$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c3771ffc-3d14-338a-8f08-18085a6790e9.roa File: c3771ffc-3d14-338a-8f08-18085a6790e9.roa (raw, json) Hash identifier: U1HS/mnQIC5sTMGiqe1KV60zC1eg22pJFhTBkB3Cbjw= Subject key identifier: 2D:90:38:00:96:80:4F:F4:CA:FF:41:93:EF:63:72:93:44:B1:DD:CA Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F43285848ADC613E81B325E8CE55C1E40 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c3771ffc-3d14-338a-8f08-18085a6790e9.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 15327 IP address blocks: 216.151.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:13:e8:1b:32:5e:8c:e5:5c:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=bb3e4a38-c7e5-4973-86cf-83941e4991ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:97:01:d0:0f:18:b6:2a:47:f8:f9:42:98:33: 34:3f:71:c6:2d:a0:5f:60:f1:57:07:39:21:3e:d8: eb:2a:de:24:8a:14:8a:3d:d6:b3:82:58:19:b5:b9: 1b:8c:a5:86:19:e7:2c:94:72:cc:f7:d6:11:64:e2: af:c6:9b:c0:09:17:e8:ac:ea:be:2a:21:67:53:25: 7e:1f:f9:5d:b1:52:12:a6:19:3c:c0:4b:f9:39:0f: 56:3a:1a:7e:dd:37:f9:f4:a9:c5:a9:70:c1:e3:91: 66:b2:22:c4:66:0d:1f:1f:be:9b:c9:ab:da:8a:d7: d4:8a:5d:24:3c:20:bd:41:a2:4d:c0:cd:9a:7c:00: 63:16:a4:39:ed:e7:b3:43:7c:12:90:9f:0c:a8:9b: 2e:e9:11:30:b8:13:5d:a7:4b:7c:ad:fc:8a:e6:69: 87:77:a7:9f:e3:f9:87:87:73:1a:9a:a3:81:9e:05: 97:6c:d7:0e:ca:bc:16:eb:eb:da:9a:62:11:fd:84: c5:5d:5a:3f:4f:b0:06:6e:8a:89:ea:c5:32:b9:fb: 16:b9:4f:77:99:d7:34:34:9d:1f:ef:76:96:1f:44: 87:01:43:c8:d2:4b:ad:8e:58:5d:a6:aa:4c:35:03: c1:94:04:25:aa:8e:55:af:fc:76:08:3a:f3:76:15: ee:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:90:38:00:96:80:4F:F4:CA:FF:41:93:EF:63:72:93:44:B1:DD:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/c3771ffc-3d14-338a-8f08-18085a6790e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 216.151.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:00:be:70:23:a6:fb:69:0c:33:28:38:55:fb:08:64:6c:12: 28:18:e2:79:ee:53:e2:88:a9:4d:d2:93:26:56:12:30:13:a9: 01:60:5c:40:c8:4d:06:be:8e:43:15:1b:76:06:d1:e8:fc:b2: ee:59:77:69:b0:15:32:88:b0:c0:40:5f:ff:f9:66:b6:84:0a: b0:ba:a0:63:11:5a:1a:aa:14:43:97:c4:80:bb:66:14:94:ec: 78:61:d7:da:49:a7:78:03:37:cd:e5:dc:69:0a:35:c3:27:ed: f7:d6:d4:03:92:44:c8:1a:44:c0:89:1d:6a:26:d2:b5:65:ba: 78:d2:38:ac:20:fd:c7:51:86:73:4b:13:50:24:76:75:dc:04: 94:3c:03:c8:41:6e:3f:13:04:ba:4a:5d:47:25:46:87:ad:2b: 15:d9:3d:08:9c:04:16:ed:c2:56:c1:9b:b0:1c:c5:68:21:54: 24:a6:e9:2a:a6:20:d7:50:bc:7e:cc:0c:c2:23:8a:03:72:e2: 5d:b6:d6:8e:a7:db:a2:b1:65:b3:37:cd:ef:c0:8a:1c:70:b7: 12:b5:1d:25:88:13:bf:81:1b:c9:64:a2:3f:c6:6b:b6:15:a1: c9:42:73:d8:8d:17:90:40:3b:03:ce:3d:a2:cb:83:d0:27:99: 9d:3c:b0:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxhPoGzJejOVcHkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk YmIzZTRhMzgtYzdlNS00OTczLTg2Y2YtODM5NDFlNDk5MWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZcB0A8YtipH+PlCmDM0P3HGLaBfYPFXBzkh PtjrKt4kihSKPdazglgZtbkbjKWGGecslHLM99YRZOKvxpvACRforOq+KiFnUyV+ H/ldsVISphk8wEv5OQ9WOhp+3Tf59KnFqXDB45FmsiLEZg0fH76byavaitfUil0k PCC9QaJNwM2afABjFqQ57eezQ3wSkJ8MqJsu6REwuBNdp0t8rfyK5mmHd6ef4/mH h3MamqOBngWXbNcOyrwW6+vammIR/YTFXVo/T7AGboqJ6sUyufsWuU93mdc0NJ0f 73aWH0SHAUPI0kutjlhdpqpMNQPBlAQlqo5Vr/x2CDrzdhXuoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2QOACWgE/0yv9Bk+9jcpNEsd3KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvYzM3NzFmZmMtM2QxNC0z MzhhLThmMDgtMTgwODVhNjc5MGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JdVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUAvnAjpvtpDDMoOFX7CGRsEigY4nnuU+KIqU3SkyZWEjATqQFgXEDI TQa+jkMVG3YG0ej8su5Zd2mwFTKIsMBAX//5ZraECrC6oGMRWhqqFEOXxIC7ZhSU 7Hhh19pJp3gDN83l3GkKNcMn7ffW1AOSRMgaRMCJHWom0rVlunjSOKwg/cdRhnNL E1AkdnXcBJQ8A8hBbj8TBLpKXUclRoetKxXZPQicBBbtwlbBm7AcxWghVCSm6Sqm INdQvH7MDMIjigNy4l221o6n26KxZbM3ze/AihxwtxK1HSWIE7+BG8lkoj/Ga7YV oclCc9iNF5BAOwPOPaLLg9AnmZ08sKU= -----END CERTIFICATE-----Generated at Sat Apr 12 15:09:37 2025 by rpki-client