$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/861f2b30-3a64-3c67-8ab1-5ffc8a617d35.roa File: 861f2b30-3a64-3c67-8ab1-5ffc8a617d35.roa (raw, json) Hash identifier: iD1Si4iIWZxr+ToC9Btv8s6Z75dDjjDB/wbASaA+B6g= Subject key identifier: A5:62:B3:E6:DC:30:ED:AB:FE:A5:CC:3A:DE:66:DC:CC:49:02:D0:28 Certificate issuer: /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Certificate serial: 010D0C9F432858495C2446778FC3E0073C7B8480 Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/861f2b30-3a64-3c67-8ab1-5ffc8a617d35.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 14511 IP address blocks: 216.196.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:46:77:8f:c3:e0:07:3c:7b:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=e1340437-ac3a-4c1e-86f7-adf9a698949c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:77:6e:94:98:93:b6:3f:5a:45:33:30:0e:fd: 66:ed:b5:94:4d:43:c7:b0:73:1a:7d:2d:18:e2:89: bb:5a:c6:09:ac:c7:92:c0:59:db:72:44:60:61:a7: 9d:f9:c3:48:45:17:b8:1c:18:83:94:20:9a:73:8a: 8e:9c:05:6a:f1:36:54:7f:c8:db:21:0c:fc:ff:c9: 8c:65:7d:8c:3e:21:1d:e9:d2:9b:a6:76:23:d5:76: a9:da:28:f9:6a:b7:2f:0b:47:27:8b:15:98:53:b7: a0:c8:7a:88:ca:81:f5:cf:29:a9:bf:fe:58:eb:ac: f7:e9:7f:05:11:91:64:9d:b9:05:a3:1b:de:9b:08: 41:79:b8:42:35:73:cd:d7:e4:aa:97:16:31:5d:33: ef:76:48:e5:38:a7:ef:72:4c:2d:c8:72:64:ec:f7: c4:2e:34:84:5e:00:20:f0:85:9d:4a:b0:0d:21:bb: 4a:f1:ad:d0:49:ab:10:cf:e9:2e:8a:ba:19:04:0c: 22:2c:67:e3:01:99:ad:d0:31:bd:de:9d:f3:6e:d7: 7f:8f:61:c9:09:e7:bd:2f:ab:86:c9:58:7a:70:89: 1b:8a:30:46:27:e6:df:c7:70:e1:20:c3:81:72:e7: 9f:97:57:3b:d4:74:c4:d6:3a:09:69:72:b1:ba:e1: 94:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:62:B3:E6:DC:30:ED:AB:FE:A5:CC:3A:DE:66:DC:CC:49:02:D0:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/861f2b30-3a64-3c67-8ab1-5ffc8a617d35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl X509v3 Authority Key Identifier: keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer sbgp-ipAddrBlock: critical IPv4: 216.196.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:26:f1:6e:f2:a8:af:20:83:59:5e:59:4d:3e:28:58:20:f2: 5a:ea:6f:98:5d:14:ca:77:10:6b:f3:90:fd:e9:87:9c:a4:32: f7:f8:da:f7:68:6f:a1:8b:7b:70:dd:b0:c4:bc:06:79:47:63: a2:de:b4:a5:8f:cb:c1:5c:cb:d1:36:a1:02:06:2b:ff:ae:92: d4:4c:bd:7a:55:45:49:77:46:01:e6:0f:b0:e4:3e:c0:59:99: f0:4a:1b:cb:73:15:5f:15:03:fe:d1:64:68:59:2a:03:00:41: 5d:1e:3b:e8:35:1f:9d:ed:c1:08:80:41:f2:1b:67:48:f5:06: 4b:68:98:7a:24:27:7e:05:2d:54:90:1b:f5:15:95:71:f9:ba: cf:9a:af:1a:fb:85:83:a8:bc:c7:ac:af:21:d5:1b:3d:9b:3b: bc:10:71:d7:64:13:c0:ca:b2:26:56:2d:ab:12:f2:7e:59:04: 89:63:ad:70:57:a9:73:d2:76:f8:21:61:5b:5f:30:a9:be:cb: 2f:d9:57:aa:e0:e8:65:d4:19:c2:82:70:96:50:77:f8:73:bd: 40:d7:df:81:c6:59:78:93:40:4e:17:17:54:24:3c:f0:82:c8: 88:2b:0b:d5:3b:11:25:1d:a5:a3:34:1d:d6:34:74:f7:a9:9e: b4:f6:b2:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJEZ3j8PgBzx7hIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVjY2JkN2UtMDg0NC00OGIxLTg4ZDctMGE4ZWY0NmU4 MTY4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk ZTEzNDA0MzctYWMzYS00YzFlLTg2ZjctYWRmOWE2OTg5NDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3dulJiTtj9aRTMwDv1m7bWUTUPHsHMafS0Y 4om7WsYJrMeSwFnbckRgYaed+cNIRRe4HBiDlCCac4qOnAVq8TZUf8jbIQz8/8mM ZX2MPiEd6dKbpnYj1Xap2ij5arcvC0cnixWYU7egyHqIyoH1zympv/5Y66z36X8F EZFknbkFoxvemwhBebhCNXPN1+SqlxYxXTPvdkjlOKfvckwtyHJk7PfELjSEXgAg 8IWdSrANIbtK8a3QSasQz+kuiroZBAwiLGfjAZmt0DG93p3zbtd/j2HJCee9L6uG yVh6cIkbijBGJ+bfx3DhIMOBcuefl1c71HTE1joJaXKxuuGUkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVis+bcMO2r/qXMOt5m3MxJAtAoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNj YmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThlZjQ2ZTgxNjgvODYxZjJiMzAtM2E2NC0z YzY3LThhYjEtNWZmYzhhNjE3ZDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzVjY2JkN2UtMDg0NC00OGIxLTg4 ZDctMGE4ZWY0NmU4MTY4LzM1Y2NiZDdlLTA4NDQtNDhiMS04OGQ3LTBhOGVmNDZl ODE2OC5jcmwwHwYDVR0jBBgwFoAUMWdUtL8Wfq3x9BDB2dL62qqFPBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNjYmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThl ZjQ2ZTgxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2MRIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcm8W7yqK8gg1leWU0+KFgg8lrqb5hdFMp3EGvzkP3ph5ykMvf42vdo b6GLe3DdsMS8BnlHY6LetKWPy8Fcy9E2oQIGK/+uktRMvXpVRUl3RgHmD7DkPsBZ mfBKG8tzFV8VA/7RZGhZKgMAQV0eO+g1H53twQiAQfIbZ0j1BktomHokJ34FLVSQ G/UVlXH5us+arxr7hYOovMesryHVGz2bO7wQcddkE8DKsiZWLasS8n5ZBIljrXBX qXPSdvghYVtfMKm+yy/ZV6rg6GXUGcKCcJZQd/hzvUDX34HGWXiTQE4XF1QkPPCC yIgrC9U7ESUdpaM0HdY0dPepnrT2sgo= -----END CERTIFICATE-----Generated at Fri Apr 4 16:08:57 2025 by rpki-client