$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d73092b4-54aa-3405-a3ca-45d7d6798270.roa File: d73092b4-54aa-3405-a3ca-45d7d6798270.roa (raw, json) Hash identifier: mvmTEAVay+jDpOpQKLMhOIfg007a65VA8D0Nxsr3lUc= Subject key identifier: 0A:31:4F:A2:FB:85:E1:1A:5F:BD:67:2D:20:BB:2C:85:47:09:28:69 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F43285848910C68C8FD0AF144FF7A3E40 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d73092b4-54aa-3405-a3ca-45d7d6798270.roa Signing time: Thu 16 Jan 2025 19:04:06 +0000 ROA not before: Thu 16 Jan 2025 19:04:06 +0000 ROA not after: Wed 16 Apr 2025 18:04:06 +0000 asID: 23473 IP address blocks: 216.171.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:91:0c:68:c8:fd:0a:f1:44:ff:7a:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jan 16 19:04:06 2025 GMT Not After : Apr 16 18:04:06 2025 GMT Subject: CN=bf0ff36a-f343-4914-89ff-8a0ddc26fffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bc:4a:fa:0e:b2:bb:7a:d2:b8:b0:8e:5a:81: b5:4f:b0:76:f7:cf:ee:d3:92:14:ec:51:c4:9f:d9: f5:fe:a3:b6:62:b5:91:6c:26:2e:34:df:e9:8c:3b: bc:ac:83:16:85:43:1c:bb:8f:e5:69:a7:d9:83:d3: 54:57:08:06:06:75:b3:2a:c8:42:c3:c9:61:84:89: 01:fb:50:71:07:05:36:8d:36:4d:9d:9d:c8:43:b5: 72:f2:7e:81:81:7a:9a:33:ed:b2:2d:65:99:ec:f0: e5:47:6c:3e:5e:a9:da:c6:b1:e0:59:71:88:bf:76: dd:7c:7b:5c:9f:bc:03:d1:3c:8c:84:dd:34:e1:8c: c3:50:a8:ac:66:33:ba:9f:3f:7f:d1:56:ff:c7:73: af:4c:40:9d:54:d7:8e:b7:0f:0f:38:4f:04:03:cc: 99:72:5c:f0:14:fd:ec:60:cc:f8:2d:0f:d7:39:43: bc:63:5a:ec:18:0d:7c:14:b3:11:0c:4f:b5:72:15: 25:ca:d9:0f:b9:2a:b1:45:d0:d6:7d:7e:c2:03:08: 4d:8a:c4:7e:e9:54:19:91:c6:23:0e:67:ad:78:83: 83:2e:c2:dd:42:57:9b:7d:1f:97:f5:43:da:ab:a2: e6:bf:2d:13:23:07:99:84:6c:23:05:96:c8:31:6d: 5f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:31:4F:A2:FB:85:E1:1A:5F:BD:67:2D:20:BB:2C:85:47:09:28:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d73092b4-54aa-3405-a3ca-45d7d6798270.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:47:37:cd:b2:e6:28:3d:10:83:bc:89:71:47:e1:38:d1:20: 97:97:3e:50:41:9c:99:bd:8f:fe:d9:e5:93:2f:bb:f5:1e:d0: b8:53:34:b7:da:1c:b7:c8:21:e6:09:e8:2b:ae:eb:ff:d5:56: b4:11:0b:06:09:5c:34:df:bc:f3:3d:11:90:f9:50:23:ce:75: d7:b5:e7:e6:4e:e4:65:de:8f:58:43:c1:53:6c:81:79:1c:0f: 57:33:df:ab:3a:d0:dd:04:28:e6:14:33:e5:92:2a:7d:db:3f: c2:5a:5a:71:fe:91:e9:cc:76:70:8c:3d:73:3f:aa:03:6c:a9: 50:ef:a4:cc:4f:0c:64:dc:b4:bc:2f:6c:9e:73:4b:28:58:8f: cc:7c:22:c6:e9:e0:83:28:54:a2:a7:ba:70:ec:1c:e4:b4:35: c8:db:c2:4e:06:62:4d:33:2d:83:d9:23:2d:71:bc:78:df:d5: 13:f2:b7:08:63:f4:86:64:3a:97:6d:42:63:65:02:db:d3:c4: 39:90:fe:e3:43:3a:3a:9d:04:73:97:6b:2a:ff:81:8d:d9:8d: 87:bc:dc:f9:e5:a7:98:6f:23:cd:db:9d:67:ae:ed:a0:46:7d: ef:17:66:7e:72:e1:1d:49:60:39:d2:29:87:fe:28:7e:71:5b: b2:9e:9b:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiRDGjI/QrxRP96PkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDExNjE5MDQwNloXDTI1MDQxNjE4MDQwNlowLzEtMCsGA1UEAxMk YmYwZmYzNmEtZjM0My00OTE0LTg5ZmYtOGEwZGRjMjZmZmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrxK+g6yu3rSuLCOWoG1T7B298/u05IU7FHE n9n1/qO2YrWRbCYuNN/pjDu8rIMWhUMcu4/laafZg9NUVwgGBnWzKshCw8lhhIkB +1BxBwU2jTZNnZ3IQ7Vy8n6BgXqaM+2yLWWZ7PDlR2w+XqnaxrHgWXGIv3bdfHtc n7wD0TyMhN004YzDUKisZjO6nz9/0Vb/x3OvTECdVNeOtw8POE8EA8yZclzwFP3s YMz4LQ/XOUO8Y1rsGA18FLMRDE+1chUlytkPuSqxRdDWfX7CAwhNisR+6VQZkcYj DmeteIODLsLdQlebfR+X9UPaq6Lmvy0TIweZhGwjBZbIMW1fYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoxT6L7heEaX71nLSC7LIVHCShpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZDczMDkyYjQtNTRhYS0z NDA1LWEzY2EtNDVkN2Q2Nzk4MjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5HN82y5ig9EIO8iXFH4TjRIJeXPlBBnJm9j/7Z5ZMvu/Ue0LhTNLfa HLfIIeYJ6Cuu6//VVrQRCwYJXDTfvPM9EZD5UCPOdde15+ZO5GXej1hDwVNsgXkc D1cz36s60N0EKOYUM+WSKn3bP8JaWnH+kenMdnCMPXM/qgNsqVDvpMxPDGTctLwv bJ5zSyhYj8x8Isbp4IMoVKKnunDsHOS0Ncjbwk4GYk0zLYPZIy1xvHjf1RPytwhj 9IZkOpdtQmNlAtvTxDmQ/uNDOjqdBHOXayr/gY3ZjYe83Pnlp5hvI83bnWeu7aBG fe8XZn5y4R1JYDnSKYf+KH5xW7Kem0E= -----END CERTIFICATE-----Generated at Sun Apr 6 05:13:43 2025 by rpki-client