$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/817d97f7-5adc-3334-9df3-d50b2f74f417.roa File: 817d97f7-5adc-3334-9df3-d50b2f74f417.roa (raw, json) Hash identifier: XjsYFLgzfwX9q1TTPKAnODf+sY7m9OQ1LzyOapOuymA= Subject key identifier: 8A:C9:2F:41:5B:E9:EA:0C:44:CF:F1:6E:A5:B5:8F:1D:78:A9:4B:1B Certificate issuer: /CN=2d9c8c49-35fe-42fb-a908-c07b97255b4a Certificate serial: 010D0C9F43285848F4F6997B783AAF6AA8E76C50 Authority key identifier: DE:BD:AA:75:38:5A:90:C6:36:0B:ED:CA:72:F4:F4:17:4A:0E:93:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/817d97f7-5adc-3334-9df3-d50b2f74f417.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 394769 IP address blocks: 141.216.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/2d9c8c49-35fe-42fb-a908-c07b97255b4a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/2d9c8c49-35fe-42fb-a908-c07b97255b4a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:99:7b:78:3a:af:6a:a8:e7:6c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d9c8c49-35fe-42fb-a908-c07b97255b4a Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=6353cd4d-35ed-499f-8c04-327293e96f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:58:61:0a:e5:a4:3e:40:a0:ca:58:75:3b:1c: 8a:2e:c9:20:cb:d6:c1:14:bb:f3:d8:87:a4:ec:56: 43:4c:0b:4b:0e:0c:e9:d3:d6:6a:f0:28:a4:6c:5f: c2:df:8a:0d:5c:8b:da:42:1f:cb:9b:3d:82:a2:cb: 86:11:f6:3c:39:56:ea:44:2c:19:5f:37:82:1d:1a: 8b:19:6f:3c:18:51:cb:bb:c4:83:25:ee:1b:e7:00: d7:39:e3:4e:73:27:0a:cd:b9:19:48:f2:99:3e:76: 16:cc:0c:68:50:a9:c3:c7:f5:7e:9d:21:13:a3:ce: 53:a1:42:7e:dc:3b:a4:ab:f7:64:68:e1:43:fd:f9: 1f:70:4d:20:5f:71:1d:17:7c:80:f0:22:d3:24:6c: 33:8d:54:15:9c:37:8f:19:29:9a:1c:e3:25:fa:ac: 37:30:4a:bd:9e:79:36:76:a7:ad:de:4e:ce:f6:a6: 12:4e:f5:31:e8:0d:11:b4:3e:15:46:3b:c6:15:b6: 30:db:a7:da:d8:db:c1:15:52:d3:bc:1d:98:1f:36: a1:01:ef:f7:c9:2d:a4:c7:9e:85:6a:97:72:0d:9d: 30:5d:90:88:0c:1d:43:66:7c:d7:84:dd:9c:32:64: aa:9b:6c:8e:cb:6d:29:9a:2d:d5:50:ed:5f:66:4a: 69:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C9:2F:41:5B:E9:EA:0C:44:CF:F1:6E:A5:B5:8F:1D:78:A9:4B:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/817d97f7-5adc-3334-9df3-d50b2f74f417.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/2d9c8c49-35fe-42fb-a908-c07b97255b4a.crl X509v3 Authority Key Identifier: keyid:DE:BD:AA:75:38:5A:90:C6:36:0B:ED:CA:72:F4:F4:17:4A:0E:93:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a.cer sbgp-ipAddrBlock: critical IPv4: 141.216.