$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/0568fe72-18f4-3078-87af-4c1fec2146c9.roa File: 0568fe72-18f4-3078-87af-4c1fec2146c9.roa (raw, json) Hash identifier: pzD+iOPO5jG4Yn9eyZMUm9h8Wd8E19FQ7dGIi6AnbpE= Subject key identifier: F2:F4:0D:71:A7:7E:E8:1C:03:C1:22:22:3D:3A:C0:20:49:EA:88:35 Certificate issuer: /CN=ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7 Certificate serial: 010D0C9F43285848D0ABB1279D6A45DBDB21CB90 Authority key identifier: FE:60:55:27:93:02:FF:AC:40:40:8A:E1:9C:5E:18:5C:52:F0:87:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/0568fe72-18f4-3078-87af-4c1fec2146c9.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 8075 IP address blocks: 216.126.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:b1:27:9d:6a:45:db:db:21:cb:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=ba13772c-0cce-410c-902c-6c29b2fe0450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:03:d9:ee:66:18:cb:e4:dd:fa:8a:7a:d1:c9: 87:74:87:53:85:f2:ab:8b:89:50:f9:84:09:6b:cb: 5c:07:5c:03:30:6c:04:bc:e9:23:02:09:b5:84:b6: 78:4e:a2:6b:3c:40:e9:c8:e1:b8:59:ab:db:55:7f: c3:ba:dd:70:ac:f0:ce:c9:e6:b2:89:83:80:05:72: 6e:a8:f5:26:3e:41:1a:89:3c:cf:53:8f:fd:f5:33: ae:08:b3:6b:3c:ad:1e:f6:2b:bc:9a:e2:a4:1a:cd: 2e:ed:78:b7:e6:2a:51:4b:e6:cd:5d:c9:e4:a0:91: f2:8e:cf:5b:79:dd:a2:71:c7:73:18:ab:26:ad:cb: 55:db:67:d8:04:e4:b1:01:51:f4:bd:4f:69:f3:91: 5f:f9:a3:0b:f1:a1:82:06:76:99:1f:8d:9b:44:10: a3:18:35:c4:bf:9f:52:2b:12:01:6d:6e:08:5c:07: b4:a9:11:91:db:1b:30:2c:df:f9:8d:4b:0d:ec:6a: ab:82:1d:9b:60:60:88:18:02:95:a9:62:1b:df:b5: 88:3f:af:52:0b:25:63:f7:7b:f6:4f:3c:e4:48:50: 4f:ec:dc:2a:1c:6f:1e:c4:c2:b1:20:8d:e1:44:d2: da:51:87:17:22:3a:c9:6d:91:a3:64:ec:28:4e:0f: 51:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F4:0D:71:A7:7E:E8:1C:03:C1:22:22:3D:3A:C0:20:49:EA:88:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/0568fe72-18f4-3078-87af-4c1fec2146c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.crl X509v3 Authority Key Identifier: keyid:FE:60:55:27:93:02:FF:AC:40:40:8A:E1:9C:5E:18:5C:52:F0:87:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.cer sbgp-ipAddrBlock: critical IPv4: 216.126.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:b6:d1:d4:c5:05:0e:7e:19:0a:6c:44:3e:61:2b:02:00:8a: 7e:7d:17:36:0d:ea:97:16:45:d0:2b:f2:63:d7:35:35:8a:75: 28:ef:07:08:25:00:fd:bf:87:21:c8:2d:ed:6b:da:2d:43:b1: 00:52:6c:5e:9c:83:04:33:9a:d6:06:28:cb:b5:d1:7a:64:e9: ad:8a:08:c1:dc:33:2f:f3:72:4b:0b:89:9c:94:05:5b:79:94: 3e:0e:f8:ae:85:b2:36:ef:45:2c:33:96:18:77:be:0a:07:a6: 4c:7c:cc:e9:55:55:59:60:14:22:3c:c0:bc:85:a8:70:c9:64: 61:2c:ca:af:9b:8e:c1:2e:d1:83:3f:f8:d9:91:97:b3:61:bd: 9e:09:40:d5:1d:09:4e:de:d2:e6:c2:b8:e5:12:41:12:29:ee: ab:ec:ac:07:f4:1f:ff:4c:18:bf:8e:c3:83:b2:dc:68:83:96: da:45:92:bc:2d:cd:7f:ca:f7:a9:cc:e0:eb:05:a9:c7:3a:23: 91:35:65:42:98:98:2f:8e:1f:14:e9:38:ee:9b:72:dd:ca:20: db:d2:c6:30:7d:8b:7d:b8:1c:74:b2:f1:c1:d6:c7:69:8b:45: a8:e3:ef:21:47:83:1e:1b:28:5f:f0:07:ac:e1:97:1a:32:b8: 3e:b4:47:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq7EnnWpF29shy5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQ2YzcwMDUtZjBmZS00NDExLTg1MzEtMGE5YzViOWIx YWE3MB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk YmExMzc3MmMtMGNjZS00MTBjLTkwMmMtNmMyOWIyZmUwNDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgPZ7mYYy+Td+op60cmHdIdThfKri4lQ+YQJ a8tcB1wDMGwEvOkjAgm1hLZ4TqJrPEDpyOG4WavbVX/Dut1wrPDOyeayiYOABXJu qPUmPkEaiTzPU4/99TOuCLNrPK0e9iu8muKkGs0u7Xi35ipRS+bNXcnkoJHyjs9b ed2iccdzGKsmrctV22fYBOSxAVH0vU9p85Ff+aML8aGCBnaZH42bRBCjGDXEv59S KxIBbW4IXAe0qRGR2xswLN/5jUsN7Gqrgh2bYGCIGAKVqWIb37WIP69SCyVj93v2 TzzkSFBP7NwqHG8exMKxII3hRNLaUYcXIjrJbZGjZOwoTg9RnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPL0DXGnfugcA8EiIj06wCBJ6og1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZDZj NzAwNS1mMGZlLTQ0MTEtODUzMS0wYTljNWI5YjFhYTcvMDU2OGZlNzItMThmNC0z MDc4LTg3YWYtNGMxZmVjMjE0NmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWQ2YzcwMDUtZjBmZS00NDExLTg1 MzEtMGE5YzViOWIxYWE3L2FkNmM3MDA1LWYwZmUtNDQxMS04NTMxLTBhOWM1Yjli MWFhNy5jcmwwHwYDVR0jBBgwFoAU/mBVJ5MC/6xAQIrhnF4YXFLwh5YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZDZjNzAwNS1mMGZlLTQ0MTEtODUzMS0wYTlj NWI5YjFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2H7WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ220dTFBQ5+GQpsRD5hKwIAin59FzYN6pcWRdAr8mPXNTWKdSjvBwgl AP2/hyHILe1r2i1DsQBSbF6cgwQzmtYGKMu10Xpk6a2KCMHcMy/zcksLiZyUBVt5 lD4O+K6FsjbvRSwzlhh3vgoHpkx8zOlVVVlgFCI8wLyFqHDJZGEsyq+bjsEu0YM/ +NmRl7NhvZ4JQNUdCU7e0ubCuOUSQRIp7qvsrAf0H/9MGL+Ow4Oy3GiDltpFkrwt zX/K96nM4OsFqcc6I5E1ZUKYmC+OHxTpOO6bct3KINvSxjB9i324HHSy8cHWx2mL Rajj7yFHgx4bKF/wB6zhlxoyuD60R2c= -----END CERTIFICATE-----Generated at Fri Apr 4 22:49:51 2025 by rpki-client