$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5b2fa63b-f651-3b40-aa14-c8b884ef7ec4.roa File: 5b2fa63b-f651-3b40-aa14-c8b884ef7ec4.roa (raw, json) Hash identifier: rFcKpbuSaZ49mMYj7eGEf6/nZkABa4ICzqHeGKb16QI= Subject key identifier: 00:D5:4D:C7:74:7C:25:10:4E:93:75:CC:D0:B0:4A:9E:BD:60:80:FD Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F43285849552954DFF7D59BC8695D3280 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5b2fa63b-f651-3b40-aa14-c8b884ef7ec4.roa Signing time: Fri 28 Mar 2025 01:00:41 +0000 ROA not before: Fri 28 Mar 2025 01:00:41 +0000 ROA not after: Thu 26 Jun 2025 01:00:41 +0000 asID: 54004 IP address blocks: 216.97.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:55:29:54:df:f7:d5:9b:c8:69:5d:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Mar 28 01:00:41 2025 GMT Not After : Jun 26 01:00:41 2025 GMT Subject: CN=efcdd17e-193b-48b9-b984-31c6157465d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a9:3a:d9:8e:5e:a4:98:80:6c:53:4d:a8:c6: 2d:21:88:d0:b1:b3:30:c6:90:f8:77:0e:02:74:bc: 23:3a:ab:51:57:1d:07:ce:9d:32:77:32:cd:22:00: 73:86:8d:ba:c3:0d:9a:34:08:7e:f3:4d:ce:b3:04: b0:a0:2e:d4:83:4a:7a:e0:6d:5f:d7:e2:ad:1b:c9: f4:89:3a:3c:3d:f9:bb:73:d2:74:e3:be:dd:f1:6b: cf:70:79:05:7e:85:bd:01:63:42:b0:b1:65:2c:d8: 2b:fb:6e:66:c2:7c:f5:bf:78:b0:38:49:cc:ed:77: 99:6e:4e:68:24:9b:86:7e:e6:69:d2:37:ce:24:ff: 6b:ac:03:2b:b2:fd:c5:d9:67:48:d6:48:f6:80:14: f0:84:24:47:8b:92:6c:cc:b9:66:43:c7:71:a2:c5: d6:ef:b0:16:e2:3c:81:06:3b:94:e7:eb:98:f8:b9: 84:ff:31:37:a3:9d:91:b3:97:6f:c6:c7:ab:4d:bd: c7:25:c1:28:d5:dc:02:71:eb:67:31:0f:36:35:50: 25:29:74:fd:dc:2f:3b:5d:62:bd:30:c3:c8:12:b5: 26:8d:3d:46:4f:01:01:18:83:a7:b0:fa:40:49:2c: 66:68:bf:3f:0f:cd:ea:c9:a7:a7:f6:10:89:06:0b: 70:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D5:4D:C7:74:7C:25:10:4E:93:75:CC:D0:B0:4A:9E:BD:60:80:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5b2fa63b-f651-3b40-aa14-c8b884ef7ec4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 216.97.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:bc:7f:e9:f6:6d:de:ae:48:59:dd:20:83:8b:62:94:2b:8d: 0d:a2:ae:14:3c:3a:91:9e:52:90:08:2b:64:2b:b7:19:4f:a8: a2:16:55:bb:b0:7c:49:b1:3a:99:db:97:fb:37:92:6c:3f:5c: 7d:60:a2:aa:b4:3d:0f:a4:68:79:c7:ae:ba:81:d2:74:17:aa: 26:3d:05:d4:9d:7e:93:30:03:19:7f:97:f2:4e:32:3e:23:fb: b1:e8:d5:93:a5:1f:63:bd:c7:a0:f4:f3:1f:ad:2f:41:0b:e0: 88:4c:32:40:63:e9:06:c0:26:86:25:59:e6:00:e0:0f:ca:ca: eb:69:c3:4d:0e:4b:37:63:47:02:b7:51:4b:d8:21:3f:64:f5: fc:a0:e0:01:39:9c:24:8c:e0:e7:da:fd:6f:c2:20:54:d8:83: d3:8f:8e:fd:f7:5d:e9:9f:f8:2b:06:8d:9c:98:b4:a0:2e:7b: 01:37:3a:f1:b8:e1:7d:4f:b6:a3:20:e2:d9:cc:f9:a3:81:8c: 9e:ae:f2:c9:3b:6e:35:0a:13:5b:e9:44:e4:7e:5e:d7:c3:92: 4c:89:a1:14:62:ad:0c:53:de:c5:06:d2:4b:66:ba:c4:a8:4b: a7:5b:d1:e8:92:d5:ca:8a:9e:df:f9:8b:dd:e0:47:a7:bd:3c: 7e:b3:f4:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElVKVTf99WbyGldMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk ZWZjZGQxN2UtMTkzYi00OGI5LWI5ODQtMzFjNjE1NzQ2NWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKk62Y5epJiAbFNNqMYtIYjQsbMwxpD4dw4C dLwjOqtRVx0Hzp0ydzLNIgBzho26ww2aNAh+803OswSwoC7Ug0p64G1f1+KtG8n0 iTo8Pfm7c9J0477d8WvPcHkFfoW9AWNCsLFlLNgr+25mwnz1v3iwOEnM7XeZbk5o JJuGfuZp0jfOJP9rrAMrsv3F2WdI1kj2gBTwhCRHi5JszLlmQ8dxosXW77AW4jyB BjuU5+uY+LmE/zE3o52Rs5dvxserTb3HJcEo1dwCcetnMQ82NVAlKXT93C87XWK9 MMPIErUmjT1GTwEBGIOnsPpASSxmaL8/D83qyaen9hCJBgtwmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADVTcd0fCUQTpN1zNCwSp69YID9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvNWIyZmE2M2ItZjY1MS0z YjQwLWFhMTQtYzhiODg0ZWY3ZWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA28f+n2bd6uSFndIIOLYpQrjQ2irhQ8OpGeUpAIK2QrtxlPqKIWVbuw fEmxOpnbl/s3kmw/XH1goqq0PQ+kaHnHrrqB0nQXqiY9BdSdfpMwAxl/l/JOMj4j +7Ho1ZOlH2O9x6D08x+tL0EL4IhMMkBj6QbAJoYlWeYA4A/Kyutpw00OSzdjRwK3 UUvYIT9k9fyg4AE5nCSM4Ofa/W/CIFTYg9OPjv33Xemf+CsGjZyYtKAuewE3OvG4 4X1PtqMg4tnM+aOBjJ6u8sk7bjUKE1vpROR+XtfDkkyJoRRirQxT3sUG0ktmusSo S6db0eiS1cqKnt/5i93gR6e9PH6z9Cc= -----END CERTIFICATE-----Generated at Sat Apr 5 09:47:37 2025 by rpki-client