$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/16c713f8-8be9-4f10-9fbe-a5850c795c72/59f93d3d-6332-31f3-89b0-d8058df54f66.roa File: 59f93d3d-6332-31f3-89b0-d8058df54f66.roa (raw, json) Hash identifier: CiNQzV/Gx/Fwl5t7GwsM/XInFPm6QEF9KDsoct8DjB0= Subject key identifier: 0B:00:73:9E:8E:09:8E:5F:F3:16:BF:A5:FD:9E:E4:F7:4B:01:38:62 Certificate issuer: /CN=16c713f8-8be9-4f10-9fbe-a5850c795c72 Certificate serial: 010D0C9F432858494B64163DFFA7681A2F023B80 Authority key identifier: 35:80:A6:64:68:17:32:E1:F5:E3:13:2E:F4:07:D8:C5:57:73:8C:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/16c713f8-8be9-4f10-9fbe-a5850c795c72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/16c713f8-8be9-4f10-9fbe-a5850c795c72/59f93d3d-6332-31f3-89b0-d8058df54f66.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 5740 IP address blocks: 216.162.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/16c713f8-8be9-4f10-9fbe-a5850c795c72/16c713f8-8be9-4f10-9fbe-a5850c795c72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/16c713f8-8be9-4f10-9fbe-a5850c795c72/16c713f8-8be9-4f10-9fbe-a5850c795c72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/16c713f8-8be9-4f10-9fbe-a5850c795c72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:16:3d:ff:a7:68:1a:2f:02:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16c713f8-8be9-4f10-9fbe-a5850c795c72 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=ace5b71f-bcaa-4380-8565-c2174bab53e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:65:04:27:00:0d:e4:ea:d3:3d:ae:fd:54:5e: 1b:88:d9:77:07:c3:a7:53:89:5a:5b:c1:63:1d:f1: 19:57:b5:aa:c4:10:22:65:d2:7a:9e:14:d7:54:e2: 74:a1:b6:c1:88:3d:6f:0d:3c:7c:fb:8b:83:c8:d5: 3c:13:58:3f:d4:5b:41:d6:a0:50:cb:c8:7d:01:b6: 0c:a1:8e:60:6e:13:9b:e9:a0:f0:e6:a3:f9:92:24: 3b:ce:bd:c6:fc:36:e0:c8:02:b9:12:43:88:ba:a6: d9:2a:e9:39:af:fc:19:a7:2d:06:81:5a:f3:6e:ee: 45:58:54:1d:fe:b1:81:eb:4b:b0:07:83:b9:ff:c0: df:bb:28:36:97:65:f0:1c:37:ad:86:54:7b:8b:20: e6:40:df:fe:3b:4b:65:db:2a:f5:cc:89:f2:87:cd: b7:63:1b:dc:d3:6a:b9:0e:9d:c0:50:67:b1:f8:35: ed:3c:0d:6b:78:28:ff:b0:d4:1a:22:17:c5:e6:69: 9d:4f:aa:7a:1c:2f:e4:79:bb:b7:d5:8e:88:9e:5a: c1:3b:97:bb:4e:ce:04:73:61:48:15:50:5f:fd:2f: 1f:34:21:e5:fe:47:20:d2:44:b4:a3:a4:c6:a8:ac: ad:eb:57:44:b3:b2:08:b2:28:70:ab:bc:aa:f0:37: 8e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:00:73:9E:8E:09:8E:5F:F3:16:BF:A5:FD:9E:E4:F7:4B:01:38:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/16c713f8-8be9-4f10-9fbe-a5850c795c72/59f93d3d-6332-31f3-89b0-d8058df54f66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/16c713f8-8be9-4f10-9fbe-a5850c795c72/16c713f8-8be9-4f10-9fbe-a5850c795c72.crl X509v3 Authority Key Identifier: keyid:35:80:A6:64:68:17:32:E1:F5:E3:13:2E:F4:07:D8:C5:57:73:8C:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/16c713f8-8be9-4f10-9fbe-a5850c795c72.cer sbgp-ipAddrBlock: critical IPv4: 216.162.