$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/938e1c18-6122-371d-864e-54b0cc8fcbc4.roa File: 938e1c18-6122-371d-864e-54b0cc8fcbc4.roa (raw, json) Hash identifier: vWVVtmjH9XTHMwGg+MjaLQrywzLvTe7dCzHsoQl6e3k= Subject key identifier: 8D:74:D8:F7:96:C2:76:C6:A5:0E:B4:04:A9:87:D6:07:AA:94:B9:07 Certificate issuer: /CN=3e511aed-c666-436d-b4a4-947790e6c9e5 Certificate serial: 010D0C9F432858488DAB5234CD54E68D26A43B80 Authority key identifier: 2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/938e1c18-6122-371d-864e-54b0cc8fcbc4.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 14618 IP address blocks: 216.120.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:52:34:cd:54:e6:8d:26:a4:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e511aed-c666-436d-b4a4-947790e6c9e5 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=3ac9abce-13b8-4312-a835-3abf6ae8cdb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0e:d8:35:5f:49:fc:00:0b:4a:6e:df:af:75: 59:3e:7b:50:9e:ba:73:75:57:84:6d:bd:9d:f6:b1: c7:82:a1:b0:c6:ef:65:49:6d:90:ff:94:65:45:a6: 02:9a:be:31:05:f9:55:a4:d9:98:37:e6:66:9a:a6: 72:95:cd:40:0b:0f:42:71:d7:1a:b8:55:b7:7a:6a: 85:e6:5d:bd:a7:d7:fa:c7:ad:c0:71:cf:82:2c:4e: 17:93:2c:fc:a4:35:27:b4:7d:b0:0d:fc:99:a7:cd: 53:39:1f:69:34:18:1c:81:d2:e9:ed:dc:9f:59:cb: aa:50:7f:02:e0:16:3f:ae:28:9e:a0:17:6e:93:cb: 84:75:f5:aa:79:db:4d:52:2e:72:f0:0d:12:4f:77: ed:fb:f1:81:15:ba:b5:85:38:0d:ed:43:56:60:df: c0:17:14:7c:c3:e2:fa:7b:78:f7:ee:67:98:53:33: 85:3e:48:ec:96:5e:bf:c3:11:41:f7:e5:a4:70:0c: 60:de:d2:a7:bd:14:a7:0d:3d:33:c0:d6:bf:14:11: 55:d2:27:f8:54:f3:36:f9:c6:d5:5d:0e:58:7e:20: 9d:65:86:52:91:c9:6f:eb:5e:dd:0e:bb:f8:07:c2: 13:ff:e0:21:43:09:bc:57:9e:03:b8:b4:41:db:cd: 3b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:74:D8:F7:96:C2:76:C6:A5:0E:B4:04:A9:87:D6:07:AA:94:B9:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/938e1c18-6122-371d-864e-54b0cc8fcbc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl X509v3 Authority Key Identifier: keyid:2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer sbgp-ipAddrBlock: critical IPv4: 216.120.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:89:ca:2d:a2:f9:76:70:98:c3:9f:60:a5:59:6c:31:15:4a: eb:b6:eb:f8:cc:0b:22:03:25:bd:2c:6a:9e:21:ff:85:c8:1d: e2:45:de:fe:de:b7:f8:47:7b:c0:ad:1c:ea:84:d3:ba:58:70: fe:ca:bd:e6:fd:67:ac:66:2b:ad:f8:92:d0:70:58:8a:0c:d2: e2:e7:dc:c8:2b:26:53:48:10:e5:3d:bf:2a:4d:f8:95:81:27: e7:88:2c:8a:c1:e2:d6:30:89:89:fb:23:63:6b:ba:f1:14:03: 6f:4c:03:b5:54:7d:3d:40:cf:ec:b4:6e:f2:aa:31:3d:92:aa: 4d:6b:2d:16:9f:b4:98:99:6b:5f:72:c9:b6:3b:93:1d:a9:86: 4c:35:3c:75:a4:75:15:9a:57:7a:b3:39:70:6b:dc:e4:92:ff: a5:cc:42:6c:9c:98:93:e1:1f:97:11:51:d9:39:74:00:51:f9: e4:ff:0a:30:26:6c:e8:ea:5f:80:08:9c:f7:ca:81:cc:db:9e: c4:9e:b5:f0:d0:0f:1c:13:b7:51:a0:82:fd:84:4a:53:ff:4b: 9a:13:93:8d:8a:a5:4b:40:96:ef:4f:a4:c0:df:ed:c7:13:71: 2b:5e:ed:33:a1:61:9f:b5:cf:75:d3:8e:30:77:95:f8:67:58: f3:22:1e:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq1I0zVTmjSakO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U1MTFhZWQtYzY2Ni00MzZkLWI0YTQtOTQ3NzkwZTZj OWU1MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk M2FjOWFiY2UtMTNiOC00MzEyLWE4MzUtM2FiZjZhZThjZGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw7YNV9J/AALSm7fr3VZPntQnrpzdVeEbb2d 9rHHgqGwxu9lSW2Q/5RlRaYCmr4xBflVpNmYN+ZmmqZylc1ACw9CcdcauFW3emqF 5l29p9f6x63Acc+CLE4Xkyz8pDUntH2wDfyZp81TOR9pNBgcgdLp7dyfWcuqUH8C 4BY/riieoBduk8uEdfWqedtNUi5y8A0ST3ft+/GBFbq1hTgN7UNWYN/AFxR8w+L6 e3j37meYUzOFPkjsll6/wxFB9+WkcAxg3tKnvRSnDT0zwNa/FBFV0if4VPM2+cbV XQ5YfiCdZYZSkclv617dDrv4B8IT/+AhQwm8V54DuLRB2807RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI102PeWwnbGpQ60BKmH1geqlLkHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTUx MWFlZC1jNjY2LTQzNmQtYjRhNC05NDc3OTBlNmM5ZTUvOTM4ZTFjMTgtNjEyMi0z NzFkLTg2NGUtNTRiMGNjOGZjYmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2U1MTFhZWQtYzY2Ni00MzZkLWI0 YTQtOTQ3NzkwZTZjOWU1LzNlNTExYWVkLWM2NjYtNDM2ZC1iNGE0LTk0Nzc5MGU2 YzllNS5jcmwwHwYDVR0jBBgwFoAUKwmS/tmDKfEKhQALGTTw3YepF2AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTUxMWFlZC1jNjY2LTQzNmQtYjRhNC05NDc3 OTBlNmM5ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HilMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyJyi2i+XZwmMOfYKVZbDEVSuu26/jMCyIDJb0sap4h/4XIHeJF3v7e t/hHe8CtHOqE07pYcP7Kveb9Z6xmK634ktBwWIoM0uLn3MgrJlNIEOU9vypN+JWB J+eILIrB4tYwiYn7I2NruvEUA29MA7VUfT1Az+y0bvKqMT2Sqk1rLRaftJiZa19y ybY7kx2phkw1PHWkdRWaV3qzOXBr3OSS/6XMQmycmJPhH5cRUdk5dABR+eT/CjAm bOjqX4AInPfKgczbnsSetfDQDxwTt1Gggv2ESlP/S5oTk42KpUtAlu9PpMDf7ccT cSte7TOhYZ+1z3XTjjB3lfhnWPMiHtc= -----END CERTIFICATE-----Generated at Fri Mar 14 08:27:46 2025 by rpki-client