$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0289596d-80f8-35c4-b20d-9d576f2262cf.roa File: 0289596d-80f8-35c4-b20d-9d576f2262cf.roa (raw, json) Hash identifier: EsK1tBsfLIA2S1pr/Wu5EBu7G8BV2ohB+W0PfGdaJls= Subject key identifier: FC:F4:2D:EC:B2:91:49:36:BB:B8:43:A2:AC:DA:92:8A:AE:96:CC:E6 Certificate issuer: /CN=0d51e326-4804-4f59-a629-20153f71b7fe Certificate serial: 010D0C9F43285848F22C6202DE2A281778872060 Authority key identifier: 4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0289596d-80f8-35c4-b20d-9d576f2262cf.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 216.230.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:62:02:de:2a:28:17:78:87:20:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d51e326-4804-4f59-a629-20153f71b7fe Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=d8a6a098-f025-44d6-a2d2-1cdd993e25d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ea:62:88:18:b6:28:fa:2f:53:4c:33:f7:1a: a6:de:cd:3c:c9:d3:ec:ab:6f:a8:cd:60:80:df:1e: 4d:84:cd:7b:c5:bc:80:69:3a:4a:4a:8f:b5:d2:c6: 93:7d:34:1f:e6:23:d5:e7:21:12:60:52:00:e9:89: df:ff:7b:61:aa:75:c3:c9:de:9b:a6:62:22:43:75: ea:1c:b5:12:00:bf:7a:5e:54:de:03:84:da:fc:30: 27:4e:d4:4e:a4:cc:66:44:68:fb:3f:78:ee:77:2a: a6:78:c0:b6:43:95:80:47:95:59:04:08:fe:54:71: db:8d:98:8f:82:48:00:1a:c6:f8:b0:d9:74:fc:71: 56:f3:8d:88:4b:2f:00:d9:cf:14:af:3d:ab:2a:8f: 86:19:1c:8c:61:3b:cc:ea:b7:80:ef:ac:ec:02:ee: 15:01:a8:1b:53:38:db:b7:22:7d:8b:e2:80:aa:9a: 42:a8:4f:0a:b3:2d:dd:d2:00:73:9c:aa:4d:c8:0a: fc:0f:91:de:dd:a4:cf:27:51:cb:30:ab:1d:45:25: 72:12:a2:17:f3:fa:cf:77:f8:f0:e8:01:61:b4:37: d9:27:e5:48:f4:47:73:8a:ce:9b:44:8f:63:a2:56: 72:48:6f:9d:23:63:8b:86:85:87:fc:64:c4:11:d0: 9e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F4:2D:EC:B2:91:49:36:BB:B8:43:A2:AC:DA:92:8A:AE:96:CC:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0289596d-80f8-35c4-b20d-9d576f2262cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl X509v3 Authority Key Identifier: keyid:4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer sbgp-ipAddrBlock: critical IPv4: 216.230.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:4a:a0:14:cb:86:e9:5e:1c:dd:26:89:65:7b:d1:05:5c:1b: 81:b4:cc:a1:81:71:ba:80:1e:ad:c8:3e:c0:b8:7e:3d:c7:59: 47:af:df:df:3d:25:d8:6d:a9:b5:4c:a5:d4:4c:f9:04:38:c0: f3:a2:99:57:db:b0:a2:a6:cc:73:ba:1c:c0:6a:7d:ab:e9:52: bf:48:02:4d:c0:a0:2b:4e:ec:3e:81:ed:38:73:55:6d:bb:42: ff:0f:29:85:63:af:f7:a7:b9:5e:6b:bd:af:2a:ad:13:74:03: c5:62:c0:d9:e0:88:4a:72:32:c7:8a:4e:17:e1:c6:c3:ba:fe: 00:cf:8c:e8:87:59:89:5f:e3:42:55:79:0d:73:cf:3b:a8:1e: 62:3c:53:81:5b:8a:4b:09:cc:a3:6d:30:b2:2f:42:1e:db:31: ea:f1:94:47:7a:e5:e1:07:13:44:01:4d:32:92:b8:f8:89:37: 36:5e:93:76:41:94:d5:ef:d7:c4:b2:cb:08:8f:8f:c4:76:71: 17:69:be:41:b8:a7:ac:53:bf:ac:bc:06:0b:0a:7a:3b:76:72: c1:55:4b:a8:ae:68:c2:6a:28:42:05:c5:0c:95:75:f8:e6:04: f8:73:8e:00:ff:7d:23:0a:71:8b:a1:db:5b:d7:12:42:97:3d: 6a:4b:e4:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGIC3iooF3iHIGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ1MWUzMjYtNDgwNC00ZjU5LWE2MjktMjAxNTNmNzFi N2ZlMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ZDhhNmEwOTgtZjAyNS00NGQ2LWEyZDItMWNkZDk5M2UyNWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+piiBi2KPovU0wz9xqm3s08ydPsq2+ozWCA 3x5NhM17xbyAaTpKSo+10saTfTQf5iPV5yESYFIA6Ynf/3thqnXDyd6bpmIiQ3Xq HLUSAL96XlTeA4Ta/DAnTtROpMxmRGj7P3judyqmeMC2Q5WAR5VZBAj+VHHbjZiP gkgAGsb4sNl0/HFW842ISy8A2c8Urz2rKo+GGRyMYTvM6reA76zsAu4VAagbUzjb tyJ9i+KAqppCqE8Ksy3d0gBznKpNyAr8D5He3aTPJ1HLMKsdRSVyEqIX8/rPd/jw 6AFhtDfZJ+VI9Edzis6bRI9jolZySG+dI2OLhoWH/GTEEdCeEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPz0LeyykUk2u7hDoqzakoqulszmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDUx ZTMyNi00ODA0LTRmNTktYTYyOS0yMDE1M2Y3MWI3ZmUvMDI4OTU5NmQtODBmOC0z NWM0LWIyMGQtOWQ1NzZmMjI2MmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGQ1MWUzMjYtNDgwNC00ZjU5LWE2 MjktMjAxNTNmNzFiN2ZlLzBkNTFlMzI2LTQ4MDQtNGY1OS1hNjI5LTIwMTUzZjcx YjdmZS5jcmwwHwYDVR0jBBgwFoAUT2EwmFSHFXGDXF5KpgiIJWQjOKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDUxZTMyNi00ODA0LTRmNTktYTYyOS0yMDE1 M2Y3MWI3ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OYOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFKoBTLhuleHN0miWV70QVcG4G0zKGBcbqAHq3IPsC4fj3HWUev3989 JdhtqbVMpdRM+QQ4wPOimVfbsKKmzHO6HMBqfavpUr9IAk3AoCtO7D6B7ThzVW27 Qv8PKYVjr/enuV5rva8qrRN0A8ViwNngiEpyMseKThfhxsO6/gDPjOiHWYlf40JV eQ1zzzuoHmI8U4FbiksJzKNtMLIvQh7bMerxlEd65eEHE0QBTTKSuPiJNzZek3ZB lNXv18SyywiPj8R2cRdpvkG4p6xTv6y8BgsKejt2csFVS6iuaMJqKEIFxQyVdfjm BPhzjgD/fSMKcYuh21vXEkKXPWpL5O8= -----END CERTIFICATE-----Generated at Fri Mar 14 09:17:38 2025 by rpki-client