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:63:c9:64:76:2e:e5:33:40:7a:0f:09:f7:b4:87:eb:01:e1: 37:97:b5:bd:29:ea:0e:09:53:af:63:b2:19:53:c4:90:2f:e1: 0f:6a:c3:cc:a8:ce:b3:e7:8f:12:a8:c3:d4:1d:97:dd:f3:92: 04:83:d2:76:df:34:45:70:52:70:87:be:19:f3:a2:e9:33:f4: 74:5c:6e:28:f5:39:42:18:ba:13:8e:20:f6:0e:61:1d:58:97: fe:92:3d:78:3f:bf:4f:2b:4c:c1:32:15:6c:39:c6:b3:bf:ef: 65:68:90:6e:cb:fd:04:71:57:16:1d:08:3d:59:68:cf:16:7f: 6f:b0:b1:2c:42:4a:fa:19:0a:13:64:59:46:5e:40:32:8d:08: 0a:e7:d7:b2:38:b0:c0:79:85:ef:14:38:0c:ba:fc:74:e0:40: 44:03:25:33:d8:2f:2c:56:dd:34:04:61:5b:e8:ac:56:62:72: d9:f7:68:7a:ae:61:b5:e7:de:ef:87:64:08:e5:bb:e1:f5:9e: 72:e8:ac:cf:b0:23:a8:fa:d6:4b:14:29:72:6b:e5:15:77:cf: 95:0a:e3:42:e3:a7:af:7e:43:aa:83:84:a8:92:8d:cd:43:3f: 5e:66:29:82:87:66:00:b1:39:c5:fe:46:44:4c:26:c2:f7:2b: 0b:07:c3:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBY9/6doGi8CO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZjNzEzZjgtOGJlOS00ZjEwLTlmYmUtYTU4NTBjNzk1 YzcyMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk YWNlNWI3MWYtYmNhYS00MzgwLTg1NjUtYzIxNzRiYWI1M2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2UEJwAN5OrTPa79VF4biNl3B8OnU4laW8Fj HfEZV7WqxBAiZdJ6nhTXVOJ0obbBiD1vDTx8+4uDyNU8E1g/1FtB1qBQy8h9AbYM oY5gbhOb6aDw5qP5kiQ7zr3G/DbgyAK5EkOIuqbZKuk5r/wZpy0GgVrzbu5FWFQd /rGB60uwB4O5/8Dfuyg2l2XwHDethlR7iyDmQN/+O0tl2yr1zInyh823Yxvc02q5 Dp3AUGex+DXtPA1reCj/sNQaIhfF5mmdT6p6HC/kebu31Y6InlrBO5e7Ts4Ec2FI FVBf/S8fNCHl/kcg0kS0o6TGqKyt61dEs7IIsihwq7yq8DeOXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsAc56OCY5f8xa/pf2e5PdLAThiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xNmM3 MTNmOC04YmU5LTRmMTAtOWZiZS1hNTg1MGM3OTVjNzIvNTlmOTNkM2QtNjMzMi0z MWYzLTg5YjAtZDgwNThkZjU0ZjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTZjNzEzZjgtOGJlOS00ZjEwLTlm YmUtYTU4NTBjNzk1YzcyLzE2YzcxM2Y4LThiZTktNGYxMC05ZmJlLWE1ODUwYzc5 NWM3Mi5jcmwwHwYDVR0jBBgwFoAUNYCmZGgXMuH14xMu9AfYxVdzjKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xNmM3MTNmOC04YmU5LTRmMTAtOWZiZS1hNTg1 MGM3OTVjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2KIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxjyWR2LuUzQHoPCfe0h+sB4TeXtb0p6g4JU69jshlTxJAv4Q9qw8yo zrPnjxKow9Qdl93zkgSD0nbfNEVwUnCHvhnzoukz9HRcbij1OUIYuhOOIPYOYR1Y l/6SPXg/v08rTMEyFWw5xrO/72VokG7L/QRxVxYdCD1ZaM8Wf2+wsSxCSvoZChNk WUZeQDKNCArn17I4sMB5he8UOAy6/HTgQEQDJTPYLyxW3TQEYVvorFZictn3aHqu YbXn3u+HZAjlu+H1nnLorM+wI6j61ksUKXJr5RV3z5UK40Ljp69+Q6qDhKiSjc1D P15mKYKHZgCxOcX+RkRMJsL3KwsHwwU= -----END CERTIFICATE-----Generated at Tue Apr 15 15:46:59 2025 by rpki-client