$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b42ced28-8785-3891-8ae9-622834c19914.roa File: b42ced28-8785-3891-8ae9-622834c19914.roa (raw, json) Hash identifier: FysE3PnHQB5h2Gw/EmccpUgooTiZg1+sQXVY7HI76co= Subject key identifier: F4:53:4A:37:BF:26:92:09:F4:4A:18:CB:C1:59:DA:A8:6C:DA:ED:DE Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F43285849350E94A085B9F229E6BE3860 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b42ced28-8785-3891-8ae9-622834c19914.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 13576 IP address blocks: 216.106.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:94:a0:85:b9:f2:29:e6:be:38:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=2635589d-6ea4-4757-91aa-17e5afa2c4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8b:92:88:64:ea:25:39:34:0b:a9:28:69:0a: f4:cf:a3:bf:22:6b:d3:7c:1d:7b:dd:7e:cb:bb:7e: 38:65:cc:22:9f:6b:a0:2b:64:e8:bd:3d:99:c2:d9: a5:47:cd:88:99:9d:00:9e:7c:28:c1:1a:b9:9c:74: a2:b9:2a:14:85:a8:a5:07:8d:a9:02:d9:21:d8:27: ea:58:b5:29:c2:7e:5e:d5:5d:32:25:0b:33:30:ee: e8:bf:62:82:a7:f3:17:f7:c2:4f:9a:3b:a6:3c:c2: 1c:f9:58:26:eb:64:ee:64:6d:4f:98:1b:43:5f:00: d3:aa:b4:6c:3b:e8:88:d4:5f:d3:f7:f4:25:2e:42: 0d:6a:39:76:5e:11:6a:28:a3:2a:a9:de:61:db:3d: bb:b2:6e:2d:97:96:ab:59:2d:85:ac:67:46:90:3f: 73:d3:87:cb:9c:85:bf:d5:02:cc:58:07:11:08:6c: 68:83:f6:a4:8e:cf:0f:cf:d9:ed:7b:13:6d:f0:50: 21:79:ba:15:e8:0c:ea:ab:0b:35:84:a0:ad:c4:43: b0:70:9a:f1:fe:e5:8e:85:f8:ce:70:68:a2:8a:2c: ad:8d:3e:a6:9b:d5:4c:6d:b6:0e:c1:49:b6:98:ad: 56:18:4a:16:1b:d1:29:01:11:b7:65:e7:43:f6:d8: ea:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:53:4A:37:BF:26:92:09:F4:4A:18:CB:C1:59:DA:A8:6C:DA:ED:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b42ced28-8785-3891-8ae9-622834c19914.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.106.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:ff:84:9e:b1:36:1d:ba:ae:32:f1:11:f8:ca:7a:c2:0f:a5: 2a:7d:b9:24:17:58:51:cf:6c:fd:1d:00:e3:e2:d1:66:4d:bd: 9d:96:de:32:1b:f1:01:c7:6b:2b:31:3c:ee:fe:0e:a6:46:82: 0d:26:65:fc:47:14:6b:38:e4:18:0f:b9:d9:88:cf:38:1d:96: 9e:8d:30:9c:4d:0c:9b:04:80:4f:35:3b:38:ed:43:9c:0f:b3: 2b:dc:4f:3e:fe:db:13:94:6f:d6:5c:f6:c5:c6:aa:c2:54:d2: 8c:d6:84:b1:b0:77:24:3a:3a:6c:71:f5:5c:b1:50:7e:7a:40: 18:95:59:63:18:24:fa:7a:db:d4:ee:3f:54:df:80:ff:c1:4f: 7e:26:15:28:aa:11:5f:7d:16:c0:2d:7d:70:f5:ed:b0:fd:93: 34:41:ec:20:e9:40:80:3d:43:49:d7:94:69:6a:3a:7b:02:a3: 59:ad:62:b5:17:48:1c:4f:25:0a:2e:e5:78:93:71:d2:e6:ec: 75:10:f7:f9:97:75:fb:78:89:17:3d:62:3f:7c:cd:6f:19:a2: 33:9f:e2:7f:55:e2:b6:92:01:cb:7d:a8:6f:76:82:a7:0d:bb: d0:64:e5:1e:1f:89:9d:d0:8c:38:55:c1:95:7c:60:81:f3:d5: e4:1d:c1:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DpSghbnyKea+OGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk MjYzNTU4OWQtNmVhNC00NzU3LTkxYWEtMTdlNWFmYTJjNGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ouSiGTqJTk0C6koaQr0z6O/ImvTfB173X7L u344Zcwin2ugK2TovT2ZwtmlR82ImZ0AnnwowRq5nHSiuSoUhailB42pAtkh2Cfq WLUpwn5e1V0yJQszMO7ov2KCp/MX98JPmjumPMIc+Vgm62TuZG1PmBtDXwDTqrRs O+iI1F/T9/QlLkINajl2XhFqKKMqqd5h2z27sm4tl5arWS2FrGdGkD9z04fLnIW/ 1QLMWAcRCGxog/akjs8Pz9ntexNt8FAheboV6Azqqws1hKCtxEOwcJrx/uWOhfjO cGiiiiytjT6mm9VMbbYOwUm2mK1WGEoWG9EpARG3ZedD9tjqzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRTSje/JpIJ9EoYy8FZ2qhs2u3eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYjQyY2VkMjgtODc4NS0z ODkxLThhZTktNjIyODM0YzE5OTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GrUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABX/hJ6xNh26rjLxEfjKesIPpSp9uSQXWFHPbP0dAOPi0WZNvZ2W3jIb 8QHHaysxPO7+DqZGgg0mZfxHFGs45BgPudmIzzgdlp6NMJxNDJsEgE81OzjtQ5wP syvcTz7+2xOUb9Zc9sXGqsJU0ozWhLGwdyQ6Omxx9VyxUH56QBiVWWMYJPp629Tu P1TfgP/BT34mFSiqEV99FsAtfXD17bD9kzRB7CDpQIA9Q0nXlGlqOnsCo1mtYrUX SBxPJQou5XiTcdLm7HUQ9/mXdft4iRc9Yj98zW8ZojOf4n9V4raSAct9qG92gqcN u9Bk5R4fiZ3QjDhVwZV8YIHz1eQdwfg= -----END CERTIFICATE-----Generated at Sun Apr 6 17:45:44 2025 by rpki-client