$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/d44d9355-ca16-3f84-adcc-d72f435dc27f.roa File: d44d9355-ca16-3f84-adcc-d72f435dc27f.roa (raw, json) Hash identifier: oBsgi0CMJV5zMoK59WRErhklFj0b2VQOWuRJ0J920Pw= Subject key identifier: E3:35:0E:B5:68:57:2D:3A:C1:0A:1A:63:FC:2A:AC:3C:30:6B:7A:79 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F43285848AF2B7EC9BAC408362FD0FA00 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/d44d9355-ca16-3f84-adcc-d72f435dc27f.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 395391 IP address blocks: 216.230.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:7e:c9:ba:c4:08:36:2f:d0:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=78349fb1-46bd-4cb1-af03-e6a284bed56c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b2:46:43:66:be:96:93:2b:59:42:7a:9a:71: 38:b0:75:a1:b5:df:da:1e:46:a2:a6:78:f4:05:61: bc:07:9b:92:5f:d0:34:c3:32:92:5b:2e:36:60:c6: 65:ad:45:3d:8b:84:b9:4e:06:33:f6:9a:f1:1a:b1: fb:dc:33:23:d6:45:44:de:04:81:e6:94:c8:56:5d: 4d:e8:5c:6e:0c:7a:2d:b3:35:4e:85:aa:3f:c0:8e: 46:91:ca:d5:dc:70:2e:9f:db:b5:7c:ec:0f:3d:e4: 76:74:7c:1a:0f:56:ca:8c:27:9d:73:be:a5:03:64: f6:08:20:4d:c4:5b:e3:bb:48:25:17:85:b2:2e:2b: 88:97:1c:25:de:9e:e3:79:98:69:a0:87:d1:a6:18: 93:13:df:ce:b9:64:dd:4e:53:4d:b6:4a:c5:46:93: 1b:f5:87:c9:38:0b:7e:44:89:bf:bd:ed:c7:7b:c3: 48:ed:5b:49:b3:d4:8e:fe:4b:b8:c6:81:02:2f:06: 25:4d:b8:75:c3:c7:bf:24:c6:6b:64:62:b5:f9:65: 69:47:fb:6d:04:88:01:7d:67:90:20:e3:d0:0f:aa: 74:f0:da:95:31:a3:0d:e6:03:72:00:b2:c8:18:e5: b8:2f:55:d8:b6:2e:c5:65:55:9c:15:99:43:fb:a3: d8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:35:0E:B5:68:57:2D:3A:C1:0A:1A:63:FC:2A:AC:3C:30:6B:7A:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/d44d9355-ca16-3f84-adcc-d72f435dc27f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 216.230.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:c5:e9:f7:56:2c:0f:60:79:b8:7b:02:1b:c2:85:cb:af:93: c7:a2:7f:38:3a:16:7c:1b:3f:77:22:48:ed:65:73:b6:c2:a6: 51:eb:ef:ce:80:27:b7:05:88:65:b7:75:e2:50:23:c0:44:08: ad:48:c0:86:5f:93:a2:b5:af:17:f3:94:51:93:03:91:10:45: 4c:b4:69:1a:6d:3b:c6:99:63:d8:72:a7:e5:24:91:a0:78:88: 6a:49:27:2b:d5:81:39:36:a9:f1:b0:44:c2:0e:7f:db:05:90: 98:87:6f:72:7f:96:39:63:db:db:3b:8b:59:40:39:8d:5b:21: 19:82:00:7e:4a:e5:14:70:df:3c:22:35:23:53:a6:82:b3:99: f3:3d:be:a9:43:ad:ab:e0:46:0b:fd:8b:ed:84:05:3e:7e:74: 9f:19:cc:cf:85:d9:0b:d5:30:27:a1:f7:86:00:4f:3f:db:3e: f4:8b:92:ca:2d:c4:d5:6d:48:a7:05:cc:8e:8e:6d:04:d4:82: c3:2f:0b:92:66:96:3b:e5:17:cb:e8:e6:7e:b6:73:63:76:bc: 61:1b:16:0a:9c:44:55:40:e5:07:a6:11:f1:63:13:55:a1:d3: 63:1a:d0:7f:9e:4e:99:f3:3e:f6:4f:25:df:29:19:99:e8:eb: 9c:44:6e:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK37JusQINi/Q+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk NzgzNDlmYjEtNDZiZC00Y2IxLWFmMDMtZTZhMjg0YmVkNTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bJGQ2a+lpMrWUJ6mnE4sHWhtd/aHkaipnj0 BWG8B5uSX9A0wzKSWy42YMZlrUU9i4S5TgYz9prxGrH73DMj1kVE3gSB5pTIVl1N 6FxuDHotszVOhao/wI5GkcrV3HAun9u1fOwPPeR2dHwaD1bKjCedc76lA2T2CCBN xFvju0glF4WyLiuIlxwl3p7jeZhpoIfRphiTE9/OuWTdTlNNtkrFRpMb9YfJOAt+ RIm/ve3He8NI7VtJs9SO/ku4xoECLwYlTbh1w8e/JMZrZGK1+WVpR/ttBIgBfWeQ IOPQD6p08NqVMaMN5gNyALLIGOW4L1XYti7FZVWcFZlD+6PYcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOM1DrVoVy06wQoaY/wqrDwwa3p5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvZDQ0ZDkzNTUtY2ExNi0z Zjg0LWFkY2MtZDcyZjQzNWRjMjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OZjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPF6fdWLA9gebh7AhvChcuvk8eifzg6FnwbP3ciSO1lc7bCplHr786A J7cFiGW3deJQI8BECK1IwIZfk6K1rxfzlFGTA5EQRUy0aRptO8aZY9hyp+UkkaB4 iGpJJyvVgTk2qfGwRMIOf9sFkJiHb3J/ljlj29s7i1lAOY1bIRmCAH5K5RRw3zwi NSNTpoKzmfM9vqlDravgRgv9i+2EBT5+dJ8ZzM+F2QvVMCeh94YATz/bPvSLksot xNVtSKcFzI6ObQTUgsMvC5JmljvlF8vo5n62c2N2vGEbFgqcRFVA5QemEfFjE1Wh 02Ma0H+eTpnzPvZPJd8pGZno65xEbkE= -----END CERTIFICATE-----Generated at Sat Apr 12 15:14:16 2025 by rpki-client