$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/7b44d906-481e-39c1-8a54-23b40220e02d.roa File: 7b44d906-481e-39c1-8a54-23b40220e02d.roa (raw, json) Hash identifier: GFDB+3DTns2xmVmp/I7PwIGW4Ifm0eQd3N/SHw7+/kM= Subject key identifier: B7:6A:3A:D6:23:B5:1A:B9:95:F4:9C:31:81:95:A4:65:77:8F:C5:31 Certificate issuer: /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9 Certificate serial: 010D0C9F43285848DEA11EABD3DF501F4A7B2180 Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/7b44d906-481e-39c1-8a54-23b40220e02d.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 16509 IP address blocks: 216.24.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:1e:ab:d3:df:50:1f:4a:7b:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=6b7f2737-4540-44d8-883f-b8ce74b4c7dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e7:3c:ee:c1:64:fc:83:24:1f:1e:b3:5f:5e: a6:89:ad:82:21:23:0e:51:c8:55:06:74:ab:38:84: 30:4d:75:94:fc:89:b9:a9:35:a2:87:b4:8f:09:09: a8:8a:70:36:93:8c:34:3c:5a:94:de:ac:09:75:06: 05:54:19:d9:d1:67:47:33:0d:fb:24:82:e6:e9:d4: 59:ed:ee:f8:02:2b:41:70:93:15:b0:5e:74:a9:12: 30:a3:a8:c4:fc:be:53:87:91:bd:ac:42:ca:58:88: d3:a6:0e:ac:00:13:83:22:71:30:8b:e7:63:5a:e1: b5:2c:3c:90:27:74:e3:94:fd:db:73:95:73:5a:59: da:ea:4c:83:a8:cd:09:c7:58:54:83:aa:f2:c3:f0: 13:cc:57:d2:6b:40:7c:3b:9c:b7:24:69:61:b3:36: 45:53:f3:f3:78:c4:8a:7d:62:87:8b:64:e0:45:66: 67:dd:a1:e0:fe:c1:b8:14:06:b0:80:bb:7f:ec:ff: 8e:ff:57:c8:20:2d:34:2d:f2:f3:6f:55:63:5a:68: 6c:f7:fe:7c:dd:30:0e:6f:e4:9b:5b:ff:ca:80:ef: eb:45:85:4d:ca:1c:ab:16:8e:f6:29:d7:39:e6:ae: 85:ee:e2:af:0d:ef:d5:62:47:32:90:26:39:7e:7b: 7e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6A:3A:D6:23:B5:1A:B9:95:F4:9C:31:81:95:A4:65:77:8F:C5:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/7b44d906-481e-39c1-8a54-23b40220e02d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl X509v3 Authority Key Identifier: keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer sbgp-ipAddrBlock: critical IPv4: 216.24.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:85:d4:21:48:ff:6c:67:a0:92:cf:3b:5a:3c:5e:8e:b0:79: 4e:be:b4:50:e8:ab:29:45:51:2f:98:37:62:80:d5:39:46:1a: d4:28:45:b0:46:4b:ec:39:40:08:ac:58:f2:1e:9d:81:0f:62: 0c:49:b6:93:fd:e3:ac:93:bf:b1:be:9c:a2:d2:32:f8:3a:53: 1e:17:d4:ec:94:ea:4e:77:64:36:c8:8f:84:f1:29:88:31:a8: c1:02:72:db:3a:81:35:78:c7:29:d3:a7:81:59:9e:fa:fa:a5: 45:5d:86:d2:91:07:76:a3:90:7e:da:c6:69:c7:f9:14:35:35: f0:21:a0:bc:c1:34:71:66:85:d1:fd:d6:bc:b2:ec:e4:22:9b: 4b:35:7b:3c:44:12:95:54:61:a5:14:89:85:65:0e:6d:d6:1a: 59:90:84:a6:4f:13:f4:7b:7a:56:28:77:7e:ba:49:8b:71:4b: a9:d2:09:45:59:cf:a8:5b:17:88:b6:0c:8c:f0:2b:b8:fa:dc: 88:2d:3d:ef:88:55:d5:bb:43:fd:ab:7e:a6:42:e4:20:82:b5: aa:94:cb:52:5d:68:15:c7:3d:45:c8:8c:1f:f7:38:d8:20:2a: d0:37:43:c4:a7:e1:e5:fd:5f:91:46:e4:28:01:ea:8f:73:02: 21:9d:db:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoR6r099QH0p7IYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxY2I2YWQtNmNkNi00NTgxLWE1YWMtNWE2ZmQ3NDQ5 NWM5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk NmI3ZjI3MzctNDU0MC00NGQ4LTg4M2YtYjhjZTc0YjRjN2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqec87sFk/IMkHx6zX16mia2CISMOUchVBnSr OIQwTXWU/Im5qTWih7SPCQmoinA2k4w0PFqU3qwJdQYFVBnZ0WdHMw37JILm6dRZ 7e74AitBcJMVsF50qRIwo6jE/L5Th5G9rELKWIjTpg6sABODInEwi+djWuG1LDyQ J3TjlP3bc5VzWlna6kyDqM0Jx1hUg6ryw/ATzFfSa0B8O5y3JGlhszZFU/PzeMSK fWKHi2TgRWZn3aHg/sG4FAawgLt/7P+O/1fIIC00LfLzb1VjWmhs9/583TAOb+Sb W//KgO/rRYVNyhyrFo72Kdc55q6F7uKvDe/VYkcykCY5fnt+wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdqOtYjtRq5lfScMYGVpGV3j8UxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NzFj YjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZmZDc0NDk1YzkvN2I0NGQ5MDYtNDgxZS0z OWMxLThhNTQtMjNiNDAyMjBlMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODcxY2I2YWQtNmNkNi00NTgxLWE1 YWMtNWE2ZmQ3NDQ5NWM5Lzg3MWNiNmFkLTZjZDYtNDU4MS1hNWFjLTVhNmZkNzQ0 OTVjOS5jcmwwHwYDVR0jBBgwFoAUntBlR2d0sGuDPxz+dPUN9EuFl7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NzFjYjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZm ZDc0NDk1YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuF1CFI/2xnoJLPO1o8Xo6weU6+tFDoqylFUS+YN2KA1TlGGtQoRbBG S+w5QAisWPIenYEPYgxJtpP946yTv7G+nKLSMvg6Ux4X1OyU6k53ZDbIj4TxKYgx qMECcts6gTV4xynTp4FZnvr6pUVdhtKRB3ajkH7axmnH+RQ1NfAhoLzBNHFmhdH9 1ryy7OQim0s1ezxEEpVUYaUUiYVlDm3WGlmQhKZPE/R7elYod366SYtxS6nSCUVZ z6hbF4i2DIzwK7j63IgtPe+IVdW7Q/2rfqZC5CCCtaqUy1JdaBXHPUXIjB/3ONgg KtA3Q8Sn4eX9X5FG5CgB6o9zAiGd2wk= -----END CERTIFICATE-----Generated at Sat Apr 5 03:48:32 2025 by rpki-client