$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/002d8448-bfd2-3f15-9758-645ea14a426b.roa File: 002d8448-bfd2-3f15-9758-645ea14a426b.roa (raw, json) Hash identifier: 5RcdNYT5camC113D1fljPbffdf0WZkZH+TubaRiQZbQ= Subject key identifier: 88:F9:E6:AC:B5:DF:DD:5F:8B:BE:C3:5D:4F:FC:DA:D1:48:46:C8:EC Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858496E4986FDC8BED8F142027B00 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/002d8448-bfd2-3f15-9758-645ea14a426b.roa Signing time: Sun 06 Apr 2025 01:00:47 +0000 ROA not before: Sun 06 Apr 2025 01:00:47 +0000 ROA not after: Sat 05 Jul 2025 01:00:47 +0000 asID: 18785 IP address blocks: 216.106.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6e:49:86:fd:c8:be:d8:f1:42:02:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Apr 6 01:00:47 2025 GMT Not After : Jul 5 01:00:47 2025 GMT Subject: CN=40ca740a-a2ee-4177-aefc-4a2c6a751474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:10:ef:9a:64:f1:f8:3b:88:6a:7c:27:86:18: 8a:5d:e7:7d:ab:1d:2c:d8:1f:79:01:3d:ee:62:06: 87:c0:20:34:2b:cb:1f:a1:2d:e8:e6:1e:3a:ec:35: be:90:e9:8f:44:1b:f6:fc:43:f6:11:5d:55:07:fb: 5c:d1:fd:af:ff:6e:83:a7:c0:59:fe:8b:19:3e:c6: b1:a9:71:2b:ce:ee:0d:93:94:43:d2:8c:e9:01:82: 5f:85:c0:6e:ab:5c:4d:2d:ca:12:b4:ab:8a:de:26: 5a:3e:02:ef:14:9a:14:3f:10:c8:0a:45:81:47:8c: 7d:7a:40:a1:ee:bb:0d:77:ab:88:ba:72:dc:9c:78: 00:b2:dd:ff:50:5f:d9:21:7d:73:36:ba:a7:6f:aa: bf:da:3a:43:43:02:41:54:4a:c7:aa:e0:a1:6b:d8: 03:84:a3:46:ed:23:f2:0a:d5:59:ad:6c:97:68:32: f6:5d:73:4d:82:f7:cf:99:03:42:a1:0c:e2:a3:4e: 8e:09:36:66:b3:28:3c:f2:82:02:20:4e:9f:e4:b2: 7f:0c:68:44:4d:70:6a:2e:eb:0b:99:43:f4:78:72: 00:e7:a5:72:45:d0:58:51:7a:f0:70:42:f0:34:01: 2f:38:03:c4:af:c9:7e:ad:ff:9f:97:df:6c:dc:78: 98:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F9:E6:AC:B5:DF:DD:5F:8B:BE:C3:5D:4F:FC:DA:D1:48:46:C8:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/002d8448-bfd2-3f15-9758-645ea14a426b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.106.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:2b:6c:d5:8c:b5:45:57:fd:c5:33:71:bb:fb:6f:61:9e:94: 92:65:a1:7f:ee:37:20:f8:6c:31:8c:44:34:5c:29:eb:db:11: 84:8e:9f:d8:a8:2c:31:19:cb:bc:bf:51:bd:d3:a7:7c:84:5a: e2:4e:a0:6e:94:49:96:9d:60:f2:e9:cc:c3:a5:b6:9b:65:aa: a4:74:1a:99:f6:df:d0:99:2a:2a:b5:83:59:8d:6e:35:39:80: 7e:39:ae:53:c6:91:ce:31:21:89:ee:a8:9e:8a:6a:fe:d4:a4: 00:24:10:14:ab:24:d0:36:99:84:98:cd:ff:37:89:15:1d:02: 79:31:ed:ed:ab:98:ed:85:ec:ba:c0:84:25:19:6d:6b:f8:49: 33:e4:f8:3b:99:de:c9:2a:65:1c:80:1c:2d:b3:92:5a:06:85: 0e:2c:50:c2:5d:e8:e1:85:8c:f5:71:60:a2:6e:fd:b7:77:7b: fe:42:7e:d6:2a:87:f0:9e:76:8c:02:b9:e4:ab:df:d9:ba:7a: 87:cc:83:ac:02:00:ae:3a:b2:19:7a:b7:b7:01:95:af:17:12: b8:a1:b1:9e:f9:db:64:80:23:83:42:91:03:91:82:1b:81:a3: 14:74:98:23:80:8b:72:f4:0f:c2:6f:af:ab:f1:59:26:3e:f5: 2d:07:00:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEluSYb9yL7Y8UICewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDQwNjAxMDA0N1oXDTI1MDcwNTAxMDA0N1owLzEtMCsGA1UEAxMk NDBjYTc0MGEtYTJlZS00MTc3LWFlZmMtNGEyYzZhNzUxNDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRDvmmTx+DuIanwnhhiKXed9qx0s2B95AT3u YgaHwCA0K8sfoS3o5h467DW+kOmPRBv2/EP2EV1VB/tc0f2v/26Dp8BZ/osZPsax qXErzu4Nk5RD0ozpAYJfhcBuq1xNLcoStKuK3iZaPgLvFJoUPxDICkWBR4x9ekCh 7rsNd6uIunLcnHgAst3/UF/ZIX1zNrqnb6q/2jpDQwJBVErHquCha9gDhKNG7SPy CtVZrWyXaDL2XXNNgvfPmQNCoQzio06OCTZmsyg88oICIE6f5LJ/DGhETXBqLusL mUP0eHIA56VyRdBYUXrwcELwNAEvOAPEr8l+rf+fl99s3HiYbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIj55qy1391fi77DXU/82tFIRsjsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMDAyZDg0NDgtYmZkMi0z ZjE1LTk3NTgtNjQ1ZWExNGE0MjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Gr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMsrbNWMtUVX/cUzcbv7b2GelJJloX/uNyD4bDGMRDRcKevbEYSOn9io LDEZy7y/Ub3Tp3yEWuJOoG6USZadYPLpzMOltptlqqR0Gpn239CZKiq1g1mNbjU5 gH45rlPGkc4xIYnuqJ6Kav7UpAAkEBSrJNA2mYSYzf83iRUdAnkx7e2rmO2F7LrA hCUZbWv4STPk+DuZ3skqZRyAHC2zkloGhQ4sUMJd6OGFjPVxYKJu/bd3e/5CftYq h/CedowCueSr39m6eofMg6wCAK46shl6t7cBla8XErihsZ7522SAI4NCkQORghuB oxR0mCOAi3L0D8Jvr6vxWSY+9S0HABs= -----END CERTIFICATE-----Generated at Sat Apr 12 10:16:51 2025 by rpki-client