$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9841a9ab-3f7f-38ad-b87c-5b34d9664937.roa File: 9841a9ab-3f7f-38ad-b87c-5b34d9664937.roa (raw, json) Hash identifier: 16PV3pwtTxUklPwsw9UHBhX4SotCHNi+iIWyfggSWew= Subject key identifier: 27:43:5D:B5:8D:A1:D7:0F:6A:E7:9A:3D:1A:18:71:B2:62:4C:71:63 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584957F4130E4EFE2C7CD15D91C0 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9841a9ab-3f7f-38ad-b87c-5b34d9664937.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 203963 IP address blocks: 216.24.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:13:0e:4e:fe:2c:7c:d1:5d:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=5c493d5e-d1fd-4d52-9045-dbd4f606d125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fa:7d:c8:bb:30:d4:75:31:19:50:e2:3d:ad: 02:88:c8:b5:d6:0e:2f:68:75:b5:e5:8f:b7:ee:ee: 9b:f9:fd:69:2c:61:44:3a:3b:04:28:14:bd:c8:44: 83:3f:29:97:b3:75:6c:3f:f9:82:3b:78:32:e3:3a: dc:f9:67:37:ce:d7:69:90:e2:50:c8:85:7e:b7:51: 9a:2b:3c:ee:aa:d1:40:60:29:f2:8e:42:93:b1:0d: bc:3d:fa:3a:f6:2b:5b:73:ec:07:60:68:6b:39:ca: 69:d4:51:ac:f9:91:7e:c2:77:3e:5e:04:87:df:d4: 99:3a:dc:19:cb:56:f5:31:38:e7:71:69:27:3d:a3: 5b:f6:b1:71:22:bf:79:ab:98:85:8c:5c:88:97:a9: 7b:ba:5a:fc:c9:04:30:51:40:1b:1a:a7:9c:aa:eb: fa:67:14:22:64:c7:05:04:e7:16:2b:e8:22:61:2d: c9:84:00:80:a5:12:10:de:5a:8b:40:47:77:64:a8: 68:7c:eb:74:41:9c:1d:0a:53:d3:df:70:ce:ea:f5: 80:36:05:b0:58:fc:fb:0a:6f:8e:e3:e5:93:27:1d: 6a:84:95:1c:7c:b9:3e:d8:ca:25:24:5d:3b:43:77: e8:15:16:e6:2c:79:45:40:a5:94:77:95:86:82:99: b6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:43:5D:B5:8D:A1:D7:0F:6A:E7:9A:3D:1A:18:71:B2:62:4C:71:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9841a9ab-3f7f-38ad-b87c-5b34d9664937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 216.24.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:16:9f:7b:0e:d7:35:c7:84:c6:a7:1b:9b:24:9f:5b:33:72: 35:bf:d5:c5:5b:41:34:dc:df:7b:15:38:3e:6d:f6:cb:b5:c5: 62:28:e2:3f:be:81:4a:5c:af:e6:00:ca:2a:81:70:5e:81:c8: 68:ea:f5:3d:ea:6c:22:73:8e:a7:fe:d2:e1:24:46:0c:72:fa: 06:2c:95:e5:ac:59:53:ba:6e:c7:7e:fc:a3:3e:49:fb:f7:41: fb:41:aa:fa:8c:e3:35:a6:ee:5d:3f:a4:39:f1:22:36:4e:5a: 89:8a:31:bd:43:49:f0:a4:5a:ff:bb:77:b8:2a:35:c1:0a:62: 40:3b:66:e7:8b:ae:15:c5:3d:4a:14:c0:72:f8:f7:75:58:9b: 9d:84:69:2b:8a:7a:4d:9b:e2:4d:7f:e3:ad:d6:b3:86:7c:74: 3f:fc:8d:9e:07:14:1a:83:c6:c0:94:7b:68:e1:69:d5:db:ed: 09:66:b3:4a:ab:e1:c1:fe:72:9c:17:24:30:95:f6:89:1a:25: 96:b5:22:7c:5d:31:3d:a4:bf:d2:8a:4c:d6:f9:04:a7:57:77: ce:6a:9d:6b:3a:e0:67:94:5a:7d:d4:0e:85:3c:12:ea:5a:88: 2d:66:d5:36:b0:90:76:dc:95:61:a9:c2:35:b1:6f:b8:93:fb: 89:a6:b4:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9BMOTv4sfNFdkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk NWM0OTNkNWUtZDFmZC00ZDUyLTkwNDUtZGJkNGY2MDZkMTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/p9yLsw1HUxGVDiPa0CiMi11g4vaHW15Y+3 7u6b+f1pLGFEOjsEKBS9yESDPymXs3VsP/mCO3gy4zrc+Wc3ztdpkOJQyIV+t1Ga KzzuqtFAYCnyjkKTsQ28Pfo69itbc+wHYGhrOcpp1FGs+ZF+wnc+XgSH39SZOtwZ y1b1MTjncWknPaNb9rFxIr95q5iFjFyIl6l7ulr8yQQwUUAbGqecquv6ZxQiZMcF BOcWK+giYS3JhACApRIQ3lqLQEd3ZKhofOt0QZwdClPT33DO6vWANgWwWPz7Cm+O 4+WTJx1qhJUcfLk+2MolJF07Q3foFRbmLHlFQKWUd5WGgpm2dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdDXbWNodcPaueaPRoYcbJiTHFjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvOTg0MWE5YWItM2Y3Zi0z OGFkLWI4N2MtNWIzNGQ5NjY0OTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0Wn3sO1zXHhManG5skn1szcjW/1cVbQTTc33sVOD5t9su1xWIo4j++ gUpcr+YAyiqBcF6ByGjq9T3qbCJzjqf+0uEkRgxy+gYsleWsWVO6bsd+/KM+Sfv3 QftBqvqM4zWm7l0/pDnxIjZOWomKMb1DSfCkWv+7d7gqNcEKYkA7ZueLrhXFPUoU wHL493VYm52EaSuKek2b4k1/463Ws4Z8dD/8jZ4HFBqDxsCUe2jhadXb7Qlms0qr 4cH+cpwXJDCV9okaJZa1InxdMT2kv9KKTNb5BKdXd85qnWs64GeUWn3UDoU8Eupa iC1m1TawkHbclWGpwjWxb7iT+4mmtNE= -----END CERTIFICATE-----Generated at Wed Apr 16 04:46:06 2025 by rpki-client