$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a30d1553-8516-3c6d-9b86-2948e9dc1d84.roa File: a30d1553-8516-3c6d-9b86-2948e9dc1d84.roa (raw, json) Hash identifier: 4yLIk6Hs2dVrgdZpyjr6s/ZCpk3ZHpeiN5ZJNJgkvbY= Subject key identifier: 1E:14:BA:8A:61:05:36:44:9D:5E:2D:91:92:70:F0:8F:5A:A4:1C:0C Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Certificate serial: 010D0C9F432858494B64101FD4E9D0DE9AA67300 Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a30d1553-8516-3c6d-9b86-2948e9dc1d84.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 19437 IP address blocks: 216.185.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:10:1f:d4:e9:d0:de:9a:a6:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=b29ac302-39d6-40da-8f81-5c95ca55aef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cc:89:3e:b4:2e:76:ad:d0:3a:f3:08:ae:da: dd:65:fe:89:1b:0c:48:73:98:04:c5:f2:f0:c7:ba: d6:86:20:1b:8b:1e:02:d1:ef:9f:ca:4a:b3:96:50: 2c:56:67:23:fb:f9:cb:13:10:30:c8:bd:2e:e7:c3: 70:f9:e0:06:1f:68:53:21:c3:22:40:c3:56:d0:95: 53:df:e5:69:25:33:6e:e6:d7:12:4f:7d:18:f5:28: e3:92:b5:35:ad:64:45:c5:43:3e:96:14:4b:bc:14: c7:b3:d1:68:2a:12:9c:29:dc:9e:3a:bc:5d:9b:0e: b6:fe:b0:f7:10:a1:dc:8e:e7:4f:38:f4:c6:c0:e9: 2a:b6:7d:2d:b6:18:8c:8d:8b:4a:b0:ab:a0:0c:5b: 5a:76:da:49:50:58:9b:d4:48:32:c0:ca:ab:08:19: 1a:84:1f:b2:6c:99:9e:f4:00:52:61:fa:3f:ba:8a: 25:91:6f:f1:c4:e5:fb:15:91:5e:ba:4f:0d:8b:31: d5:50:ff:02:4f:0c:77:b3:43:76:88:5a:dc:26:24: b8:84:4b:83:e6:54:75:e1:12:49:a0:8c:3c:f2:6e: 22:e7:25:26:a8:39:5b:3d:4d:8d:84:46:a1:41:ef: 4d:63:0e:aa:83:39:f0:d2:8b:71:48:d3:de:a3:33: 62:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:14:BA:8A:61:05:36:44:9D:5E:2D:91:92:70:F0:8F:5A:A4:1C:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a30d1553-8516-3c6d-9b86-2948e9dc1d84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl X509v3 Authority Key Identifier: keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer sbgp-ipAddrBlock: critical IPv4: 216.185.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:68:0b:04:15:5f:9c:1c:8e:4b:02:7c:b6:dc:f8:f3:5f:0c: b9:55:c7:c1:f1:a9:31:f1:d3:bd:59:98:ad:fd:b0:f7:a1:20: 4b:02:f2:41:c5:81:ed:c9:62:35:45:74:29:66:5b:78:63:81: 26:a7:2d:80:b9:92:51:6c:ad:65:3f:a4:9f:36:20:db:d6:dd: c4:ec:b5:93:8b:a5:15:79:ff:7e:65:18:1d:70:bd:a3:42:5e: 0f:52:c3:5f:f3:01:c8:21:d1:b4:28:fd:ad:3a:d4:a1:36:5a: 7a:85:c7:85:d3:cf:d9:09:37:22:25:35:1c:f7:4b:04:7e:7b: 97:02:da:eb:6f:4d:40:ab:7e:b4:ae:bb:3e:97:a6:4e:fc:68: 5a:31:3f:e7:de:96:81:7a:2a:6c:6f:4a:57:4b:ae:87:01:52: a9:4c:5f:24:df:85:7f:0b:45:e1:db:4d:c0:ba:a4:fb:9c:95: e4:77:ad:06:d5:89:86:8f:4d:3e:8f:db:49:84:78:a8:7e:73: 03:5a:53:c6:d7:3c:a9:06:b8:23:8c:36:26:11:36:12:63:87: 40:2e:02:86:2a:af:61:8f:a2:03:04:81:a5:d0:1a:c6:32:19: a4:07:fb:97:d0:35:46:c4:b5:f9:21:88:bc:e7:be:c4:32:03: c7:1e:01:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBAf1OnQ3pqmcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk NWVlMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk YjI5YWMzMDItMzlkNi00MGRhLThmODEtNWM5NWNhNTVhZWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMyJPrQudq3QOvMIrtrdZf6JGwxIc5gExfLw x7rWhiAbix4C0e+fykqzllAsVmcj+/nLExAwyL0u58Nw+eAGH2hTIcMiQMNW0JVT 3+VpJTNu5tcST30Y9SjjkrU1rWRFxUM+lhRLvBTHs9FoKhKcKdyeOrxdmw62/rD3 EKHcjudPOPTGwOkqtn0tthiMjYtKsKugDFtadtpJUFib1EgywMqrCBkahB+ybJme 9ABSYfo/uoolkW/xxOX7FZFeuk8NizHVUP8CTwx3s0N2iFrcJiS4hEuD5lR14RJJ oIw88m4i5yUmqDlbPU2NhEahQe9NYw6qgznw0otxSNPeozNiTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4UuophBTZEnV4tkZJw8I9apBwMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5 MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvYTMwZDE1NTMtODUxNi0z YzZkLTliODYtMjk0OGU5ZGMxZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4 Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1 YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Lk8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADloCwQVX5wcjksCfLbc+PNfDLlVx8HxqTHx071ZmK39sPehIEsC8kHF ge3JYjVFdClmW3hjgSanLYC5klFsrWU/pJ82INvW3cTstZOLpRV5/35lGB1wvaNC Xg9Sw1/zAcgh0bQo/a061KE2WnqFx4XTz9kJNyIlNRz3SwR+e5cC2utvTUCrfrSu uz6Xpk78aFoxP+feloF6KmxvSldLrocBUqlMXyTfhX8LReHbTcC6pPucleR3rQbV iYaPTT6P20mEeKh+cwNaU8bXPKkGuCOMNiYRNhJjh0AuAoYqr2GPogMEgaXQGsYy GaQH+5fQNUbEtfkhiLznvsQyA8ceAZQ= -----END CERTIFICATE-----Generated at Sun Apr 6 01:11:58 2025 by rpki-client