$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060/da8a4bf6-d3c9-3ad3-a825-0519a8133130.roa File: da8a4bf6-d3c9-3ad3-a825-0519a8133130.roa (raw, json) Hash identifier: TrMig5g6cn2pVbUQeaEBH++19mmvdHlRd6dlUQhE5t8= Subject key identifier: DE:40:32:C1:9D:E8:41:6F:37:79:A7:2E:4E:3F:DF:30:F1:BC:F0:C6 Certificate issuer: /CN=3b70bdb6-9776-4d39-8f28-b4a225eb2060 Certificate serial: 010D0C9F43285848BA56411014D1C755D1240EE0 Authority key identifier: E6:26:AE:76:3C:3B:91:4E:3E:1D:46:9D:BB:AD:32:FD:B3:08:3E:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060/da8a4bf6-d3c9-3ad3-a825-0519a8133130.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 398406 IP address blocks: 216.250.226.0/23 maxlen: 23 216.250.226.0/24 maxlen: 24 216.250.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060/3b70bdb6-9776-4d39-8f28-b4a225eb2060.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060/3b70bdb6-9776-4d39-8f28-b4a225eb2060.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:41:10:14:d1:c7:55:d1:24:0e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b70bdb6-9776-4d39-8f28-b4a225eb2060 Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=f6c582e9-59ac-4982-98f4-82ae0540213e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d5:a3:4e:c7:96:61:19:b2:6b:35:b3:30:32: 8b:27:a8:c9:c5:57:fd:eb:88:9d:1a:63:55:72:36: ad:92:4c:f1:16:9e:8c:54:c3:c7:07:cd:16:98:c4: 62:d7:6a:07:83:1f:78:84:4f:57:f9:d3:aa:4f:7c: 26:45:83:f7:e2:26:3c:0c:01:08:d5:d6:c7:09:74: 41:90:21:0c:a3:0c:95:5f:69:fb:4f:97:34:0d:b3: 65:62:bb:42:a9:14:ed:1c:bb:71:fe:c7:79:ef:07: 7e:82:72:a6:23:44:ee:e5:ab:63:9c:5a:3e:c9:63: 6b:ed:17:8b:56:88:54:16:2c:5b:26:7b:d7:2e:68: bc:d4:37:f9:88:2f:50:8d:d7:c3:f4:28:d1:4a:78: d5:42:37:ce:13:93:e1:9f:1b:20:bd:7e:1a:54:65: fa:6a:d1:54:0c:09:d0:65:72:b5:50:75:0b:29:d3: 16:96:62:46:ea:15:f0:6c:44:c5:c2:60:d8:63:79: 31:f9:0f:91:20:2e:65:6b:e7:45:a6:fa:72:1b:fc: 22:80:97:f1:9c:fd:a2:90:dc:a5:82:f7:75:86:f3: 32:e8:22:09:4c:9b:25:74:32:99:85:e2:3a:ae:81: fc:b8:f8:93:5f:8c:96:5f:6c:01:82:03:72:77:2b: bc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:40:32:C1:9D:E8:41:6F:37:79:A7:2E:4E:3F:DF:30:F1:BC:F0:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060/da8a4bf6-d3c9-3ad3-a825-0519a8133130.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060/3b70bdb6-9776-4d39-8f28-b4a225eb2060.crl X509v3 Authority Key Identifier: keyid:E6:26:AE:76:3C:3B:91:4E:3E:1D:46:9D:BB:AD:32:FD:B3:08:3E:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060.cer sbgp-ipAddrBlock: critical IPv4: 216.250.