$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/f670fa0a-c221-3b1c-bd47-9821b1a8e9d0.roa File: f670fa0a-c221-3b1c-bd47-9821b1a8e9d0.roa (raw, json) Hash identifier: txT1O79vft8KtFer33fD0lunHZ3HgCNzbjW9OO7+vcA= Subject key identifier: E1:4D:D6:F8:0A:45:76:2F:5A:8F:C3:9F:35:2B:DF:A4:9E:67:20:94 Certificate issuer: /CN=1d639366-c044-456e-b8c8-0de04a543a0c Certificate serial: 010D0C9F43285848E9CBE971AE96D19BA021A400 Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/f670fa0a-c221-3b1c-bd47-9821b1a8e9d0.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 23115 IP address blocks: 216.68.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:e9:71:ae:96:d1:9b:a0:21:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=459afcb2-32e2-4d8c-a1ce-b5d3a8bdf192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a8:41:b1:0a:9c:83:89:fb:5a:2f:30:2c:09: 98:db:cb:02:64:89:d6:1e:a7:dc:d4:af:8c:5a:98: a7:a5:6c:da:cf:76:f2:03:66:64:50:33:89:5f:3b: 75:81:8d:d0:13:9e:df:27:9c:4f:f9:a0:5c:77:d1: 70:eb:df:50:0a:ae:3a:27:73:dc:3a:9c:98:7a:5e: 20:79:3e:40:e2:f2:d7:33:5f:34:17:ef:15:b2:67: 35:77:7c:3c:30:5f:e9:5d:bb:a1:84:8e:a9:71:72: 72:bc:31:11:30:ea:c4:e0:4c:7d:ed:cd:8d:a8:12: ec:5a:bf:85:da:ff:81:6e:a1:a3:ed:20:b7:15:f1: 46:66:3e:e9:15:97:38:3a:6d:6c:c0:68:58:9d:3a: 6e:2c:9d:ee:f9:c1:66:33:64:e5:b5:44:89:bd:f1: 64:d8:5b:78:d9:ed:e1:6a:2a:18:34:b5:e2:4f:52: 0b:14:89:b1:12:a7:2e:5b:a1:d5:e1:ae:2f:d6:bb: 5b:79:64:16:6c:72:be:e7:24:fb:ec:84:4c:24:73: f7:a7:a6:b8:3f:e3:5d:f2:95:ac:0d:74:b3:1f:86: ce:7d:32:6f:97:c8:ba:34:98:c9:3e:2c:25:ee:5e: b9:1e:2b:ad:e4:ad:05:39:4f:89:b3:87:29:c9:cb: c1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4D:D6:F8:0A:45:76:2F:5A:8F:C3:9F:35:2B:DF:A4:9E:67:20:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/f670fa0a-c221-3b1c-bd47-9821b1a8e9d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl X509v3 Authority Key Identifier: keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer sbgp-ipAddrBlock: critical IPv4: 216.68.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:b3:77:25:1f:15:e3:4f:7c:8e:3d:0d:31:1b:ab:43:12:79: 30:ba:84:d2:8f:05:aa:12:da:8c:49:7f:02:88:d8:c1:70:d8: fc:15:22:e8:4c:40:ab:7d:e1:f4:8b:be:dd:8c:0e:64:e1:2c: 53:7b:71:22:ad:5d:38:3d:0e:08:24:2b:ab:e9:59:cc:4a:ec: 60:c7:dd:8d:dc:b4:46:a6:3a:f4:a6:bb:b1:a7:82:5a:e9:c5: 1c:c3:01:28:7e:b0:ee:f4:24:99:1e:09:b4:04:5f:ab:22:41: e6:ba:5f:eb:0f:cb:0e:10:df:4a:47:6d:fb:00:15:26:8d:65: ae:fc:9b:ca:0e:3e:6e:fe:6c:50:42:e3:d1:b6:a2:e5:a8:8f: d7:b8:ea:26:cd:59:79:69:40:69:71:9f:2e:dc:73:b2:0e:ed: 7e:d5:22:26:a4:c6:9c:a7:8e:bf:b9:6d:0a:99:07:b8:c8:77: 49:59:e7:13:9c:ce:6c:89:e8:f3:a4:eb:84:b9:df:3f:61:ad: f0:cb:45:4a:e5:1d:ed:aa:2a:00:e5:bf:35:3d:d6:5c:43:5d: 2e:90:d2:d9:d8:df:9c:f5:d8:d3:39:4b:3a:61:cf:f9:88:2b: 4f:13:46:63:ab:fb:81:30:5f:e2:e0:04:b8:92:03:6b:18:b9: 4f:37:7e:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy+lxrpbRm6AhpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzkzNjYtYzA0NC00NTZlLWI4YzgtMGRlMDRhNTQz YTBjMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk NDU5YWZjYjItMzJlMi00ZDhjLWExY2UtYjVkM2E4YmRmMTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjahBsQqcg4n7Wi8wLAmY28sCZInWHqfc1K+M WpinpWzaz3byA2ZkUDOJXzt1gY3QE57fJ5xP+aBcd9Fw699QCq46J3PcOpyYel4g eT5A4vLXM180F+8Vsmc1d3w8MF/pXbuhhI6pcXJyvDERMOrE4Ex97c2NqBLsWr+F 2v+BbqGj7SC3FfFGZj7pFZc4Om1swGhYnTpuLJ3u+cFmM2TltUSJvfFk2Ft42e3h aioYNLXiT1ILFImxEqcuW6HV4a4v1rtbeWQWbHK+5yT77IRMJHP3p6a4P+Nd8pWs DXSzH4bOfTJvl8i6NJjJPiwl7l65Hiut5K0FOU+Js4cpycvBnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFN1vgKRXYvWo/DnzUr36SeZyCUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYz OTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUwNGE1NDNhMGMvZjY3MGZhMGEtYzIyMS0z YjFjLWJkNDctOTgyMWIxYThlOWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWQ2MzkzNjYtYzA0NC00NTZlLWI4 YzgtMGRlMDRhNTQzYTBjLzFkNjM5MzY2LWMwNDQtNDU2ZS1iOGM4LTBkZTA0YTU0 M2EwYy5jcmwwHwYDVR0jBBgwFoAU/DVXyQ49tRkFhaSn5xDpZWoEZ4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYzOTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUw NGE1NDNhMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ERDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAizdyUfFeNPfI49DTEbq0MSeTC6hNKPBaoS2oxJfwKI2MFw2PwVIuhM QKt94fSLvt2MDmThLFN7cSKtXTg9DggkK6vpWcxK7GDH3Y3ctEamOvSmu7Gnglrp xRzDASh+sO70JJkeCbQEX6siQea6X+sPyw4Q30pHbfsAFSaNZa78m8oOPm7+bFBC 49G2ouWoj9e46ibNWXlpQGlxny7cc7IO7X7VIiakxpynjr+5bQqZB7jId0lZ5xOc zmyJ6POk64S53z9hrfDLRUrlHe2qKgDlvzU91lxDXS6Q0tnY35z12NM5Szphz/mI K08TRmOr+4EwX+LgBLiSA2sYuU83fkc= -----END CERTIFICATE-----Generated at Sat Apr 12 10:10:36 2025 by rpki-client