$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/9afff874-6a4f-331a-93da-b870000569c0.roa File: 9afff874-6a4f-331a-93da-b870000569c0.roa (raw, json) Hash identifier: YJdIFEhVAjJ9gsUp3m29huybzGovf0jgLFEy+wSc+1Y= Subject key identifier: AF:13:23:8B:77:02:A5:2D:D7:F2:8F:64:CD:31:A5:3C:AA:F8:58:8F Certificate issuer: /CN=32e58881-6422-4e0d-9578-7c256d9f70bc Certificate serial: 010D0C9F43285848E00652033518235FDD504380 Authority key identifier: F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/9afff874-6a4f-331a-93da-b870000569c0.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 398191 IP address blocks: 216.225.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:52:03:35:18:23:5f:dd:50:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e58881-6422-4e0d-9578-7c256d9f70bc Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=84a49db4-83a6-4e95-9ece-cd7c64699cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c0:74:b1:06:d3:c2:68:87:c3:5c:3d:ed:0c: 5b:50:1d:82:5d:49:16:c5:cc:18:fe:51:f1:ae:ba: a3:7c:ad:66:38:ef:57:7b:c1:a5:a8:71:95:1f:e7: 4e:2e:c0:48:9a:d9:18:20:ac:54:53:7d:74:f8:bf: 60:07:a0:4c:51:39:6b:97:8a:2b:be:69:38:67:74: 1a:97:5d:d6:42:d5:f7:a3:3c:ae:cb:a4:6a:04:0c: 14:34:ec:ee:63:37:6c:c4:10:17:9c:4e:79:91:5f: b6:af:43:1e:8d:d1:5a:5c:fb:78:c6:2f:77:93:12: 9c:1f:5a:c5:63:0f:d5:61:3e:bc:27:d1:42:03:b4: f9:a5:5d:d6:9d:6b:bd:62:40:91:63:af:64:d4:68: 98:e2:37:92:17:a0:f4:c1:da:07:f8:64:56:13:5b: ee:ac:b4:60:bb:84:37:b9:d1:7d:0e:d5:fb:4b:de: b3:f4:30:98:c1:9a:b6:38:66:81:17:83:65:67:a5: 66:33:ee:eb:7b:fc:e0:ae:b2:c2:b4:98:50:6c:1e: c0:35:b3:7d:9e:4a:51:00:32:5b:b2:33:4d:ab:fa: 9c:f1:65:41:d5:e5:67:09:f4:ac:17:26:d8:94:28: 17:fa:b6:e1:19:0b:18:1e:89:36:4b:5e:d8:c4:bb: 8c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:13:23:8B:77:02:A5:2D:D7:F2:8F:64:CD:31:A5:3C:AA:F8:58:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/9afff874-6a4f-331a-93da-b870000569c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl X509v3 Authority Key Identifier: keyid:F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer sbgp-ipAddrBlock: critical IPv4: 216.225.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:32:c0:85:2b:37:e4:6f:8e:69:7d:3f:25:ff:89:ea:b8:3e: 99:ac:02:a2:c7:cc:c8:51:79:48:cc:79:b4:61:39:06:49:e0: bb:7e:cf:e7:13:be:0c:17:35:2b:12:4a:0d:f4:8b:3f:00:6e: 48:29:0c:2b:43:82:59:df:58:7c:b7:fd:54:ac:a3:db:68:e6: 8d:9d:80:42:3f:14:86:20:ea:ce:15:21:55:d3:e7:ff:ca:10: 62:f7:0c:3b:5e:8b:41:cc:43:d0:ca:22:95:9f:8d:31:bc:c3: eb:38:14:b4:03:21:4f:d1:9e:79:02:80:bc:21:0b:13:6c:ff: cd:ca:7e:95:f5:bc:0b:ab:f8:3e:ab:dd:18:18:5d:a9:a4:45: 8b:fc:31:4a:e3:4a:be:bc:a1:b6:32:f8:48:b0:5b:53:2f:8f: ab:70:98:2e:d7:87:7e:b3:5a:37:32:29:87:a7:01:b2:ac:21: 95:28:fd:43:7b:54:b2:61:f6:37:ef:b5:eb:1c:ef:9e:68:98: d0:c1:f0:3b:46:a9:89:91:06:54:1b:30:2f:bd:4a:3c:68:e6: d1:47:87:d6:e1:cb:26:d8:5b:a2:67:62:04:b8:70:3e:f5:c2: 04:30:60:5b:cf:39:65:b2:53:db:98:2e:db:dd:67:63:18:19: 19:af:40:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBlIDNRgjX91QQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlNTg4ODEtNjQyMi00ZTBkLTk1NzgtN2MyNTZkOWY3 MGJjMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk ODRhNDlkYjQtODNhNi00ZTk1LTllY2UtY2Q3YzY0Njk5Y2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysB0sQbTwmiHw1w97QxbUB2CXUkWxcwY/lHx rrqjfK1mOO9Xe8GlqHGVH+dOLsBImtkYIKxUU310+L9gB6BMUTlrl4orvmk4Z3Qa l13WQtX3ozyuy6RqBAwUNOzuYzdsxBAXnE55kV+2r0MejdFaXPt4xi93kxKcH1rF Yw/VYT68J9FCA7T5pV3WnWu9YkCRY69k1GiY4jeSF6D0wdoH+GRWE1vurLRgu4Q3 udF9DtX7S96z9DCYwZq2OGaBF4NlZ6VmM+7re/zgrrLCtJhQbB7ANbN9nkpRADJb sjNNq/qc8WVB1eVnCfSsFybYlCgX+rbhGQsYHok2S17YxLuMAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8TI4t3AqUt1/KPZM0xpTyq+FiPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMmU1 ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1NmQ5ZjcwYmMvOWFmZmY4NzQtNmE0Zi0z MzFhLTkzZGEtYjg3MDAwMDU2OWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzJlNTg4ODEtNjQyMi00ZTBkLTk1 NzgtN2MyNTZkOWY3MGJjLzMyZTU4ODgxLTY0MjItNGUwZC05NTc4LTdjMjU2ZDlm NzBiYy5jcmwwHwYDVR0jBBgwFoAU83rr+TDV35aceSJR1H1McDXM7c8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMmU1ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1 NmQ5ZjcwYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2OEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkywIUrN+Rvjml9PyX/ieq4PpmsAqLHzMhReUjMebRhOQZJ4Lt+z+cT vgwXNSsSSg30iz8AbkgpDCtDglnfWHy3/VSso9to5o2dgEI/FIYg6s4VIVXT5//K EGL3DDtei0HMQ9DKIpWfjTG8w+s4FLQDIU/RnnkCgLwhCxNs/83KfpX1vAur+D6r 3RgYXamkRYv8MUrjSr68obYy+EiwW1Mvj6twmC7Xh36zWjcyKYenAbKsIZUo/UN7 VLJh9jfvtesc755omNDB8DtGqYmRBlQbMC+9Sjxo5tFHh9bhyybYW6JnYgS4cD71 wgQwYFvPOWWyU9uYLtvdZ2MYGRmvQNc= -----END CERTIFICATE-----Generated at Sat Apr 5 23:29:08 2025 by rpki-client