$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3ffe720f-9c01-3f65-95fd-5cd5f1e3d800.roa File: 3ffe720f-9c01-3f65-95fd-5cd5f1e3d800.roa (raw, json) Hash identifier: O9+AJ5zuZFK25t+7GcJYjXt0n2HhU/e4/LIV5jc55Wg= Subject key identifier: 87:5D:2D:1A:16:C6:40:E5:7C:9B:53:78:6E:19:12:E0:15:F5:E2:4E Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584961B9A24716D7DCFA464D6200 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3ffe720f-9c01-3f65-95fd-5cd5f1e3d800.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 12083 IP address blocks: 216.186.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:a2:47:16:d7:dc:fa:46:4d:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=10c7cf4e-9169-4a47-8622-8030f9d8cb83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:aa:f9:b4:2d:8d:d2:68:16:80:d8:1c:fe:99: c6:25:9d:96:2a:6d:01:48:11:cb:a8:6a:99:85:f5: b3:6a:c6:f5:b7:b1:e0:15:5e:64:a1:af:75:60:10: f3:12:12:9c:95:b4:d3:6d:3d:6f:7d:8d:72:eb:63: 68:85:d5:d5:5c:e3:17:54:7e:ae:89:1a:5e:43:3c: de:c0:f1:76:a7:12:c2:2b:57:51:9e:2b:42:f5:4f: 7d:8f:54:6b:14:45:09:e9:26:64:ef:bc:c5:58:0f: e5:7f:42:58:85:53:9f:fe:b5:54:55:f8:0e:ca:c4: 26:89:7b:4d:f7:fd:2e:bf:2f:8e:83:a6:90:df:82: e6:dd:43:cb:a7:ce:5d:a0:ff:c5:84:3b:88:47:7e: f4:d0:bd:e5:b3:e2:3c:37:85:67:a8:4f:0f:45:99: 61:39:98:d6:61:a5:67:d6:12:f0:0e:35:a9:6a:b8: ed:4b:c1:72:a8:1f:36:7c:5c:0b:1e:9f:2c:4c:dd: e7:af:e2:90:43:05:8b:bf:ef:ec:e8:f4:d9:e4:8e: dd:5a:a9:ab:83:dd:b3:13:e8:49:43:e8:0a:a9:6d: 56:70:55:d0:b6:b7:1b:c1:34:b7:25:21:a9:e0:bd: ca:ad:84:b1:ca:69:4f:b8:15:b9:d7:85:b1:7c:11: f3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5D:2D:1A:16:C6:40:E5:7C:9B:53:78:6E:19:12:E0:15:F5:E2:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3ffe720f-9c01-3f65-95fd-5cd5f1e3d800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 216.186.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:23:d8:c9:61:17:32:93:4b:e4:2c:df:63:59:78:11:0a:0b: 70:01:fd:bd:32:6a:43:c1:6d:70:5d:a8:1d:db:e7:86:64:93: 86:a2:21:3e:08:24:f2:2f:6f:96:6d:51:34:22:3c:bb:54:9c: 3d:a7:27:ee:a5:07:ed:b0:37:ce:d6:9d:64:5e:5b:c7:63:3d: 2f:c0:82:31:7c:41:de:3d:7b:15:27:10:ba:79:67:29:19:33: 89:ed:ce:38:8a:40:e5:d7:24:99:d2:9d:6d:0c:5b:00:b2:ad: d7:b7:58:35:99:ba:8f:18:4b:a1:9c:9f:01:38:14:10:42:a1: cb:0a:54:ad:f2:50:b1:e3:34:dd:2d:ec:89:10:72:a4:5f:4f: 61:56:ac:e9:77:22:9a:ff:e9:95:a4:d8:f5:57:2a:e1:3e:94: 43:a4:07:b6:b9:63:9b:e9:2d:7d:6d:81:a0:2a:a5:0c:b2:cf: 06:d8:4b:4f:2b:0c:c0:01:cc:db:9d:64:39:15:03:e5:b5:da: 81:61:be:06:e8:bf:fc:1a:bb:c1:54:b4:b9:29:4c:ff:c1:05: 85:b3:0d:dc:82:6a:84:8b:30:0c:0a:6a:7f:29:52:14:42:7b: 90:54:12:39:ef:79:1a:79:14:57:7a:94:33:be:c9:52:27:cc: 17:a7:e9:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuaJHFtfc+kZNYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk MTBjN2NmNGUtOTE2OS00YTQ3LTg2MjItODAzMGY5ZDhjYjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6r5tC2N0mgWgNgc/pnGJZ2WKm0BSBHLqGqZ hfWzasb1t7HgFV5koa91YBDzEhKclbTTbT1vfY1y62NohdXVXOMXVH6uiRpeQzze wPF2pxLCK1dRnitC9U99j1RrFEUJ6SZk77zFWA/lf0JYhVOf/rVUVfgOysQmiXtN 9/0uvy+Og6aQ34Lm3UPLp85doP/FhDuIR3700L3ls+I8N4VnqE8PRZlhOZjWYaVn 1hLwDjWparjtS8FyqB82fFwLHp8sTN3nr+KQQwWLv+/s6PTZ5I7dWqmrg92zE+hJ Q+gKqW1WcFXQtrcbwTS3JSGp4L3KrYSxymlPuBW514WxfBHzzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIddLRoWxkDlfJtTeG4ZEuAV9eJOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvM2ZmZTcyMGYtOWMwMS0z ZjY1LTk1ZmQtNWNkNWYxZTNkODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Lq0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcj2MlhFzKTS+Qs32NZeBEKC3AB/b0yakPBbXBdqB3b54Zkk4aiIT4I JPIvb5ZtUTQiPLtUnD2nJ+6lB+2wN87WnWReW8djPS/AgjF8Qd49exUnELp5ZykZ M4ntzjiKQOXXJJnSnW0MWwCyrde3WDWZuo8YS6GcnwE4FBBCocsKVK3yULHjNN0t 7IkQcqRfT2FWrOl3Ipr/6ZWk2PVXKuE+lEOkB7a5Y5vpLX1tgaAqpQyyzwbYS08r DMABzNudZDkVA+W12oFhvgbov/wau8FUtLkpTP/BBYWzDdyCaoSLMAwKan8pUhRC e5BUEjnveRp5FFd6lDO+yVInzBen6cM= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:36 2025 by rpki-client