CERTIFICATE-----Generated at Fri Apr 11 23:14:53 2025 by rpki-client