$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/6dd66cf9-9f74-34a4-a53a-a90b79769ff8.roa File: 6dd66cf9-9f74-34a4-a53a-a90b79769ff8.roa (raw, json) Hash identifier: elL4HvPhlDZSxYYyJQ3tkTVkTwOoflTzL6htVSuzImM= Subject key identifier: C3:B5:72:09:C6:BC:DB:3F:39:F6:04:09:DB:14:0B:2B:69:A5:C8:DF Certificate issuer: /CN=f78a234f-9553-446a-965d-0bfffa402f1b Certificate serial: 010D0C9F4328584913AC3929CA1805341627D188 Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/6dd66cf9-9f74-34a4-a53a-a90b79769ff8.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 21706 IP address blocks: 216.59.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:39:29:ca:18:05:34:16:27:d1:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=9c9cb84f-0dfd-4ffc-92dc-aa80ee972bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:93:f8:8c:cb:37:9c:d3:76:b8:fe:c4:99:d6: 9f:b4:a2:f8:c1:ff:26:67:c6:ee:cb:f6:c6:4f:01: ac:93:d0:b8:97:ff:f3:b8:26:64:aa:a2:6d:65:3a: 27:0e:22:2a:ca:7a:0d:a9:8c:8f:c4:7c:77:04:a7: 30:3b:5c:2c:98:ee:d8:70:a9:d1:d1:0b:e8:86:92: 9f:90:65:48:12:5c:44:8b:b3:40:4c:10:8d:2c:cc: 9f:a0:b8:c2:26:72:38:8e:49:e1:43:48:ef:e3:6f: 9f:8d:a1:6c:34:61:ba:ce:1f:cd:df:21:8c:29:c3: eb:55:aa:99:93:19:0b:71:0f:bd:84:2d:13:68:07: f9:51:bd:0b:70:00:e4:a3:9a:29:88:f0:53:10:83: bd:35:fb:3f:41:d0:25:ae:be:e8:ec:8c:82:aa:15: 9a:93:94:de:62:28:93:94:8a:64:94:dd:b4:a3:03: 67:70:54:13:72:78:13:d6:0f:e9:95:23:42:51:61: ea:82:9c:b1:99:35:dd:26:b4:d4:27:f0:38:10:22: 5b:7d:76:99:7a:9a:22:2a:fb:87:f1:3b:14:ce:71: 38:c8:85:fb:32:c4:11:c6:d0:f2:8c:da:51:d2:67: 0f:e2:35:f1:ac:f1:01:7d:dc:76:f2:de:5d:9b:73: 48:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B5:72:09:C6:BC:DB:3F:39:F6:04:09:DB:14:0B:2B:69:A5:C8:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/6dd66cf9-9f74-34a4-a53a-a90b79769ff8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl X509v3 Authority Key Identifier: keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer sbgp-ipAddrBlock: critical IPv4: 216.59.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:a8:df:59:49:e9:c2:f5:33:53:ae:85:a3:7d:b1:8b:94:c3: 01:9f:c2:ee:fd:f5:91:6c:7e:0f:43:61:ee:49:7a:bc:7f:0f: 94:c5:8e:73:d5:89:d1:e4:dc:93:5d:20:91:f7:1b:0d:e6:45: 8b:96:09:73:ec:87:a0:c5:fd:aa:ec:51:db:1a:18:4b:13:53: 61:f1:d4:85:e6:61:26:13:7c:93:33:f4:8b:62:a2:26:ef:a5: b5:42:9e:69:e9:9c:d7:5c:a5:14:af:3d:7e:a8:e5:6e:cf:1c: 65:dc:a9:be:94:49:b5:31:0f:c2:36:05:d1:63:c5:70:d0:7b: 40:7c:b3:01:c8:b6:bf:89:12:ef:59:1a:5b:aa:f9:92:51:92: 39:f0:9a:b8:0b:e0:25:57:72:43:b8:2b:af:8f:08:8e:91:4d: 40:cc:a4:26:2e:e6:cb:10:27:66:06:d6:1e:30:b3:d1:24:82: 32:21:85:9d:3d:c8:67:55:98:68:50:41:73:4d:ab:96:1c:c9: bb:74:7f:77:5e:fa:ca:25:e3:57:56:6c:31:4a:5c:03:00:28: ef:da:6f:85:93:39:8c:dd:d1:44:fc:fe:ba:ea:b1:e2:22:a3: 2a:36:a4:98:48:9e:b4:4a:ac:93:f4:cb:09:fe:b7:39:4f:91: d6:8b:d4:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrDkpyhgFNBYn0YgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjc4YTIzNGYtOTU1My00NDZhLTk2NWQtMGJmZmZhNDAy ZjFiMB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk OWM5Y2I4NGYtMGRmZC00ZmZjLTkyZGMtYWE4MGVlOTcyYmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZP4jMs3nNN2uP7EmdaftKL4wf8mZ8buy/bG TwGsk9C4l//zuCZkqqJtZTonDiIqynoNqYyPxHx3BKcwO1wsmO7YcKnR0QvohpKf kGVIElxEi7NATBCNLMyfoLjCJnI4jknhQ0jv42+fjaFsNGG6zh/N3yGMKcPrVaqZ kxkLcQ+9hC0TaAf5Ub0LcADko5opiPBTEIO9Nfs/QdAlrr7o7IyCqhWak5TeYiiT lIpklN20owNncFQTcngT1g/plSNCUWHqgpyxmTXdJrTUJ/A4ECJbfXaZepoiKvuH 8TsUznE4yIX7MsQRxtDyjNpR0mcP4jXxrPEBfdx28t5dm3NI3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMO1cgnGvNs/OfYECdsUCytppcjfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhh MjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZmZmE0MDJmMWIvNmRkNjZjZjktOWY3NC0z NGE0LWE1M2EtYTkwYjc5NzY5ZmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjc4YTIzNGYtOTU1My00NDZhLTk2 NWQtMGJmZmZhNDAyZjFiL2Y3OGEyMzRmLTk1NTMtNDQ2YS05NjVkLTBiZmZmYTQw MmYxYi5jcmwwHwYDVR0jBBgwFoAUySL1rL077bzOZt54JOhaPckKjtYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhhMjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZm ZmE0MDJmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKeo31lJ6cL1M1OuhaN9sYuUwwGfwu799ZFsfg9DYe5Jerx/D5TFjnPV idHk3JNdIJH3Gw3mRYuWCXPsh6DF/arsUdsaGEsTU2Hx1IXmYSYTfJMz9Itioibv pbVCnmnpnNdcpRSvPX6o5W7PHGXcqb6USbUxD8I2BdFjxXDQe0B8swHItr+JEu9Z Gluq+ZJRkjnwmrgL4CVXckO4K6+PCI6RTUDMpCYu5ssQJ2YG1h4ws9EkgjIhhZ09 yGdVmGhQQXNNq5Ycybt0f3de+sol41dWbDFKXAMAKO/ab4WTOYzd0UT8/rrqseIi oyo2pJhInrRKrJP0ywn+tzlPkdaL1JI= -----END CERTIFICATE-----Generated at Wed Apr 9 12:43:41 2025 by rpki-client