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:90:ff:c3:d2:d2:23:67:fd:a2:0f:58:1c:4a:9d:bd:a6:dc: 79:70:c7:f0:c3:1d:e6:1a:85:8b:71:c0:50:86:87:47:e5:23: 68:35:c2:79:d3:9a:87:df:bf:3d:fe:5d:d3:0d:7d:1b:b4:a3: a9:85:51:45:b0:24:fa:7c:21:9b:7b:34:86:88:67:13:87:e7: c3:91:4f:41:b2:c9:87:15:01:36:da:a6:2b:36:1b:a0:33:a9: 0e:ec:5e:42:f0:08:29:de:c7:19:0b:17:21:f7:cf:1f:01:64: 10:b9:f2:ee:4d:63:fa:ca:93:dc:d9:d2:50:81:c3:16:8b:92: 75:d9:6c:d6:19:dc:a8:17:b4:20:8d:79:ed:3d:a4:ac:6c:4a: a3:ff:99:c3:b0:21:93:64:78:e3:45:cb:1f:07:a4:06:b3:40: 10:dd:d1:ec:f7:4e:71:61:8a:7c:45:7a:d7:76:d4:57:15:1a: 78:ee:1f:6c:46:04:5f:57:d9:88:63:d8:e5:0e:5c:59:22:3c: fd:c0:e3:48:f6:ac:1e:e0:ce:45:13:00:4f:b5:a0:7c:68:5e: be:e3:49:26:20:d9:17:e0:2f:fd:dd:a3:e2:98:81:54:f9:75: 71:bc:d6:21:aa:2b:00:d6:7c:0a:0a:48:de:27:96:10:23:c2: 9b:d0:a5:a6 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEj09pl7eDqvaqjnbFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ5YzhjNDktMzVmZS00MmZiLWE5MDgtYzA3Yjk3MjU1 YjRhMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NjM1M2NkNGQtMzVlZC00OTlmLThjMDQtMzI3MjkzZTk2ZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVhhCuWkPkCgylh1OxyKLskgy9bBFLvz2Iek 7FZDTAtLDgzp09Zq8CikbF/C34oNXIvaQh/Lmz2CosuGEfY8OVbqRCwZXzeCHRqL GW88GFHLu8SDJe4b5wDXOeNOcycKzbkZSPKZPnYWzAxoUKnDx/V+nSETo85ToUJ+ 3Dukq/dkaOFD/fkfcE0gX3EdF3yA8CLTJGwzjVQVnDePGSmaHOMl+qw3MEq9nnk2 dqet3k7O9qYSTvUx6A0RtD4VRjvGFbYw26fa2NvBFVLTvB2YHzahAe/3yS2kx56F apdyDZ0wXZCIDB1DZnzXhN2cMmSqm2yOy20pmi3VUO1fZkppyQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIrJL0Fb6eoMRM/xbqW1jx14qUsbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yZDlj OGM0OS0zNWZlLTQyZmItYTkwOC1jMDdiOTcyNTViNGEvODE3ZDk3ZjctNWFkYy0z MzM0LTlkZjMtZDUwYjJmNzRmNDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmQ5YzhjNDktMzVmZS00MmZiLWE5 MDgtYzA3Yjk3MjU1YjRhLzJkOWM4YzQ5LTM1ZmUtNDJmYi1hOTA4LWMwN2I5NzI1 NWI0YS5jcmwwHwYDVR0jBBgwFoAU3r2qdThakMY2C+3KcvT0F0oOkz4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yZDljOGM0OS0zNWZlLTQyZmItYTkwOC1jMDdi OTcyNTViNGEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjdgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAdpD/w9LSI2f9og9YHEqdvabceXDH8MMd5hqFi3HAUIaHR+UjaDXCedOa h9+/Pf5d0w19G7SjqYVRRbAk+nwhm3s0hohnE4fnw5FPQbLJhxUBNtqmKzYboDOp DuxeQvAIKd7HGQsXIffPHwFkELny7k1j+sqT3NnSUIHDFouSddls1hncqBe0II15 7T2krGxKo/+Zw7Ahk2R440XLHwekBrNAEN3R7PdOcWGKfEV613bUVxUaeO4fbEYE X1fZiGPY5Q5cWSI8/cDjSPasHuDORRMAT7WgfGhevuNJJiDZF+Av/d2j4piBVPl1 cbzWIaorANZ8CgpI3ieWECPCm9Clpg== -----END CERTIFICATE-----Generated at Tue Apr 8 12:12:15 2025 by rpki-client