$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/91573368-511f-31f8-84af-bd9afd60da55.roa File: 91573368-511f-31f8-84af-bd9afd60da55.roa (raw, json) Hash identifier: sd4rAPHmAKZZKIJpuMPM7OpYgjmdHAV+9newf3lfTn0= Subject key identifier: 63:45:8F:1F:08:CF:FE:A5:11:36:6B:8C:37:4D:A6:D9:61:AE:43:E4 Certificate issuer: /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Certificate serial: 010D0C9F43285849203C12465D60A3AE2CA2D780 Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/91573368-511f-31f8-84af-bd9afd60da55.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 400238 IP address blocks: 216.87.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:12:46:5d:60:a3:ae:2c:a2:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=bece86ae-97c8-49f6-946e-c6f1d4ce0698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3c:2c:c5:b2:7a:35:69:6b:89:95:8a:8e:63: 5a:4c:85:bf:31:1e:6e:53:95:24:8c:a5:cf:3f:f2: 04:06:81:85:83:37:ab:3a:e8:60:7c:a3:87:4c:e1: f9:83:27:2f:26:c9:98:ff:9c:7b:a7:1f:0c:ad:6b: e1:ac:e1:62:8f:59:36:a5:62:16:04:f9:79:f9:29: f4:84:de:29:53:13:da:51:64:d3:b3:03:df:36:9e: bb:5e:e2:f7:bc:cb:b4:c4:f8:ff:31:ed:18:18:51: 1c:05:c0:4c:cd:f4:f1:6f:ed:fe:7b:5e:33:69:9e: 70:39:07:dd:b3:9f:db:06:cd:7c:49:d0:a2:4d:c1: 56:52:c6:c0:d3:aa:7a:46:9d:6a:45:d2:14:2c:4d: 44:c9:67:a7:d5:de:70:01:9d:fb:10:63:65:3d:1c: 98:78:e4:b7:8c:5d:d2:c6:59:09:08:b2:d8:b9:fa: ff:f6:2a:54:f3:f7:08:ac:d6:68:a3:ed:77:93:c6: b9:2f:de:50:c1:89:71:9d:d5:ef:76:ca:1c:79:90: 39:1f:81:a2:89:ca:76:81:35:d3:3c:eb:83:29:f1: 14:01:f3:4f:e0:7f:38:7a:c7:4d:10:d1:ed:ce:c5: d5:16:a7:0e:d1:14:58:bc:e6:0e:b8:9e:74:1f:18: 8e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:45:8F:1F:08:CF:FE:A5:11:36:6B:8C:37:4D:A6:D9:61:AE:43:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/91573368-511f-31f8-84af-bd9afd60da55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl X509v3 Authority Key Identifier: keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer sbgp-ipAddrBlock: critical IPv4: 216.87.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:d5:e1:75:89:c1:84:76:b2:ee:18:1d:ad:fe:1c:f8:87:94: af:ac:4c:14:c7:9c:ba:f2:1f:a4:72:6e:ea:b5:ad:65:11:80: f8:7d:52:f3:58:f7:b6:21:64:98:10:ca:6f:a2:13:9c:96:96: 9f:ac:0b:ee:fa:57:1d:ba:70:36:1a:56:1f:34:22:70:e2:5a: ea:22:cc:24:52:d4:91:ed:78:d2:51:37:8d:b9:79:e9:19:f1: 1b:eb:84:fe:4c:b3:b8:1e:58:d0:eb:32:a9:b1:31:2e:bd:ed: f3:bc:63:e7:67:d9:70:c8:a7:3f:8d:a4:ed:32:01:16:92:27: 05:4d:c8:a2:b0:72:21:54:20:8b:b9:1d:fc:18:fa:34:cf:8e: 8b:98:a0:54:8b:83:f9:b2:14:2c:ff:e1:1b:bb:09:fa:25:a0: 44:6e:96:39:bc:8f:68:ef:c2:c7:b0:c8:a3:4a:63:ba:75:98: 62:fe:dc:2a:8c:14:d9:75:14:92:ac:08:15:6e:a1:05:34:f7: a7:31:56:1f:46:de:bb:89:00:05:cf:83:04:1e:68:2a:93:ef: 3c:89:16:03:b5:f8:e3:31:10:e6:9d:28:d8:45:52:c0:b2:c3: 51:6b:29:11:01:82:26:9f:72:c0:01:62:04:81:48:9f:89:d6: 50:c7:4f:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPBJGXWCjriyi14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY2YTZjOGUtYWE3My00ZDgyLWEyYjEtZTYxOWViM2Yy YWVjMB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk YmVjZTg2YWUtOTdjOC00OWY2LTk0NmUtYzZmMWQ0Y2UwNjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijwsxbJ6NWlriZWKjmNaTIW/MR5uU5UkjKXP P/IEBoGFgzerOuhgfKOHTOH5gycvJsmY/5x7px8MrWvhrOFij1k2pWIWBPl5+Sn0 hN4pUxPaUWTTswPfNp67XuL3vMu0xPj/Me0YGFEcBcBMzfTxb+3+e14zaZ5wOQfd s5/bBs18SdCiTcFWUsbA06p6Rp1qRdIULE1EyWen1d5wAZ37EGNlPRyYeOS3jF3S xlkJCLLYufr/9ipU8/cIrNZoo+13k8a5L95QwYlxndXvdsoceZA5H4Giicp2gTXT POuDKfEUAfNP4H84esdNENHtzsXVFqcO0RRYvOYOuJ50HxiONwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNFjx8Iz/6lETZrjDdNptlhrkPkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZh NmM4ZS1hYTczLTRkODItYTJiMS1lNjE5ZWIzZjJhZWMvOTE1NzMzNjgtNTExZi0z MWY4LTg0YWYtYmQ5YWZkNjBkYTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWY2YTZjOGUtYWE3My00ZDgyLWEy YjEtZTYxOWViM2YyYWVjLzFmNmE2YzhlLWFhNzMtNGQ4Mi1hMmIxLWU2MTllYjNm MmFlYy5jcmwwHwYDVR0jBBgwFoAU4cKiXdGkcBTXif4pkOW5K7a7dxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZhNmM4ZS1hYTczLTRkODItYTJiMS1lNjE5 ZWIzZjJhZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Fc0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvV4XWJwYR2su4YHa3+HPiHlK+sTBTHnLryH6Rybuq1rWURgPh9UvNY 97YhZJgQym+iE5yWlp+sC+76Vx26cDYaVh80InDiWuoizCRS1JHteNJRN425eekZ 8RvrhP5Ms7geWNDrMqmxMS697fO8Y+dn2XDIpz+NpO0yARaSJwVNyKKwciFUIIu5 HfwY+jTPjouYoFSLg/myFCz/4Ru7CfoloERuljm8j2jvwsewyKNKY7p1mGL+3CqM FNl1FJKsCBVuoQU096cxVh9G3ruJAAXPgwQeaCqT7zyJFgO1+OMxEOadKNhFUsCy w1FrKREBgiafcsABYgSBSJ+J1lDHT2s= -----END CERTIFICATE-----Generated at Sun Apr 6 13:36:34 2025 by rpki-client