$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/ae4c34e8-3fd6-37ff-9b2a-25c105448df0.roa File: ae4c34e8-3fd6-37ff-9b2a-25c105448df0.roa (raw, json) Hash identifier: rSRZFUR6D/hqGwT8pWQ/L9dX3YMnOsyq9dfvcj4Xoc4= Subject key identifier: BD:0C:A0:BB:22:F9:86:CC:2A:56:9A:0A:49:D4:A5:A5:35:9E:4D:06 Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F432858491D71824B918AF19E118B9C00 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/ae4c34e8-3fd6-37ff-9b2a-25c105448df0.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 19107 IP address blocks: 216.234.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:82:4b:91:8a:f1:9e:11:8b:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=3fc9469b-6b33-4924-bc1a-19a3a6e6a387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:90:f2:f0:a8:22:36:e8:33:6b:f9:a8:11:59: f6:4c:47:23:14:81:aa:91:97:8a:a9:e4:49:f1:bf: 3e:93:b6:96:50:dc:ed:68:17:40:f5:7d:4e:7e:14: 7f:00:62:cb:6f:f6:2f:60:c9:98:4a:b0:cb:5e:c3: f7:a1:b1:5f:42:71:e4:c8:ef:97:c7:a5:64:1f:54: f9:11:89:09:35:ab:2d:57:cc:f7:f4:be:6c:22:44: e0:03:92:39:50:1c:5a:2a:e4:9e:b7:1d:97:35:53: d2:a5:a4:14:68:c5:3b:4d:61:19:0c:e2:b9:71:91: 25:6a:33:d0:a1:cc:e7:ed:0c:9d:da:7d:7b:50:fd: ab:35:cb:2a:c7:c9:36:bd:03:75:59:fb:21:e8:6c: 9b:1c:f9:91:0b:b0:39:53:62:9d:eb:f1:f9:34:47: 3c:25:ec:e8:e6:17:4f:dd:b0:01:59:45:6f:14:4d: 39:34:a5:40:90:62:1a:ce:61:99:f2:a7:dc:ce:8d: 66:12:b9:38:b6:4c:dc:f2:6a:f7:3a:1d:a5:12:cd: d2:57:80:e3:8e:bd:9c:e4:fd:80:27:e4:40:72:da: 18:78:08:44:5e:cf:2d:86:87:15:ac:a4:6e:c3:65: 00:10:ed:c0:ba:24:2d:0f:76:6d:81:8f:ba:ed:8e: 97:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0C:A0:BB:22:F9:86:CC:2A:56:9A:0A:49:D4:A5:A5:35:9E:4D:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/ae4c34e8-3fd6-37ff-9b2a-25c105448df0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 216.234.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:c7:db:32:5d:e2:d3:c3:78:e8:1c:b0:d7:e3:e7:53:6c:f5: 1f:29:a2:e6:7a:99:d5:a1:dc:fc:0d:00:43:32:00:ae:2b:d3: 59:58:85:cc:a1:38:c5:0b:59:34:5b:37:96:b1:ca:76:22:cd: f4:f2:26:85:cc:29:d2:c6:05:0e:f6:01:a3:e5:a4:a6:48:ba: 6c:d0:56:df:d6:10:2c:ee:71:e9:37:12:ff:2e:bc:08:40:af: f8:df:d9:11:59:4f:1b:8f:5c:b0:35:17:a0:fa:c1:ce:1d:79: 2c:9e:95:ce:ac:57:9e:37:79:9b:3c:22:be:f0:79:03:4d:5f: e1:b6:81:6c:91:07:8c:7e:3d:c4:f9:95:af:55:5d:4d:c7:8f: 32:55:8d:40:c8:18:68:0f:3c:d6:1a:c9:40:b9:c6:ff:77:73: 6c:2b:29:af:e4:e5:d9:3e:a1:3d:81:c6:ec:43:24:14:2e:69: 2b:b8:93:a3:1e:20:de:9e:58:23:17:19:e0:9c:75:af:d1:97: bb:b8:5e:72:7a:c6:49:61:84:ef:1a:66:f8:5c:ae:2c:7c:61: 0a:c3:4e:7a:cd:c4:52:50:b9:f8:80:98:54:f7:a1:bf:20:9a: 27:da:be:d6:9e:6c:4c:ad:4e:8d:63:dc:9d:86:ae:e9:54:b5: 90:c0:f6:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcYJLkYrxnhGLnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk M2ZjOTQ2OWItNmIzMy00OTI0LWJjMWEtMTlhM2E2ZTZhMzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5Dy8KgiNugza/moEVn2TEcjFIGqkZeKqeRJ 8b8+k7aWUNztaBdA9X1OfhR/AGLLb/YvYMmYSrDLXsP3obFfQnHkyO+Xx6VkH1T5 EYkJNastV8z39L5sIkTgA5I5UBxaKuSetx2XNVPSpaQUaMU7TWEZDOK5cZElajPQ oczn7Qyd2n17UP2rNcsqx8k2vQN1Wfsh6GybHPmRC7A5U2Kd6/H5NEc8Jezo5hdP 3bABWUVvFE05NKVAkGIazmGZ8qfczo1mErk4tkzc8mr3Oh2lEs3SV4Djjr2c5P2A J+RActoYeAhEXs8thocVrKRuw2UAEO3AuiQtD3ZtgY+67Y6XEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0MoLsi+YbMKlaaCknUpaU1nk0GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvYWU0YzM0ZTgtM2ZkNi0z N2ZmLTliMmEtMjVjMTA1NDQ4ZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfH2zJd4tPDeOgcsNfj51Ns9R8pouZ6mdWh3PwNAEMyAK4r01lYhcyh OMULWTRbN5axynYizfTyJoXMKdLGBQ72AaPlpKZIumzQVt/WECzucek3Ev8uvAhA r/jf2RFZTxuPXLA1F6D6wc4deSyelc6sV543eZs8Ir7weQNNX+G2gWyRB4x+PcT5 la9VXU3HjzJVjUDIGGgPPNYayUC5xv93c2wrKa/k5dk+oT2BxuxDJBQuaSu4k6Me IN6eWCMXGeCcda/Rl7u4XnJ6xklhhO8aZvhcrix8YQrDTnrNxFJQufiAmFT3ob8g mifavtaebEytTo1j3J2GrulUtZDA9gY= -----END CERTIFICATE-----Generated at Fri Mar 14 10:58:46 2025 by rpki-client