$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/2ff7164d-6098-3c3f-b325-e4b4aa2fb8ab.roa File: 2ff7164d-6098-3c3f-b325-e4b4aa2fb8ab.roa (raw, json) Hash identifier: 0bBd4XsC/OpJMH9r+zipU7yVy1RRku+1Jy+Zffr7xIA= Subject key identifier: FB:04:74:54:EE:7B:F2:7B:AE:00:AE:6A:A9:68:4E:D7:1C:F7:97:9A Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F43285848A996285CB867C82D1C36A3A0 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/2ff7164d-6098-3c3f-b325-e4b4aa2fb8ab.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 14477 IP address blocks: 216.59.69.0/24 maxlen: 24 216.59.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:28:5c:b8:67:c8:2d:1c:36:a3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=7632e16d-7189-4e53-bbc8-44a3b3affbd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c4:74:31:e4:d8:27:d7:2a:11:24:ce:ab:0a: c4:bd:ab:39:a2:a1:75:b0:99:00:ad:94:92:67:2a: 85:98:05:ec:c2:e4:4f:a8:82:ca:cc:ea:c5:4c:c0: d0:b7:65:86:9e:ac:5e:1d:c5:de:41:94:2b:b3:b3: 0f:31:f9:6d:dd:f2:c8:0c:b5:8b:22:05:7c:ed:d0: 5a:ae:16:a3:ca:1f:78:15:86:6f:71:6f:01:36:92: 37:fa:aa:e5:a6:8a:14:48:0f:89:cf:9b:60:84:e4: 17:d4:bf:07:04:55:ce:7c:56:03:27:a8:fb:55:f3: ab:9e:bb:10:a6:df:21:41:49:67:03:21:c4:70:76: 24:ec:a3:56:c6:01:7e:ea:18:b4:8b:6e:2b:02:ac: f6:0f:8f:7d:0e:b6:42:1f:ff:29:a6:25:1b:0e:a9: 74:7b:8f:1b:1e:02:e0:8f:f9:1b:1a:6e:ab:0b:32: f0:bb:cf:51:35:ec:2f:c2:c8:09:f6:04:23:ad:9d: c0:64:96:e1:4b:9d:05:36:b8:ad:bc:29:a7:9b:55: 01:9b:76:fa:e9:11:df:23:81:17:f4:6b:15:23:42: 8f:c4:86:7f:26:c8:2c:b0:64:66:1a:74:ea:fe:fd: 68:8e:6f:0b:23:46:cc:c1:e9:3d:d1:74:26:63:19: 8c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:04:74:54:EE:7B:F2:7B:AE:00:AE:6A:A9:68:4E:D7:1C:F7:97:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/2ff7164d-6098-3c3f-b325-e4b4aa2fb8ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.59.69.0/24 216.59.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:cc:a7:44:0b:74:fc:5c:87:a8:1b:c0:76:08:01:16:7e:10: dc:88:d6:22:e3:42:a9:04:af:2c:45:51:d8:24:a6:86:92:86: f4:48:f2:bc:fa:cb:f0:21:14:e3:ce:d8:ee:c0:b5:fa:57:8e: 2b:70:34:e3:28:c9:a7:88:c9:66:c3:ff:dd:12:5d:77:ce:e4: e9:d8:4c:51:0b:41:e4:0d:83:ce:21:00:a1:52:c6:37:0e:38: 17:60:aa:ba:78:63:ef:d9:93:eb:55:c7:65:5a:6d:aa:a7:a7: 8d:73:91:fa:67:ad:6d:d7:42:fd:23:12:36:80:a7:dc:c7:d9: 29:5f:d2:65:fc:f2:79:3f:ad:4f:22:ee:56:68:d1:25:87:e6: d3:f4:b5:19:36:0b:d7:f7:5b:66:9b:01:00:7b:3e:10:e8:6f: b4:a3:07:7f:a3:e8:0b:63:63:0f:40:3f:f2:52:8c:07:66:67: 62:e9:33:be:03:4f:53:b5:26:19:39:41:6e:bd:a8:a5:69:df: 3e:aa:56:15:b2:14:e8:c6:02:0b:2a:9a:d8:a5:bc:e9:03:65: c0:d2:b1:90:75:34:e6:1c:09:c9:8d:9e:3d:9b:f2:4d:36:ec: 7f:23:78:28:ce:f7:29:29:c9:11:44:96:49:b6:86:35:78:cf: a4:b7:ec:c1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEiplihcuGfILRw2o6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk NzYzMmUxNmQtNzE4OS00ZTUzLWJiYzgtNDRhM2IzYWZmYmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48R0MeTYJ9cqESTOqwrEvas5oqF1sJkArZSS ZyqFmAXswuRPqILKzOrFTMDQt2WGnqxeHcXeQZQrs7MPMflt3fLIDLWLIgV87dBa rhajyh94FYZvcW8BNpI3+qrlpooUSA+Jz5tghOQX1L8HBFXOfFYDJ6j7VfOrnrsQ pt8hQUlnAyHEcHYk7KNWxgF+6hi0i24rAqz2D499DrZCH/8ppiUbDql0e48bHgLg j/kbGm6rCzLwu89RNewvwsgJ9gQjrZ3AZJbhS50FNritvCmnm1UBm3b66RHfI4EX 9GsVI0KPxIZ/JsgssGRmGnTq/v1ojm8LI0bMwek90XQmYxmM4wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPsEdFTue/J7rgCuaqloTtcc95eaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMmZmNzE2NGQtNjA5OC0z YzNmLWIzMjUtZTRiNGFhMmZiOGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2DtFAwQA 2DtHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJLMp0QLdPxch6gbwHYIARZ+ENyI1iLjQqkEryxFUdgkpoaS hvRI8rz6y/AhFOPO2O7AtfpXjitwNOMoyaeIyWbD/90SXXfO5OnYTFELQeQNg84h AKFSxjcOOBdgqrp4Y+/Zk+tVx2Vabaqnp41zkfpnrW3XQv0jEjaAp9zH2Slf0mX8 8nk/rU8i7lZo0SWH5tP0tRk2C9f3W2abAQB7PhDob7SjB3+j6AtjYw9AP/JSjAdm Z2LpM74DT1O1Jhk5QW69qKVp3z6qVhWyFOjGAgsqmtilvOkDZcDSsZB1NOYcCcmN nj2b8k027H8jeCjO9ykpyRFElkm2hjV4z6S37ME= -----END CERTIFICATE-----Generated at Fri Apr 11 23:46:27 2025 by rpki-client