$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b71fd3b6-e613-3656-a391-8b75c5193bfb.roa File: b71fd3b6-e613-3656-a391-8b75c5193bfb.roa (raw, json) Hash identifier: +XXcAvXvBZmNIDMCTTB5LBI3uFS7NW0WGqJZJ37eavs= Subject key identifier: 53:4D:E4:0D:89:BF:93:8F:95:1B:AC:82:18:15:8D:69:FB:93:82:60 Certificate issuer: /CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb Certificate serial: 010D0C9F432858489A3B457AFF7BB90303BE8140 Authority key identifier: 35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b71fd3b6-e613-3656-a391-8b75c5193bfb.roa Signing time: Mon 20 Jan 2025 02:00:40 +0000 ROA not before: Mon 20 Jan 2025 02:00:40 +0000 ROA not after: Sun 20 Apr 2025 01:00:40 +0000 asID: 14041 IP address blocks: 216.38.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9a:3b:45:7a:ff:7b:b9:03:03:be:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb Validity Not Before: Jan 20 02:00:40 2025 GMT Not After : Apr 20 01:00:40 2025 GMT Subject: CN=85505cbe-5cf4-40e8-8ebf-4a67140d0820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9b:66:43:08:2b:15:c9:a7:43:63:c5:b3:81: 59:45:32:df:4e:93:da:97:a9:24:1e:4d:3e:9e:b1: 9f:56:15:0f:a7:ce:a5:bd:34:2b:bb:f1:60:ad:4d: be:99:a1:73:47:90:bb:52:f0:ec:82:39:7e:cf:43: a5:76:df:d9:6b:f9:73:f4:16:d7:83:a3:0c:e6:16: aa:d4:1a:6d:02:31:19:ed:05:76:13:94:b2:3b:b3: 80:c9:27:5a:e1:a9:ed:d0:92:87:55:cb:71:c2:97: 31:40:34:87:09:0d:81:fb:95:a7:54:de:b4:9e:f5: e1:db:9a:de:d3:1c:8e:e1:83:eb:89:18:95:ed:a5: e6:7a:b1:f9:0d:4b:ac:0a:61:3f:4f:c4:6f:c1:77: 30:0a:be:e8:6e:d2:77:6c:10:91:c1:ce:8f:e9:fd: 9b:14:b6:13:44:c2:6e:dc:68:90:c8:c7:af:33:e7: 26:2d:a1:c1:2d:cc:de:45:a1:40:90:ce:ae:6c:a5: 83:3b:02:23:ed:6a:96:80:d9:42:39:3e:c6:8d:a3: 1e:0c:36:03:e6:17:51:d5:ca:43:83:fb:ac:a9:8d: 69:57:fc:8c:ee:cd:a9:a6:d4:45:47:46:e3:01:f8: b9:57:66:a3:33:81:7b:17:1c:eb:7b:1d:6b:a1:43: 63:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4D:E4:0D:89:BF:93:8F:95:1B:AC:82:18:15:8D:69:FB:93:82:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b71fd3b6-e613-3656-a391-8b75c5193bfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl X509v3 Authority Key Identifier: keyid:35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer sbgp-ipAddrBlock: critical IPv4: 216.38.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:7a:83:1d:6e:9f:46:c4:57:b9:65:d7:72:f6:37:ff:92:c8: 5a:e7:58:eb:3d:c3:26:b8:5d:9a:7f:37:da:05:e3:5c:9b:8f: 41:80:6c:eb:e4:88:c2:72:dc:3e:c2:41:80:3a:d0:14:ce:63: 1b:1c:9a:a0:58:1f:ca:ba:83:7e:3d:61:85:60:a5:7c:22:13: 0a:bf:84:19:0e:eb:fd:ef:e2:e4:14:60:a5:51:4c:05:c0:33: e4:53:2f:8f:30:53:a8:4d:bd:78:7e:a9:50:27:63:33:e4:11: 20:e5:60:06:df:94:39:11:01:33:86:6b:57:55:52:12:a5:b3: 2f:97:29:72:76:6f:91:31:ef:a1:d5:03:86:dd:2a:2b:a1:fb: eb:d2:2d:1e:a2:c9:89:9d:df:25:91:d3:44:01:ec:dd:b3:53: 8e:c3:f7:af:f6:15:cd:cd:fd:49:84:bf:bb:9d:5f:4c:ed:89: 88:b4:55:16:4c:66:da:c1:10:1b:55:a8:9a:46:60:c2:e2:40: 21:d6:a6:db:74:9e:ad:d7:cd:f5:6e:6f:9e:52:20:6e:6d:95: 2a:18:79:72:b4:f2:2a:07:67:c5:41:75:0a:3b:80:2a:69:32: 3b:14:ce:ab:b8:d2:94:03:74:0e:b9:d2:c3:ce:00:92:c9:f1: cd:87:b3:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiaO0V6/3u5AwO+gUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjgyODFhMGEtMDBmMi00YWFjLWIzMTEtZTk2MWE3Y2Nl ZGZiMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk ODU1MDVjYmUtNWNmNC00MGU4LThlYmYtNGE2NzE0MGQwODIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJtmQwgrFcmnQ2PFs4FZRTLfTpPal6kkHk0+ nrGfVhUPp86lvTQru/FgrU2+maFzR5C7UvDsgjl+z0Oldt/Za/lz9BbXg6MM5haq 1BptAjEZ7QV2E5SyO7OAySda4ant0JKHVctxwpcxQDSHCQ2B+5WnVN60nvXh25re 0xyO4YPriRiV7aXmerH5DUusCmE/T8RvwXcwCr7obtJ3bBCRwc6P6f2bFLYTRMJu 3GiQyMevM+cmLaHBLczeRaFAkM6ubKWDOwIj7WqWgNlCOT7GjaMeDDYD5hdR1cpD g/usqY1pV/yM7s2pptRFR0bjAfi5V2ajM4F7Fxzrex1roUNjTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNN5A2Jv5OPlRusghgVjWn7k4JgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODI4 MWEwYS0wMGYyLTRhYWMtYjMxMS1lOTYxYTdjY2VkZmIvYjcxZmQzYjYtZTYxMy0z NjU2LWEzOTEtOGI3NWM1MTkzYmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjgyODFhMGEtMDBmMi00YWFjLWIz MTEtZTk2MWE3Y2NlZGZiL2I4MjgxYTBhLTAwZjItNGFhYy1iMzExLWU5NjFhN2Nj ZWRmYi5jcmwwHwYDVR0jBBgwFoAUNfABs7MMIwjruQt82C4ceWMKjxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iODI4MWEwYS0wMGYyLTRhYWMtYjMxMS1lOTYx YTdjY2VkZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2CZQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAl6gx1un0bEV7ll13L2N/+SyFrnWOs9wya4XZp/N9oF41ybj0GAbOvk iMJy3D7CQYA60BTOYxscmqBYH8q6g349YYVgpXwiEwq/hBkO6/3v4uQUYKVRTAXA M+RTL48wU6hNvXh+qVAnYzPkESDlYAbflDkRATOGa1dVUhKlsy+XKXJ2b5Ex76HV A4bdKiuh++vSLR6iyYmd3yWR00QB7N2zU47D96/2Fc3N/UmEv7udX0ztiYi0VRZM ZtrBEBtVqJpGYMLiQCHWptt0nq3XzfVub55SIG5tlSoYeXK08ioHZ8VBdQo7gCpp MjsUzqu40pQDdA650sPOAJLJ8c2Hszs= -----END CERTIFICATE-----Generated at Mon Apr 7 01:18:09 2025 by rpki-client