$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/fc0398f3-a53a-3f3e-a334-bd3dc21d29ec.roa File: fc0398f3-a53a-3f3e-a334-bd3dc21d29ec.roa (raw, json) Hash identifier: 3wr7r8vnmz8a7x37APKcG3C7vlMaRcFmzJHCXeFbkgk= Subject key identifier: D6:C0:F5:A5:04:6B:9B:C5:8E:3A:F9:DF:C0:B1:FB:A1:4D:27:8C:48 Certificate issuer: /CN=7a2be303-4525-4433-b220-b1c6b5052945 Certificate serial: 010D0C9F4328584909E6A363D5D0AA84C5713600 Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/fc0398f3-a53a-3f3e-a334-bd3dc21d29ec.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 396982 IP address blocks: 168.245.216.0/21 maxlen: 24 208.56.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:a3:63:d5:d0:aa:84:c5:71:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945 Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=74107e5e-c80a-4af6-b3a2-e9ffa6b3e6e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:79:12:dd:9a:f1:4c:ad:e5:73:51:a5:87:b5: 42:69:40:57:36:1c:90:51:60:83:db:21:5d:cf:43: 46:c4:5f:e2:bc:aa:3e:7c:c3:9f:87:1a:ae:39:80: e9:1c:6d:c4:cf:1e:08:21:36:10:fe:a4:ae:54:70: c3:48:fa:c0:10:cd:58:bd:61:55:91:6d:f5:1f:fc: a8:49:c3:de:5a:c4:a5:d0:c0:01:68:29:aa:02:0e: 92:10:ca:51:c9:19:88:46:3d:47:7d:18:bf:a2:2e: 88:d3:c6:db:dd:58:86:5f:3e:80:0b:f5:ef:a2:29: 22:2c:4f:80:86:f8:71:52:a7:0c:5e:34:83:ef:a0: ef:3a:5f:3a:00:f3:a9:c9:b9:ea:db:0c:0d:78:c8: ce:3a:6f:e3:5d:9f:e8:d3:99:5e:51:29:9d:60:e9: da:97:c7:71:9a:da:b3:ea:45:e5:d6:4c:81:e9:9e: 3b:28:1f:ad:5e:1f:9e:1e:0d:48:7a:5b:56:2c:6f: 75:ba:05:3e:93:0a:eb:80:98:c4:0d:d1:6f:c9:17: b0:7c:94:db:7d:07:8f:52:13:cb:c2:2e:76:9c:38: 6e:1d:c8:05:b7:f2:91:50:56:de:98:7f:13:a0:58: 58:ac:ce:cf:7f:10:24:79:75:a2:15:82:11:24:f4: 0c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C0:F5:A5:04:6B:9B:C5:8E:3A:F9:DF:C0:B1:FB:A1:4D:27:8C:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/fc0398f3-a53a-3f3e-a334-bd3dc21d29ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl X509v3 Authority Key Identifier: keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer sbgp-ipAddrBlock: critical IPv4: 168.245.216.0/21 208.56.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:c0:74:cf:34:5e:f4:cc:d7:14:67:31:84:72:22:9e:e0:db: 1e:11:f9:76:cf:39:5c:66:47:a9:c6:23:e9:88:cb:0f:00:be: e2:d8:8c:f7:31:2d:44:f1:8f:e8:ba:65:0d:30:14:0a:ed:7c: cc:d9:f6:d4:3f:01:ff:81:21:c7:30:f2:13:16:8d:1e:1d:72: 48:e3:b4:c6:ce:36:30:d0:1c:ce:95:84:3a:e9:2a:36:c9:44: 0f:1c:2b:2c:c9:b1:30:a3:07:0d:e7:30:fa:6c:fe:91:c7:8c: a4:54:e6:76:07:fd:75:6b:c7:fb:86:30:37:c5:7b:d2:87:5e: 7e:3c:a8:ea:24:dd:a8:b3:2b:d6:ab:76:e9:46:e3:ce:5b:2f: fc:44:73:28:8d:a0:4a:36:bf:6c:cb:c5:0c:12:3b:04:72:fd: 58:6a:e4:f6:b7:af:6e:54:57:c9:d6:85:72:87:21:4e:37:9a: e4:8b:01:e0:df:e8:8f:5a:03:24:f0:96:1d:cf:86:b3:2b:58: 6f:61:6e:d9:09:df:30:ab:a8:df:c8:cd:c2:6e:be:ed:6e:57: 62:47:bf:c9:04:51:32:0b:b5:18:d5:57:b0:8d:7a:6c:b3:d1: c6:92:46:23:64:87:14:91:24:77:fe:e4:c6:6e:32:14:e8:37: 50:0a:9a:63 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkJ5qNj1dCqhMVxNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy OTQ1MB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk NzQxMDdlNWUtYzgwYS00YWY2LWIzYTItZTlmZmE2YjNlNmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3kS3ZrxTK3lc1Glh7VCaUBXNhyQUWCD2yFd z0NGxF/ivKo+fMOfhxquOYDpHG3Ezx4IITYQ/qSuVHDDSPrAEM1YvWFVkW31H/yo ScPeWsSl0MABaCmqAg6SEMpRyRmIRj1HfRi/oi6I08bb3ViGXz6AC/XvoikiLE+A hvhxUqcMXjSD76DvOl86APOpybnq2wwNeMjOOm/jXZ/o05leUSmdYOnal8dxmtqz 6kXl1kyB6Z47KB+tXh+eHg1IeltWLG91ugU+kwrrgJjEDdFvyRewfJTbfQePUhPL wi52nDhuHcgFt/KRUFbemH8ToFhYrM7PfxAkeXWiFYIRJPQMiwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNbA9aUEa5vFjjr538Cx+6FNJ4xIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvZmMwMzk4ZjMtYTUzYS0z ZjNlLWEzMzQtYmQzZGMyMWQyOWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1 Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2 YjUwNTI5NDUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDqPXYAwQG 0DgAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHnAdM80XvTM1xRnMYRyIp7g2x4R+XbPOVxmR6nGI+mIyw8A vuLYjPcxLUTxj+i6ZQ0wFArtfMzZ9tQ/Af+BIccw8hMWjR4dckjjtMbONjDQHM6V hDrpKjbJRA8cKyzJsTCjBw3nMPps/pHHjKRU5nYH/XVrx/uGMDfFe9KHXn48qOok 3aizK9ardulG485bL/xEcyiNoEo2v2zLxQwSOwRy/Vhq5Pa3r25UV8nWhXKHIU43 muSLAeDf6I9aAyTwlh3PhrMrWG9hbtkJ3zCrqN/IzcJuvu1uV2JHv8kEUTILtRjV V7CNemyz0caSRiNkhxSRJHf+5MZuMhToN1AKmmM= -----END CERTIFICATE-----Generated at Fri Mar 14 09:45:52 2025 by rpki-client