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:d7:ac:e3:77:83:7c:1b:71:b3:90:8c:9f:12:94:eb:eb:79: d8:d2:bb:74:ad:ec:94:8d:d9:45:7c:51:f7:95:ff:39:41:5a: fe:b3:84:91:5e:e1:4e:03:cc:12:5a:36:a4:72:5f:f2:46:32: 95:0f:60:32:2e:0a:38:eb:d3:67:23:f6:e1:28:66:93:59:b6: c2:de:eb:1b:4a:cf:17:d0:84:19:58:92:75:3c:bd:f7:96:f9: 4e:a1:79:e5:6b:46:37:83:f9:95:0d:cd:c9:2f:07:94:90:09: 8e:48:c6:2c:0d:f9:e5:a4:fb:8b:ba:7b:25:04:69:0e:db:80: 83:53:17:bb:9f:92:54:16:85:cf:45:f2:16:34:e6:ab:f0:1e: 71:b7:17:74:18:87:9e:b7:f9:f2:ea:37:d1:5e:57:f7:ba:7c: b4:26:c6:ca:88:61:20:ac:77:ae:25:13:58:72:8d:1d:76:25: d1:18:3d:51:f5:10:a6:27:99:bb:ed:24:68:50:2d:d2:9d:bc: 44:af:13:90:d7:cd:7d:64:a0:5f:52:3f:d0:ec:79:f6:c7:fd: 26:05:00:83:8a:5a:e5:7d:eb:d3:3d:37:1f:c4:6e:11:cf:04: 53:a4:99:5c:64:cb:3e:5f:54:b0:5f:93:81:ac:8a:18:37:1e: f8:07:ed:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi6VkEQFNHHVdEkDuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I3MGJkYjYtOTc3Ni00ZDM5LThmMjgtYjRhMjI1ZWIy MDYwMB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk ZjZjNTgyZTktNTlhYy00OTgyLTk4ZjQtODJhZTA1NDAyMTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tWjTseWYRmyazWzMDKLJ6jJxVf964idGmNV cjatkkzxFp6MVMPHB80WmMRi12oHgx94hE9X+dOqT3wmRYP34iY8DAEI1dbHCXRB kCEMowyVX2n7T5c0DbNlYrtCqRTtHLtx/sd57wd+gnKmI0Tu5atjnFo+yWNr7ReL VohUFixbJnvXLmi81Df5iC9QjdfD9CjRSnjVQjfOE5PhnxsgvX4aVGX6atFUDAnQ ZXK1UHULKdMWlmJG6hXwbETFwmDYY3kx+Q+RIC5la+dFpvpyG/wigJfxnP2ikNyl gvd1hvMy6CIJTJsldDKZheI6roH8uPiTX4yWX2wBggNydyu8HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5AMsGd6EFvN3mnLk4/3zDxvPDGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zYjcw YmRiNi05Nzc2LTRkMzktOGYyOC1iNGEyMjVlYjIwNjAvZGE4YTRiZjYtZDNjOS0z YWQzLWE4MjUtMDUxOWE4MTMzMTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2I3MGJkYjYtOTc3Ni00ZDM5LThm MjgtYjRhMjI1ZWIyMDYwLzNiNzBiZGI2LTk3NzYtNGQzOS04ZjI4LWI0YTIyNWVi MjA2MC5jcmwwHwYDVR0jBBgwFoAU5iaudjw7kU4+HUadu60y/bMIPnIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zYjcwYmRiNi05Nzc2LTRkMzktOGYyOC1iNGEy MjVlYjIwNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2PriMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXXrON3g3wbcbOQjJ8SlOvredjSu3St7JSN2UV8UfeV/zlBWv6zhJFe 4U4DzBJaNqRyX/JGMpUPYDIuCjjr02cj9uEoZpNZtsLe6xtKzxfQhBlYknU8vfeW +U6heeVrRjeD+ZUNzckvB5SQCY5IxiwN+eWk+4u6eyUEaQ7bgINTF7ufklQWhc9F 8hY05qvwHnG3F3QYh563+fLqN9FeV/e6fLQmxsqIYSCsd64lE1hyjR12JdEYPVH1 EKYnmbvtJGhQLdKdvESvE5DXzX1koF9SP9DsefbH/SYFAIOKWuV969M9Nx/EbhHP BFOkmVxkyz5fVLBfk4Gsihg3HvgH7fI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:15 2025 by rpki-client