$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1dd7a116-d7c4-3cba-8e54-3aae232bee30.roa File: 1dd7a116-d7c4-3cba-8e54-3aae232bee30.roa (raw, json) Hash identifier: kXZKMfo8LqTHhEO6tVlSTw/dw2HqWeJFSPpnamc8Z/g= Subject key identifier: 43:BB:E0:8B:B5:C2:D1:17:C6:58:E6:20:9B:50:DB:24:1A:A7:5A:D8 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858492CAE8F034B1B89660F7D4300 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1dd7a116-d7c4-3cba-8e54-3aae232bee30.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 13576 IP address blocks: 216.249.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:8f:03:4b:1b:89:66:0f:7d:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=f949413a-fd98-4780-9425-5f0e5c923ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:93:a7:c5:f3:b2:e6:6f:4a:4b:24:b2:03:de: 6f:3c:73:29:7d:a4:db:3d:44:9e:1f:81:df:46:ed: 5a:29:3f:c5:ca:9a:98:55:9d:bf:05:99:98:3a:0a: 1e:30:c6:a5:a7:cb:94:ef:01:6a:5d:dd:a1:03:75: c6:65:b9:64:fc:91:04:ee:fd:76:c2:6b:e6:18:45: da:9f:f9:91:f5:67:77:05:75:9f:98:e4:29:fb:78: b5:30:d3:ed:9c:59:8c:38:fe:d3:db:0f:86:d2:94: 0a:20:fe:3e:24:31:60:f9:b2:65:e2:b3:2f:96:a1: 79:28:41:b1:4f:6a:4b:d3:ad:3e:d2:3a:ae:2a:31: da:0e:f5:a3:23:4e:de:35:3b:25:b6:83:e1:d0:d7: b5:48:24:ca:b3:cc:23:c1:fd:37:31:6e:92:1e:7b: 2e:d4:e6:21:a0:a4:fd:ba:76:89:df:f8:5d:c2:4a: d1:3d:08:3c:82:21:67:f2:56:b3:16:de:1c:37:46: 02:13:80:28:72:f5:ac:5e:e0:81:e1:5b:c3:58:e9: 90:3d:1e:ec:8e:ab:fc:b5:96:04:a3:a1:3d:f9:0e: fd:9e:f7:c2:aa:04:bf:bd:fc:e6:a6:a9:df:08:cb: a0:44:a8:66:8e:48:19:dc:59:aa:44:99:f2:81:0f: 02:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BB:E0:8B:B5:C2:D1:17:C6:58:E6:20:9B:50:DB:24:1A:A7:5A:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/1dd7a116-d7c4-3cba-8e54-3aae232bee30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:5e:e6:23:1c:7d:8c:58:17:16:13:d9:10:11:53:97:2f:80: 5c:cc:fe:b0:e5:07:9e:6d:cf:88:2d:59:22:6a:b3:63:5d:e5: 33:d9:df:b9:12:16:ae:7a:a6:a9:03:9c:79:82:81:60:17:5c: 07:ad:6f:53:10:9f:f5:3d:a9:93:31:12:e3:86:30:c7:45:22: 6f:42:0d:a9:46:26:57:92:dd:a7:09:07:04:74:97:6f:f8:04: ac:0d:fe:0d:fe:37:fe:bb:4a:71:ef:13:00:39:65:7f:d1:cb: f4:b8:d7:d0:2f:b8:54:2b:f0:87:17:d5:b7:1d:2a:c7:d2:73: 89:d6:35:d9:47:51:11:93:b6:f9:86:a1:32:dc:65:f9:ac:de: 8e:e8:fc:a7:2e:e0:ea:e2:bc:89:6b:6e:65:03:ee:61:24:cb: 5c:4a:c8:38:71:e4:26:b8:90:4f:18:87:c1:d1:9e:16:42:12: 50:c3:09:5c:2b:29:0e:bb:b9:da:11:82:48:0f:e3:e6:f2:28: b6:d5:9b:8e:87:26:95:b9:07:0d:75:9b:67:e6:77:b8:94:9a: b9:36:86:ac:08:82:5c:0b:50:c0:9f:20:88:72:c6:8a:ca:06: 10:2e:76:b4:d7:b5:1a:26:1b:73:11:ba:5a:73:14:e4:cd:39: 75:6d:ad:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksro8DSxuJZg99QwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk Zjk0OTQxM2EtZmQ5OC00NzgwLTk0MjUtNWYwZTVjOTIzZWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJOnxfOy5m9KSySyA95vPHMpfaTbPUSeH4Hf Ru1aKT/FypqYVZ2/BZmYOgoeMMalp8uU7wFqXd2hA3XGZblk/JEE7v12wmvmGEXa n/mR9Wd3BXWfmOQp+3i1MNPtnFmMOP7T2w+G0pQKIP4+JDFg+bJl4rMvlqF5KEGx T2pL060+0jquKjHaDvWjI07eNTsltoPh0Ne1SCTKs8wjwf03MW6SHnsu1OYhoKT9 unaJ3/hdwkrRPQg8giFn8lazFt4cN0YCE4AocvWsXuCB4VvDWOmQPR7sjqv8tZYE o6E9+Q79nvfCqgS/vfzmpqnfCMugRKhmjkgZ3FmqRJnygQ8CiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEO74Iu1wtEXxljmIJtQ2yQap1rYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMWRkN2ExMTYtZDdjNC0z Y2JhLThlNTQtM2FhZTIzMmJlZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PnEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVe5iMcfYxYFxYT2RARU5cvgFzM/rDlB55tz4gtWSJqs2Nd5TPZ37kS Fq56pqkDnHmCgWAXXAetb1MQn/U9qZMxEuOGMMdFIm9CDalGJleS3acJBwR0l2/4 BKwN/g3+N/67SnHvEwA5ZX/Ry/S419AvuFQr8IcX1bcdKsfSc4nWNdlHURGTtvmG oTLcZfms3o7o/Kcu4OrivIlrbmUD7mEky1xKyDhx5Ca4kE8Yh8HRnhZCElDDCVwr KQ67udoRgkgP4+byKLbVm46HJpW5Bw11m2fmd7iUmrk2hqwIglwLUMCfIIhyxorK BhAudrTXtRomG3MRulpzFOTNOXVtrTQ= -----END CERTIFICATE-----Generated at Fri Mar 14 08:46:29 2025 by rpki-client