$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/785cfc03-649d-355d-9203-8d59836186e2.roa File: 785cfc03-649d-355d-9203-8d59836186e2.roa (raw, json) Hash identifier: GKVflGP6QuwfBLERKbjDTih7CbDY2mn+iQtP2fBSZOE= Subject key identifier: E1:55:76:AB:CF:E0:BA:E0:F7:B2:5C:C3:4D:8F:7A:11:64:95:54:6D Certificate issuer: /CN=97e60b77-17e3-4250-9bc8-b5e7664a320a Certificate serial: 010D0C9F43285849350E9572E808818177A3ED00 Authority key identifier: B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/785cfc03-649d-355d-9203-8d59836186e2.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 31799 IP address blocks: 216.39.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:95:72:e8:08:81:81:77:a3:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97e60b77-17e3-4250-9bc8-b5e7664a320a Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=08d5d9b9-526c-4d2a-8124-6a7144ee203b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5e:45:3e:07:9f:69:6a:0f:e4:02:74:f1:75: c6:f7:19:49:62:9b:13:ee:a5:27:47:fd:88:73:ee: 8d:3f:30:1d:7f:97:e9:b2:d5:bf:fa:1a:fc:84:dd: c2:64:64:fb:b1:b9:0d:be:64:71:ad:f7:b0:88:71: 60:2d:c0:fc:2e:33:db:b0:03:04:9a:f9:81:a6:a8: d6:bb:ef:59:ca:c6:0f:a5:f3:74:87:4d:86:9d:df: e8:5c:72:44:41:47:06:b9:03:e8:a0:9f:56:29:b9: c0:ac:59:e1:bb:2f:ba:fe:8e:4e:0c:29:eb:fc:36: 05:d6:c1:73:a3:96:e2:56:fc:bb:be:f4:ac:25:92: b4:80:e0:ac:49:4e:79:c7:56:c8:c1:27:6e:00:6c: f7:dc:2a:9d:fa:b7:ec:60:2a:d0:95:45:7e:9e:d9: 38:39:64:ad:91:10:65:8c:1e:04:51:f7:35:20:01: 00:ad:8e:74:b9:7b:a4:5d:4e:b4:25:4b:4b:87:4a: 20:42:88:2d:77:f1:75:93:e6:de:92:78:35:ea:a2: 5a:d3:99:af:a0:20:e6:f4:4a:b3:e7:d3:8c:8b:66: ce:6e:23:ee:57:66:7e:26:71:e1:79:0b:98:52:48: 4e:54:68:73:56:e4:c2:ac:f0:5d:fb:72:fc:d1:7f: 3d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:55:76:AB:CF:E0:BA:E0:F7:B2:5C:C3:4D:8F:7A:11:64:95:54:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/785cfc03-649d-355d-9203-8d59836186e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl X509v3 Authority Key Identifier: keyid:B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer sbgp-ipAddrBlock: critical IPv4: 216.39.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:a0:2c:7b:44:d3:a4:96:ba:c9:0f:cb:46:2d:72:82:e4:8a: 76:a8:98:82:ec:08:83:29:bc:e6:33:88:7b:f3:6d:69:05:fa: 10:96:d5:17:44:2d:16:e2:93:b7:ba:93:99:37:6f:ab:be:2c: 37:f1:e9:b2:c3:47:b6:ea:78:60:1c:95:ef:93:22:35:53:87: 96:8a:3e:28:1b:96:ef:de:b7:3b:a3:47:e7:bc:35:71:47:ed: 70:1f:1a:85:60:29:cd:36:f9:62:e7:08:90:c4:0c:bc:dc:df: f1:12:ab:00:8c:e1:a5:8a:14:c4:a8:ee:b8:06:ea:de:3f:24: a7:a0:15:cb:6c:14:76:f8:f6:89:a4:9a:dc:65:36:c9:ab:69: 8c:6f:c8:33:87:61:21:38:ca:e7:fc:21:9b:d1:25:b6:b2:b8: c5:74:57:ba:07:3f:a9:65:c4:f6:a5:f9:b5:e4:62:af:a2:71: 59:70:cf:63:3f:d8:e2:d4:2f:9f:4d:9f:d3:64:12:66:f0:1f: 8a:c4:f8:cf:f6:1e:3b:e9:57:4b:89:fc:53:4f:43:ac:be:e5: 55:21:a1:26:49:77:e0:93:01:16:88:f9:59:27:e3:51:e9:ac: 21:0d:2e:3a:f3:4d:6f:ea:c8:80:b5:33:c8:80:dc:58:e6:21: 42:1e:d4:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DpVy6AiBgXej7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTdlNjBiNzctMTdlMy00MjUwLTliYzgtYjVlNzY2NGEz MjBhMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk MDhkNWQ5YjktNTI2Yy00ZDJhLTgxMjQtNmE3MTQ0ZWUyMDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy15FPgefaWoP5AJ08XXG9xlJYpsT7qUnR/2I c+6NPzAdf5fpstW/+hr8hN3CZGT7sbkNvmRxrfewiHFgLcD8LjPbsAMEmvmBpqjW u+9ZysYPpfN0h02Gnd/oXHJEQUcGuQPooJ9WKbnArFnhuy+6/o5ODCnr/DYF1sFz o5biVvy7vvSsJZK0gOCsSU55x1bIwSduAGz33Cqd+rfsYCrQlUV+ntk4OWStkRBl jB4EUfc1IAEArY50uXukXU60JUtLh0ogQogtd/F1k+bekng16qJa05mvoCDm9Eqz 59OMi2bObiPuV2Z+JnHheQuYUkhOVGhzVuTCrPBd+3L80X89SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFVdqvP4Lrg97Jcw02PehFklVRtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85N2U2 MGI3Ny0xN2UzLTQyNTAtOWJjOC1iNWU3NjY0YTMyMGEvNzg1Y2ZjMDMtNjQ5ZC0z NTVkLTkyMDMtOGQ1OTgzNjE4NmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTdlNjBiNzctMTdlMy00MjUwLTli YzgtYjVlNzY2NGEzMjBhLzk3ZTYwYjc3LTE3ZTMtNDI1MC05YmM4LWI1ZTc2NjRh MzIwYS5jcmwwHwYDVR0jBBgwFoAUuDyKvqqk837fXRUqBDrtbKGEtlMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85N2U2MGI3Ny0xN2UzLTQyNTAtOWJjOC1iNWU3 NjY0YTMyMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Cf0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEagLHtE06SWuskPy0YtcoLkinaomILsCIMpvOYziHvzbWkF+hCW1RdE LRbik7e6k5k3b6u+LDfx6bLDR7bqeGAcle+TIjVTh5aKPigblu/etzujR+e8NXFH 7XAfGoVgKc02+WLnCJDEDLzc3/ESqwCM4aWKFMSo7rgG6t4/JKegFctsFHb49omk mtxlNsmraYxvyDOHYSE4yuf8IZvRJbayuMV0V7oHP6llxPal+bXkYq+icVlwz2M/ 2OLUL59Nn9NkEmbwH4rE+M/2HjvpV0uJ/FNPQ6y+5VUhoSZJd+CTARaI+Vkn41Hp rCENLjrzTW/qyIC1M8iA3FjmIUIe1Dc= -----END CERTIFICATE-----Generated at Sat Apr 12 15:34:06 2025 by rpki-client