$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fc04f597-48fd-3668-9e04-24f3a053b7e3.roa File: fc04f597-48fd-3668-9e04-24f3a053b7e3.roa (raw, json) Hash identifier: 9w83x+qy88LX9j3HiCfJexxYCelsF8tYGYsp0Wc9vnk= Subject key identifier: 76:99:3C:34:E4:10:3B:59:D7:57:2A:8E:71:D0:EC:91:10:84:56:70 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58175ECA592E114F03F5E60 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fc04f597-48fd-3668-9e04-24f3a053b7e3.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 216.239.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:75:ec:a5:92:e1:14:f0:3f:5e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=21712d3a-222e-4696-a9da-829622f718f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:87:fc:59:c6:7d:dc:d4:d3:80:3a:99:07:39: c1:e1:31:d4:09:93:6c:c8:14:b9:89:5a:5c:f0:cb: ce:16:49:a4:16:3e:42:43:0d:13:93:b1:dc:cc:fb: 8c:fc:c7:2b:04:1d:14:3e:51:f8:2f:e5:b5:65:fb: cd:c0:25:7a:0c:a0:35:38:37:32:a9:f2:4a:12:bc: 99:5f:2e:6b:48:ed:2d:6a:6b:b5:97:a7:4d:10:57: 8e:53:e4:33:a9:00:58:38:0a:68:0c:af:bc:24:96: 52:0d:7e:bd:79:a9:85:71:45:2d:04:11:92:3d:21: e6:20:7b:30:26:cc:e6:bc:dd:88:e5:1e:9d:93:0a: 36:68:f7:47:22:0e:c5:c3:a9:12:12:58:a9:38:e0: ba:b8:26:e4:61:90:e3:d1:29:67:52:a6:2c:82:03: 38:d3:69:b8:22:33:d2:a5:f2:83:79:b2:74:66:39: d1:cd:26:53:10:d6:18:e9:c1:04:4a:e9:d4:a9:ab: e8:ab:28:ed:91:d3:f0:0c:d7:e2:91:02:e3:f1:93: 2e:17:97:c0:20:d1:62:2e:03:88:76:7a:79:33:4a: 1e:6e:fa:cc:cf:03:dd:86:9b:f9:75:7d:41:39:1a: 2f:b2:91:16:c5:9a:b6:3e:dd:77:f1:92:c2:34:32: 6f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:99:3C:34:E4:10:3B:59:D7:57:2A:8E:71:D0:EC:91:10:84:56:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fc04f597-48fd-3668-9e04-24f3a053b7e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.239.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:b5:cb:7a:4e:08:8e:de:3f:25:6e:b7:6e:46:ae:b2:a5:04: c8:f6:05:cb:cc:89:31:ac:68:34:99:16:95:e0:c6:10:ee:aa: bc:63:8c:3c:3e:7b:23:b9:17:c4:13:31:94:4c:76:f1:3a:99: f0:f3:72:d1:b1:dd:69:b0:e7:cc:69:e5:2a:bb:c4:dd:75:80: d6:01:61:42:e7:41:88:ea:75:1b:e7:18:fb:53:bf:58:5a:51: eb:32:0f:90:16:e1:4b:0d:8f:ed:e1:85:4c:71:fa:b7:e0:72: be:4f:4c:17:be:44:be:ac:1f:f7:0a:4c:11:db:8a:d0:cb:f4: 7c:37:77:60:4d:7c:97:a7:91:22:81:d4:5c:18:2e:d7:ea:59: 33:0e:13:7c:5b:62:cf:cc:3f:5d:9c:d0:05:3b:6d:3f:aa:62: 45:e5:6c:67:82:eb:b6:d5:b4:ef:4a:30:b0:03:46:64:43:3d: 32:9e:62:1f:a5:2c:e7:f4:91:01:32:c4:8b:57:a9:90:ca:79: 54:fa:8a:b5:f9:b5:19:5c:77:fb:de:bb:0d:b2:9d:81:4f:c1: 49:93:74:87:fc:27:ad:fc:a9:22:0b:53:eb:a5:aa:c4:b2:06: 04:48:b8:8b:33:c3:5c:06:63:62:77:01:f8:d1:41:78:28:82: 2b:df:26:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXXspZLhFPA/XmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MjE3MTJkM2EtMjIyZS00Njk2LWE5ZGEtODI5NjIyZjcxOGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIf8WcZ93NTTgDqZBznB4THUCZNsyBS5iVpc 8MvOFkmkFj5CQw0Tk7HczPuM/McrBB0UPlH4L+W1ZfvNwCV6DKA1ODcyqfJKEryZ Xy5rSO0tamu1l6dNEFeOU+QzqQBYOApoDK+8JJZSDX69eamFcUUtBBGSPSHmIHsw JszmvN2I5R6dkwo2aPdHIg7Fw6kSElipOOC6uCbkYZDj0SlnUqYsggM402m4IjPS pfKDebJ0ZjnRzSZTENYY6cEESunUqavoqyjtkdPwDNfikQLj8ZMuF5fAINFiLgOI dnp5M0oebvrMzwPdhpv5dX1BORovspEWxZq2Pt138ZLCNDJvKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaZPDTkEDtZ11cqjnHQ7JEQhFZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmMwNGY1OTctNDhmZC0z NjY4LTllMDQtMjRmM2EwNTNiN2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O8kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGq1y3pOCI7ePyVut25GrrKlBMj2BcvMiTGsaDSZFpXgxhDuqrxjjDw+ eyO5F8QTMZRMdvE6mfDzctGx3Wmw58xp5Sq7xN11gNYBYULnQYjqdRvnGPtTv1ha UesyD5AW4UsNj+3hhUxx+rfgcr5PTBe+RL6sH/cKTBHbitDL9Hw3d2BNfJenkSKB 1FwYLtfqWTMOE3xbYs/MP12c0AU7bT+qYkXlbGeC67bVtO9KMLADRmRDPTKeYh+l LOf0kQEyxItXqZDKeVT6irX5tRlcd/veuw2ynYFPwUmTdIf8J638qSILU+ulqsSy BgRIuIszw1wGY2J3AfjRQXgogivfJnw= -----END CERTIFICATE-----Generated at Fri Apr 4 08:40:38 2025 by rpki-client