$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/ff60fbe9-e19d-38a3-a7e2-be42260297df.roa File: ff60fbe9-e19d-38a3-a7e2-be42260297df.roa (raw, json) Hash identifier: TK9IrYTVjmw3eaODqb2Huc0o/scGQZUk7fi2cKct+6E= Subject key identifier: 38:CA:45:EE:AB:0A:B5:54:8A:9D:8E:A5:3E:55:52:A4:7C:01:33:FE Certificate issuer: /CN=70057aa1-544d-4237-b549-304fd45324ba Certificate serial: 010D0C9F43285848A400C1EE95A22B1BD7A0FE00 Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/ff60fbe9-e19d-38a3-a7e2-be42260297df.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 25617 IP address blocks: 216.222.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:c1:ee:95:a2:2b:1b:d7:a0:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=1eb2da83-c644-4d47-8b3e-427eb2fd6624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d6:bf:2d:e6:a8:d0:10:19:52:f7:fd:c0:71: e5:9b:71:a7:8e:1e:19:a9:c6:76:33:ff:4f:e4:bf: 55:62:41:96:9f:4e:e1:69:69:3b:4c:86:e1:53:6c: a2:88:de:c6:81:49:fb:9e:78:72:59:46:dd:9d:4a: ff:58:22:19:e7:53:f1:2b:f4:3a:41:3f:98:55:98: 8e:9b:ad:7b:1b:cd:97:7e:b0:3c:34:62:2a:3e:c6: 2e:1c:a7:ca:9e:40:f1:5f:24:71:a8:8a:de:6e:cd: bb:4a:18:bc:04:19:3b:19:f0:a2:49:1a:e7:4f:9f: f9:1b:54:05:d9:38:c3:c9:c6:b0:30:62:60:44:2f: 0e:cd:92:3a:41:89:0f:d6:79:72:5b:f4:e5:2d:85: 7d:bc:e1:60:93:50:74:8f:18:b0:d4:cc:d9:0e:a1: b9:89:6b:15:e3:7a:74:db:f7:bf:9a:14:38:96:14: 6f:12:dc:f3:71:84:d5:7e:ba:d2:1f:38:06:6f:83: ed:41:ac:2e:c6:df:0c:6f:6b:d1:61:10:7e:28:97: e5:27:ff:45:36:ea:81:6f:96:03:d6:1e:6f:a7:08: db:fd:00:84:2e:31:81:6f:84:dd:2c:f2:b4:35:6c: 1f:67:b1:65:d5:c4:20:47:67:15:99:09:c4:e2:35: 70:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CA:45:EE:AB:0A:B5:54:8A:9D:8E:A5:3E:55:52:A4:7C:01:33:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/ff60fbe9-e19d-38a3-a7e2-be42260297df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl X509v3 Authority Key Identifier: keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer sbgp-ipAddrBlock: critical IPv4: 216.222.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:99:83:82:37:58:e4:5e:35:21:86:bd:52:94:cf:57:64:a0: 1a:26:7c:b3:5e:cc:79:5f:94:97:f9:7b:de:37:3d:75:68:be: a0:0c:03:e0:4b:5a:8d:7b:fc:8b:77:39:92:69:de:5c:b3:90: bd:06:f6:70:15:f0:ae:0f:29:52:24:73:a3:87:07:7e:79:c8: 2e:58:bc:2c:b4:9e:a0:cc:16:ae:b0:cd:14:c3:90:4d:dc:ad: ae:ec:13:64:9c:e4:70:97:03:a1:49:7d:5b:14:fe:a2:16:26: 85:62:d3:b1:22:69:a2:fa:fa:e5:d2:47:e1:9c:44:59:b4:62: 3c:de:57:12:05:dc:57:ca:8b:da:0f:13:05:ec:18:f7:d8:0a: 2f:ec:0d:67:02:f5:a7:70:62:e7:66:23:f4:d5:bb:18:77:c7: b3:41:f5:a6:35:14:4f:31:ad:7f:c9:e8:1f:67:98:aa:2b:e4: 21:32:06:93:19:e5:96:f1:aa:c8:01:15:a7:52:74:17:89:a7: ab:29:02:6e:ab:0c:ea:2b:c2:de:8e:48:0c:63:6c:7e:4c:79: 12:85:02:5e:5e:35:29:e9:e5:db:6b:97:95:bb:0f:44:9f:cc: 5e:75:04:b9:c1:25:af:f9:6f:f5:e2:a3:87:93:88:d9:36:f0: a3:8e:0a:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAMHulaIrG9eg/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAwNTdhYTEtNTQ0ZC00MjM3LWI1NDktMzA0ZmQ0NTMy NGJhMB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk MWViMmRhODMtYzY0NC00ZDQ3LThiM2UtNDI3ZWIyZmQ2NjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNa/Leao0BAZUvf9wHHlm3Gnjh4ZqcZ2M/9P 5L9VYkGWn07haWk7TIbhU2yiiN7GgUn7nnhyWUbdnUr/WCIZ51PxK/Q6QT+YVZiO m617G82XfrA8NGIqPsYuHKfKnkDxXyRxqIrebs27Shi8BBk7GfCiSRrnT5/5G1QF 2TjDycawMGJgRC8OzZI6QYkP1nlyW/TlLYV9vOFgk1B0jxiw1MzZDqG5iWsV43p0 2/e/mhQ4lhRvEtzzcYTVfrrSHzgGb4PtQawuxt8Mb2vRYRB+KJflJ/9FNuqBb5YD 1h5vpwjb/QCELjGBb4TdLPK0NWwfZ7Fl1cQgR2cVmQnE4jVwpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjKRe6rCrVUip2OpT5VUqR8ATP+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MDA1 N2FhMS01NDRkLTQyMzctYjU0OS0zMDRmZDQ1MzI0YmEvZmY2MGZiZTktZTE5ZC0z OGEzLWE3ZTItYmU0MjI2MDI5N2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzAwNTdhYTEtNTQ0ZC00MjM3LWI1 NDktMzA0ZmQ0NTMyNGJhLzcwMDU3YWExLTU0NGQtNDIzNy1iNTQ5LTMwNGZkNDUz MjRiYS5jcmwwHwYDVR0jBBgwFoAU3kql0TNc/YfvMJELZq/wzmE2ZNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MDA1N2FhMS01NDRkLTQyMzctYjU0OS0zMDRm ZDQ1MzI0YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2N7WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmZg4I3WOReNSGGvVKUz1dkoBomfLNezHlflJf5e943PXVovqAMA+BL Wo17/It3OZJp3lyzkL0G9nAV8K4PKVIkc6OHB355yC5YvCy0nqDMFq6wzRTDkE3c ra7sE2Sc5HCXA6FJfVsU/qIWJoVi07EiaaL6+uXSR+GcRFm0YjzeVxIF3FfKi9oP EwXsGPfYCi/sDWcC9adwYudmI/TVuxh3x7NB9aY1FE8xrX/J6B9nmKor5CEyBpMZ 5ZbxqsgBFadSdBeJp6spAm6rDOorwt6OSAxjbH5MeRKFAl5eNSnp5dtrl5W7D0Sf zF51BLnBJa/5b/Xio4eTiNk28KOOCro= -----END CERTIFICATE-----Generated at Sun Apr 13 09:33:18 2025 by rpki-client