$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ce97c74-b9d2-32ef-83fc-60176c57c547.roa File: 3ce97c74-b9d2-32ef-83fc-60176c57c547.roa (raw, json) Hash identifier: 65q/o0B8wPNeLRAfmawktst2cSjGQyoDvCrmcPgrkcY= Subject key identifier: F4:BF:FE:BA:20:FD:CF:FA:9F:66:56:11:0B:78:57:7B:09:10:45:97 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C581886E17646AB2BB4A9900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ce97c74-b9d2-32ef-83fc-60176c57c547.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 216.239.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:88:6e:17:64:6a:b2:bb:4a:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=7d249144-2c41-48b6-b0aa-3e3aee697345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ae:7e:59:7c:96:84:6a:2b:f3:10:b9:f3:8a: bd:84:b4:63:af:9a:57:08:46:69:f1:cc:11:2b:dc: 29:68:c3:51:0d:bd:84:3b:8e:ec:90:6f:b5:83:d0: 71:49:aa:e8:c6:8a:a9:86:0f:cb:41:30:6d:cc:3d: 97:95:c8:15:dc:68:03:fd:c4:4c:52:b1:0a:d0:a2: 66:38:5a:d9:a7:cb:15:3e:de:4d:a8:63:34:ef:01: 41:bc:de:5b:37:4e:77:cf:1b:8f:a8:67:4b:52:61: 97:61:ca:cf:6c:76:60:85:03:50:d6:9f:89:31:f0: f9:c6:c8:da:7e:4c:f4:2a:67:7f:26:03:f2:3e:e0: de:c1:61:34:c5:35:63:83:1e:96:97:d1:bd:f6:f1: 06:f4:13:cc:da:ee:b7:4a:e6:ee:b4:2e:89:02:c4: ef:70:3c:3c:c3:7f:f7:89:63:64:e7:ac:d3:aa:a5: 43:7f:33:3f:2e:e4:d4:a5:db:80:e5:55:4c:d2:b7: 58:30:84:54:c4:50:02:e5:29:ca:69:8c:d8:59:3f: 02:c2:5d:6d:4f:24:ca:2d:a6:f9:2a:a2:13:7f:6b: bf:54:63:f6:03:76:a9:e1:97:de:68:c8:95:c4:25: 8c:d3:d7:3b:dc:c0:7c:d1:29:8e:29:8e:fd:73:0f: 83:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BF:FE:BA:20:FD:CF:FA:9F:66:56:11:0B:78:57:7B:09:10:45:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ce97c74-b9d2-32ef-83fc-60176c57c547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.239.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:51:b5:e9:29:b1:ea:58:9d:d0:e8:fa:40:34:36:44:65:70: e0:5e:23:af:31:57:f8:4a:f1:e0:91:73:b1:c2:31:75:bc:91: 63:65:3e:9b:1a:2c:4b:6a:9e:71:ba:3a:95:06:d9:f8:5a:a1: b5:e5:73:28:d7:bc:97:eb:ed:fa:d9:26:31:b1:2a:2d:59:1a: 6b:9f:69:87:78:eb:ff:23:35:83:cb:d2:86:d8:87:34:64:23: 87:98:8f:79:8e:98:73:e9:2f:91:7c:71:99:00:b7:c6:1e:42: cc:fc:7b:d3:3e:4a:9e:75:ec:9c:08:7a:99:04:ae:61:05:b1: 64:73:62:e7:9c:f7:05:98:9f:d2:21:76:30:ff:49:6e:bf:87: 62:26:96:b0:dc:fb:9a:29:cf:35:a7:17:9a:76:f5:d0:d0:59: 94:27:1a:96:66:6b:ed:bd:81:61:1c:14:7e:3b:29:70:f5:8a: 9a:f1:72:84:4a:b7:c4:54:e1:7c:7b:fb:82:cc:a1:8a:c2:bf: a4:91:7b:02:2e:4b:dd:94:12:77:1a:34:e5:b1:4a:c8:73:41: dd:0c:f3:82:e0:62:04:7e:09:95:f3:2f:49:7e:2d:be:05:c6: 5a:84:58:b8:87:af:03:8c:ad:a7:1c:af:f2:1b:70:fc:34:6d: c6:d5:f0:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYhuF2RqsrtKmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk N2QyNDkxNDQtMmM0MS00OGI2LWIwYWEtM2UzYWVlNjk3MzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2K5+WXyWhGor8xC584q9hLRjr5pXCEZp8cwR K9wpaMNRDb2EO47skG+1g9BxSaroxoqphg/LQTBtzD2XlcgV3GgD/cRMUrEK0KJm OFrZp8sVPt5NqGM07wFBvN5bN053zxuPqGdLUmGXYcrPbHZghQNQ1p+JMfD5xsja fkz0Kmd/JgPyPuDewWE0xTVjgx6Wl9G99vEG9BPM2u63SubutC6JAsTvcDw8w3/3 iWNk56zTqqVDfzM/LuTUpduA5VVM0rdYMIRUxFAC5SnKaYzYWT8Cwl1tTyTKLab5 KqITf2u/VGP2A3ap4ZfeaMiVxCWM09c73MB80SmOKY79cw+D4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPS//rog/c/6n2ZWEQt4V3sJEEWXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2NlOTdjNzQtYjlkMi0z MmVmLTgzZmMtNjAxNzZjNTdjNTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O8jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNRtekpsepYndDo+kA0NkRlcOBeI68xV/hK8eCRc7HCMXW8kWNlPpsa LEtqnnG6OpUG2fhaobXlcyjXvJfr7frZJjGxKi1ZGmufaYd46/8jNYPL0obYhzRk I4eYj3mOmHPpL5F8cZkAt8YeQsz8e9M+Sp517JwIepkErmEFsWRzYuec9wWYn9Ih djD/SW6/h2ImlrDc+5opzzWnF5p29dDQWZQnGpZma+29gWEcFH47KXD1iprxcoRK t8RU4Xx7+4LMoYrCv6SRewIuS92UEncaNOWxSshzQd0M84LgYgR+CZXzL0l+Lb4F xlqEWLiHrwOMraccr/IbcPw0bcbV8Ho= -----END CERTIFICATE-----Generated at Fri Mar 14 11:05:37 2025 by rpki-client