$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/4a5da011-3c63-344e-8f4e-1b485c41f7dd.roa File: 4a5da011-3c63-344e-8f4e-1b485c41f7dd.roa (raw, json) Hash identifier: jQu9tu4IxP98pzUdrQr6Kyi1d48dDaQzG3+PKBYjCdU= Subject key identifier: 55:3B:A9:0E:58:75:FB:6F:2C:7B:F5:A8:89:2A:B3:29:A0:72:B6:6B Certificate issuer: /CN=70057aa1-544d-4237-b549-304fd45324ba Certificate serial: 010D0C9F43285848A400C1BA876A654E2CCE8E00 Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/4a5da011-3c63-344e-8f4e-1b485c41f7dd.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 30039 IP address blocks: 216.222.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:c1:ba:87:6a:65:4e:2c:ce:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=10f6318a-b084-4df2-a201-af5f4489605a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7d:69:15:86:cc:1a:e3:96:3a:c8:43:e9:c0: e0:65:62:29:a0:37:c8:b2:44:ff:7b:9e:f9:45:35: 67:5f:93:4e:11:3f:ad:27:65:0b:e2:cf:50:0d:8f: 8f:bf:1e:4c:0c:12:ac:fe:8d:d0:0b:69:cb:63:74: 88:e7:51:22:39:b5:7c:b3:31:c9:37:be:7a:dd:61: 6f:4f:18:4e:73:3b:ca:67:93:7e:35:ca:39:d5:a6: 4f:53:a0:3d:76:78:76:63:fb:5f:c4:85:e7:9b:11: 77:44:f7:4f:09:ac:00:51:18:ac:b2:c6:89:c7:39: 1b:b0:84:27:ee:9d:29:45:f5:68:22:37:43:c1:28: 3b:ab:d7:30:31:71:3c:70:23:33:e6:b2:55:91:a1: ee:d8:31:35:f6:48:30:43:4f:ab:2b:ef:64:c1:40: 4e:b6:94:47:d4:1c:49:40:2c:07:c6:31:05:90:a0: 57:61:47:f0:30:69:76:bb:07:ec:a8:8f:ad:6f:92: 5b:4f:6e:cd:e0:ce:8a:4f:9a:d2:46:e9:8a:d1:ef: 81:e4:4d:98:5f:ed:97:f5:f5:fb:c2:64:d8:40:88: 15:c9:4c:35:4c:98:2d:31:9b:f8:66:38:3c:34:3a: 3f:cc:0d:b7:43:eb:78:36:0f:5c:c6:30:fd:bd:81: 7a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3B:A9:0E:58:75:FB:6F:2C:7B:F5:A8:89:2A:B3:29:A0:72:B6:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/4a5da011-3c63-344e-8f4e-1b485c41f7dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl X509v3 Authority Key Identifier: keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer sbgp-ipAddrBlock: critical IPv4: 216.222.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:9a:8c:80:31:d4:b8:da:c2:d9:b3:ea:2d:74:1a:8a:bc:ff: 81:a8:71:28:50:54:d4:c7:31:50:9f:42:0a:5c:48:b6:e5:43: 34:83:74:3b:39:38:5e:b2:8d:ad:f6:07:6e:2a:88:0a:12:f9: ed:42:8d:1d:cb:43:bf:5a:56:1d:3d:d0:77:6e:89:ab:f5:ad: 66:5c:0b:2f:54:b4:4a:f4:ab:62:00:86:1b:b4:b3:32:72:c3: ba:cb:51:64:65:7d:de:0a:34:52:51:54:59:00:f8:25:cd:d6: 9a:a6:6f:91:25:e8:56:35:fd:08:cb:56:f5:ad:73:97:11:15: 66:b9:98:87:c9:b8:92:c5:1d:7d:d2:44:3e:6f:ef:6b:07:91: 6f:77:f9:fc:78:a8:e2:fb:9d:28:80:2d:c7:cf:2c:44:b0:5c: 10:94:ac:2a:7b:25:c0:bb:d7:49:e5:21:02:77:27:16:98:d4: 8d:bf:a5:13:6e:dd:80:4f:56:1b:de:f7:63:01:3f:78:fd:8d: 5f:e7:71:80:ff:fc:75:e9:d4:35:a9:87:72:7c:b0:aa:fc:cc: 54:61:8f:47:3e:5b:56:23:ec:47:73:28:37:d6:cb:8f:c3:df: 02:84:e3:ee:7d:91:b4:69:1c:9b:99:ef:8e:8a:b5:a6:e3:fa: a7:bd:59:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAMG6h2plTizOjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAwNTdhYTEtNTQ0ZC00MjM3LWI1NDktMzA0ZmQ0NTMy NGJhMB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk MTBmNjMxOGEtYjA4NC00ZGYyLWEyMDEtYWY1ZjQ0ODk2MDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH1pFYbMGuOWOshD6cDgZWIpoDfIskT/e575 RTVnX5NOET+tJ2UL4s9QDY+Pvx5MDBKs/o3QC2nLY3SI51EiObV8szHJN7563WFv TxhOczvKZ5N+Nco51aZPU6A9dnh2Y/tfxIXnmxF3RPdPCawAURisssaJxzkbsIQn 7p0pRfVoIjdDwSg7q9cwMXE8cCMz5rJVkaHu2DE19kgwQ0+rK+9kwUBOtpRH1BxJ QCwHxjEFkKBXYUfwMGl2uwfsqI+tb5JbT27N4M6KT5rSRumK0e+B5E2YX+2X9fX7 wmTYQIgVyUw1TJgtMZv4Zjg8NDo/zA23Q+t4Ng9cxjD9vYF6TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFU7qQ5YdftvLHv1qIkqsymgcrZrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MDA1 N2FhMS01NDRkLTQyMzctYjU0OS0zMDRmZDQ1MzI0YmEvNGE1ZGEwMTEtM2M2My0z NDRlLThmNGUtMWI0ODVjNDFmN2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzAwNTdhYTEtNTQ0ZC00MjM3LWI1 NDktMzA0ZmQ0NTMyNGJhLzcwMDU3YWExLTU0NGQtNDIzNy1iNTQ5LTMwNGZkNDUz MjRiYS5jcmwwHwYDVR0jBBgwFoAU3kql0TNc/YfvMJELZq/wzmE2ZNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MDA1N2FhMS01NDRkLTQyMzctYjU0OS0zMDRm ZDQ1MzI0YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2N7bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+ajIAx1Ljawtmz6i10Goq8/4GocShQVNTHMVCfQgpcSLblQzSDdDs5 OF6yja32B24qiAoS+e1CjR3LQ79aVh090Hduiav1rWZcCy9UtEr0q2IAhhu0szJy w7rLUWRlfd4KNFJRVFkA+CXN1pqmb5El6FY1/QjLVvWtc5cRFWa5mIfJuJLFHX3S RD5v72sHkW93+fx4qOL7nSiALcfPLESwXBCUrCp7JcC710nlIQJ3JxaY1I2/pRNu 3YBPVhve92MBP3j9jV/ncYD//HXp1DWph3J8sKr8zFRhj0c+W1Yj7EdzKDfWy4/D 3wKE4+59kbRpHJuZ746Ktabj+qe9Wf8= -----END CERTIFICATE-----Generated at Mon Apr 7 20:15:21 2025 by rpki-client