$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3bbf85d4-20cf-352e-98e8-9d7926dd7334.roa File: 3bbf85d4-20cf-352e-98e8-9d7926dd7334.roa (raw, json) Hash identifier: 11GwyiD3w2Mj5+Ou16vwJ6HtGHkwx1sd1jIUG9HZcIY= Subject key identifier: 01:27:60:D4:48:96:18:FC:BC:8A:F7:21:95:02:EA:89:DE:B0:F5:79 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584917DC33E0CA892222932C7F20 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3bbf85d4-20cf-352e-98e8-9d7926dd7334.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 30238 IP address blocks: 216.71.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:33:e0:ca:89:22:22:93:2c:7f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=36f7fedd-62b6-4c96-8dfd-7f05b5827920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b9:61:e2:cb:ca:27:b1:ee:28:88:a3:4d:31: bb:b7:c0:41:4e:d7:c7:7e:70:59:81:06:5a:a6:95: db:7e:7b:e2:57:eb:c1:90:44:0b:d8:a2:ee:ba:72: 09:47:b6:06:4b:c6:62:13:6b:f1:e8:3d:0e:3a:5c: 6f:27:58:35:73:c8:58:1c:20:46:35:c6:8c:fb:a9: 1c:63:d0:12:23:03:65:91:b0:89:2a:ce:0b:13:3e: 9a:25:09:8b:d4:52:8e:79:c4:7f:8b:e4:96:65:f0: 0a:cd:2f:0a:ca:55:86:0f:14:de:be:35:61:a7:d4: cf:43:2c:97:30:9a:7b:59:d0:d9:58:da:76:af:5f: f1:3c:b6:08:e1:83:3e:59:f6:68:d8:9f:97:ae:9b: 66:18:81:5b:fe:7b:0a:c3:40:be:dc:04:fe:bf:0d: 31:cc:e2:04:f2:9f:df:32:97:5c:70:b9:33:e9:1c: b9:b7:3d:db:63:12:60:f9:0c:3e:0a:b4:6b:f4:d0: 52:42:4a:90:d2:5b:3f:21:6d:36:e4:4b:8a:38:47: 90:f6:6f:92:82:cd:4e:46:8c:b6:68:25:3c:17:2a: bb:54:9a:35:fb:24:03:13:76:0d:5a:f1:84:16:07: 16:f9:eb:9b:42:4e:e4:4d:ab:56:41:60:8d:7f:be: d4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:27:60:D4:48:96:18:FC:BC:8A:F7:21:95:02:EA:89:DE:B0:F5:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3bbf85d4-20cf-352e-98e8-9d7926dd7334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:af:c2:56:7d:01:84:24:d0:53:9a:1f:25:9c:02:80:c4:73: b6:d4:6a:c5:90:e8:d9:33:f2:55:fc:5e:68:5e:86:72:f9:b0: 46:99:b2:0a:39:88:42:a5:5d:c0:92:6c:0f:94:79:29:80:fb: 21:51:24:5a:88:13:4d:b6:85:56:30:c9:87:86:62:42:5c:0e: af:1e:54:41:aa:e9:cf:dc:9e:c8:d6:ef:62:58:7f:e4:5a:03: c5:d5:77:8d:82:04:77:a1:d2:c1:3b:5f:3f:be:55:a4:4c:b5: 32:83:b1:f9:14:ce:e9:53:62:ca:8b:ff:5a:5a:7f:b2:5a:65: 95:f8:c4:1c:e9:d9:45:58:2b:8d:8a:8a:4f:1e:db:36:f2:09: 7c:7c:3a:fb:7b:49:3b:2f:c6:a7:16:0a:38:2a:05:45:f5:d6: 6d:00:91:ec:a5:8d:cb:a6:98:e9:5d:3b:9e:27:bf:b5:42:9c: ff:3b:6d:b5:ab:5e:55:e1:4e:95:51:33:cc:d7:85:29:f2:1a: b7:98:02:0e:18:38:46:be:e9:98:c0:41:de:32:38:e6:be:a2: 61:4b:69:f3:ff:3a:44:13:a9:77:a8:d8:cd:80:63:f2:f2:9d: 3c:40:a2:9e:20:25:19:0b:c7:bd:27:04:7f:b5:03:58:95:78: 07:3f:41:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3DPgyokiIpMsfyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk MzZmN2ZlZGQtNjJiNi00Yzk2LThkZmQtN2YwNWI1ODI3OTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrlh4svKJ7HuKIijTTG7t8BBTtfHfnBZgQZa ppXbfnviV+vBkEQL2KLuunIJR7YGS8ZiE2vx6D0OOlxvJ1g1c8hYHCBGNcaM+6kc Y9ASIwNlkbCJKs4LEz6aJQmL1FKOecR/i+SWZfAKzS8KylWGDxTevjVhp9TPQyyX MJp7WdDZWNp2r1/xPLYI4YM+WfZo2J+XrptmGIFb/nsKw0C+3AT+vw0xzOIE8p/f MpdccLkz6Ry5tz3bYxJg+Qw+CrRr9NBSQkqQ0ls/IW025EuKOEeQ9m+Sgs1ORoy2 aCU8Fyq7VJo1+yQDE3YNWvGEFgcW+eubQk7kTatWQWCNf77UbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEnYNRIlhj8vIr3IZUC6onesPV5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvM2JiZjg1ZDQtMjBjZi0z NTJlLTk4ZTgtOWQ3OTI2ZGQ3MzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EefMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSvwlZ9AYQk0FOaHyWcAoDEc7bUasWQ6Nkz8lX8XmhehnL5sEaZsgo5 iEKlXcCSbA+UeSmA+yFRJFqIE022hVYwyYeGYkJcDq8eVEGq6c/cnsjW72JYf+Ra A8XVd42CBHeh0sE7Xz++VaRMtTKDsfkUzulTYsqL/1paf7JaZZX4xBzp2UVYK42K ik8e2zbyCXx8Ovt7STsvxqcWCjgqBUX11m0AkeyljcummOldO54nv7VCnP87bbWr XlXhTpVRM8zXhSnyGreYAg4YOEa+6ZjAQd4yOOa+omFLafP/OkQTqXeo2M2AY/Ly nTxAop4gJRkLx70nBH+1A1iVeAc/QSM= -----END CERTIFICATE-----Generated at Fri Apr 11 21:34:57 2025 by rpki-client