$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d38fbc1c-f507-303b-b2a2-33a124b143ca.roa File: d38fbc1c-f507-303b-b2a2-33a124b143ca.roa (raw, json) Hash identifier: PjbR8csPBwTzmRthfTOu2WGWIgIlawdFUeG4i5BZDDw= Subject key identifier: 08:8A:38:92:21:82:8A:32:A9:61:E9:30:85:87:16:C6:37:C5:D9:1E Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848BE86267CC7EF15D704D5B170 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d38fbc1c-f507-303b-b2a2-33a124b143ca.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 852 IP address blocks: 216.232.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:26:7c:c7:ef:15:d7:04:d5:b1:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=2a9a3458-a63c-4296-ad46-4ea2848fc922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:12:ce:6d:57:9f:af:c5:8b:95:e1:ea:8e:69: f8:50:1b:07:10:ba:9b:03:f5:13:01:5a:fd:56:e2: 11:45:60:7f:76:49:87:d6:b8:94:be:dc:5e:b6:2f: d0:21:19:de:e6:0d:2c:32:57:88:ec:12:c4:ac:21: e7:96:01:12:0b:40:d7:1d:38:56:53:5b:cc:43:c2: 09:18:cf:8a:71:0b:39:21:b5:5f:ef:9c:da:39:06: ad:83:3d:bc:b2:a4:82:eb:5b:8b:e5:d4:cf:4e:3c: 01:d5:74:3a:f2:26:96:42:94:36:f0:88:5c:55:22: 11:d3:bb:90:0a:43:8b:f4:bb:94:19:f3:8a:3e:a2: 31:91:45:ce:0f:d4:f1:4f:82:08:11:3e:af:a8:fd: 44:71:76:15:b8:59:7b:00:28:c3:48:d1:47:9f:06: 55:4f:87:f9:0b:04:90:29:a8:3b:9d:d8:40:f5:fa: 69:ed:0a:87:df:b9:aa:f0:9f:4f:4f:6e:db:f8:94: 90:b5:1a:c5:35:de:d1:3a:a4:a4:03:f8:40:12:63: 7e:0d:5a:ee:b2:0c:b6:48:f4:6c:22:f8:77:28:9c: 74:af:a1:81:46:9b:49:72:50:62:b6:3a:36:62:85: 70:80:7b:2d:1e:54:6b:76:3a:b0:f2:c4:c2:2a:13: f6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:8A:38:92:21:82:8A:32:A9:61:E9:30:85:87:16:C6:37:C5:D9:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d38fbc1c-f507-303b-b2a2-33a124b143ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 216.232.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:2c:75:6d:29:ac:27:04:fe:c3:98:f3:55:a1:f4:66:26:e8: 80:78:05:b4:54:46:ed:a0:6d:50:d4:04:d0:66:ef:81:d5:8d: 99:b4:05:56:60:25:5d:f7:fd:98:60:05:a6:54:8d:e3:49:af: e6:c2:36:45:9f:9e:5e:7f:c9:4b:dc:79:f1:41:9a:ca:13:2a: ad:4e:25:94:ce:04:e9:9d:d8:d0:f0:7b:fd:d1:96:55:97:23: 72:8d:ee:4c:19:d2:95:6f:c8:c5:e0:11:82:7c:8b:d3:d7:86: 29:70:e2:59:63:04:d1:2c:00:d9:82:3b:45:7c:b4:ad:f2:0e: 50:3d:9f:fb:60:85:38:fd:43:83:89:e0:30:39:91:77:04:27: 64:4c:7f:e2:72:9b:9b:1d:76:57:7a:e3:e6:85:43:c8:c8:eb: 63:8f:c1:ee:a6:04:b9:ca:81:68:27:29:e2:c9:81:45:a2:72: 60:0f:72:a7:39:f5:24:12:e7:6f:30:1d:24:03:e8:78:eb:e2: f2:47:45:b7:0e:5a:94:d3:4f:77:81:78:bd:68:f4:8e:69:2c: 2d:1d:e5:79:a3:84:de:94:b7:af:7f:ee:85:af:d8:06:5a:15: 63:3c:6d:ee:82:7c:cf:29:4e:74:20:62:aa:f2:e3:ce:19:3d: 51:2a:0b:00 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEi+hiZ8x+8V1wTVsXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk MmE5YTM0NTgtYTYzYy00Mjk2LWFkNDYtNGVhMjg0OGZjOTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xLObVefr8WLleHqjmn4UBsHELqbA/UTAVr9 VuIRRWB/dkmH1riUvtxeti/QIRne5g0sMleI7BLErCHnlgESC0DXHThWU1vMQ8IJ GM+KcQs5IbVf75zaOQatgz28sqSC61uL5dTPTjwB1XQ68iaWQpQ28IhcVSIR07uQ CkOL9LuUGfOKPqIxkUXOD9TxT4IIET6vqP1EcXYVuFl7ACjDSNFHnwZVT4f5CwSQ Kag7ndhA9fpp7QqH37mq8J9PT27b+JSQtRrFNd7ROqSkA/hAEmN+DVrusgy2SPRs Ivh3KJx0r6GBRptJclBitjo2YoVwgHstHlRrdjqw8sTCKhP2XQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAiKOJIhgooyqWHpMIWHFsY3xdkeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDM4ZmJjMWMtZjUwNy0z MDNiLWIyYTItMzNhMTI0YjE0M2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA2OgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAYyx1bSmsJwT+w5jzVaH0ZibogHgFtFRG7aBtUNQE0GbvgdWNmbQFVmAl Xff9mGAFplSN40mv5sI2RZ+eXn/JS9x58UGayhMqrU4llM4E6Z3Y0PB7/dGWVZcj co3uTBnSlW/IxeARgnyL09eGKXDiWWME0SwA2YI7RXy0rfIOUD2f+2CFOP1Dg4ng MDmRdwQnZEx/4nKbmx12V3rj5oVDyMjrY4/B7qYEucqBaCcp4smBRaJyYA9ypzn1 JBLnbzAdJAPoeOvi8kdFtw5alNNPd4F4vWj0jmksLR3leaOE3pS3r3/uha/YBloV Yzxt7oJ8zylOdCBiqvLjzhk9USoLAA== -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:39 2025 by rpki-client