$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/b6e14efa-29c2-321e-91ea-20c36382b1b0.roa File: b6e14efa-29c2-321e-91ea-20c36382b1b0.roa (raw, json) Hash identifier: /33OFjVN3cIVrZBUr4XGep8jelPTbuV8/mlLZdEWQ7k= Subject key identifier: C3:A0:B1:34:2A:7B:2C:AF:72:04:D2:88:13:67:11:06:A9:71:34:A1 Certificate issuer: /CN=9a696f17-cb36-4b2b-be82-47f0c467096d Certificate serial: 010D0C9F43285848E9CBE41FEC2E04B38C734600 Authority key identifier: 38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/b6e14efa-29c2-321e-91ea-20c36382b1b0.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 46632 IP address blocks: 216.238.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:e4:1f:ec:2e:04:b3:8c:73:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a696f17-cb36-4b2b-be82-47f0c467096d Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=9cf596df-d754-4133-87fc-8d9c1ad9cce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:29:b3:88:87:4e:0f:3a:df:2b:9b:27:b2:c9: aa:de:52:fb:8b:31:27:37:a3:e6:09:c8:23:2b:18: 48:f7:7a:a6:a5:c7:8f:fa:7f:7e:22:25:e8:a0:98: ca:0f:90:a2:42:85:78:53:71:a3:f1:a2:9e:ed:f5: 11:9d:02:4d:62:5a:e0:05:d5:5f:07:63:cd:5b:18: f1:96:1e:35:4c:c5:31:c6:2c:94:6c:dd:08:9d:94: dc:f4:ee:fc:5a:7a:24:64:f0:c1:98:e3:e5:b7:ad: bf:bf:f2:94:8d:47:01:8d:90:d6:b2:07:7a:13:5c: 06:b4:ad:c6:b5:75:03:44:a5:c1:97:ed:63:d7:77: bd:77:e7:83:b6:0d:0f:ea:0e:c8:eb:fe:69:19:da: 46:e3:63:4c:db:1f:0d:41:2a:40:c2:be:ea:0a:a8: 27:f8:39:a4:17:da:ce:c6:f7:b3:91:0b:f9:1c:60: e7:55:e8:a0:cf:8e:56:59:62:f3:9a:a0:5d:87:6a: ba:9e:82:d5:a8:80:8f:31:fa:c7:59:89:c8:ea:a5: ef:2c:78:3d:50:07:3e:14:1c:25:de:9e:94:ab:0a: 40:2a:2b:80:0f:4b:aa:60:79:44:8f:3a:2b:27:b8: b5:d0:20:7e:1f:1c:06:bb:0e:64:0b:65:81:43:69: fd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A0:B1:34:2A:7B:2C:AF:72:04:D2:88:13:67:11:06:A9:71:34:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/b6e14efa-29c2-321e-91ea-20c36382b1b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl X509v3 Authority Key Identifier: keyid:38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer sbgp-ipAddrBlock: critical IPv4: 216.238.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:50:b5:a2:c8:72:5e:31:45:c2:04:ab:bb:72:31:f1:84:61: fe:f0:37:7f:48:79:33:05:9d:d7:27:b4:48:2c:6c:6b:46:94: b5:47:e9:c9:e5:90:c5:c4:c7:8b:b5:c7:ef:4f:9d:83:22:39: 47:77:24:5b:bf:82:a2:5d:8e:64:b0:20:fc:40:1b:2a:cc:e9: 2a:9a:88:0d:6d:99:c7:4b:73:7f:ef:f9:00:c6:b3:c9:af:eb: 97:6d:c7:d7:e1:d1:fe:f6:ff:9f:3b:38:a6:61:d5:39:6d:0d: 78:a5:6d:71:5c:9d:e2:74:f9:e4:ec:90:47:6a:33:68:56:51: 5a:21:fc:f3:e5:47:31:ca:50:8d:61:59:e4:93:6f:ed:78:32: e1:c5:a6:22:5b:7b:b3:43:f6:bd:93:14:f6:54:27:ea:7e:95: 55:65:01:a0:54:30:0e:b5:9d:fe:17:9e:2d:dc:bb:a6:17:a0: 11:69:7c:2c:46:28:93:08:b6:8a:9d:93:df:50:32:ca:87:c8: e6:50:c6:c2:be:7a:bc:82:fa:3e:80:04:46:c7:9a:af:32:30: 4d:9c:a2:8c:80:0e:f7:3b:39:d8:63:ad:cc:16:bc:64:83:52: 2c:9e:ff:3a:ff:f6:42:43:fa:be:65:b0:27:15:5f:8a:a5:eb: 03:0d:2a:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy+Qf7C4Es4xzRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE2OTZmMTctY2IzNi00YjJiLWJlODItNDdmMGM0Njcw OTZkMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk OWNmNTk2ZGYtZDc1NC00MTMzLTg3ZmMtOGQ5YzFhZDljY2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsymziIdODzrfK5snssmq3lL7izEnN6PmCcgj KxhI93qmpceP+n9+IiXooJjKD5CiQoV4U3Gj8aKe7fURnQJNYlrgBdVfB2PNWxjx lh41TMUxxiyUbN0InZTc9O78WnokZPDBmOPlt62/v/KUjUcBjZDWsgd6E1wGtK3G tXUDRKXBl+1j13e9d+eDtg0P6g7I6/5pGdpG42NM2x8NQSpAwr7qCqgn+DmkF9rO xvezkQv5HGDnVeigz45WWWLzmqBdh2q6noLVqICPMfrHWYnI6qXvLHg9UAc+FBwl 3p6UqwpAKiuAD0uqYHlEjzorJ7i10CB+HxwGuw5kC2WBQ2n9YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOgsTQqeyyvcgTSiBNnEQapcTShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YTY5 NmYxNy1jYjM2LTRiMmItYmU4Mi00N2YwYzQ2NzA5NmQvYjZlMTRlZmEtMjljMi0z MjFlLTkxZWEtMjBjMzYzODJiMWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWE2OTZmMTctY2IzNi00YjJiLWJl ODItNDdmMGM0NjcwOTZkLzlhNjk2ZjE3LWNiMzYtNGIyYi1iZTgyLTQ3ZjBjNDY3 MDk2ZC5jcmwwHwYDVR0jBBgwFoAUOGVDxKSXi/HM12fBUAL+77zUroAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85YTY5NmYxNy1jYjM2LTRiMmItYmU4Mi00N2Yw YzQ2NzA5NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2O4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNQtaLIcl4xRcIEq7tyMfGEYf7wN39IeTMFndcntEgsbGtGlLVH6cnl kMXEx4u1x+9PnYMiOUd3JFu/gqJdjmSwIPxAGyrM6SqaiA1tmcdLc3/v+QDGs8mv 65dtx9fh0f72/587OKZh1TltDXilbXFcneJ0+eTskEdqM2hWUVoh/PPlRzHKUI1h WeSTb+14MuHFpiJbe7ND9r2TFPZUJ+p+lVVlAaBUMA61nf4Xni3cu6YXoBFpfCxG KJMItoqdk99QMsqHyOZQxsK+eryC+j6ABEbHmq8yME2cooyADvc7OdhjrcwWvGSD Uiye/zr/9kJD+r5lsCcVX4ql6wMNKmI= -----END CERTIFICATE-----Generated at Fri Apr 4 19:20:58 2025 by rpki-client