$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/06b897cd-c149-375a-a100-7b8ecde282a5.roa File: 06b897cd-c149-375a-a100-7b8ecde282a5.roa (raw, json) Hash identifier: lL2v37YzLr7NHH+nX6EYP1SqwvzhT127kx5fzParyFc= Subject key identifier: 64:78:AF:4E:5D:C3:07:53:C4:D9:52:7F:44:FE:42:06:DB:3A:0C:B4 Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F43285848F4F6975C4D9ECE8B1B5A0040 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/06b897cd-c149-375a-a100-7b8ecde282a5.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 13984 IP address blocks: 216.213.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:97:5c:4d:9e:ce:8b:1b:5a:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=9d391f3e-291c-4a90-b405-0354e29d23e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ec:86:5d:fb:b1:c3:d7:8d:54:cf:32:fa:b2: b1:22:01:f1:dc:01:12:6f:7d:db:0c:52:27:27:1a: 09:84:d0:47:96:aa:f6:c4:5d:bc:49:59:f4:ac:e0: 87:4e:f8:a5:b6:70:7c:b4:2d:c5:ba:49:09:05:2e: 2f:2e:28:fc:63:45:6c:a3:c5:ce:08:f5:07:93:ec: ba:7c:c5:99:b6:73:19:5e:e5:db:ca:cb:6c:51:eb: 4e:7f:06:46:14:97:95:c4:b8:e6:64:2e:7f:4b:1c: b3:a1:d9:fc:ac:b8:b2:ae:83:db:32:9f:5e:e9:c6: 98:33:a9:42:d6:d9:6e:7a:ad:dc:67:7f:83:52:bb: 52:81:0b:73:32:f0:93:f8:10:8b:88:57:16:03:dd: 02:bf:9e:19:a6:43:16:93:0a:cf:33:57:57:52:d1: 86:a8:f5:c0:58:14:48:17:e2:be:c6:ea:72:fc:ae: db:71:18:41:9e:12:25:4e:49:13:a3:b4:2f:6c:8c: 13:c7:c2:fb:13:af:c8:c7:fc:e8:6e:69:ae:b4:33: 80:b6:d4:cf:04:93:8d:50:ce:9b:6a:a2:5a:58:cd: bf:26:f8:12:bd:06:96:f3:90:ea:8e:6e:8e:ae:4d: 2c:4e:90:13:1e:43:c0:06:d5:ec:df:ec:b2:d9:9d: 59:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:78:AF:4E:5D:C3:07:53:C4:D9:52:7F:44:FE:42:06:DB:3A:0C:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/06b897cd-c149-375a-a100-7b8ecde282a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv4: 216.213.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:31:cd:5d:72:4d:33:11:47:b7:1f:0e:4d:a8:e8:45:f7:0a: a8:29:6e:20:6e:b8:e3:b9:c4:0e:1c:56:a1:59:2e:fa:8c:86: 58:5d:26:7d:68:39:0c:3b:b0:1e:f1:59:ac:3d:e7:9a:8c:53: 77:70:9b:55:82:02:b6:fb:d9:0d:45:62:2b:79:2a:11:54:f4: c9:2c:bf:01:95:e3:76:61:b1:45:7c:e0:98:c7:57:7c:42:1d: 5b:95:a8:4a:2a:68:e0:f3:d6:03:82:67:35:83:92:db:7b:20: c4:fd:f9:11:ed:ea:b8:ad:e2:ce:4e:2a:74:6a:6c:68:c2:98: 11:74:99:0c:f5:49:0e:9d:81:eb:a3:58:d6:2a:29:0d:cc:c1: 14:f2:e5:1c:33:b1:61:e3:eb:fa:25:cb:50:86:59:e8:f4:1f: 98:36:a5:67:f3:c6:de:72:58:4d:0d:4c:8f:b8:6a:b2:0e:b9: bf:c6:62:82:4c:d2:9f:1b:60:24:97:88:02:fc:89:e6:e0:a7: c7:e0:67:2f:85:49:07:88:17:bc:a8:e2:d3:de:2b:d5:66:ef: 52:55:fa:5c:90:bd:10:c7:fb:8b:0e:54:5e:a8:e2:fa:72:e4: e3:1e:bf:d0:0c:07:f1:aa:38:dd:b9:a9:a7:13:ae:70:27:2c: b4:53:ef:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09pdcTZ7OixtaAEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk OWQzOTFmM2UtMjkxYy00YTkwLWI0MDUtMDM1NGUyOWQyM2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOyGXfuxw9eNVM8y+rKxIgHx3AESb33bDFIn JxoJhNBHlqr2xF28SVn0rOCHTviltnB8tC3FukkJBS4vLij8Y0Vso8XOCPUHk+y6 fMWZtnMZXuXbystsUetOfwZGFJeVxLjmZC5/Sxyzodn8rLiyroPbMp9e6caYM6lC 1tlueq3cZ3+DUrtSgQtzMvCT+BCLiFcWA90Cv54ZpkMWkwrPM1dXUtGGqPXAWBRI F+K+xupy/K7bcRhBnhIlTkkTo7QvbIwTx8L7E6/Ix/zobmmutDOAttTPBJONUM6b aqJaWM2/JvgSvQaW85Dqjm6Ork0sTpATHkPABtXs3+yy2Z1Z+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGR4r05dwwdTxNlSf0T+QgbbOgy0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvMDZiODk3Y2QtYzE0OS0z NzVhLWExMDAtN2I4ZWNkZTI4MmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2NVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwxzV1yTTMRR7cfDk2o6EX3CqgpbiBuuOO5xA4cVqFZLvqMhlhdJn1o OQw7sB7xWaw955qMU3dwm1WCArb72Q1FYit5KhFU9MksvwGV43ZhsUV84JjHV3xC HVuVqEoqaODz1gOCZzWDktt7IMT9+RHt6rit4s5OKnRqbGjCmBF0mQz1SQ6dgeuj WNYqKQ3MwRTy5RwzsWHj6/oly1CGWej0H5g2pWfzxt5yWE0NTI+4arIOub/GYoJM 0p8bYCSXiAL8iebgp8fgZy+FSQeIF7yo4tPeK9Vm71JV+lyQvRDH+4sOVF6o4vpy 5OMev9AMB/GqON25qacTrnAnLLRT764= -----END CERTIFICATE-----Generated at Sat Apr 12 00:20:46 2025 by rpki-client