$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/aede1be0-6c9a-325b-8567-3f1cda5866ec.roa File: aede1be0-6c9a-325b-8567-3f1cda5866ec.roa (raw, json) Hash identifier: L3GpXxzwFDtF/QXyw153FHXqF8vWQs9kPXEplqetSRY= Subject key identifier: 9B:88:C8:84:56:E8:2E:4F:1B:6A:D8:5A:66:A2:C2:D6:FB:79:3F:EE Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584957F411831D5AE757FE6F0654 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/aede1be0-6c9a-325b-8567-3f1cda5866ec.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 23473 IP address blocks: 216.171.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:11:83:1d:5a:e7:57:fe:6f:06:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=7d653ee1-4cdd-4630-85c5-71bb19d7d4e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1f:89:25:b2:f9:48:66:22:89:31:7f:20:98: 85:12:ec:df:c4:25:f2:26:06:e3:03:ed:97:d0:1f: a1:1c:8f:3d:70:da:bb:13:e5:21:8f:ec:30:c7:ea: ec:3d:f6:bd:40:7f:54:86:72:ea:f9:79:a4:e0:ab: 63:d1:57:4d:74:a5:4b:8d:35:b7:28:e5:42:85:b3: fc:49:0b:d4:93:b4:69:96:74:e5:b7:42:a7:62:e5: ac:35:63:b4:65:93:3d:83:3a:c5:85:be:32:ad:cf: 8e:79:16:40:ea:a8:c5:9b:9e:84:88:5c:41:bb:17: 71:0d:14:5e:8a:24:60:90:5c:3b:32:dd:4f:33:af: 89:11:f9:18:e8:de:00:d0:53:10:b4:53:67:5f:a2: 60:68:69:91:df:de:c1:d3:64:ba:f4:d4:85:0d:ee: 6f:80:e7:79:88:4e:01:9d:17:f1:a3:6b:69:c0:56: 94:87:40:7a:5f:c8:8e:31:17:99:87:cd:78:82:cc: 9a:cd:f1:0a:88:5f:f6:dc:6d:3c:dd:84:05:6e:f4: 7c:5c:d6:8e:be:a5:85:30:6d:b2:fc:12:7a:f5:63: 13:38:ea:e9:d4:50:9c:47:74:04:47:9e:50:db:94: 2a:54:80:5a:10:dc:15:55:1c:f8:f4:18:bd:f3:da: 49:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:88:C8:84:56:E8:2E:4F:1B:6A:D8:5A:66:A2:C2:D6:FB:79:3F:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/aede1be0-6c9a-325b-8567-3f1cda5866ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:0b:95:09:e5:d6:b5:7c:5b:c1:70:5d:0a:fc:51:13:26:ab: dc:fe:0d:74:83:b8:ce:43:c0:68:72:4d:db:a9:20:3a:50:0b: fa:9e:2a:3d:b2:48:3a:4a:0d:c9:d2:38:73:2f:fa:35:9a:ce: ff:7d:b4:c3:79:d0:85:05:9d:ef:7b:7a:d9:f5:1e:9d:f6:bf: a5:bb:4d:54:7b:74:62:32:5b:c8:d8:2e:c0:1d:78:27:43:ce: 6e:ab:5f:da:36:36:14:48:1c:ff:c1:bc:d4:20:a9:dc:24:6d: de:78:9b:8d:8e:88:eb:fd:9f:52:27:ec:5e:bf:86:60:ba:ae: 40:8d:7c:f3:75:db:36:49:eb:1c:ea:2b:19:47:b2:f7:a8:98: 13:4b:f3:f1:b6:e3:0d:e9:67:14:54:de:08:33:1f:26:7b:ba: 8b:34:ff:90:5b:57:9c:01:fa:96:68:f4:c0:a7:ab:c6:a4:f3: bf:51:1b:42:40:17:02:09:4c:6e:0f:f3:51:47:5b:1c:b0:25: 06:36:c5:85:99:89:8b:0a:1e:f6:79:79:b8:0f:e7:af:ce:48: 1c:88:b0:bb:50:87:ad:fc:33:23:04:d6:c4:33:b9:ab:ef:4f: 56:8d:a1:93:a1:81:1f:30:29:a8:ae:25:91:43:3c:7e:1d:70: fb:d3:62:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9BGDHVrnV/5vBlQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk N2Q2NTNlZTEtNGNkZC00NjMwLTg1YzUtNzFiYjE5ZDdkNGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR+JJbL5SGYiiTF/IJiFEuzfxCXyJgbjA+2X 0B+hHI89cNq7E+Uhj+wwx+rsPfa9QH9UhnLq+Xmk4Ktj0VdNdKVLjTW3KOVChbP8 SQvUk7RplnTlt0KnYuWsNWO0ZZM9gzrFhb4yrc+OeRZA6qjFm56EiFxBuxdxDRRe iiRgkFw7Mt1PM6+JEfkY6N4A0FMQtFNnX6JgaGmR397B02S69NSFDe5vgOd5iE4B nRfxo2tpwFaUh0B6X8iOMReZh814gsyazfEKiF/23G083YQFbvR8XNaOvqWFMG2y /BJ69WMTOOrp1FCcR3QER55Q25QqVIBaENwVVRz49Bi989pJbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuIyIRW6C5PG2rYWmaiwtb7eT/uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYWVkZTFiZTAtNmM5YS0z MjViLTg1NjctM2YxY2RhNTg2NmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoLlQnl1rV8W8FwXQr8URMmq9z+DXSDuM5DwGhyTdupIDpQC/qeKj2y SDpKDcnSOHMv+jWazv99tMN50IUFne97etn1Hp32v6W7TVR7dGIyW8jYLsAdeCdD zm6rX9o2NhRIHP/BvNQgqdwkbd54m42OiOv9n1In7F6/hmC6rkCNfPN12zZJ6xzq KxlHsveomBNL8/G24w3pZxRU3ggzHyZ7uos0/5BbV5wB+pZo9MCnq8ak879RG0JA FwIJTG4P81FHWxywJQY2xYWZiYsKHvZ5ebgP56/OSByIsLtQh638MyME1sQzuavv T1aNoZOhgR8wKaiuJZFDPH4dcPvTYrI= -----END CERTIFICATE-----Generated at Sun Apr 6 07:35:27 2025 by rpki-client