$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/8eb2e15a-cf22-3dc0-8673-f4024bc280a8.roa File: 8eb2e15a-cf22-3dc0-8673-f4024bc280a8.roa (raw, json) Hash identifier: e9TQtf7iMsMmLGZ9uPjLh0S55ftgxaBv1d80Ja7052U= Subject key identifier: 7D:CE:6F:5D:DC:BA:0A:42:E0:C3:63:9B:5E:EF:27:99:2A:1E:6C:AA Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F432858491D71899FCA3391F47E7EC300 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/8eb2e15a-cf22-3dc0-8673-f4024bc280a8.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 19107 IP address blocks: 216.234.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:89:9f:ca:33:91:f4:7e:7e:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=8e4406f9-d8cf-47f4-8262-b330247b1ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d8:a8:6c:2e:fe:b3:fc:71:10:c6:3c:51:91: 38:66:26:9c:89:ac:4a:74:4e:cf:c0:ce:dc:c1:20: 8a:09:f6:31:00:fc:8e:d7:3b:9d:fb:b2:0a:59:c5: b5:04:bf:5e:ca:7a:7c:ce:2c:73:3b:0b:13:b6:80: 49:13:14:fa:51:71:53:aa:b3:f3:59:90:33:19:c4: 9b:63:8c:ae:ac:10:48:52:1a:94:2a:21:d4:ea:62: 1b:c0:6f:85:e3:36:e2:38:28:97:22:66:44:cb:a4: 08:b9:01:48:05:2f:97:56:0a:b2:7a:f5:01:49:5f: 3d:bf:19:2f:cb:f5:7b:2d:d6:6d:f2:c7:73:dd:88: 0c:65:c2:b2:be:4e:9c:be:47:4f:40:86:33:67:8e: 55:a9:aa:d1:99:99:bf:9c:55:ab:09:1d:54:24:30: a9:64:63:31:ba:0d:b6:33:ba:f1:a0:77:8f:01:61: c1:77:80:b5:4c:96:51:b6:9b:1f:bf:d5:34:68:9c: 23:a1:e6:ee:24:95:0a:31:92:df:ce:c7:d8:bc:10: 6a:38:2f:2b:1a:08:ab:72:c6:5b:82:75:0e:c9:17: 40:77:50:04:81:cc:6f:c3:d2:7e:4b:11:b5:e0:d9: 53:1c:c1:b3:f6:ff:24:48:c9:4b:36:02:a3:70:60: a2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CE:6F:5D:DC:BA:0A:42:E0:C3:63:9B:5E:EF:27:99:2A:1E:6C:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/8eb2e15a-cf22-3dc0-8673-f4024bc280a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 216.234.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:af:23:0b:e8:4b:b4:4d:07:46:b7:a2:58:aa:91:9e:2a:89: b3:b1:ec:56:ce:63:19:d5:7c:ce:06:a4:19:76:ab:2e:ea:2e: 5e:0d:70:c5:75:8c:26:b5:9c:7e:8c:0e:31:1c:60:86:de:57: 6b:82:ca:f1:43:c7:0a:30:ed:c7:df:13:7c:3a:ac:d3:78:eb: d4:ef:51:0e:8a:5d:bb:72:27:d7:09:ec:b1:48:9a:23:d9:65: 09:0b:cf:72:68:3a:65:77:f2:ae:b5:31:8d:79:ca:46:39:e7: 9a:70:80:9c:12:f3:4c:55:87:b9:ab:b2:21:68:b4:0b:3d:6b: 43:f9:66:fc:07:d2:d8:31:40:c6:10:8e:e8:34:0f:52:73:e6: b4:56:d9:7c:cb:71:9d:80:8d:be:73:a3:41:77:28:dc:4b:63: ac:58:a5:82:dc:00:a0:19:ee:34:6b:ef:ef:d8:19:a2:77:1e: 93:a5:4f:0e:88:24:f5:dd:a1:d5:f3:7d:46:e5:f5:d6:f6:7a: d4:c8:30:71:87:d9:21:9a:19:48:6c:5c:c0:0b:b8:64:34:3a: fa:4f:89:65:62:6b:72:49:7c:16:a5:86:57:fe:bf:a1:75:6c: 19:71:4d:e5:90:68:51:a0:93:9c:5a:5a:78:dc:48:4c:fa:0b: d7:20:25:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcYmfyjOR9H5+wwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk OGU0NDA2ZjktZDhjZi00N2Y0LTgyNjItYjMzMDI0N2IxYmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNiobC7+s/xxEMY8UZE4ZiaciaxKdE7PwM7c wSCKCfYxAPyO1zud+7IKWcW1BL9eynp8zixzOwsTtoBJExT6UXFTqrPzWZAzGcSb Y4yurBBIUhqUKiHU6mIbwG+F4zbiOCiXImZEy6QIuQFIBS+XVgqyevUBSV89vxkv y/V7LdZt8sdz3YgMZcKyvk6cvkdPQIYzZ45VqarRmZm/nFWrCR1UJDCpZGMxug22 M7rxoHePAWHBd4C1TJZRtpsfv9U0aJwjoebuJJUKMZLfzsfYvBBqOC8rGgircsZb gnUOyRdAd1AEgcxvw9J+SxG14NlTHMGz9v8kSMlLNgKjcGCi2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3Ob13cugpC4MNjm17vJ5kqHmyqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvOGViMmUxNWEtY2YyMi0z ZGMwLTg2NzMtZjQwMjRiYzI4MGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OpNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACevIwvoS7RNB0a3oliqkZ4qibOx7FbOYxnVfM4GpBl2qy7qLl4NcMV1 jCa1nH6MDjEcYIbeV2uCyvFDxwow7cffE3w6rNN469TvUQ6KXbtyJ9cJ7LFImiPZ ZQkLz3JoOmV38q61MY15ykY555pwgJwS80xVh7mrsiFotAs9a0P5ZvwH0tgxQMYQ jug0D1Jz5rRW2XzLcZ2Ajb5zo0F3KNxLY6xYpYLcAKAZ7jRr7+/YGaJ3HpOlTw6I JPXdodXzfUbl9db2etTIMHGH2SGaGUhsXMALuGQ0OvpPiWVia3JJfBalhlf+v6F1 bBlxTeWQaFGgk5xaWnjcSEz6C9cgJYI= -----END CERTIFICATE-----Generated at Fri Mar 14 10:18:04 2025 by rpki-client