$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/720b7d31-5c11-39f9-be21-0ddbb9331386.roa File: 720b7d31-5c11-39f9-be21-0ddbb9331386.roa (raw, json) Hash identifier: G7iLB9AECQnR7prnEDtvlMCFfELpSyJpa7qBf8MInE0= Subject key identifier: F2:CB:45:9C:B0:30:45:98:4E:E7:77:F0:4B:75:5C:8D:24:C6:B3:08 Certificate issuer: /CN=70057aa1-544d-4237-b549-304fd45324ba Certificate serial: 010D0C9F43285848A400C20C59DC0ABB8708EA40 Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/720b7d31-5c11-39f9-be21-0ddbb9331386.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 25617 IP address blocks: 216.222.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:c2:0c:59:dc:0a:bb:87:08:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=0e891b33-8009-4b5b-9214-5c32250dc7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c8:70:06:b5:a2:4c:7b:37:c8:4c:46:81:2e: 2b:1f:a7:69:26:d4:2f:96:11:64:5d:07:69:fb:73: ce:06:f1:63:ef:fc:9b:4b:3e:32:24:c3:d8:d5:07: 15:a7:06:74:c9:f7:12:66:b0:24:7c:4f:4a:16:4b: 43:a2:15:e6:7b:3a:ce:70:eb:3b:41:7a:ab:6c:bc: ea:4c:28:2b:82:df:56:c8:e0:98:7c:bb:f7:6e:62: f5:63:99:e9:1c:41:a6:86:85:67:4e:3c:a6:86:ca: 59:5d:81:d9:66:90:bf:40:c4:f1:43:c9:84:c4:fb: 0d:40:93:28:aa:4b:ed:3d:80:a4:85:03:0a:46:03: 03:5f:73:b5:cf:38:a0:44:54:d3:3c:59:ce:fa:58: c6:35:bc:f9:53:ef:36:5e:0e:0d:8d:6e:20:ab:2f: 08:19:4c:46:f5:57:f3:e5:28:0a:ce:56:ba:30:bf: 76:d8:45:c5:45:c4:b7:fb:71:fb:2a:85:f0:9c:07: 17:d3:22:3c:65:b7:bf:a9:6a:33:c2:85:9a:f8:79: be:34:d3:77:25:7b:08:2e:f2:24:35:51:79:a6:c0: 4f:32:6f:a6:7c:f0:bc:d9:c9:dc:46:06:79:b6:e7: 81:6e:59:a5:c3:4a:ae:7b:84:e7:20:18:77:f6:61: 65:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CB:45:9C:B0:30:45:98:4E:E7:77:F0:4B:75:5C:8D:24:C6:B3:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/720b7d31-5c11-39f9-be21-0ddbb9331386.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl X509v3 Authority Key Identifier: keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer sbgp-ipAddrBlock: critical IPv4: 216.222.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:b8:42:0f:53:ec:66:b1:38:7d:2b:3e:a5:01:6e:c9:89:47: d1:b9:2f:32:4b:64:1b:33:4f:38:58:c6:87:4e:ca:9d:b1:bc: 98:ba:7a:1a:49:09:9a:96:62:39:e7:50:a7:dc:05:a0:25:3b: 13:57:76:1d:ab:55:80:e3:3e:43:bd:bf:00:d6:5c:9e:1b:e1: 3c:14:af:86:a5:fa:dc:09:5b:3c:90:fe:dd:d3:d4:75:5c:92: 77:66:5e:23:d9:12:a1:78:e0:96:6d:d9:03:25:dd:b2:b2:f8: 01:fe:77:20:80:6a:ee:65:9a:36:bb:70:6e:bb:7e:de:70:a1: a4:c8:1d:f9:10:cf:bb:2c:7f:ae:65:e6:3b:c6:3d:9c:b0:50: c1:21:db:ec:3f:16:f8:d7:bd:3a:ad:f0:5f:c0:ba:e4:45:84: 46:9b:1f:7d:d4:82:38:44:7e:65:88:71:c7:15:83:76:c3:62: 6a:90:3c:f4:48:af:1c:a0:08:11:53:77:10:a3:60:5b:f4:a3: 68:3b:c0:22:5e:dd:3a:aa:ea:e1:e5:7c:02:bf:c9:9d:8d:35: 0b:15:4c:a0:30:25:ff:1e:89:46:64:76:52:13:14:77:1b:a1: 20:9b:8d:a6:72:00:25:8c:74:d0:25:7f:d9:50:42:13:26:c1: 78:e5:0c:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAMIMWdwKu4cI6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAwNTdhYTEtNTQ0ZC00MjM3LWI1NDktMzA0ZmQ0NTMy NGJhMB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk MGU4OTFiMzMtODAwOS00YjViLTkyMTQtNWMzMjI1MGRjN2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMhwBrWiTHs3yExGgS4rH6dpJtQvlhFkXQdp +3POBvFj7/ybSz4yJMPY1QcVpwZ0yfcSZrAkfE9KFktDohXmezrOcOs7QXqrbLzq TCgrgt9WyOCYfLv3bmL1Y5npHEGmhoVnTjymhspZXYHZZpC/QMTxQ8mExPsNQJMo qkvtPYCkhQMKRgMDX3O1zzigRFTTPFnO+ljGNbz5U+82Xg4NjW4gqy8IGUxG9Vfz 5SgKzla6ML922EXFRcS3+3H7KoXwnAcX0yI8Zbe/qWozwoWa+Hm+NNN3JXsILvIk NVF5psBPMm+mfPC82cncRgZ5tueBblmlw0que4TnIBh39mFl0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLLRZywMEWYTud38Et1XI0kxrMIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MDA1 N2FhMS01NDRkLTQyMzctYjU0OS0zMDRmZDQ1MzI0YmEvNzIwYjdkMzEtNWMxMS0z OWY5LWJlMjEtMGRkYmI5MzMxMzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzAwNTdhYTEtNTQ0ZC00MjM3LWI1 NDktMzA0ZmQ0NTMyNGJhLzcwMDU3YWExLTU0NGQtNDIzNy1iNTQ5LTMwNGZkNDUz MjRiYS5jcmwwHwYDVR0jBBgwFoAU3kql0TNc/YfvMJELZq/wzmE2ZNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MDA1N2FhMS01NDRkLTQyMzctYjU0OS0zMDRm ZDQ1MzI0YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2N7XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEu4Qg9T7GaxOH0rPqUBbsmJR9G5LzJLZBszTzhYxodOyp2xvJi6ehpJ CZqWYjnnUKfcBaAlOxNXdh2rVYDjPkO9vwDWXJ4b4TwUr4al+twJWzyQ/t3T1HVc kndmXiPZEqF44JZt2QMl3bKy+AH+dyCAau5lmja7cG67ft5woaTIHfkQz7ssf65l 5jvGPZywUMEh2+w/FvjXvTqt8F/AuuRFhEabH33UgjhEfmWIcccVg3bDYmqQPPRI rxygCBFTdxCjYFv0o2g7wCJe3Tqq6uHlfAK/yZ2NNQsVTKAwJf8eiUZkdlITFHcb oSCbjaZyACWMdNAlf9lQQhMmwXjlDOQ= -----END CERTIFICATE-----Generated at Mon Apr 7 20:15:05 2025 by rpki-client