$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/9efb72b6-e5a6-3dca-af65-3982a56ca00d.roa File: 9efb72b6-e5a6-3dca-af65-3982a56ca00d.roa (raw, json) Hash identifier: L/c3YUY6PASvIeloAwOMNTakO99i145cD8wrQZt9+j0= Subject key identifier: 93:05:8B:5F:80:19:B2:5E:4A:91:C7:47:BF:65:8D:F4:11:C1:4B:1A Certificate issuer: /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13 Certificate serial: 010D0C9F43285849088179D3DAA99FD9612FFC80 Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/9efb72b6-e5a6-3dca-af65-3982a56ca00d.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 396416 IP address blocks: 216.211.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:79:d3:da:a9:9f:d9:61:2f:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=919438f1-9279-4dd5-b596-c4cdd0632b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:36:a7:39:38:2b:c0:ae:01:f0:95:58:97:fa: 98:d7:2a:22:0f:9f:9d:27:36:62:6c:16:5e:c5:a1: 0f:f9:be:f9:82:bf:df:95:97:58:f0:74:ca:e8:5b: cb:ee:ef:76:01:8c:26:22:85:12:84:77:5d:53:f3: 9e:bb:58:bb:63:76:ad:36:2e:2f:13:fc:60:dc:ca: 2e:fb:88:dd:a5:77:4b:1f:e5:04:62:82:95:31:9a: 55:bd:88:42:69:57:cd:ab:26:f3:97:7e:73:08:df: 44:af:a9:d2:70:18:a3:95:a9:42:ae:e7:da:b9:d9: 50:9a:bb:5f:e7:c2:3f:f1:fe:20:e5:3b:a2:84:d5: 3d:28:71:09:da:04:e5:12:fc:99:2c:87:42:3d:13: 0e:7b:e4:f0:1b:d6:71:ef:77:01:fc:e8:2f:70:7a: c7:7e:a7:11:24:80:e8:11:3c:87:ef:f4:42:67:1c: c5:8c:7e:5b:28:89:3f:e8:39:77:a2:f1:12:50:4b: be:da:cd:f2:81:3a:66:ba:c3:11:fb:c1:7c:81:a0: 44:79:0a:6f:44:cf:d4:bc:00:7b:06:64:44:b1:8e: 33:81:8d:65:1b:02:04:59:9f:0d:a6:53:aa:32:f4: 3a:ab:87:0d:da:3c:63:e7:98:92:58:e6:f9:8e:44: 63:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:05:8B:5F:80:19:B2:5E:4A:91:C7:47:BF:65:8D:F4:11:C1:4B:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/9efb72b6-e5a6-3dca-af65-3982a56ca00d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl X509v3 Authority Key Identifier: keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer sbgp-ipAddrBlock: critical IPv4: 216.211.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:af:87:19:dc:de:ab:ac:6d:f0:3c:5f:4a:e5:51:4b:03:ca: ef:1c:5b:db:af:df:6c:04:81:37:9a:0a:2c:55:13:b5:6f:2e: b7:0d:d3:5b:c2:69:1d:be:c2:11:ed:69:9d:f7:3c:86:5b:18: e2:51:ec:4f:12:88:2c:97:42:bb:4a:70:e2:16:d6:c6:b0:07: 29:f9:be:a5:78:be:06:cd:32:f3:54:00:71:56:28:e2:25:2e: c8:4f:3b:35:26:9c:e9:b2:6a:5c:f5:d3:4c:c3:13:07:bb:7c: e8:ac:d3:14:22:29:bc:43:15:b9:14:0c:9e:0e:42:90:0a:6d: ad:60:f1:1d:38:a2:7a:17:d7:cb:61:fa:b4:90:24:61:b8:1e: e5:c4:76:5a:6c:7f:77:bc:95:76:de:89:56:1a:76:ce:20:f0: 57:7a:ea:dc:71:3a:ba:db:4b:8b:5d:d7:36:21:3a:d0:37:af: b0:14:f0:ee:a8:26:3c:55:8e:5a:2b:a0:67:d9:5c:2e:07:8e: 61:20:91:02:41:7d:c1:af:f6:07:f6:7a:c4:b3:d1:9e:ab:5e: 3a:47:d9:40:42:a8:30:4b:a9:a2:ed:ec:bd:7f:5a:b9:6d:91: 38:2e:92:1a:da:bd:8a:82:cf:fe:b7:67:5f:f0:42:62:c3:ca: 2f:e7:17:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgXnT2qmf2WEv/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNzExYjUtZDE2Zi00NTQ5LTllNzUtYmQyMDFmNWI3 YTEzMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk OTE5NDM4ZjEtOTI3OS00ZGQ1LWI1OTYtYzRjZGQwNjMyYjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjanOTgrwK4B8JVYl/qY1yoiD5+dJzZibBZe xaEP+b75gr/flZdY8HTK6FvL7u92AYwmIoUShHddU/Oeu1i7Y3atNi4vE/xg3Mou +4jdpXdLH+UEYoKVMZpVvYhCaVfNqybzl35zCN9Er6nScBijlalCrufaudlQmrtf 58I/8f4g5TuihNU9KHEJ2gTlEvyZLIdCPRMOe+TwG9Zx73cB/OgvcHrHfqcRJIDo ETyH7/RCZxzFjH5bKIk/6Dl3ovESUEu+2s3ygTpmusMR+8F8gaBEeQpvRM/UvAB7 BmREsY4zgY1lGwIEWZ8NplOqMvQ6q4cN2jxj55iSWOb5jkRjvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMFi1+AGbJeSpHHR79ljfQRwUsaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3 MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIwMWY1YjdhMTMvOWVmYjcyYjYtZTVhNi0z ZGNhLWFmNjUtMzk4MmE1NmNhMDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmRkNzExYjUtZDE2Zi00NTQ5LTll NzUtYmQyMDFmNWI3YTEzL2ZkZDcxMWI1LWQxNmYtNDU0OS05ZTc1LWJkMjAxZjVi N2ExMy5jcmwwHwYDVR0jBBgwFoAUHHKGSiScg7PMA5PUnLiNgqiJlT8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIw MWY1YjdhMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NPFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyvhxnc3qusbfA8X0rlUUsDyu8cW9uv32wEgTeaCixVE7VvLrcN01vC aR2+whHtaZ33PIZbGOJR7E8SiCyXQrtKcOIW1sawByn5vqV4vgbNMvNUAHFWKOIl LshPOzUmnOmyalz100zDEwe7fOis0xQiKbxDFbkUDJ4OQpAKba1g8R04onoX18th +rSQJGG4HuXEdlpsf3e8lXbeiVYads4g8Fd66txxOrrbS4td1zYhOtA3r7AU8O6o JjxVjloroGfZXC4HjmEgkQJBfcGv9gf2esSz0Z6rXjpH2UBCqDBLqaLt7L1/Wrlt kTgukhravYqCz/63Z1/wQmLDyi/nF1I= -----END CERTIFICATE-----Generated at Sat Apr 12 02:09:06 2025 by rpki-client