$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/717ad060-be4e-3d4b-8575-7481eb29f59e.roa File: 717ad060-be4e-3d4b-8575-7481eb29f59e.roa (raw, json) Hash identifier: UD9HrUP2bCCmDyT9NwbYN/LtTUUIBcbdAwGt//op14U= Subject key identifier: 5F:55:34:73:C6:4A:E2:41:DB:D1:87:A3:A7:B9:81:5F:62:0D:B5:20 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584937D92F7C1B69113720E13880 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/717ad060-be4e-3d4b-8575-7481eb29f59e.roa Signing time: Mon 17 Mar 2025 13:00:52 +0000 ROA not before: Mon 17 Mar 2025 13:00:52 +0000 ROA not after: Sun 15 Jun 2025 13:00:52 +0000 asID: 13576 IP address blocks: 216.249.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:37:d9:2f:7c:1b:69:11:37:20:e1:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 17 13:00:52 2025 GMT Not After : Jun 15 13:00:52 2025 GMT Subject: CN=d233947f-a51e-4cae-b9de-f015021db276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a2:f1:51:2e:39:0d:b6:11:91:e3:04:f1:3e: 20:cf:3c:44:d9:ab:fd:3e:12:29:7a:85:ee:9f:6a: 45:bb:cd:9e:e9:fa:fd:df:03:01:0a:c0:5d:e2:14: 59:00:4f:ec:7c:2a:14:51:bc:64:13:ff:f8:ed:91: 27:da:13:c3:a6:81:cf:96:af:20:07:9e:fa:2d:44: de:78:43:eb:52:b9:7b:c7:d5:51:7e:d9:ca:5e:89: b2:32:63:cc:11:0d:64:6c:1c:77:e3:b9:f4:47:82: 0f:27:3c:b8:d0:a2:91:dc:f8:f7:26:64:e2:e2:8b: 5f:67:8f:38:f4:1a:84:1e:39:6a:eb:8a:94:b3:d0: d0:7f:46:5e:ae:1d:ce:1e:bc:50:d7:af:59:b8:7a: 22:0e:57:aa:2b:be:a2:ac:52:66:e3:5d:35:61:be: cf:b8:65:26:88:bf:75:b6:79:bb:10:fc:1b:59:43: c7:86:6f:d4:8f:c4:f0:99:99:ca:da:26:89:33:30: 40:92:8c:93:68:47:45:41:70:3d:7b:72:2e:8f:92: 1e:e9:d5:3d:6d:64:95:8f:90:66:8f:05:f9:17:5b: 1e:f1:dc:cd:05:60:bf:6a:de:3c:c4:86:12:dd:8e: 15:bf:1d:96:0b:a2:9b:1c:38:2c:22:7c:e0:9f:5c: ab:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:55:34:73:C6:4A:E2:41:DB:D1:87:A3:A7:B9:81:5F:62:0D:B5:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/717ad060-be4e-3d4b-8575-7481eb29f59e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:35:6e:bc:4c:34:37:31:54:8e:45:f3:95:2b:01:be:f7:68: 59:de:18:b7:7e:19:f5:de:7c:5a:2e:8c:0d:b5:4f:0e:6a:c4: 90:5d:6b:5a:89:b1:a4:0e:cb:a1:85:cd:dc:e0:e4:a1:7b:6a: 59:15:0b:94:92:6f:f7:a8:f2:04:f6:5a:30:98:52:0f:72:c1: 76:bc:1a:e2:94:a5:19:7d:23:73:0d:f5:47:19:92:0f:2c:dd: 34:49:ef:fb:4a:32:56:ad:4f:16:ab:76:d2:ba:5d:45:85:68: 0b:b1:db:b5:1f:eb:f7:77:df:9d:f8:42:8d:c1:ab:40:03:bd: e5:ed:04:a2:9f:a5:2f:1d:32:d7:1a:79:8e:ab:11:5e:32:f1: e3:da:30:3a:6a:40:42:ea:09:36:a4:a2:e0:7e:82:da:eb:6f: 56:2b:ef:46:89:a6:93:03:73:ce:e8:de:17:e3:51:00:fc:79: 87:95:5c:24:2d:80:61:25:fb:61:27:03:95:7e:15:99:27:d4: db:52:b1:77:ff:77:50:c1:8b:aa:04:7d:93:9f:07:54:2b:1d: 65:13:6e:08:f4:5f:bc:33:31:73:00:97:b6:a8:bf:bf:d0:46: aa:3a:bb:43:2a:28:cc:25:42:82:38:f1:73:a4:f0:38:76:d5: 5d:e7:f5:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32S98G2kRNyDhOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDIzMzk0N2YtYTUxZS00Y2FlLWI5ZGUtZjAxNTAyMWRiMjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqLxUS45DbYRkeME8T4gzzxE2av9PhIpeoXu n2pFu82e6fr93wMBCsBd4hRZAE/sfCoUUbxkE//47ZEn2hPDpoHPlq8gB576LUTe eEPrUrl7x9VRftnKXomyMmPMEQ1kbBx347n0R4IPJzy40KKR3Pj3JmTi4otfZ484 9BqEHjlq64qUs9DQf0Zerh3OHrxQ169ZuHoiDleqK76irFJm4101Yb7PuGUmiL91 tnm7EPwbWUPHhm/Uj8TwmZnK2iaJMzBAkoyTaEdFQXA9e3Iuj5Ie6dU9bWSVj5Bm jwX5F1se8dzNBWC/at48xIYS3Y4Vvx2WC6KbHDgsInzgn1yrHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9VNHPGSuJB29GHo6e5gV9iDbUgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNzE3YWQwNjAtYmU0ZS0z ZDRiLTg1NzUtNzQ4MWViMjlmNTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2PnyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMA1brxMNDcxVI5F85UrAb73aFneGLd+GfXefFoujA21Tw5qxJBda1qJ saQOy6GFzdzg5KF7alkVC5SSb/eo8gT2WjCYUg9ywXa8GuKUpRl9I3MN9UcZkg8s 3TRJ7/tKMlatTxardtK6XUWFaAux27Uf6/d33534Qo3Bq0ADveXtBKKfpS8dMtca eY6rEV4y8ePaMDpqQELqCTakouB+gtrrb1Yr70aJppMDc87o3hfjUQD8eYeVXCQt gGEl+2EnA5V+FZkn1NtSsXf/d1DBi6oEfZOfB1QrHWUTbgj0X7wzMXMAl7aov7/Q Rqo6u0MqKMwlQoI48XOk8Dh21V3n9dc= -----END CERTIFICATE-----Generated at Thu Apr 17 23:25:01 2025 by rpki-client