$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/30ecdcea-88ec-3289-a7fa-1ac103d2528d.roa File: 30ecdcea-88ec-3289-a7fa-1ac103d2528d.roa (raw, json) Hash identifier: zx2fdeMHIDPl1MGZoK7moU7iR/o8SRh6M/wGHIaC+tU= Subject key identifier: CD:A4:4B:C3:29:7C:A8:53:21:37:6C:5E:B3:E7:DA:97:F9:CD:61:44 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F43285848E59BCF4EFA17B3932EAEE8E0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/30ecdcea-88ec-3289-a7fa-1ac103d2528d.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 16417 IP address blocks: 216.71.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:cf:4e:fa:17:b3:93:2e:ae:e8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=f789feb0-6907-41da-bf69-66fc0f69af0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e2:02:04:6d:29:af:a9:4d:d2:a6:85:62:46: 29:c6:dc:0b:1a:bb:46:d0:9f:c1:39:4e:63:30:d3: 15:aa:fe:0b:c3:d6:ba:19:d4:2c:ef:2e:31:1c:54: 13:64:68:cf:5e:72:9a:b3:f9:bb:b6:ce:dd:71:b1: c1:83:b5:f6:3c:b9:9c:f3:ea:ae:7d:de:1c:24:90: 47:d7:aa:6e:9c:da:18:12:cc:d9:e9:e5:b2:d4:1b: d4:0e:ee:2f:a7:9a:e4:86:5d:2f:19:8e:10:14:61: d6:2a:5d:07:7e:ad:7f:1a:c3:da:26:2d:33:f9:c9: 3e:64:e5:84:99:2e:8a:b7:65:11:f8:08:a2:97:12: 13:8e:95:1d:49:6f:4c:a9:5e:21:5e:4c:9a:ce:d6: f4:6b:23:e4:b5:b5:f7:d1:9b:6e:8f:53:96:8d:a3: 2e:ff:a3:f9:3e:8e:da:ff:fe:0a:fb:ad:16:ad:e1: c1:e2:02:37:f3:1a:8d:5e:b5:fb:55:25:cc:6c:12: 92:4a:af:06:85:79:d4:35:f7:07:ae:4e:92:b0:37: 84:41:c1:42:e5:f3:3c:cc:1b:e7:f6:4e:4e:1d:92: fa:16:37:3e:89:1c:a1:50:ec:19:1f:6b:9e:a5:89: 6a:d6:da:c3:67:06:24:8c:ed:fc:b4:ee:05:54:8f: 6c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A4:4B:C3:29:7C:A8:53:21:37:6C:5E:B3:E7:DA:97:F9:CD:61:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/30ecdcea-88ec-3289-a7fa-1ac103d2528d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:de:d8:e0:0d:e1:a0:e0:69:b0:01:4b:6c:5a:47:a5:c9:4c: c7:25:63:7f:32:65:9c:4e:47:cf:74:ab:2d:e7:82:d4:64:80: ed:51:e0:fc:f6:4a:bc:00:f7:76:d3:5b:27:86:06:25:d4:fc: 9b:f0:4f:c3:0a:2e:be:1b:98:5c:1c:a4:9a:22:2a:0d:0b:31: 48:cc:e8:9e:e6:f6:bf:01:97:cd:59:ea:8b:96:ca:37:0f:d5: d1:0b:c7:a0:14:9b:c9:80:07:29:aa:df:e0:8e:18:db:6a:0c: 01:c3:68:c0:4f:4f:d3:4c:a6:ba:60:0a:71:97:3a:f0:bb:56: 9d:5d:53:10:f3:0f:56:0b:aa:a4:70:42:92:eb:1e:16:60:55: b8:c8:9a:b9:b0:f9:2c:62:c7:f1:ca:ee:fa:35:fe:7e:69:fb: 13:8d:91:79:e6:d2:32:c1:5d:da:0d:04:15:92:dd:f4:d3:08: fe:36:85:16:7f:24:03:0a:2f:23:9e:1c:cf:29:8e:8c:6f:45: f5:f3:d3:bf:21:71:68:04:d9:1d:f8:da:58:e2:10:61:d3:40: f1:d9:b7:1f:4b:f4:d3:51:77:cc:a5:aa:03:25:d9:35:70:92: ea:95:5f:bb:2d:10:53:4e:28:b9:94:c6:10:f4:0b:fb:59:d8: 23:56:0b:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm89O+hezky6u6OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk Zjc4OWZlYjAtNjkwNy00MWRhLWJmNjktNjZmYzBmNjlhZjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueICBG0pr6lN0qaFYkYpxtwLGrtG0J/BOU5j MNMVqv4Lw9a6GdQs7y4xHFQTZGjPXnKas/m7ts7dcbHBg7X2PLmc8+qufd4cJJBH 16punNoYEszZ6eWy1BvUDu4vp5rkhl0vGY4QFGHWKl0Hfq1/GsPaJi0z+ck+ZOWE mS6Kt2UR+AiilxITjpUdSW9MqV4hXkyaztb0ayPktbX30Ztuj1OWjaMu/6P5Po7a //4K+60WreHB4gI38xqNXrX7VSXMbBKSSq8GhXnUNfcHrk6SsDeEQcFC5fM8zBvn 9k5OHZL6Fjc+iRyhUOwZH2uepYlq1trDZwYkjO38tO4FVI9sgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2kS8MpfKhTITdsXrPn2pf5zWFEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzBlY2RjZWEtODhlYy0z Mjg5LWE3ZmEtMWFjMTAzZDI1MjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EePMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/e2OAN4aDgabABS2xaR6XJTMclY38yZZxOR890qy3ngtRkgO1R4Pz2 SrwA93bTWyeGBiXU/JvwT8MKLr4bmFwcpJoiKg0LMUjM6J7m9r8Bl81Z6ouWyjcP 1dELx6AUm8mABymq3+COGNtqDAHDaMBPT9NMprpgCnGXOvC7Vp1dUxDzD1YLqqRw QpLrHhZgVbjImrmw+Sxix/HK7vo1/n5p+xONkXnm0jLBXdoNBBWS3fTTCP42hRZ/ JAMKLyOeHM8pjoxvRfXz078hcWgE2R342ljiEGHTQPHZtx9L9NNRd8ylqgMl2TVw kuqVX7stEFNOKLmUxhD0C/tZ2CNWC04= -----END CERTIFICATE-----Generated at Sat Apr 12 01:43:34 2025 by rpki-client