$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/429e8e55-3eec-3082-835f-dc4a34d15810.roa File: 429e8e55-3eec-3082-835f-dc4a34d15810.roa (raw, json) Hash identifier: thSDhB1Iyt0bOfwmAR7VF4YTkz1DF+pfMcjBNX+05cs= Subject key identifier: 16:8D:4A:22:4E:4E:1C:4B:C1:02:E7:4C:D7:96:A3:0B:8F:D8:ED:4C Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F43285848F65BD89E5F28F8713CB88380 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/429e8e55-3eec-3082-835f-dc4a34d15810.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 54238 IP address blocks: 216.213.104.0/22 maxlen: 22 216.213.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:d8:9e:5f:28:f8:71:3c:b8:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=3908f2fa-3ba7-42d3-919b-67b7aa723039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:46:c2:87:b8:4a:08:92:ed:a9:ab:8e:7d:2e: 72:0c:4f:40:77:27:4d:b4:88:df:87:a0:6d:3c:ba: 99:b2:78:2b:63:64:0f:68:21:86:44:ac:06:56:86: 03:d3:99:c4:9a:51:78:53:49:a5:ea:3a:7c:fc:78: c5:ef:35:ef:49:38:03:97:a1:6f:b8:3c:b5:5e:70: 51:b6:6d:4e:a7:ab:dc:aa:8a:d1:69:be:fa:2a:74: 79:61:f6:f0:69:76:c6:94:f0:e9:c6:f9:c9:9b:72: 03:e8:3c:23:87:60:9c:1d:52:b0:5b:e5:a8:0c:70: 13:12:9c:00:98:7a:df:8c:59:66:d8:ab:c0:06:4f: 9d:6b:eb:e4:a6:83:69:47:3e:de:21:5c:5b:46:b2: e9:26:d0:c6:1d:6c:fd:4b:0d:b9:db:85:07:81:88: b0:a3:0f:35:ec:5e:aa:8d:eb:1f:e9:fd:5a:87:14: 39:a6:ea:9f:57:18:a5:d4:fc:ae:a2:4d:ae:db:d7: e9:7a:9d:ad:43:a5:38:0b:b0:4e:6f:f8:1c:34:15: 64:39:bd:73:82:e8:f9:4c:2b:b5:d1:e1:56:2c:cf: 9b:2d:70:0a:06:1c:8f:dc:15:97:0b:59:8f:cf:86: 2b:79:41:e4:f9:5b:8e:86:1d:c4:b6:98:4c:cb:84: 0a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8D:4A:22:4E:4E:1C:4B:C1:02:E7:4C:D7:96:A3:0B:8F:D8:ED:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/429e8e55-3eec-3082-835f-dc4a34d15810.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv4: 216.213.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:dc:2c:ec:da:5f:a9:55:d7:91:41:f3:41:30:c6:8e:71:98: a7:33:24:37:ec:53:32:27:4d:cb:e9:31:60:29:7c:d5:56:0c: ce:b5:19:2a:ec:92:15:b9:88:73:6d:b9:25:79:99:ae:9d:8b: 21:59:28:ad:ad:25:56:90:08:78:ba:c6:55:61:bc:5a:79:27: ac:3f:a1:65:f2:5b:7b:78:0f:da:88:e8:12:17:f3:cb:83:f1: 85:b6:0b:67:b9:b1:7e:71:a1:e5:78:9c:31:3a:95:5c:5b:c4: 05:06:bb:d6:3b:b7:be:2b:e6:56:8e:a3:15:12:49:c1:51:84: 08:e5:03:32:b8:ec:fa:48:64:79:1e:cb:a3:e3:12:7d:f8:d7: 10:d3:a3:37:e0:70:6d:8a:d6:cb:9f:7a:fb:ca:33:e2:d3:f4: 4d:69:f8:b0:51:89:48:1a:79:ce:07:d4:a3:0a:9c:1e:76:74: cf:a3:d6:d9:a6:0d:68:8f:bb:1a:82:f8:b8:5b:5e:d7:29:c4: 43:24:ac:25:e1:46:d0:4e:8f:2e:cd:c0:d0:ba:8b:2d:ac:d4: f0:81:1f:29:6a:27:93:70:fc:35:46:e5:b4:e5:8b:e1:36:22: b9:ec:7b:d6:b3:44:40:4d:05:13:82:60:89:1f:36:5e:9b:9f: 87:b1:f2:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W9ieXyj4cTy4g4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk MzkwOGYyZmEtM2JhNy00MmQzLTkxOWItNjdiN2FhNzIzMDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EbCh7hKCJLtqauOfS5yDE9AdydNtIjfh6Bt PLqZsngrY2QPaCGGRKwGVoYD05nEmlF4U0ml6jp8/HjF7zXvSTgDl6FvuDy1XnBR tm1Op6vcqorRab76KnR5YfbwaXbGlPDpxvnJm3ID6Dwjh2CcHVKwW+WoDHATEpwA mHrfjFlm2KvABk+da+vkpoNpRz7eIVxbRrLpJtDGHWz9Sw2524UHgYiwow817F6q jesf6f1ahxQ5puqfVxil1Pyuok2u29fpep2tQ6U4C7BOb/gcNBVkOb1zguj5TCu1 0eFWLM+bLXAKBhyP3BWXC1mPz4YreUHk+VuOhh3EtphMy4QKxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaNSiJOThxLwQLnTNeWowuP2O1MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvNDI5ZThlNTUtM2VlYy0z MDgyLTgzNWYtZGM0YTM0ZDE1ODEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2NVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXcLOzaX6lV15FB80Ewxo5xmKczJDfsUzInTcvpMWApfNVWDM61GSrs khW5iHNtuSV5ma6diyFZKK2tJVaQCHi6xlVhvFp5J6w/oWXyW3t4D9qI6BIX88uD 8YW2C2e5sX5xoeV4nDE6lVxbxAUGu9Y7t74r5laOoxUSScFRhAjlAzK47PpIZHke y6PjEn341xDTozfgcG2K1sufevvKM+LT9E1p+LBRiUgaec4H1KMKnB52dM+j1tmm DWiPuxqC+LhbXtcpxEMkrCXhRtBOjy7NwNC6iy2s1PCBHylqJ5Nw/DVG5bTli+E2 Irnse9azREBNBROCYIkfNl6bn4ex8qc= -----END CERTIFICATE-----Generated at Fri Mar 14 09:58:03 2025 by rpki-client