$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c29e32ab-de7b-33c4-9576-f3e623abb61e.roa File: c29e32ab-de7b-33c4-9576-f3e623abb61e.roa (raw, json) Hash identifier: jVskEzoNAr1HPEeeBsBhlMUteJE7qH7g7ZifK+jFXjs= Subject key identifier: C7:F7:15:D3:C2:5E:73:4A:B6:B1:21:90:91:1F:28:A0:FB:D2:52:18 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858492CAE8F6794DEFCD8D818B380 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c29e32ab-de7b-33c4-9576-f3e623abb61e.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 13576 IP address blocks: 216.249.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:8f:67:94:de:fc:d8:d8:18:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=2c08cd53-6eea-4528-a24d-66055acc0d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:94:69:92:11:f3:2e:18:c3:5f:63:5f:45:e4: d1:af:2c:50:49:14:7c:12:f0:6c:ca:d5:b9:ed:86: e3:81:18:71:12:aa:85:3f:09:22:33:5b:3d:96:9b: 6e:cb:f3:35:e0:90:53:bc:42:97:2b:27:9c:f6:80: 9d:37:2c:3f:20:d1:3c:34:da:6d:03:88:67:63:f7: 24:90:1b:e0:ab:2c:47:ed:f4:eb:16:83:8d:04:c7: f0:c2:b0:ff:cd:33:14:32:a9:b9:ad:8f:6d:82:90: a6:1e:9d:00:53:8f:1a:9c:44:85:0b:9b:85:66:b3: f2:f2:c7:5f:f9:5b:1f:5d:30:b8:11:2e:c3:4f:dc: 90:b1:0d:a7:49:ab:7a:cd:d6:72:b5:6e:8d:09:b9: 3d:b0:a6:9f:05:d5:ed:da:bd:93:3a:50:28:99:88: e4:a1:74:d0:f4:b2:76:00:75:d2:65:2b:19:60:95: b7:45:da:24:42:bb:e7:7c:a7:d1:59:b0:4f:75:2e: b9:e3:3e:95:67:66:9a:0c:7a:05:2d:b8:dd:37:64: 57:ae:88:d0:b9:cb:57:03:51:2a:38:78:d7:09:63: ea:48:20:b7:57:5f:7d:53:ed:3e:1a:c9:2a:4e:06: 2c:e1:ef:df:91:aa:05:fa:20:d7:ec:2a:6a:ed:b8: 64:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F7:15:D3:C2:5E:73:4A:B6:B1:21:90:91:1F:28:A0:FB:D2:52:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c29e32ab-de7b-33c4-9576-f3e623abb61e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:f4:6e:3a:8d:63:86:27:fd:b6:61:a3:a2:49:5d:cc:e3:4d: e6:a8:ff:38:f0:63:ec:b0:54:00:cc:33:b4:9d:7b:78:52:3f: a3:a9:21:3c:9a:4a:0f:7d:36:09:8e:f7:a2:35:c5:cd:a5:25: 78:80:ae:6e:0c:bc:bc:37:81:73:24:3c:83:2f:5f:d4:c7:87: d8:1c:82:d1:49:79:c7:1f:d3:f0:ea:26:fd:aa:e2:66:94:8d: f5:c6:a1:f8:31:46:eb:7b:7c:75:1b:39:71:91:cd:78:fb:02: af:7b:2d:08:5e:b4:b7:92:2c:47:cf:a8:6b:1c:ad:95:76:f8: 96:e3:fc:39:2d:ba:17:73:ff:2a:fc:17:eb:28:fa:9b:ff:7b: 5e:99:59:ce:92:8c:c6:d7:ea:44:41:bf:06:9b:49:a5:0c:0c: 8d:96:6d:33:32:b7:23:e7:86:38:9d:aa:bc:9e:59:13:75:81: f4:8c:34:34:87:a3:04:85:b5:82:a4:80:90:67:75:9a:fd:4d: e1:61:95:7c:8d:17:43:3c:ba:d1:20:ef:ab:d0:93:80:52:52: 64:46:e2:96:51:10:ba:37:99:48:02:a1:ec:08:9d:af:51:fb: ac:6b:53:98:a2:40:b3:9e:12:7f:51:1e:67:92:a3:4a:d0:1b: 3c:36:cb:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksro9nlN782NgYs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MmMwOGNkNTMtNmVlYS00NTI4LWEyNGQtNjYwNTVhY2MwZDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJRpkhHzLhjDX2NfReTRryxQSRR8EvBsytW5 7YbjgRhxEqqFPwkiM1s9lptuy/M14JBTvEKXKyec9oCdNyw/INE8NNptA4hnY/ck kBvgqyxH7fTrFoONBMfwwrD/zTMUMqm5rY9tgpCmHp0AU48anESFC5uFZrPy8sdf +VsfXTC4ES7DT9yQsQ2nSat6zdZytW6NCbk9sKafBdXt2r2TOlAomYjkoXTQ9LJ2 AHXSZSsZYJW3RdokQrvnfKfRWbBPdS654z6VZ2aaDHoFLbjdN2RXrojQuctXA1Eq OHjXCWPqSCC3V199U+0+GskqTgYs4e/fkaoF+iDX7Cpq7bhkXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMf3FdPCXnNKtrEhkJEfKKD70lIYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYzI5ZTMyYWItZGU3Yi0z M2M0LTk1NzYtZjNlNjIzYWJiNjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PnIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANb0bjqNY4Yn/bZho6JJXczjTeao/zjwY+ywVADMM7Sde3hSP6OpITya Sg99NgmO96I1xc2lJXiArm4MvLw3gXMkPIMvX9THh9gcgtFJeccf0/DqJv2q4maU jfXGofgxRut7fHUbOXGRzXj7Aq97LQhetLeSLEfPqGscrZV2+Jbj/Dktuhdz/yr8 F+so+pv/e16ZWc6SjMbX6kRBvwabSaUMDI2WbTMytyPnhjidqryeWRN1gfSMNDSH owSFtYKkgJBndZr9TeFhlXyNF0M8utEg76vQk4BSUmRG4pZRELo3mUgCoewIna9R +6xrU5iiQLOeEn9RHmeSo0rQGzw2y7c= -----END CERTIFICATE-----Generated at Fri Mar 14 10:47:28 2025 by rpki-client