$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/34d3497e-f5b7-366d-a095-53a322d49a0c.roa File: 34d3497e-f5b7-366d-a095-53a322d49a0c.roa (raw, json) Hash identifier: plPsiM0BGflhrbhID+gUQbbWvNFkPZ8vhKFQI66vI5E= Subject key identifier: 83:32:34:85:41:A0:48:B0:15:4B:34:83:5A:87:64:37:03:27:1B:08 Certificate issuer: /CN=70057aa1-544d-4237-b549-304fd45324ba Certificate serial: 010D0C9F43285848A1361D62564187C65D8C1580 Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/34d3497e-f5b7-366d-a095-53a322d49a0c.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 30039 IP address blocks: 216.222.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:1d:62:56:41:87:c6:5d:8c:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=27ec22d8-d92d-4a45-9b67-d04b73f2e403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:43:a1:d8:1d:7c:fa:be:a3:4e:6f:0d:bd:a2: b5:3d:bc:30:86:44:fd:31:28:76:7d:51:e1:4d:ba: 76:77:d5:fc:bc:d9:9d:cb:b3:d1:9b:ab:7d:ca:7b: eb:23:a1:d4:a2:5a:46:1b:3f:43:1e:e6:42:05:3f: c4:a3:c9:48:22:fc:65:14:d4:60:af:d7:a8:c1:ad: 6a:e7:0e:af:35:f3:fd:d6:c5:48:8e:2e:a6:6f:8b: 1c:49:37:d2:74:3a:b5:92:2d:80:69:36:30:b5:44: 37:fb:25:67:16:f5:53:3e:2a:d1:5f:0a:8a:93:09: 5a:d4:a5:61:2a:8b:dc:f0:af:80:15:2b:26:bf:3b: 43:a3:8d:ac:f4:06:0f:d5:87:32:cc:e4:f0:c2:42: 15:cc:15:b6:7c:41:58:5b:2f:31:84:24:9f:06:f9: 6e:c2:71:0f:43:6c:d0:cc:1c:fa:6c:67:e9:a3:43: 5c:1d:81:2b:65:40:15:7c:2e:8a:59:86:47:7d:86: 04:64:28:ec:c5:44:53:b4:27:cf:bf:23:ee:30:80: f2:05:a3:0f:01:d9:ae:99:b4:83:92:6b:05:9c:f3: 71:11:f7:af:dc:53:77:c3:7b:ea:90:6b:6c:8c:4c: d6:5d:89:96:a9:88:b2:1d:65:01:3c:b8:4c:55:a7: 70:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:32:34:85:41:A0:48:B0:15:4B:34:83:5A:87:64:37:03:27:1B:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/34d3497e-f5b7-366d-a095-53a322d49a0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl X509v3 Authority Key Identifier: keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer sbgp-ipAddrBlock: critical IPv4: 216.222.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:74:42:53:98:22:49:9b:a4:eb:c8:6c:27:f9:ad:7f:70:1e: 2b:aa:56:0d:c4:0b:f4:2b:14:d8:ba:b7:f7:5f:73:37:44:1b: 88:62:5a:92:d4:4c:18:d2:30:6c:e2:b9:db:02:1f:f4:ce:15: f8:f4:61:73:5c:cb:cb:4d:6d:36:12:01:2c:04:6f:18:b2:9c: a9:04:ec:4e:5a:01:58:47:73:2a:80:a7:23:28:c6:69:43:c1: fe:88:5d:56:f3:21:d3:e4:7d:65:5c:94:8e:fd:f2:ac:0e:b6: 81:96:13:f7:41:8d:9f:bb:75:2c:fd:ae:f5:6b:96:ab:cb:6d: 0f:fb:f3:2d:4e:0a:1a:ce:bc:8f:e4:07:5f:7a:17:ec:37:81: 24:a7:ba:a6:05:e7:07:96:47:8b:a3:76:45:a4:94:6d:3c:f8: 18:da:c8:5e:74:e5:14:8b:9c:e7:34:28:a2:a6:15:24:59:8a: dc:c9:cf:11:a9:6c:6c:00:84:56:61:a3:37:2c:0d:1d:89:fa: 03:34:39:78:74:0f:ec:e3:75:cd:dd:e1:04:97:cc:0a:81:be: b6:42:f8:36:16:7e:d1:55:03:02:bb:fd:91:4c:fc:c5:9d:ab: 89:df:f5:16:75:00:8d:c2:b8:c9:d4:66:7d:38:7a:bb:22:71: 8f:05:96:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNh1iVkGHxl2MFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAwNTdhYTEtNTQ0ZC00MjM3LWI1NDktMzA0ZmQ0NTMy NGJhMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk MjdlYzIyZDgtZDkyZC00YTQ1LTliNjctZDA0YjczZjJlNDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkOh2B18+r6jTm8NvaK1PbwwhkT9MSh2fVHh Tbp2d9X8vNmdy7PRm6t9ynvrI6HUolpGGz9DHuZCBT/Eo8lIIvxlFNRgr9eowa1q 5w6vNfP91sVIji6mb4scSTfSdDq1ki2AaTYwtUQ3+yVnFvVTPirRXwqKkwla1KVh Kovc8K+AFSsmvztDo42s9AYP1YcyzOTwwkIVzBW2fEFYWy8xhCSfBvluwnEPQ2zQ zBz6bGfpo0NcHYErZUAVfC6KWYZHfYYEZCjsxURTtCfPvyPuMIDyBaMPAdmumbSD kmsFnPNxEfev3FN3w3vqkGtsjEzWXYmWqYiyHWUBPLhMVadwowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMyNIVBoEiwFUs0g1qHZDcDJxsIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MDA1 N2FhMS01NDRkLTQyMzctYjU0OS0zMDRmZDQ1MzI0YmEvMzRkMzQ5N2UtZjViNy0z NjZkLWEwOTUtNTNhMzIyZDQ5YTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzAwNTdhYTEtNTQ0ZC00MjM3LWI1 NDktMzA0ZmQ0NTMyNGJhLzcwMDU3YWExLTU0NGQtNDIzNy1iNTQ5LTMwNGZkNDUz MjRiYS5jcmwwHwYDVR0jBBgwFoAU3kql0TNc/YfvMJELZq/wzmE2ZNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MDA1N2FhMS01NDRkLTQyMzctYjU0OS0zMDRm ZDQ1MzI0YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2N7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZ0QlOYIkmbpOvIbCf5rX9wHiuqVg3EC/QrFNi6t/dfczdEG4hiWpLU TBjSMGziudsCH/TOFfj0YXNcy8tNbTYSASwEbxiynKkE7E5aAVhHcyqApyMoxmlD wf6IXVbzIdPkfWVclI798qwOtoGWE/dBjZ+7dSz9rvVrlqvLbQ/78y1OChrOvI/k B196F+w3gSSnuqYF5weWR4ujdkWklG08+BjayF505RSLnOc0KKKmFSRZitzJzxGp bGwAhFZhozcsDR2J+gM0OXh0D+zjdc3d4QSXzAqBvrZC+DYWftFVAwK7/ZFM/MWd q4nf9RZ1AI3CuMnUZn04ersicY8FlvE= -----END CERTIFICATE-----Generated at Mon Apr 7 20:05:14 2025 by rpki-client