$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/79919cfb-35f4-3cb8-b7f3-e4b6be303f24.roa File: 79919cfb-35f4-3cb8-b7f3-e4b6be303f24.roa (raw, json) Hash identifier: RHxQWo+b9ZeNI1149Qf3sMclUni4IOtSusCiKqPDo/s= Subject key identifier: 46:2D:A8:5D:0D:CD:F9:8C:19:60:D6:9B:AD:64:FB:44:C7:C4:23:6C Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F43285849D85F9F6250756909ECD33D80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/79919cfb-35f4-3cb8-b7f3-e4b6be303f24.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 6312 IP address blocks: 216.249.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:9f:62:50:75:69:09:ec:d3:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=55c75f23-8b61-4970-afe7-ee87b1f080d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d8:32:38:26:8d:6d:b9:71:d9:8e:5f:2c:84: 30:d5:cf:bf:41:33:0e:f1:f5:5a:47:44:73:46:7d: 4c:ef:7c:7f:12:48:fb:d7:36:46:2e:12:79:f0:58: 2f:1d:bf:23:67:5e:3a:ad:e5:d9:73:73:b8:23:93: 49:8f:c2:42:05:0d:1a:ff:ff:5e:70:99:ca:16:6e: 97:80:e2:40:e7:87:51:57:82:c3:18:c9:bb:ac:5c: 52:1c:dc:3d:01:41:f0:94:53:d5:47:da:db:9d:0c: 82:45:e9:e9:a1:57:45:d1:4a:63:c9:03:24:bc:12: c6:00:0d:06:8a:30:02:db:f3:3e:d2:0b:4d:3f:9f: 66:0a:fa:4e:c7:57:55:b6:2d:59:97:10:0e:a4:fd: 03:ef:bd:0c:fd:14:65:97:34:c0:ab:d8:27:82:ba: a9:8c:84:fb:7f:2d:56:ea:4d:1c:94:72:1c:df:49: c2:88:3d:44:8d:a2:d2:11:7e:63:71:db:2f:70:88: 8b:e8:fa:7c:ef:56:06:34:ec:34:d7:58:4e:62:79: 45:06:94:86:d9:2b:4f:aa:8e:2f:16:00:98:6e:86: a7:8f:5c:46:3a:d8:b8:2e:c1:e4:97:a8:0a:48:ef: f4:4b:6c:aa:08:cf:82:a0:7b:c5:d9:8f:c2:f2:83: 0d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2D:A8:5D:0D:CD:F9:8C:19:60:D6:9B:AD:64:FB:44:C7:C4:23:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/79919cfb-35f4-3cb8-b7f3-e4b6be303f24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:47:59:ab:26:28:9f:c4:1c:8f:6b:1a:ce:8a:bd:10:7b:d1: e3:11:99:68:dd:9a:92:e0:d5:be:59:56:0c:98:e3:2a:96:55: 8b:92:a6:74:90:47:f5:fb:b5:a9:e8:9b:ee:8a:b6:68:d8:ca: ce:6e:3d:fe:59:e9:ea:91:f9:7e:c2:f8:c7:6d:33:71:00:ab: 0a:d2:e1:57:ff:17:c0:7a:72:c0:f9:58:c4:7c:52:46:80:e8: db:07:ed:49:33:27:09:9f:e8:a6:80:16:dd:ff:7e:00:d8:9a: 9c:1d:b3:4d:1b:99:50:0b:cc:44:67:44:a1:9e:5a:cf:67:c5: 73:9e:1d:60:dc:c9:23:37:67:58:1b:a1:7b:c2:de:53:5c:b4: 06:dd:58:6f:46:8a:72:59:66:c1:05:5e:e4:18:67:50:1f:b7: 61:44:02:d0:1e:1d:d4:70:63:53:55:ef:25:bd:98:54:d7:ff: 9c:6c:7e:b2:89:80:5d:98:23:28:ce:61:24:94:db:d6:49:c8: c2:f8:c5:23:8a:48:f1:8f:bf:53:e0:3d:65:97:71:e1:7e:0c: fc:2b:db:cc:4b:53:dd:58:20:6d:70:50:0a:cb:66:6b:d1:e0: 71:f5:9a:95:d6:bb:ee:0d:1a:45:f2:6f:3b:d4:22:cd:6b:13: e5:da:8a:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX59iUHVpCezTPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NTVjNzVmMjMtOGI2MS00OTcwLWFmZTctZWU4N2IxZjA4MGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitgyOCaNbblx2Y5fLIQw1c+/QTMO8fVaR0Rz Rn1M73x/Ekj71zZGLhJ58FgvHb8jZ146reXZc3O4I5NJj8JCBQ0a//9ecJnKFm6X gOJA54dRV4LDGMm7rFxSHNw9AUHwlFPVR9rbnQyCRenpoVdF0UpjyQMkvBLGAA0G ijAC2/M+0gtNP59mCvpOx1dVti1ZlxAOpP0D770M/RRllzTAq9gngrqpjIT7fy1W 6k0clHIc30nCiD1EjaLSEX5jcdsvcIiL6Pp871YGNOw011hOYnlFBpSG2StPqo4v FgCYboanj1xGOti4LsHkl6gKSO/0S2yqCM+CoHvF2Y/C8oMNmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYtqF0NzfmMGWDWm61k+0THxCNsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNzk5MTljZmItMzVmNC0z Y2I4LWI3ZjMtZTRiNmJlMzAzZjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PnUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZHWasmKJ/EHI9rGs6KvRB70eMRmWjdmpLg1b5ZVgyY4yqWVYuSpnSQ R/X7tanom+6KtmjYys5uPf5Z6eqR+X7C+MdtM3EAqwrS4Vf/F8B6csD5WMR8UkaA 6NsH7UkzJwmf6KaAFt3/fgDYmpwds00bmVALzERnRKGeWs9nxXOeHWDcySM3Z1gb oXvC3lNctAbdWG9GinJZZsEFXuQYZ1Aft2FEAtAeHdRwY1NV7yW9mFTX/5xsfrKJ gF2YIyjOYSSU29ZJyML4xSOKSPGPv1PgPWWXceF+DPwr28xLU91YIG1wUArLZmvR 4HH1mpXWu+4NGkXybzvUIs1rE+Xailk= -----END CERTIFICATE-----Generated at Wed Jul 9 12:00:56 2025 by rpki-client