$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/f0a7c79b-b938-3f9d-9e12-7f47c3ee5a46.roa File: f0a7c79b-b938-3f9d-9e12-7f47c3ee5a46.roa (raw, json) Hash identifier: /SXUKFYee7dzADshBnpCi7nBgMFpqOc9MU628ttM9Lo= Subject key identifier: 41:A2:16:0F:72:6D:02:1F:EE:EA:43:92:C0:60:EC:C1:43:1A:A4:14 Certificate issuer: /CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b Certificate serial: 010D0C9F43285848B1F62AE0E6363A24670652C0 Authority key identifier: 90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/f0a7c79b-b938-3f9d-9e12-7f47c3ee5a46.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 14618 IP address blocks: 216.205.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:2a:e0:e6:36:3a:24:67:06:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=5a9868a4-3ebe-490d-a9d2-e456c74cd692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9d:d7:26:62:90:da:49:03:ef:20:a3:59:b1: 65:44:27:04:7b:d6:a3:11:78:8c:14:ba:1e:68:99: 7c:61:b4:6c:3a:9f:5c:cb:47:68:4d:ec:d6:6c:b4: 85:cc:a7:2b:e8:85:11:b5:ac:f5:da:48:08:08:6e: 85:5b:f5:56:fe:13:f9:f8:02:06:bc:68:14:e2:97: a9:85:69:47:75:f2:af:03:53:31:39:f4:68:6e:54: 02:71:fe:8f:ff:15:63:8b:69:75:41:e8:1b:f7:b6: 43:5e:43:c3:87:dd:e0:e3:13:15:6a:8a:93:93:ce: 30:14:09:41:48:15:2e:69:cd:4e:75:93:f3:62:d2: 39:21:f5:ae:19:d4:bc:39:3e:f3:5d:78:8e:bd:f3: d5:48:37:c7:55:56:a0:6f:a6:6c:2c:3a:cc:92:fa: 35:ec:d8:28:45:f1:95:bc:f4:db:89:10:ef:7b:41: 75:44:ec:5a:a1:7b:36:6e:3b:b4:50:ce:b8:78:1e: 08:4c:99:96:5f:76:02:88:9e:67:9b:13:b3:87:24: 5d:a3:f9:9c:17:e3:57:a9:5b:ab:b8:d5:1c:4c:47: 0b:03:59:35:ea:a2:13:68:1b:dd:34:40:2d:d5:4f: 03:58:2b:89:dd:8e:a1:62:24:8d:c7:a4:36:6f:33: a7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A2:16:0F:72:6D:02:1F:EE:EA:43:92:C0:60:EC:C1:43:1A:A4:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/f0a7c79b-b938-3f9d-9e12-7f47c3ee5a46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl X509v3 Authority Key Identifier: keyid:90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer sbgp-ipAddrBlock: critical IPv4: 216.205.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:ea:a0:85:5b:38:6c:74:23:44:46:7c:c2:7b:58:39:1d:c2: b7:a2:ce:bf:38:a6:ab:05:5d:bd:1c:ed:f0:e0:47:ab:4c:59: 4c:b1:07:b9:1a:c0:f4:9a:02:e7:29:0f:25:46:81:62:40:ed: dc:c8:9d:c1:5d:e8:93:37:ee:6b:7c:e2:38:f7:2c:39:17:e8: 1b:ff:0d:26:b9:47:9d:bb:ca:8a:5f:35:64:37:8c:4a:a4:65: ea:67:45:54:6e:33:e4:f6:b0:39:2a:df:e2:8d:46:ca:59:20: eb:15:8d:61:b6:1b:00:f8:96:a7:51:b8:8e:40:08:14:25:cf: 5b:ae:95:79:cb:12:1e:a2:30:2b:b3:98:69:09:4d:de:96:a3: 96:31:29:27:82:41:48:13:95:9a:e1:b8:45:0f:59:7d:21:cb: 73:ca:04:e9:59:06:59:75:26:76:25:c6:90:5a:a7:4b:28:19: 4e:21:2f:9e:2d:57:be:bf:8e:e6:bc:b4:21:56:5c:78:e4:d8: e2:47:60:82:01:f9:4e:ad:58:26:35:13:6f:13:a7:0d:b3:f4: 6a:67:97:e1:fe:6f:20:17:16:79:fe:fa:67:f8:f3:94:f9:65: 29:9c:b7:cf:36:a6:61:7c:ab:65:27:d1:ae:ff:ef:d7:12:55: 51:e6:2e:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9irg5jY6JGcGUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNiNjk0OGQtM2VlMS00MTUzLTljNDAtMWNkNzQ2NWJl YTJiMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk NWE5ODY4YTQtM2ViZS00OTBkLWE5ZDItZTQ1NmM3NGNkNjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ3XJmKQ2kkD7yCjWbFlRCcEe9ajEXiMFLoe aJl8YbRsOp9cy0doTezWbLSFzKcr6IURtaz12kgICG6FW/VW/hP5+AIGvGgU4pep hWlHdfKvA1MxOfRoblQCcf6P/xVji2l1Qegb97ZDXkPDh93g4xMVaoqTk84wFAlB SBUuac1OdZPzYtI5IfWuGdS8OT7zXXiOvfPVSDfHVVagb6ZsLDrMkvo17NgoRfGV vPTbiRDve0F1ROxaoXs2bju0UM64eB4ITJmWX3YCiJ5nmxOzhyRdo/mcF+NXqVur uNUcTEcLA1k16qITaBvdNEAt1U8DWCuJ3Y6hYiSNx6Q2bzOnXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGiFg9ybQIf7upDksBg7MFDGqQUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hM2I2 OTQ4ZC0zZWUxLTQxNTMtOWM0MC0xY2Q3NDY1YmVhMmIvZjBhN2M3OWItYjkzOC0z ZjlkLTllMTItN2Y0N2MzZWU1YTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTNiNjk0OGQtM2VlMS00MTUzLTlj NDAtMWNkNzQ2NWJlYTJiL2EzYjY5NDhkLTNlZTEtNDE1My05YzQwLTFjZDc0NjVi ZWEyYi5jcmwwHwYDVR0jBBgwFoAUkI1uPag85edr1T1okg9nW6bWPkowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hM2I2OTQ4ZC0zZWUxLTQxNTMtOWM0MC0xY2Q3 NDY1YmVhMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2M01MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDqoIVbOGx0I0RGfMJ7WDkdwreizr84pqsFXb0c7fDgR6tMWUyxB7ka wPSaAucpDyVGgWJA7dzIncFd6JM37mt84jj3LDkX6Bv/DSa5R527yopfNWQ3jEqk ZepnRVRuM+T2sDkq3+KNRspZIOsVjWG2GwD4lqdRuI5ACBQlz1uulXnLEh6iMCuz mGkJTd6Wo5YxKSeCQUgTlZrhuEUPWX0hy3PKBOlZBll1JnYlxpBap0soGU4hL54t V76/jua8tCFWXHjk2OJHYIIB+U6tWCY1E28Tpw2z9Gpnl+H+byAXFnn++mf485T5 ZSmct882pmF8q2Un0a7/79cSVVHmLrI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:46 2025 by rpki-client