$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/5b1aa190-79dc-3047-a857-d82573847989.roa File: 5b1aa190-79dc-3047-a857-d82573847989.roa (raw, json) Hash identifier: JZiIBWQKYZnqbC1D0QRzeORyhax3MWx+hjeK/DGPwxU= Subject key identifier: DF:4D:83:98:B1:6C:CC:CB:37:14:68:EF:51:BE:FE:FE:9F:BB:03:6B Certificate issuer: /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9 Certificate serial: 010D0C9F43285849544238FB2199EFC96AC97E00 Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/5b1aa190-79dc-3047-a857-d82573847989.roa Signing time: Thu 27 Mar 2025 17:15:09 +0000 ROA not before: Thu 27 Mar 2025 17:15:09 +0000 ROA not after: Wed 25 Jun 2025 17:15:09 +0000 asID: 16509 IP address blocks: 216.24.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:54:42:38:fb:21:99:ef:c9:6a:c9:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9 Validity Not Before: Mar 27 17:15:09 2025 GMT Not After : Jun 25 17:15:09 2025 GMT Subject: CN=1b8ebc61-87c2-4167-b146-83b5a7b1e3d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:46:30:8c:b4:f5:cd:50:16:89:ff:28:75:13: 40:8c:c7:94:36:6d:6f:8c:77:7f:a0:2a:c9:60:cd: cd:15:47:42:ed:42:47:6a:e7:1b:9b:87:89:26:ec: 0d:36:18:4c:db:2f:b6:fb:3c:38:7c:15:89:1c:0e: 63:0b:65:10:44:15:f4:91:04:1e:00:37:bb:6b:e9: 7b:96:4f:4d:10:ef:23:a3:95:cd:05:f5:3b:47:95: e4:03:b0:a3:9a:8c:ab:00:d1:4e:97:b0:0f:b4:0e: ec:da:fe:97:eb:38:df:c4:74:b6:cd:1a:f9:da:c6: d6:7c:f3:0d:98:22:ac:6e:06:b4:bb:2a:13:90:57: c0:94:06:e7:85:f7:c9:de:ab:02:6f:d8:75:51:00: 18:89:fc:b0:95:e7:7a:07:2b:2b:42:3e:47:59:89: 77:ad:d4:4e:3c:af:d9:81:8b:f2:74:fb:d3:fd:db: fc:20:d9:c4:34:30:a0:ea:e1:81:43:6f:f5:92:0c: 0d:0f:ef:b6:13:e6:5e:4f:0d:0d:7a:60:9c:48:54: 19:b4:15:9c:1f:b7:11:06:ee:7a:8d:3c:6f:ad:d8: cd:ae:36:e5:e1:83:5c:a0:05:95:5d:28:59:fa:0e: 9e:2c:f0:de:63:a0:b8:83:4f:d0:83:28:36:86:91: ed:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4D:83:98:B1:6C:CC:CB:37:14:68:EF:51:BE:FE:FE:9F:BB:03:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/5b1aa190-79dc-3047-a857-d82573847989.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl X509v3 Authority Key Identifier: keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer sbgp-ipAddrBlock: critical IPv4: 216.24.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:cd:7d:14:b9:14:a0:08:ab:a3:01:7e:5b:d4:19:41:84:4a: d9:01:d4:de:1d:86:57:f7:2a:2a:88:d0:7f:ab:82:61:6b:94: 7d:5f:6d:02:96:02:3a:2a:0a:a4:d9:22:37:75:4b:fc:b5:f4: 52:dd:c5:33:61:79:bc:93:b0:11:91:09:2b:b4:4d:76:41:95: 2d:67:84:64:6c:86:56:c6:3c:30:84:9d:04:f9:3b:c8:ac:92: d7:64:58:fb:75:be:f1:e0:97:43:00:03:b7:81:11:c1:36:15: a7:f4:18:18:48:22:ca:34:a7:c2:0c:54:ba:d3:25:69:24:e1: a0:f7:82:bd:4f:dd:76:87:13:2d:93:98:7a:06:19:e8:16:23: 14:09:67:65:61:13:37:c6:d5:e7:90:4f:ca:40:61:51:3a:d3: 56:1f:34:1f:1f:a3:f9:6b:2c:9e:c0:44:d7:7e:cb:ef:3f:67: 1a:b8:fc:7e:4a:2f:6c:9b:cf:d7:85:eb:46:c7:5a:23:d4:51: 35:07:d2:22:37:9b:d9:21:4b:b7:52:31:91:0a:c8:46:e0:99: df:59:6a:3c:5f:00:ae:a9:23:5f:d0:c6:86:ce:cb:55:c9:61: b5:85:30:8a:2f:28:91:e7:0e:f9:39:4d:7f:a6:f8:83:9e:69: 35:bd:e0:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElUQjj7IZnvyWrJfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxY2I2YWQtNmNkNi00NTgxLWE1YWMtNWE2ZmQ3NDQ5 NWM5MB4XDTI1MDMyNzE3MTUwOVoXDTI1MDYyNTE3MTUwOVowLzEtMCsGA1UEAxMk MWI4ZWJjNjEtODdjMi00MTY3LWIxNDYtODNiNWE3YjFlM2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kYwjLT1zVAWif8odRNAjMeUNm1vjHd/oCrJ YM3NFUdC7UJHaucbm4eJJuwNNhhM2y+2+zw4fBWJHA5jC2UQRBX0kQQeADe7a+l7 lk9NEO8jo5XNBfU7R5XkA7CjmoyrANFOl7APtA7s2v6X6zjfxHS2zRr52sbWfPMN mCKsbga0uyoTkFfAlAbnhffJ3qsCb9h1UQAYifywled6BysrQj5HWYl3rdROPK/Z gYvydPvT/dv8INnENDCg6uGBQ2/1kgwND++2E+ZeTw0NemCcSFQZtBWcH7cRBu56 jTxvrdjNrjbl4YNcoAWVXShZ+g6eLPDeY6C4g0/Qgyg2hpHtHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9Ng5ixbMzLNxRo71G+/v6fuwNrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NzFj YjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZmZDc0NDk1YzkvNWIxYWExOTAtNzlkYy0z MDQ3LWE4NTctZDgyNTczODQ3OTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODcxY2I2YWQtNmNkNi00NTgxLWE1 YWMtNWE2ZmQ3NDQ5NWM5Lzg3MWNiNmFkLTZjZDYtNDU4MS1hNWFjLTVhNmZkNzQ0 OTVjOS5jcmwwHwYDVR0jBBgwFoAUntBlR2d0sGuDPxz+dPUN9EuFl7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NzFjYjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZm ZDc0NDk1YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANfNfRS5FKAIq6MBflvUGUGEStkB1N4dhlf3KiqI0H+rgmFrlH1fbQKW AjoqCqTZIjd1S/y19FLdxTNhebyTsBGRCSu0TXZBlS1nhGRshlbGPDCEnQT5O8is ktdkWPt1vvHgl0MAA7eBEcE2Faf0GBhIIso0p8IMVLrTJWkk4aD3gr1P3XaHEy2T mHoGGegWIxQJZ2VhEzfG1eeQT8pAYVE601YfNB8fo/lrLJ7ARNd+y+8/Zxq4/H5K L2ybz9eF60bHWiPUUTUH0iI3m9khS7dSMZEKyEbgmd9ZajxfAK6pI1/QxobOy1XJ YbWFMIovKJHnDvk5TX+m+IOeaTW94I8= -----END CERTIFICATE-----Generated at Sat Apr 5 05:34:55 2025 by rpki-client