$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/08ad9252-a414-3b87-84d9-259b7e5e27cf.roa File: 08ad9252-a414-3b87-84d9-259b7e5e27cf.roa (raw, json) Hash identifier: McxZhXh2+nicWWRYTyfL4CaQclWrfj/xPXK/M2M46iI= Subject key identifier: 2F:37:78:51:76:12:46:1F:1C:19:32:52:B0:6C:74:1E:22:AE:9E:CA Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F43285848E2D10415D8F6AFB970AAD700 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/08ad9252-a414-3b87-84d9-259b7e5e27cf.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 46687 IP address blocks: 216.119.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:04:15:d8:f6:af:b9:70:aa:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=462662cd-d5fc-4981-95b4-59458714cb2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:92:ac:4e:f8:c1:6b:89:52:61:33:be:82:50: 87:51:1b:06:0b:a2:28:cc:f4:ce:21:c0:8f:b3:5a: 20:a7:79:11:f9:75:1d:24:b8:ac:ee:51:3c:6c:73: 8d:00:35:98:fd:4a:3a:6b:6d:97:6d:3c:dd:af:1f: c1:ba:5f:60:cc:4a:1b:ac:97:5a:94:bb:2c:65:a6: 82:92:17:b6:ab:48:31:82:f2:3b:86:78:2d:de:82: 1e:e9:68:16:ea:00:a3:34:cd:33:0f:45:94:30:1f: fd:e4:0e:07:44:54:53:24:a8:40:95:31:39:3a:9c: a3:0e:3b:ad:ef:7a:63:87:5f:3c:ef:2a:a4:c5:e4: 0f:91:81:8a:7f:eb:d0:08:d6:0f:50:e6:a6:f2:8a: fb:ec:c3:79:22:c4:50:17:38:56:c7:6e:5c:ff:18: 02:97:75:21:57:f9:2b:80:61:f6:dd:50:a3:84:e7: fe:68:88:b9:65:eb:89:96:e0:62:5a:9d:d4:94:31: 2d:02:e0:b7:0c:c1:a4:6d:93:b2:58:52:05:e6:d6: e1:a1:7b:48:1a:bb:40:bd:d9:e3:37:58:07:1b:43: 19:6a:bd:bd:b7:e0:52:47:66:b2:2b:b1:98:39:6d: ce:d1:18:9e:96:08:ae:f2:79:bc:99:d9:ce:dd:56: d6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:37:78:51:76:12:46:1F:1C:19:32:52:B0:6C:74:1E:22:AE:9E:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/08ad9252-a414-3b87-84d9-259b7e5e27cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 216.119.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:43:60:22:fc:4e:ef:90:84:0f:d8:1a:66:8d:32:c9:10:47: b1:55:0f:a0:e5:35:1d:e4:fc:3c:44:e6:8a:71:b7:1a:59:eb: f8:13:2f:3d:cb:c4:71:73:4d:14:6a:5b:a5:b2:b7:be:fa:eb: d2:11:79:03:68:1d:01:85:e9:a6:34:c8:65:7a:63:52:98:ec: f8:a4:79:7d:ab:b1:26:41:89:ec:24:6f:3d:d0:9a:f3:1b:cf: e6:9e:00:7d:63:1b:52:36:6b:cf:28:22:2f:dc:65:78:9e:34: 3a:57:5c:d0:87:c0:f7:98:62:f5:69:cd:82:c3:0f:e1:d5:23: 16:11:91:4a:57:95:6b:b4:c3:a7:91:0a:1f:b0:a7:74:1d:53: 07:bf:26:0c:8f:97:7d:24:4e:79:4e:35:87:4a:7b:16:56:c0: c6:46:9a:1e:ac:93:57:6c:5a:97:84:6c:38:e5:6b:8b:7c:e8: 5e:15:dd:cb:98:52:66:2f:7d:63:f8:fa:0e:04:7d:22:7b:0d: 1e:0a:b5:57:3d:73:50:50:51:70:ac:1a:09:d9:f6:19:13:2b: 21:b6:d3:31:f1:6c:3f:b7:fd:c7:37:24:1d:1e:90:60:d7:38: 7a:12:e1:6d:ea:d3:ba:9e:a4:f5:9c:1d:c8:8b:24:ac:5a:53: 99:74:1f:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0QQV2PavuXCq1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk NDYyNjYyY2QtZDVmYy00OTgxLTk1YjQtNTk0NTg3MTRjYjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZKsTvjBa4lSYTO+glCHURsGC6IozPTOIcCP s1ogp3kR+XUdJLis7lE8bHONADWY/Uo6a22XbTzdrx/Bul9gzEobrJdalLssZaaC khe2q0gxgvI7hngt3oIe6WgW6gCjNM0zD0WUMB/95A4HRFRTJKhAlTE5OpyjDjut 73pjh1887yqkxeQPkYGKf+vQCNYPUOam8or77MN5IsRQFzhWx25c/xgCl3UhV/kr gGH23VCjhOf+aIi5ZeuJluBiWp3UlDEtAuC3DMGkbZOyWFIF5tbhoXtIGrtAvdnj N1gHG0MZar29t+BSR2ayK7GYOW3O0Rielgiu8nm8mdnO3VbWmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC83eFF2EkYfHBkyUrBsdB4irp7KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvMDhhZDkyNTItYTQxNC0z Yjg3LTg0ZDktMjU5YjdlNWUyN2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2HewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtDYCL8Tu+QhA/YGmaNMskQR7FVD6DlNR3k/DxE5opxtxpZ6/gTLz3L xHFzTRRqW6Wyt77669IReQNoHQGF6aY0yGV6Y1KY7PikeX2rsSZBiewkbz3QmvMb z+aeAH1jG1I2a88oIi/cZXieNDpXXNCHwPeYYvVpzYLDD+HVIxYRkUpXlWu0w6eR Ch+wp3QdUwe/JgyPl30kTnlONYdKexZWwMZGmh6sk1dsWpeEbDjla4t86F4V3cuY UmYvfWP4+g4EfSJ7DR4KtVc9c1BQUXCsGgnZ9hkTKyG20zHxbD+3/cc3JB0ekGDX OHoS4W3q07qepPWcHciLJKxaU5l0H6U= -----END CERTIFICATE-----Generated at Sat Apr 12 18:54:20 2025 by rpki-client