$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cb578ea6-9895-3de3-8e51-86848fbdb755.roa File: cb578ea6-9895-3de3-8e51-86848fbdb755.roa (raw, json) Hash identifier: SfzOYlHuwy2FpHmUGO1fxkGcmojHpPyMPQeV+JaOoTs= Subject key identifier: 8A:0B:63:C0:E9:4E:AC:24:AD:09:67:9F:82:84:2A:8C:51:72:8F:75 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584A0C056819D991B9175AAC3B80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cb578ea6-9895-3de3-8e51-86848fbdb755.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 13576 IP address blocks: 216.249.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:68:19:d9:91:b9:17:5a:ac:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=533ecdde-6fae-4bab-a4a9-0d5030a86193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ee:77:1b:41:a6:91:4b:55:69:77:5d:e6:71: eb:47:e6:c3:42:90:f9:5d:49:23:e9:ef:fc:fc:64: 8e:ec:5d:27:82:05:4f:4e:1f:86:a0:be:eb:ff:84: c5:b8:06:95:36:7c:ef:76:fa:16:8b:d8:5e:86:19: 55:0e:05:68:93:17:06:b7:fd:47:0a:ab:c6:31:05: 80:9f:c8:fb:50:2c:b9:0d:9a:fe:b2:28:a5:6b:7c: b5:d6:37:a2:64:4a:1a:27:49:06:d7:e9:ff:30:95: 9f:78:00:1e:b2:04:bf:c4:00:42:e0:14:86:37:e4: 46:e6:24:d9:ab:b6:bb:66:89:66:69:8e:27:d2:b8: ee:fc:63:27:d1:7f:9a:b4:29:91:cb:b3:b5:f1:ae: 6d:5c:86:c4:8d:4d:21:be:ca:05:57:b9:97:a1:f1: f2:28:8d:9c:f0:8a:1f:85:28:36:b5:0f:23:e3:5f: af:a5:65:93:c2:d9:0e:7e:00:ae:32:8a:97:04:96: 2d:eb:26:cb:8d:f3:66:fe:f0:bc:e9:94:df:59:a4: 8b:7c:e7:e8:88:3a:0d:a1:c9:94:da:b9:6a:67:37: 71:94:e0:58:7c:7d:55:ad:a4:26:2a:0b:33:48:21: a1:83:2e:39:04:12:af:85:2b:73:ee:7b:90:d8:8e: e9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0B:63:C0:E9:4E:AC:24:AD:09:67:9F:82:84:2A:8C:51:72:8F:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cb578ea6-9895-3de3-8e51-86848fbdb755.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:5f:01:a8:63:12:6c:2a:6f:52:0a:d1:07:fb:67:21:a5:a6: 13:be:bb:2d:5d:ce:39:8a:05:4c:84:eb:38:9c:e9:45:b6:af: 6f:ce:58:28:9d:9a:9b:a6:85:5c:cc:d5:52:9c:8f:0c:21:f9: 8e:51:f8:a3:b1:a5:f7:1c:80:27:a1:99:72:0e:50:2f:91:58: 00:c7:a9:3f:48:49:d7:5b:5c:39:e0:96:94:b9:75:56:65:37: 04:dc:81:28:4e:1f:d8:c6:16:5a:f6:ab:a2:ad:bf:d3:e5:50: 48:8d:03:ef:8e:67:b7:9e:b6:bd:75:69:10:e9:1f:14:92:e0: f0:6b:44:4e:bc:e2:0e:bd:ce:e9:3b:2c:16:a4:fa:0f:35:a8: 64:89:0c:f3:fa:1a:a6:8b:f7:af:17:58:f9:d6:45:3b:64:54: 07:65:8b:94:4e:5a:9e:60:15:2f:8d:38:46:20:bb:a9:ca:b3: dc:90:e1:f4:5f:d7:c5:3f:e1:d5:6b:a8:00:05:16:85:6b:a1: bf:82:ad:1c:34:09:04:92:b0:d7:0f:b3:52:0b:5d:d0:f9:a3: d1:33:7e:b9:06:03:91:53:bf:06:09:1e:d2:87:1f:5e:17:2d: 26:3b:3c:d6:9d:5e:5a:85:91:4f:11:29:15:90:d7:5d:a6:24: 6c:64:db:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBWgZ2ZG5F1qsO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NTMzZWNkZGUtNmZhZS00YmFiLWE0YTktMGQ1MDMwYTg2MTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO53G0GmkUtVaXdd5nHrR+bDQpD5XUkj6e/8 /GSO7F0nggVPTh+GoL7r/4TFuAaVNnzvdvoWi9hehhlVDgVokxcGt/1HCqvGMQWA n8j7UCy5DZr+siila3y11jeiZEoaJ0kG1+n/MJWfeAAesgS/xABC4BSGN+RG5iTZ q7a7ZolmaY4n0rju/GMn0X+atCmRy7O18a5tXIbEjU0hvsoFV7mXofHyKI2c8Iof hSg2tQ8j41+vpWWTwtkOfgCuMoqXBJYt6ybLjfNm/vC86ZTfWaSLfOfoiDoNocmU 2rlqZzdxlOBYfH1VraQmKgszSCGhgy45BBKvhStz7nuQ2I7pcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoLY8DpTqwkrQlnn4KEKoxRco91MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvY2I1NzhlYTYtOTg5NS0z ZGUzLThlNTEtODY4NDhmYmRiNzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PnFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJfAahjEmwqb1IK0Qf7ZyGlphO+uy1dzjmKBUyE6zic6UW2r2/OWCid mpumhVzM1VKcjwwh+Y5R+KOxpfccgCehmXIOUC+RWADHqT9ISddbXDnglpS5dVZl NwTcgShOH9jGFlr2q6Ktv9PlUEiNA++OZ7eetr11aRDpHxSS4PBrRE684g69zuk7 LBak+g81qGSJDPP6GqaL968XWPnWRTtkVAdli5ROWp5gFS+NOEYgu6nKs9yQ4fRf 18U/4dVrqAAFFoVrob+CrRw0CQSSsNcPs1ILXdD5o9EzfrkGA5FTvwYJHtKHH14X LSY7PNadXlqFkU8RKRWQ112mJGxk26o= -----END CERTIFICATE-----Generated at Sun Jun 8 08:46:27 2025 by rpki-client