$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b2cc91dd-c083-3f44-bb2e-3fe0332aeffb.roa File: b2cc91dd-c083-3f44-bb2e-3fe0332aeffb.roa (raw, json) Hash identifier: CvKv7el3bn61DKrzbBOhOHHoC1iATpUuAAM0Yj6JZgM= Subject key identifier: C2:EE:2D:E6:A6:6F:4F:F9:DA:F0:59:05:3D:0C:D4:4D:0A:6D:A0:75 Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Certificate serial: 010D0C9F4328584A10353F67D469EAAF5B72B600 Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b2cc91dd-c083-3f44-bb2e-3fe0332aeffb.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 3356 IP address blocks: 216.168.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:3f:67:d4:69:ea:af:5b:72:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=a4cf6084-899f-4876-a302-36790d52e76a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e9:1e:15:b7:70:ca:c3:40:e9:32:7d:95:66: 78:7b:5d:2a:2f:7d:be:04:37:4b:f3:c7:cf:a1:b8: 0f:7e:a9:ac:d8:40:0d:7f:74:d4:1a:0d:d3:30:42: e8:96:0e:be:6a:54:44:cc:a2:5d:4d:fa:81:1e:40: 4e:81:20:e0:72:40:13:ee:43:85:95:15:3a:33:ac: dd:2b:2a:22:3f:03:a5:cc:73:f4:c7:ec:7b:c6:81: 68:88:51:f8:05:c8:41:7c:dc:d8:42:e1:1a:8a:b5: f9:e9:cb:88:1b:4f:ee:9d:27:cb:57:3b:5c:33:56: ee:12:4f:e5:c4:b8:96:15:62:04:32:29:cd:8f:bc: d4:ca:dc:47:68:4f:08:91:fd:19:9f:b7:68:b6:91: b0:63:d5:7b:d8:63:cb:b8:62:6f:89:1f:89:50:b6: b0:08:c6:a8:29:09:6e:36:2b:35:e1:4f:66:d0:b9: 9d:38:51:ad:e0:cc:cf:50:b1:98:85:8b:eb:ad:c3: 4a:04:f5:c2:56:05:0f:df:cb:54:e8:2f:89:64:a0: d7:7a:32:22:c7:41:b2:bd:1e:93:ba:2b:68:fc:21: 07:2f:84:05:0b:16:2e:ea:c7:86:e9:bb:95:b3:18: 18:77:ac:e7:ab:d2:2a:9b:59:61:30:08:40:52:08: 25:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EE:2D:E6:A6:6F:4F:F9:DA:F0:59:05:3D:0C:D4:4D:0A:6D:A0:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b2cc91dd-c083-3f44-bb2e-3fe0332aeffb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl X509v3 Authority Key Identifier: keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer sbgp-ipAddrBlock: critical IPv4: 216.168.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:cb:cb:1d:d6:1f:d8:1c:33:16:bf:e4:c9:2e:c4:a5:5d:39: d4:21:e7:52:f0:90:c9:af:55:c9:20:77:6a:0b:46:66:c6:a1: ed:7c:8c:be:1d:31:68:0d:9a:a9:d8:63:c6:52:dc:d0:0d:36: 6b:93:68:e3:61:ca:01:6d:72:c5:be:17:3b:31:55:86:4a:c9: 00:4c:c1:90:a8:a9:13:3c:a3:70:b9:d5:79:b9:fe:77:24:b0: 61:0b:75:e0:db:04:c7:e2:1b:0c:07:eb:24:53:59:a9:d3:ef: bc:3f:4f:ed:1a:37:0a:64:be:61:4a:c8:40:af:f8:3b:b8:29: 51:fb:2a:95:35:e7:d2:72:ef:f8:47:f2:0c:83:61:5a:b0:64: e6:38:2b:64:7e:0b:19:d8:30:2c:aa:3c:af:5d:f2:2b:1a:89: e4:8d:7d:25:29:da:09:0b:b2:c1:8c:b7:6b:ac:44:47:d2:32: 8f:bb:f8:ac:5e:f3:8d:7b:a1:aa:2a:c8:71:90:6b:14:2f:3f: 5f:e2:0e:51:11:eb:f3:76:bf:a9:95:43:2e:21:40:c9:ea:b4: e1:de:a8:a8:24:ba:ff:f0:23:ed:4a:da:fb:05:08:c5:06:7c: 55:d8:2a:b8:a6:31:ad:23:21:63:54:2d:02:c4:57:1e:ac:9f: 9a:30:af:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNT9n1Gnqr1tytgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRm ZTE5MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk YTRjZjYwODQtODk5Zi00ODc2LWEzMDItMzY3OTBkNTJlNzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwekeFbdwysNA6TJ9lWZ4e10qL32+BDdL88fP obgPfqms2EANf3TUGg3TMELolg6+alREzKJdTfqBHkBOgSDgckAT7kOFlRU6M6zd KyoiPwOlzHP0x+x7xoFoiFH4BchBfNzYQuEairX56cuIG0/unSfLVztcM1buEk/l xLiWFWIEMinNj7zUytxHaE8Ikf0Zn7dotpGwY9V72GPLuGJviR+JULawCMaoKQlu Nis14U9m0LmdOFGt4MzPULGYhYvrrcNKBPXCVgUP38tU6C+JZKDXejIix0GyvR6T uito/CEHL4QFCxYu6seG6buVsxgYd6znq9Iqm1lhMAhAUgglHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLuLeamb0/52vBZBT0M1E0KbaB1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFj NDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvYjJjYzkxZGQtYzA4My0z ZjQ0LWJiMmUtM2ZlMDMzMmFlZmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxYzQyYTItM2RjNi00M2FmLWI3 MzQtZTkxOTU2YmRmZTE5LzE3MWM0MmEyLTNkYzYtNDNhZi1iNzM0LWU5MTk1NmJk ZmUxOS5jcmwwHwYDVR0jBBgwFoAU67DVPKZW9lZPxRZwuO2JkN4PJtMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5 NTZiZGZlMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfLyx3WH9gcMxa/5MkuxKVdOdQh51LwkMmvVckgd2oLRmbGoe18jL4d MWgNmqnYY8ZS3NANNmuTaONhygFtcsW+FzsxVYZKyQBMwZCoqRM8o3C51Xm5/nck sGELdeDbBMfiGwwH6yRTWanT77w/T+0aNwpkvmFKyECv+Du4KVH7KpU159Jy7/hH 8gyDYVqwZOY4K2R+CxnYMCyqPK9d8isaieSNfSUp2gkLssGMt2usREfSMo+7+Kxe 8417oaoqyHGQaxQvP1/iDlER6/N2v6mVQy4hQMnqtOHeqKgkuv/wI+1K2vsFCMUG fFXYKrimMa0jIWNULQLEVx6sn5owr80= -----END CERTIFICATE-----Generated at Thu Jun 5 18:22:10 2025 by rpki-client