$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0639a3a2-3386-30db-8609-255ece4e148f.roa File: 0639a3a2-3386-30db-8609-255ece4e148f.roa (raw, json) Hash identifier: VxkTz5SuXhxkF/4s8zG084MBY1rQmsjYe8wLHNbBh0c= Subject key identifier: 7D:D9:A8:17:87:93:C4:6A:5B:8F:11:82:3D:20:D7:5B:54:90:04:0A Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F432858495EEEEB6216348DD0613F6E80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0639a3a2-3386-30db-8609-255ece4e148f.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 16417 IP address blocks: 216.71.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:eb:62:16:34:8d:d0:61:3f:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=ac9e870d-441f-465f-9a43-ac4f833b71d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3c:12:ca:54:c1:af:83:59:36:b6:a3:27:3a: f3:a3:e3:34:ef:31:93:ad:c1:23:ba:3f:80:02:c3: 7d:78:28:aa:d4:52:64:fc:1f:a6:2a:56:e4:0e:bb: 5a:3f:a4:72:65:ce:05:07:c5:19:67:0c:9f:19:18: 84:1d:a0:ec:6e:79:51:fd:f0:f9:d4:b9:28:8e:7c: 0e:ea:54:67:46:1a:c3:9c:bd:8c:7f:d3:58:99:cc: 44:fb:bf:05:3b:60:1e:41:54:cd:03:9d:c9:4a:cb: 8a:7a:44:01:54:c5:51:0f:5f:b2:d3:88:31:aa:07: b3:4b:4c:ba:c5:3e:1c:62:f7:8b:8f:79:a0:97:8a: 55:b8:5e:9d:57:f7:83:35:44:87:c8:22:70:a6:e3: 8e:c8:37:5a:2f:66:d6:09:ac:98:a5:0f:48:af:28: 8b:a8:33:62:8e:28:01:ad:28:56:92:cc:93:b0:fe: cd:52:ba:94:17:5a:8e:fd:e3:cf:2f:89:d6:fc:59: ec:5f:a7:1d:03:cc:0c:54:2e:2a:43:55:66:8a:c9: 3c:cc:17:ac:78:96:80:18:da:9b:99:e9:ba:5e:40: 35:65:ef:4d:62:d3:de:f9:ec:d8:0b:06:10:71:86: 37:f7:80:69:d3:c2:eb:24:bb:be:f4:aa:d3:7f:7b: f4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D9:A8:17:87:93:C4:6A:5B:8F:11:82:3D:20:D7:5B:54:90:04:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0639a3a2-3386-30db-8609-255ece4e148f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:e7:1d:f1:85:0f:7d:89:68:48:8f:fe:53:2f:99:25:3b:2d: 93:48:19:8a:bb:35:af:e9:ac:23:13:6b:17:94:63:d9:ef:54: 4c:30:3d:77:b2:b1:2e:7b:17:b6:cd:b6:78:2f:11:66:a2:95: e2:44:ee:da:e1:a5:49:ca:6c:e9:22:9f:2a:7c:20:39:56:b0: 89:6a:f0:41:8d:ce:df:67:d7:37:ff:7d:8d:b8:23:c3:22:e1: e0:36:a1:4e:98:72:9e:e2:da:ef:cb:43:50:53:5b:95:03:64: 9d:a4:b3:b6:2a:fc:d8:23:d8:d6:36:45:03:b8:f6:93:fb:64: 94:7e:bc:6f:33:6e:09:b9:d1:e7:44:b8:0e:c2:50:06:86:93: 5c:f4:cf:69:3e:de:d0:2f:19:65:c1:be:0e:a3:0c:a7:06:f7: 0d:39:03:89:4f:ba:d7:b9:87:b1:c9:44:7f:6f:b7:46:af:d8: 2d:07:2c:2f:c5:53:e7:79:00:99:83:60:d5:8a:55:d3:b6:aa: b9:f2:79:97:e9:0e:88:fa:c9:02:cc:3e:da:a7:2a:ac:a3:6c: 07:0b:2d:00:eb:9c:0d:6c:0f:49:04:67:38:14:a0:1e:43:90: 1f:f2:db:2f:4e:64:f8:9d:26:71:21:1e:67:6d:a8:ec:04:e5: 5a:1d:25:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7utiFjSN0GE/boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk YWM5ZTg3MGQtNDQxZi00NjVmLTlhNDMtYWM0ZjgzM2I3MWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjwSylTBr4NZNrajJzrzo+M07zGTrcEjuj+A AsN9eCiq1FJk/B+mKlbkDrtaP6RyZc4FB8UZZwyfGRiEHaDsbnlR/fD51LkojnwO 6lRnRhrDnL2Mf9NYmcxE+78FO2AeQVTNA53JSsuKekQBVMVRD1+y04gxqgezS0y6 xT4cYveLj3mgl4pVuF6dV/eDNUSHyCJwpuOOyDdaL2bWCayYpQ9IryiLqDNijigB rShWksyTsP7NUrqUF1qO/ePPL4nW/FnsX6cdA8wMVC4qQ1Vmisk8zBeseJaAGNqb mem6XkA1Ze9NYtPe+ezYCwYQcYY394Bp08LrJLu+9KrTf3v0hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3ZqBeHk8RqW48Rgj0g11tUkAQKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMDYzOWEzYTItMzM4Ni0z MGRiLTg2MDktMjU1ZWNlNGUxNDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2EeCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvnHfGFD32JaEiP/lMvmSU7LZNIGYq7Na/prCMTaxeUY9nvVEwwPXey sS57F7bNtngvEWaileJE7trhpUnKbOkinyp8IDlWsIlq8EGNzt9n1zf/fY24I8Mi 4eA2oU6Ycp7i2u/LQ1BTW5UDZJ2ks7Yq/Ngj2NY2RQO49pP7ZJR+vG8zbgm50edE uA7CUAaGk1z0z2k+3tAvGWXBvg6jDKcG9w05A4lPute5h7HJRH9vt0av2C0HLC/F U+d5AJmDYNWKVdO2qrnyeZfpDoj6yQLMPtqnKqyjbAcLLQDrnA1sD0kEZzgUoB5D kB/y2y9OZPidJnEhHmdtqOwE5VodJXY= -----END CERTIFICATE-----Generated at Fri Apr 11 23:36:48 2025 by rpki-client