$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/f53d8254-0516-3991-a742-bbfcc5001432.roa File: f53d8254-0516-3991-a742-bbfcc5001432.roa (raw, json) Hash identifier: CjUrwwHGV7Xf1oq/hKroCiJp4HSDFRfObdZe8pbR9Oc= Subject key identifier: 3F:14:09:A2:37:AC:D0:1B:D9:94:19:7C:98:05:7D:6D:33:D3:D7:28 Certificate issuer: /CN=fd691680-2c46-4e86-8545-3e0e0c0e305a Certificate serial: 010D0C9F43285848BFEBA1A3EC96CCE6D8B16B00 Authority key identifier: A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/f53d8254-0516-3991-a742-bbfcc5001432.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 14618 IP address blocks: 216.31.33.0/24 maxlen: 24 216.31.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:a1:a3:ec:96:cc:e6:d8:b1:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd691680-2c46-4e86-8545-3e0e0c0e305a Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=ba77b610-ffe9-4103-b331-15e186a02ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:72:2c:84:9f:fa:d8:34:60:60:2b:66:7a:d1: 29:7f:55:5c:d5:f0:6a:20:38:9c:e0:63:8f:5b:7f: fb:5b:42:a9:e3:4d:89:e0:9c:7f:8a:95:2b:f5:80: 96:65:bb:7e:0a:09:eb:42:24:71:b7:7b:52:46:0b: 60:1c:4d:4c:dd:35:31:c8:a0:c9:25:16:74:8f:b9: ad:f3:3d:2d:90:42:ad:bd:1c:a3:e5:a2:60:a1:0d: 6f:57:e0:46:4a:b6:92:a5:d2:03:bd:58:5a:57:ea: cd:18:a4:20:36:fc:89:31:4d:fd:b1:8c:83:da:ff: ae:36:2e:dd:fb:32:1d:1e:6d:c2:87:fd:b3:4f:97: dc:44:21:e4:ae:2c:d9:be:5f:00:f8:48:49:18:c8: e9:ea:38:59:cc:b3:5a:1e:86:d1:dd:be:f7:f3:f7: 97:17:39:c5:38:6b:06:24:e1:78:b4:fb:68:70:39: 50:83:95:ed:96:29:af:9c:86:09:53:c4:97:37:19: 6b:43:16:01:15:f7:a8:33:db:dd:6b:24:d0:16:0d: ae:c4:c7:60:27:af:52:dd:8c:db:9b:65:2c:87:1a: 03:78:ac:93:0e:07:56:7f:14:95:37:65:86:04:06: 55:c4:75:6d:18:b1:08:14:cb:25:5a:c1:5e:cb:79: da:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:14:09:A2:37:AC:D0:1B:D9:94:19:7C:98:05:7D:6D:33:D3:D7:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/f53d8254-0516-3991-a742-bbfcc5001432.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl X509v3 Authority Key Identifier: keyid:A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer sbgp-ipAddrBlock: critical IPv4: 216.31.33.0-216.31.35.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:41:d0:3a:99:98:23:cc:33:7e:40:46:7c:c7:2e:ed:2c:c7: 4f:b0:0b:bf:dc:ec:1a:20:d4:67:1a:96:7e:7f:5f:ac:94:46: 1d:b8:46:a4:35:c1:6a:85:e0:3f:c9:ba:3f:b4:03:5e:72:c6: 8f:fa:0c:b2:0c:80:bb:3c:ac:80:3e:7d:4f:a4:6b:a5:38:2e: e1:a7:d0:a7:4f:d0:a5:59:3e:33:6b:5b:7c:dd:43:ad:74:0b: 22:95:0d:fb:86:98:43:eb:e5:31:1b:03:32:04:c0:c2:5d:92: 31:56:b3:5c:da:35:87:e1:6e:11:26:76:67:ca:0b:6b:d2:b6: 6e:fb:54:56:77:ca:dc:e3:6b:a0:d6:23:2d:b5:c4:cb:6c:da: 94:da:aa:78:81:fc:2a:34:8f:91:11:2f:8c:34:f1:72:e3:b4: 7f:e0:f5:22:1b:41:a9:8b:51:0b:27:96:53:d7:66:c8:ae:fa: 0d:1a:0b:ec:a1:85:b4:e1:da:2b:89:ec:76:82:16:8e:56:5f: 0b:65:58:ae:c2:c6:5b:12:88:19:a6:6b:e6:16:eb:cb:93:8c: 74:80:f6:76:6c:7a:f3:10:42:b5:df:45:b9:ee:21:ff:e9:0c: f6:e5:13:82:92:de:0f:00:5a:18:92:2f:14:33:81:99:8d:56: 2c:8c:09:33 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEi/66Gj7JbM5tixawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ2OTE2ODAtMmM0Ni00ZTg2LTg1NDUtM2UwZTBjMGUz MDVhMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk YmE3N2I2MTAtZmZlOS00MTAzLWIzMzEtMTVlMTg2YTAyY2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXIshJ/62DRgYCtmetEpf1Vc1fBqIDic4GOP W3/7W0Kp402J4Jx/ipUr9YCWZbt+CgnrQiRxt3tSRgtgHE1M3TUxyKDJJRZ0j7mt 8z0tkEKtvRyj5aJgoQ1vV+BGSraSpdIDvVhaV+rNGKQgNvyJMU39sYyD2v+uNi7d +zIdHm3Ch/2zT5fcRCHkrizZvl8A+EhJGMjp6jhZzLNaHobR3b738/eXFznFOGsG JOF4tPtocDlQg5XtlimvnIYJU8SXNxlrQxYBFfeoM9vdayTQFg2uxMdgJ69S3Yzb m2UshxoDeKyTDgdWfxSVN2WGBAZVxHVtGLEIFMslWsFey3nayQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFD8UCaI3rNAb2ZQZfJgFfW0z09coMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZDY5 MTY4MC0yYzQ2LTRlODYtODU0NS0zZTBlMGMwZTMwNWEvZjUzZDgyNTQtMDUxNi0z OTkxLWE3NDItYmJmY2M1MDAxNDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmQ2OTE2ODAtMmM0Ni00ZTg2LTg1 NDUtM2UwZTBjMGUzMDVhL2ZkNjkxNjgwLTJjNDYtNGU4Ni04NTQ1LTNlMGUwYzBl MzA1YS5jcmwwHwYDVR0jBBgwFoAUpOLLMkryoIf+v49CQPitkF4srMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZDY5MTY4MC0yYzQ2LTRlODYtODU0NS0zZTBl MGMwZTMwNWEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADYHyED BALYHyAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAWkHQOpmYI8wzfkBGfMcu7SzHT7ALv9zsGiDUZxqWfn9f rJRGHbhGpDXBaoXgP8m6P7QDXnLGj/oMsgyAuzysgD59T6RrpTgu4afQp0/QpVk+ M2tbfN1DrXQLIpUN+4aYQ+vlMRsDMgTAwl2SMVazXNo1h+FuESZ2Z8oLa9K2bvtU VnfK3ONroNYjLbXEy2zalNqqeIH8KjSPkREvjDTxcuO0f+D1IhtBqYtRCyeWU9dm yK76DRoL7KGFtOHaK4nsdoIWjlZfC2VYrsLGWxKIGaZr5hbry5OMdID2dmx68xBC td9Fue4h/+kM9uUTgpLeDwBaGJIvFDOBmY1WLIwJMw== -----END CERTIFICATE-----Generated at Fri Mar 14 10:45:59 2025 by rpki-client