$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/5a606c85-561e-306f-971c-7cb0a887d723.roa File: 5a606c85-561e-306f-971c-7cb0a887d723.roa (raw, json) Hash identifier: n6a9Qe27JlpBQ8WWxcK6hKOYqr4XapLIXUiomhPRsAc= Subject key identifier: 12:91:06:32:A3:17:6C:30:6F:53:66:42:1C:35:28:77:99:AC:EC:32 Certificate issuer: /CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b Certificate serial: 010D0C9F43285849797442366F517522739CDF00 Authority key identifier: 19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/5a606c85-561e-306f-971c-7cb0a887d723.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 5377 IP address blocks: 216.9.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:42:36:6f:51:75:22:73:9c:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=9bc39299-8979-4758-ab81-eff20a13c365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:eb:dd:21:52:89:72:74:4c:3b:16:a6:f3:9d: d8:81:5b:e8:ff:eb:44:3e:65:a3:a0:db:f3:df:ba: de:0d:43:a9:f9:0f:52:4f:90:2b:98:c4:51:a6:3c: 7b:73:56:20:2b:91:d1:1d:95:a1:d7:e1:2e:99:e3: ce:1f:c3:a2:61:8f:ed:e3:1f:53:56:70:67:1b:b1: 2a:41:e9:0b:14:41:12:38:77:6e:29:05:29:95:d0: 6f:f3:d0:b2:99:fd:06:e9:4d:ab:94:23:e6:c5:2c: 60:c8:b4:aa:2f:11:bd:78:cb:38:21:d5:87:95:9e: 5b:ea:08:71:69:33:58:67:f3:34:06:cb:c7:8b:00: d9:d9:bb:3e:09:a0:2e:b9:54:5c:0d:37:ca:25:33: 64:fd:98:11:81:9b:92:bf:b7:95:5d:e3:8e:9e:97: d3:f0:46:ed:d9:40:f8:00:b3:b3:22:2c:42:d9:97: 69:15:2a:7c:ad:43:c9:b3:8b:72:43:bc:32:db:d2: 09:1e:f9:ef:ed:68:d3:b9:70:ac:ac:94:ce:df:cb: c6:45:ca:f3:c4:3c:4b:3e:ec:e0:6d:1c:30:d7:c0: 7c:b8:a6:19:80:0c:5e:81:e8:cc:04:d6:1c:31:a0: b9:57:f4:a0:6c:ae:7c:1e:70:59:98:eb:29:7a:0b: bb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:91:06:32:A3:17:6C:30:6F:53:66:42:1C:35:28:77:99:AC:EC:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/5a606c85-561e-306f-971c-7cb0a887d723.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl X509v3 Authority Key Identifier: keyid:19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer sbgp-ipAddrBlock: critical IPv4: 216.9.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:56:80:c7:d5:47:ec:2f:40:ba:f8:b9:65:08:d2:f4:e6:29: da:25:e3:19:3b:41:61:ea:a2:f4:cc:0a:57:58:91:23:71:57: 84:ed:55:da:70:29:1e:49:96:a4:ba:f7:00:78:ac:21:ff:e5: cf:65:5d:1c:6b:e6:22:95:e4:46:ee:fd:ff:13:ca:0b:d1:74: c8:94:d9:8a:f7:3c:62:7f:3d:ed:89:c2:e4:23:4c:91:ab:ce: ea:b2:9a:d6:19:2f:95:2c:05:df:a9:13:53:86:72:15:b9:82: c5:d8:1d:79:dd:04:ac:62:76:9a:84:2c:d1:23:25:d8:11:be: 38:d9:1c:f1:56:b2:71:be:9b:3f:f8:21:c6:7c:ee:b6:4a:f4: 9a:73:7d:cf:23:e4:5e:60:ce:21:16:79:8f:86:49:15:49:b0: 2a:87:a9:5a:32:63:9b:70:09:28:10:6b:14:8d:3d:5a:af:5d: a6:e6:7a:29:82:34:f8:1c:10:ae:34:73:df:70:3b:35:dc:06: cb:84:bd:30:60:e6:32:00:2f:43:b2:e7:df:ed:98:3a:12:5e: bb:a8:98:9f:28:1e:bd:8d:7b:8b:a3:75:19:6d:43:94:79:e3: 86:0b:dc:a3:f4:ee:27:fb:f0:63:b7:87:cc:59:32:3d:4f:8e: e5:ae:9b:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl5dEI2b1F1InOc3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzNGY2OGItMmY3Zi00ZWYzLWJkZWUtNWEwZTJkNjhh MDNiMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk OWJjMzkyOTktODk3OS00NzU4LWFiODEtZWZmMjBhMTNjMzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+vdIVKJcnRMOxam853YgVvo/+tEPmWjoNvz 37reDUOp+Q9ST5ArmMRRpjx7c1YgK5HRHZWh1+EumePOH8OiYY/t4x9TVnBnG7Eq QekLFEESOHduKQUpldBv89Cymf0G6U2rlCPmxSxgyLSqLxG9eMs4IdWHlZ5b6ghx aTNYZ/M0BsvHiwDZ2bs+CaAuuVRcDTfKJTNk/ZgRgZuSv7eVXeOOnpfT8Ebt2UD4 ALOzIixC2ZdpFSp8rUPJs4tyQ7wy29IJHvnv7WjTuXCsrJTO38vGRcrzxDxLPuzg bRww18B8uKYZgAxegejMBNYcMaC5V/SgbK58HnBZmOspegu7VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKRBjKjF2wwb1NmQhw1KHeZrOwyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzM0 ZjY4Yi0yZjdmLTRlZjMtYmRlZS01YTBlMmQ2OGEwM2IvNWE2MDZjODUtNTYxZS0z MDZmLTk3MWMtN2NiMGE4ODdkNzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMzNGY2OGItMmY3Zi00ZWYzLWJk ZWUtNWEwZTJkNjhhMDNiLzBjMzRmNjhiLTJmN2YtNGVmMy1iZGVlLTVhMGUyZDY4 YTAzYi5jcmwwHwYDVR0jBBgwFoAUGT96sPm60yA6FwWVB8+TKk6ScCwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzM0ZjY4Yi0yZjdmLTRlZjMtYmRlZS01YTBl MmQ2OGEwM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2AnkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdWgMfVR+wvQLr4uWUI0vTmKdol4xk7QWHqovTMCldYkSNxV4TtVdpw KR5JlqS69wB4rCH/5c9lXRxr5iKV5Ebu/f8TygvRdMiU2Yr3PGJ/Pe2JwuQjTJGr zuqymtYZL5UsBd+pE1OGchW5gsXYHXndBKxidpqELNEjJdgRvjjZHPFWsnG+mz/4 IcZ87rZK9Jpzfc8j5F5gziEWeY+GSRVJsCqHqVoyY5twCSgQaxSNPVqvXabmeimC NPgcEK40c99wOzXcBsuEvTBg5jIAL0Oy59/tmDoSXruomJ8oHr2Ne4ujdRltQ5R5 44YL3KP07if78GO3h8xZMj1PjuWum/M= -----END CERTIFICATE-----Generated at Sat Apr 12 11:19:36 2025 by rpki-client