$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/ae620bfa-78a7-3a5f-81dc-363d02245b93.roa File: ae620bfa-78a7-3a5f-81dc-363d02245b93.roa (raw, json) Hash identifier: Am5p5uqaa9C+4ocFAo0XVbgIo5PtN0/rTN0ZBc0DczQ= Subject key identifier: D9:B2:1D:E9:E0:BA:CC:14:7B:AF:08:52:AA:A3:05:97:8D:3A:6B:4B Certificate issuer: /CN=d23910be-77e9-4381-87eb-cb12cfc9b676 Certificate serial: 010D0C9F43285849088164524D9B19A14782D280 Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/ae620bfa-78a7-3a5f-81dc-363d02245b93.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 53766 IP address blocks: 216.221.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:64:52:4d:9b:19:a1:47:82:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=12e855e9-f20c-4894-85fb-0659b9dc4e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:89:c1:ab:9d:27:90:50:60:cc:d5:b7:2e:9e: c5:5d:50:16:20:86:fd:90:23:d2:77:89:a2:bf:d2: 18:d8:42:27:05:96:f2:4a:5a:04:91:31:92:e9:ac: 11:01:fa:7a:ed:0d:5e:68:db:be:8f:7c:d4:5b:c2: 02:14:d1:57:27:a4:f5:77:a0:1a:ee:33:26:d1:99: 87:3a:0e:2e:fd:07:f5:92:58:0b:3c:27:99:94:51: 81:b0:52:f9:a7:07:65:79:8d:97:2e:d9:17:1a:26: a2:20:07:48:4a:27:c3:25:ab:77:9f:9f:d8:8d:af: c3:a0:76:87:3b:71:61:bd:40:a7:e8:ca:0d:57:ef: dc:dd:18:53:95:9d:de:87:23:7d:b9:00:e9:56:5a: bf:2b:5f:fb:d5:d3:13:ed:36:1c:f0:a1:ca:36:d2: 8d:6d:a1:13:92:65:e2:b4:03:e7:02:03:15:04:26: ae:0e:0c:bc:30:1b:c5:e7:1a:a6:0e:11:03:8e:83: 0d:25:0a:41:7a:12:b0:0e:d7:3a:ef:ae:b2:31:53: 77:40:71:21:0c:0c:03:3b:04:0c:b6:b6:36:09:53: 9f:ad:b3:58:eb:5c:e9:6e:cc:77:9c:d6:f2:f7:db: 2c:f7:de:ce:8d:e3:2b:fa:06:ce:d8:69:5b:d1:7d: ee:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B2:1D:E9:E0:BA:CC:14:7B:AF:08:52:AA:A3:05:97:8D:3A:6B:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/ae620bfa-78a7-3a5f-81dc-363d02245b93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl X509v3 Authority Key Identifier: keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer sbgp-ipAddrBlock: critical IPv4: 216.221.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:cf:47:60:a4:9d:2e:0b:63:67:03:49:ce:6b:90:dc:67:bf: 19:c6:05:8b:d6:b4:64:07:ee:1f:1e:e6:8d:be:99:ba:f0:55: ef:ea:d3:f3:fc:81:38:fa:db:ba:79:26:26:15:ad:40:d3:f7: 2f:8c:6f:e1:7b:02:fd:55:35:e3:ea:d9:4a:3e:b3:93:ba:28: 4f:77:67:cc:df:a8:13:c8:6b:d0:a1:f3:86:03:23:1e:2a:aa: 26:6f:14:14:2a:0d:64:15:4f:a3:46:e8:91:e0:68:24:56:5e: af:f8:a4:7e:a3:63:02:b6:21:17:7a:c6:b6:98:4e:41:6b:30: 91:d1:50:b2:88:99:b8:98:6a:f5:71:e6:de:a9:96:ff:03:2f: 01:af:da:6b:4a:cf:f5:9a:26:17:f3:ed:d8:72:6f:13:9e:ae: bb:1a:ab:90:6c:e7:01:6c:5c:12:20:f3:30:55:72:fb:b8:83: 86:fc:f4:13:57:88:1c:7f:49:d2:49:90:64:54:e1:d5:5f:80: dd:c0:bb:95:b1:86:71:09:6b:b3:5b:6f:48:92:64:9a:78:7c: aa:c0:f4:9c:de:81:5f:bb:dc:ad:01:a0:fb:6d:8c:c3:3d:9c: 56:da:de:33:e7:f9:1a:e7:31:60:8b:52:5f:c2:69:67:99:2e: 25:e6:9a:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgWRSTZsZoUeC0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIzOTEwYmUtNzdlOS00MzgxLTg3ZWItY2IxMmNmYzli Njc2MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MTJlODU1ZTktZjIwYy00ODk0LTg1ZmItMDY1OWI5ZGM0ZTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmInBq50nkFBgzNW3Lp7FXVAWIIb9kCPSd4mi v9IY2EInBZbySloEkTGS6awRAfp67Q1eaNu+j3zUW8ICFNFXJ6T1d6Aa7jMm0ZmH Og4u/Qf1klgLPCeZlFGBsFL5pwdleY2XLtkXGiaiIAdISifDJat3n5/Yja/DoHaH O3FhvUCn6MoNV+/c3RhTlZ3ehyN9uQDpVlq/K1/71dMT7TYc8KHKNtKNbaETkmXi tAPnAgMVBCauDgy8MBvF5xqmDhEDjoMNJQpBehKwDtc6766yMVN3QHEhDAwDOwQM trY2CVOfrbNY61zpbsx3nNby99ss997OjeMr+gbO2Glb0X3uNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmyHenguswUe68IUqqjBZeNOmtLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5 MTBiZS03N2U5LTQzODEtODdlYi1jYjEyY2ZjOWI2NzYvYWU2MjBiZmEtNzhhNy0z YTVmLTgxZGMtMzYzZDAyMjQ1YjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDIzOTEwYmUtNzdlOS00MzgxLTg3 ZWItY2IxMmNmYzliNjc2L2QyMzkxMGJlLTc3ZTktNDM4MS04N2ViLWNiMTJjZmM5 YjY3Ni5jcmwwHwYDVR0jBBgwFoAU8u8UTSWnxBh7mYJba+AKrUJIapgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5MTBiZS03N2U5LTQzODEtODdlYi1jYjEy Y2ZjOWI2NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2N0YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvPR2CknS4LY2cDSc5rkNxnvxnGBYvWtGQH7h8e5o2+mbrwVe/q0/P8 gTj627p5JiYVrUDT9y+Mb+F7Av1VNePq2Uo+s5O6KE93Z8zfqBPIa9Ch84YDIx4q qiZvFBQqDWQVT6NG6JHgaCRWXq/4pH6jYwK2IRd6xraYTkFrMJHRULKImbiYavVx 5t6plv8DLwGv2mtKz/WaJhfz7dhybxOerrsaq5Bs5wFsXBIg8zBVcvu4g4b89BNX iBx/SdJJkGRU4dVfgN3Au5WxhnEJa7Nbb0iSZJp4fKrA9JzegV+73K0BoPttjMM9 nFba3jPn+RrnMWCLUl/CaWeZLiXmmps= -----END CERTIFICATE-----Generated at Sat Apr 5 21:25:29 2025 by rpki-client