$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/237eab70-580a-3b80-8b65-d28d1535e406.roa File: 237eab70-580a-3b80-8b65-d28d1535e406.roa (raw, json) Hash identifier: uESQ0ZFHnxxTHCLtBREN5ZOBcNfnfWGOvj41rnfN2XE= Subject key identifier: 90:F1:C7:5C:7C:96:94:AD:FE:88:8B:96:80:E8:03:33:C2:35:99:15 Certificate issuer: /CN=1d639366-c044-456e-b8c8-0de04a543a0c Certificate serial: 010D0C9F43285848E9CBE97F405DBC3D8C074500 Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/237eab70-580a-3b80-8b65-d28d1535e406.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 23115 IP address blocks: 216.68.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:e9:7f:40:5d:bc:3d:8c:07:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=3e971964-44f4-4ad0-9f0f-33d1b285240b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e7:70:bd:44:43:d3:63:f1:23:2b:c2:ce:a2: 80:ff:8a:9d:95:2c:2e:71:39:64:0c:b4:fc:cc:50: aa:b6:cd:bc:1a:3b:10:b4:d5:e0:05:a1:e8:b6:cb: 90:48:6f:56:46:97:10:81:38:fb:ae:46:13:b9:9b: b1:e0:fd:a4:a6:c8:7c:b6:29:75:ae:8d:74:a9:c3: 4a:40:0a:9a:d2:13:09:a6:a9:a9:5b:67:1b:d5:92: 94:51:9e:82:37:5a:94:f7:66:a2:58:50:0b:ce:49: 80:e5:7f:d7:bf:aa:5c:e2:3a:59:92:d7:af:dc:07: c3:49:ca:16:d9:2d:80:d1:da:c6:4e:b2:5f:2e:14: 49:c6:2d:e4:4d:d6:8a:5e:dd:a6:88:13:71:a4:e8: 9e:92:45:f5:ed:d3:e3:81:f7:8f:9b:24:22:8f:1f: d5:68:7b:77:fa:f3:64:a4:9e:a1:d1:92:2c:46:df: a0:7f:32:7c:69:5a:7b:99:0b:b8:7b:73:90:1b:ef: 83:bc:23:b8:7c:6c:d2:d8:c0:3b:d5:ad:74:39:c8: c8:f2:7a:89:bf:3f:a4:1c:c0:b6:f3:fc:d3:6b:ac: b7:bb:79:32:96:25:1a:e5:26:86:f8:01:83:d5:31: 53:59:ac:ab:fa:81:4a:49:bd:5a:16:a0:e5:33:fb: ee:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F1:C7:5C:7C:96:94:AD:FE:88:8B:96:80:E8:03:33:C2:35:99:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/237eab70-580a-3b80-8b65-d28d1535e406.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl X509v3 Authority Key Identifier: keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer sbgp-ipAddrBlock: critical IPv4: 216.68.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:c5:7d:35:8c:19:2e:af:c2:28:47:cd:5e:20:3d:fc:05:56: f4:4f:44:77:5c:0f:e8:33:92:bb:22:c0:0a:36:e0:09:34:4a: 79:47:75:d2:38:b8:24:0e:03:b8:31:85:73:43:9a:ac:f6:43: e2:03:25:f1:e0:04:17:ef:c8:10:11:b1:ee:65:95:ff:98:64: 5f:93:82:57:ba:d5:2e:e5:f8:92:c1:c2:1b:96:85:75:1c:10: 63:2e:f0:fb:a8:6a:0e:dd:ea:65:7b:bd:b8:d4:e1:b2:ee:3a: a7:6d:25:b9:b0:2c:87:3e:05:63:9a:cf:05:95:45:33:9a:ac: 24:6a:67:35:f5:d9:d2:f0:36:0b:39:7d:f3:cb:68:b4:0e:47: ae:46:16:ee:87:99:b4:45:3b:3d:2c:70:cb:6b:ee:55:9d:87: f9:1e:26:4b:72:cc:fe:18:1b:cb:b9:90:2c:ad:d1:d4:15:29: 03:d6:08:64:47:3c:0a:65:e8:fc:d6:8c:e0:21:6c:78:5f:be: 06:d7:10:04:ae:1f:4c:b6:2b:48:7f:df:e9:a2:68:01:2d:e4: d7:8f:f7:68:5e:d7:7e:fe:01:14:a8:8c:d6:c0:38:2a:db:04: c3:97:ae:74:06:12:99:d1:ff:38:34:0f:ec:69:a9:24:29:ce: fd:84:31:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy+l/QF28PYwHRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzkzNjYtYzA0NC00NTZlLWI4YzgtMGRlMDRhNTQz YTBjMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk M2U5NzE5NjQtNDRmNC00YWQwLTlmMGYtMzNkMWIyODUyNDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+dwvURD02PxIyvCzqKA/4qdlSwucTlkDLT8 zFCqts28GjsQtNXgBaHotsuQSG9WRpcQgTj7rkYTuZux4P2kpsh8til1ro10qcNK QAqa0hMJpqmpW2cb1ZKUUZ6CN1qU92aiWFALzkmA5X/Xv6pc4jpZktev3AfDScoW 2S2A0drGTrJfLhRJxi3kTdaKXt2miBNxpOiekkX17dPjgfePmyQijx/VaHt3+vNk pJ6h0ZIsRt+gfzJ8aVp7mQu4e3OQG++DvCO4fGzS2MA71a10OcjI8nqJvz+kHMC2 8/zTa6y3u3kyliUa5SaG+AGD1TFTWayr+oFKSb1aFqDlM/vu0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDxx1x8lpSt/oiLloDoAzPCNZkVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYz OTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUwNGE1NDNhMGMvMjM3ZWFiNzAtNTgwYS0z YjgwLThiNjUtZDI4ZDE1MzVlNDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWQ2MzkzNjYtYzA0NC00NTZlLWI4 YzgtMGRlMDRhNTQzYTBjLzFkNjM5MzY2LWMwNDQtNDU2ZS1iOGM4LTBkZTA0YTU0 M2EwYy5jcmwwHwYDVR0jBBgwFoAU/DVXyQ49tRkFhaSn5xDpZWoEZ4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYzOTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUw NGE1NDNhMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2EREMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTFfTWMGS6vwihHzV4gPfwFVvRPRHdcD+gzkrsiwAo24Ak0SnlHddI4 uCQOA7gxhXNDmqz2Q+IDJfHgBBfvyBARse5llf+YZF+Tgle61S7l+JLBwhuWhXUc EGMu8Puoag7d6mV7vbjU4bLuOqdtJbmwLIc+BWOazwWVRTOarCRqZzX12dLwNgs5 ffPLaLQOR65GFu6HmbRFOz0scMtr7lWdh/keJktyzP4YG8u5kCyt0dQVKQPWCGRH PApl6PzWjOAhbHhfvgbXEASuH0y2K0h/3+miaAEt5NeP92he137+ARSojNbAOCrb BMOXrnQGEpnR/zg0D+xpqSQpzv2EMXE= -----END CERTIFICATE-----Generated at Fri Mar 14 11:21:26 2025 by rpki-client