$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/c691cfa1-fff7-31ab-81e0-49c485b3b87e.roa File: c691cfa1-fff7-31ab-81e0-49c485b3b87e.roa (raw, json) Hash identifier: T7q5sovp0+oG9+IOlCX8TCKuFfUgr9Zgv66qLy+dvO4= Subject key identifier: 93:F6:0C:62:3F:09:06:13:A3:90:03:DE:1E:01:43:74:B7:0E:9F:84 Certificate issuer: /CN=8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21 Certificate serial: 010D0C9F432858487A20866643604CBC870CD140 Authority key identifier: E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/c691cfa1-fff7-31ab-81e0-49c485b3b87e.roa Signing time: Wed 08 Jan 2025 14:00:51 +0000 ROA not before: Wed 08 Jan 2025 14:00:51 +0000 ROA not after: Tue 08 Apr 2025 13:00:51 +0000 asID: 16509 IP address blocks: 216.250.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:20:86:66:43:60:4c:bc:87:0c:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21 Validity Not Before: Jan 8 14:00:51 2025 GMT Not After : Apr 8 13:00:51 2025 GMT Subject: CN=5b3a011e-c302-4ce6-a3d9-e11d503d5587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:74:97:4c:4f:20:57:b4:c4:4a:6f:63:50:70: e3:c9:6d:a3:e2:e5:ed:47:07:82:83:70:83:6a:2d: d3:c0:e9:f7:c1:48:a1:1d:28:34:89:b4:b5:b4:38: 2a:4a:e9:cd:d2:a4:14:60:a9:55:8e:e7:f3:34:56: 7c:b0:da:9f:49:2e:09:c6:f2:1e:c9:48:c7:a3:b4: 4a:ad:e8:6b:53:e0:fb:3d:83:38:64:fd:1a:09:ef: 24:07:42:ea:f5:39:24:3d:47:a2:21:4b:bf:30:c9: d3:4f:c7:50:8b:14:5c:ae:9e:8c:8c:f8:4c:c3:b0: fd:25:5e:a1:e0:ae:2d:f9:3b:28:ab:8a:09:4f:86: bf:ca:0c:de:ab:48:ac:1a:45:58:29:af:9f:db:97: 5b:07:e6:84:d1:25:6b:52:ce:71:e7:af:25:e7:aa: 13:6a:d9:d7:70:fc:00:28:d2:de:27:3c:4f:a5:07: a5:eb:44:c5:c0:d7:12:3c:54:f1:1c:a7:ec:bf:61: 91:3d:06:6a:39:46:44:f1:59:3d:6d:fe:c7:20:88: 32:87:90:27:f8:4a:f5:cc:5e:8f:cf:e8:5e:fd:f7: 8a:3e:51:b8:dd:d9:22:b8:91:b8:52:3c:64:f3:00: 98:76:92:96:bc:d7:81:74:7c:b0:bb:1f:c6:1c:2c: f2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F6:0C:62:3F:09:06:13:A3:90:03:DE:1E:01:43:74:B7:0E:9F:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/c691cfa1-fff7-31ab-81e0-49c485b3b87e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.crl X509v3 Authority Key Identifier: keyid:E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer sbgp-ipAddrBlock: critical IPv4: 216.250.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:41:d6:ea:8b:77:7c:76:f9:01:95:e4:d7:e3:4e:a0:63:3a: ca:24:1c:8f:47:e0:18:10:45:e3:e7:9e:a2:ac:fa:38:1f:08: c4:fe:2e:6f:4c:95:36:6f:15:58:ce:80:0c:6d:4f:0b:da:97: 4c:37:a6:81:5a:cb:3d:68:e0:4f:8f:1b:30:84:f3:f9:31:25: 45:be:4c:ba:da:08:e2:4d:8e:60:01:c2:00:5d:48:91:40:24: d3:b6:42:c2:17:82:a9:15:e1:1d:00:cd:ff:16:e6:13:49:27: 88:40:78:1a:a6:78:a5:35:37:f7:7e:9b:03:89:5e:68:9e:1c: a7:90:b7:b9:e4:59:45:c8:8d:95:90:99:00:7b:db:3f:aa:e4: b2:de:13:2e:58:ee:fe:59:84:db:6a:40:44:d0:8d:55:ce:0b: 5f:27:fe:77:9d:49:3e:76:f3:1c:a1:51:90:c6:bc:df:e1:88: 9e:9a:18:cd:ef:ed:39:ee:81:63:63:ba:aa:00:61:c5:f5:23: 16:30:b0:ab:0e:40:e0:57:59:f6:d8:8a:90:ba:ee:38:06:e3: 94:4c:c4:d6:66:86:af:8a:45:14:af:0d:2d:cd:37:1a:53:4d: d2:0c:2a:25:cb:0e:f2:7a:61:49:cf:72:27:00:cc:50:a7:01: cb:11:4b:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IIZmQ2BMvIcM0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVlNTJiMGQtYjE1Yy00YjljLWFhM2EtM2Q0YTRkMzZh ZDIxMB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk NWIzYTAxMWUtYzMwMi00Y2U2LWEzZDktZTExZDUwM2Q1NTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3SXTE8gV7TESm9jUHDjyW2j4uXtRweCg3CD ai3TwOn3wUihHSg0ibS1tDgqSunN0qQUYKlVjufzNFZ8sNqfSS4JxvIeyUjHo7RK rehrU+D7PYM4ZP0aCe8kB0Lq9TkkPUeiIUu/MMnTT8dQixRcrp6MjPhMw7D9JV6h 4K4t+Tsoq4oJT4a/ygzeq0isGkVYKa+f25dbB+aE0SVrUs5x568l56oTatnXcPwA KNLeJzxPpQel60TFwNcSPFTxHKfsv2GRPQZqOUZE8Vk9bf7HIIgyh5An+Er1zF6P z+he/feKPlG43dkiuJG4Ujxk8wCYdpKWvNeBdHywux/GHCzy8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJP2DGI/CQYTo5AD3h4BQ3S3Dp+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84ZWU1 MmIwZC1iMTVjLTRiOWMtYWEzYS0zZDRhNGQzNmFkMjEvYzY5MWNmYTEtZmZmNy0z MWFiLTgxZTAtNDljNDg1YjNiODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGVlNTJiMGQtYjE1Yy00YjljLWFh M2EtM2Q0YTRkMzZhZDIxLzhlZTUyYjBkLWIxNWMtNGI5Yy1hYTNhLTNkNGE0ZDM2 YWQyMS5jcmwwHwYDVR0jBBgwFoAU4HQ5KtuU5tQjNF2pYbsPKOSydtgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84ZWU1MmIwZC1iMTVjLTRiOWMtYWEzYS0zZDRh NGQzNmFkMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2PoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZB1uqLd3x2+QGV5NfjTqBjOsokHI9H4BgQRePnnqKs+jgfCMT+Lm9M lTZvFVjOgAxtTwval0w3poFayz1o4E+PGzCE8/kxJUW+TLraCOJNjmABwgBdSJFA JNO2QsIXgqkV4R0Azf8W5hNJJ4hAeBqmeKU1N/d+mwOJXmieHKeQt7nkWUXIjZWQ mQB72z+q5LLeEy5Y7v5ZhNtqQETQjVXOC18n/nedST528xyhUZDGvN/hiJ6aGM3v 7TnugWNjuqoAYcX1IxYwsKsOQOBXWfbYipC67jgG45RMxNZmhq+KRRSvDS3NNxpT TdIMKiXLDvJ6YUnPcicAzFCnAcsRS+Y= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:09 2025 by rpki-client