$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/3c51508c-e229-3495-972e-46feecd4c139.roa File: 3c51508c-e229-3495-972e-46feecd4c139.roa (raw, json) Hash identifier: IdQofU1AVXfD+QMSwsQGm5zR7sA+iz4LAGW1fciQXpo= Subject key identifier: FF:81:05:5C:84:0C:CC:24:C2:D9:60:50:4B:4A:04:77:63:71:E6:CE Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584905B6B7EBF7D5C66140BD3B00 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/3c51508c-e229-3495-972e-46feecd4c139.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13536 IP address blocks: 216.114.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:b7:eb:f7:d5:c6:61:40:bd:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=f66808dc-0c6e-418d-a644-237805d2a740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6e:64:f1:c5:fa:45:ec:f5:04:7b:a7:70:81: 7c:c0:54:7a:94:ca:7d:c9:f2:0b:7c:61:6c:6c:d9: 3c:8a:53:19:48:33:41:71:b1:87:b0:9e:d1:44:1b: ec:60:4d:ec:4b:92:92:46:d4:43:d3:91:6f:ed:6e: 75:03:52:b6:1b:89:6c:79:e7:45:1f:eb:5b:5b:68: a3:d2:df:23:0e:74:18:c1:f1:4f:92:cb:d4:96:9b: f3:7a:9c:50:56:5c:89:81:b2:03:23:47:2d:3a:f0: e2:1b:01:4b:4b:8b:b1:c0:bd:71:9b:63:b4:55:2c: 17:32:11:f9:12:e6:97:fb:81:6f:b0:13:cb:75:1c: fd:de:14:6c:91:d1:60:f4:9c:0a:5a:80:cf:c9:29: b5:a4:09:ae:40:82:9a:e6:cd:bd:72:c1:c0:bc:0e: 9e:b1:7e:99:d1:45:49:1d:c5:3f:e1:3b:96:2a:e0: 09:b1:d2:e3:f7:67:f9:ac:13:e6:dc:6f:68:d2:6d: fb:34:9b:d3:ff:b0:46:cd:3a:33:21:16:cf:45:d1: d4:40:7c:a9:45:36:90:13:f9:d9:ea:15:6c:2c:94: 64:e7:70:91:e3:20:c0:f6:d4:54:8b:a9:36:47:e7: e1:75:fb:39:c5:cf:46:4a:5c:73:d3:9e:1d:7c:27: 0b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:81:05:5C:84:0C:CC:24:C2:D9:60:50:4B:4A:04:77:63:71:E6:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/3c51508c-e229-3495-972e-46feecd4c139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.114.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:ab:81:47:33:74:7a:d4:c8:1f:d6:8a:e5:e9:c6:4a:0e:29: e9:b9:19:fe:b7:61:d5:65:9a:30:fc:08:13:96:cd:30:bd:a3: dd:98:fe:86:03:00:ce:bb:47:c4:37:f9:e9:f7:b1:c8:5b:8a: be:5d:6b:22:cf:44:64:ab:c5:58:c0:3c:24:46:d1:aa:c4:bc: bd:27:2c:9d:04:8b:fa:a0:6f:13:f3:83:e7:58:43:4f:ee:e5: 16:7b:ac:f0:d8:eb:43:18:1b:63:07:d4:b6:7f:5d:9f:32:51: bf:b7:cf:90:6c:ec:29:10:0d:33:6a:98:0a:88:d2:9c:51:b8: 67:a0:4f:41:98:c1:ff:89:6f:73:19:13:27:2d:0b:c6:14:07: 71:03:2a:1d:b1:d1:9a:ba:63:65:65:77:91:16:e5:24:5f:76: 56:69:c1:4d:96:73:87:92:43:93:6b:b9:71:a4:08:95:45:64: 66:6d:18:68:38:f3:00:33:e6:91:33:8c:76:29:99:da:e6:1e: 97:ec:4c:9c:c3:2d:55:8d:30:8f:ad:9a:97:29:a1:5a:df:7b: 79:26:bb:eb:81:7e:48:4b:18:b5:38:b2:74:c7:61:75:b9:6e: 3d:e5:e5:26:97:84:d7:21:24:2d:cc:16:4e:2d:a8:3a:8b:5a: 39:71:fd:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrfr99XGYUC9OwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk ZjY2ODA4ZGMtMGM2ZS00MThkLWE2NDQtMjM3ODA1ZDJhNzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm5k8cX6Rez1BHuncIF8wFR6lMp9yfILfGFs bNk8ilMZSDNBcbGHsJ7RRBvsYE3sS5KSRtRD05Fv7W51A1K2G4lseedFH+tbW2ij 0t8jDnQYwfFPksvUlpvzepxQVlyJgbIDI0ctOvDiGwFLS4uxwL1xm2O0VSwXMhH5 EuaX+4FvsBPLdRz93hRskdFg9JwKWoDPySm1pAmuQIKa5s29csHAvA6esX6Z0UVJ HcU/4TuWKuAJsdLj92f5rBPm3G9o0m37NJvT/7BGzTozIRbPRdHUQHypRTaQE/nZ 6hVsLJRk53CR4yDA9tRUi6k2R+fhdfs5xc9GSlxz054dfCcLsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+BBVyEDMwkwtlgUEtKBHdjcebOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvM2M1MTUwOGMtZTIyOS0z NDk1LTk3MmUtNDZmZWVjZDRjMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HKeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMargUczdHrUyB/WiuXpxkoOKem5Gf63YdVlmjD8CBOWzTC9o92Y/oYD AM67R8Q3+en3schbir5dayLPRGSrxVjAPCRG0arEvL0nLJ0Ei/qgbxPzg+dYQ0/u 5RZ7rPDY60MYG2MH1LZ/XZ8yUb+3z5Bs7CkQDTNqmAqI0pxRuGegT0GYwf+Jb3MZ EyctC8YUB3EDKh2x0Zq6Y2Vld5EW5SRfdlZpwU2Wc4eSQ5NruXGkCJVFZGZtGGg4 8wAz5pEzjHYpmdrmHpfsTJzDLVWNMI+tmpcpoVrfe3kmu+uBfkhLGLU4snTHYXW5 bj3l5SaXhNchJC3MFk4tqDqLWjlx/Vk= -----END CERTIFICATE-----Generated at Tue Apr 8 18:25:53 2025 by rpki-client