$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/31cbc09a-38d3-37a2-8bce-194c49972767.roa File: 31cbc09a-38d3-37a2-8bce-194c49972767.roa (raw, json) Hash identifier: xHMlX4p5j2aDioXk1Jyg1bpOMGzBz/z+jD2UGTOBah0= Subject key identifier: 1C:79:0D:E9:53:A3:04:96:3C:E4:D4:9D:EB:FA:0B:F9:F1:B9:76:31 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858490F7BFE210BBC842A74EFB940 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/31cbc09a-38d3-37a2-8bce-194c49972767.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 1239 IP address blocks: 216.227.132.0/23 maxlen: 23 216.227.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7b:fe:21:0b:bc:84:2a:74:ef:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=bcbba682-513f-453a-b4a2-8ba2ed53b333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a5:a2:2b:83:d1:4f:1e:ae:6e:86:22:f5:7e: a6:a5:5a:24:34:6a:af:54:40:c6:6d:0b:b6:7c:ed: 55:18:71:fa:1a:32:51:9c:ac:95:79:42:3f:7f:d2: 15:d6:56:e3:45:26:e1:1d:b2:1c:e9:9d:b4:b8:6f: 61:48:d2:68:0f:ee:4f:ea:8a:a9:95:85:45:2d:a2: 7a:1e:dd:d4:27:0d:40:bb:73:22:13:a7:89:af:79: 2f:f2:b7:d5:68:82:eb:32:41:8d:6a:b7:35:f0:f5: 2e:9a:98:56:73:a3:02:ac:7e:59:aa:7a:2b:7d:bf: 7f:a9:34:34:56:ac:5e:ba:8a:3c:47:1c:3e:00:5e: 15:65:57:95:06:55:03:92:9c:71:04:2a:86:52:69: 49:bc:be:6d:1c:5b:b8:ea:a8:15:8a:d1:0c:a6:2c: e0:5f:3f:b9:48:0c:c1:d4:45:b2:d0:48:38:f4:1f: e6:80:c2:f0:05:0b:95:a3:55:45:a4:82:6d:33:a9: d5:bf:e7:dd:a3:45:6c:48:3b:3b:30:7b:14:0a:93: 8e:ff:3f:c4:1b:4d:3d:22:c8:40:78:d8:f3:90:ad: ed:69:b4:73:ac:d9:a6:58:47:16:16:04:85:50:7a: 41:d6:14:85:d8:05:55:be:ec:fd:9f:b3:24:02:b4: c5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:79:0D:E9:53:A3:04:96:3C:E4:D4:9D:EB:FA:0B:F9:F1:B9:76:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/31cbc09a-38d3-37a2-8bce-194c49972767.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 216.227.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:d0:dd:1a:11:14:71:25:17:ff:81:f2:62:39:1b:5e:52:4b: e1:80:50:21:91:3b:2f:de:84:72:71:2d:d5:d9:9d:f7:3e:cd: a3:66:ec:05:37:02:e9:97:56:2d:36:35:66:e7:13:57:bf:49: bc:ad:31:1b:b5:20:3c:9d:93:6d:25:a7:28:03:2a:25:20:8f: ee:ec:3d:91:60:87:00:2a:5f:32:b3:97:41:da:dc:eb:cf:fa: aa:42:09:ac:d7:bf:b2:1a:75:a2:a7:64:99:28:e7:4b:3a:af: 03:bb:47:4f:3f:f1:5f:c3:25:e9:bf:45:0c:c3:91:02:a0:6a: 8b:a1:89:93:c5:37:84:ec:c4:57:5a:0b:ad:8e:7c:d7:ef:45: ac:9f:a0:75:7e:0a:ab:63:ac:62:31:d8:99:bc:85:ee:f8:d1: b1:9f:c8:81:12:b8:d9:de:47:51:4a:72:78:27:64:53:5a:ce: 9c:d7:0a:0b:b3:6a:a2:75:4d:11:74:8e:b6:34:39:13:76:37: 09:a2:6c:20:17:ff:0f:76:8c:b5:3d:3a:41:8a:19:bb:bb:c9: f3:79:44:d2:99:cc:bc:e8:55:90:d5:14:42:f9:4c:ae:2f:c3: d9:e6:e9:7a:96:32:6e:69:9b:3e:65:3a:90:5b:9e:ad:0d:83: ff:36:37:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPe/4hC7yEKnTvuUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk YmNiYmE2ODItNTEzZi00NTNhLWI0YTItOGJhMmVkNTNiMzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKWiK4PRTx6uboYi9X6mpVokNGqvVEDGbQu2 fO1VGHH6GjJRnKyVeUI/f9IV1lbjRSbhHbIc6Z20uG9hSNJoD+5P6oqplYVFLaJ6 Ht3UJw1Au3MiE6eJr3kv8rfVaILrMkGNarc18PUumphWc6MCrH5Zqnorfb9/qTQ0 Vqxeuoo8Rxw+AF4VZVeVBlUDkpxxBCqGUmlJvL5tHFu46qgVitEMpizgXz+5SAzB 1EWy0Eg49B/mgMLwBQuVo1VFpIJtM6nVv+fdo0VsSDs7MHsUCpOO/z/EG009IshA eNjzkK3tabRzrNmmWEcWFgSFUHpB1hSF2AVVvuz9n7MkArTFlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBx5DelTowSWPOTUnev6C/nxuXYxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMzFjYmMwOWEtMzhkMy0z N2EyLThiY2UtMTk0YzQ5OTcyNzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2OOEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM7Q3RoRFHElF/+B8mI5G15SS+GAUCGROy/ehHJxLdXZnfc+zaNm7AU3 AumXVi02NWbnE1e/SbytMRu1IDydk20lpygDKiUgj+7sPZFghwAqXzKzl0Ha3OvP +qpCCazXv7IadaKnZJko50s6rwO7R08/8V/DJem/RQzDkQKgaouhiZPFN4TsxFda C62OfNfvRayfoHV+CqtjrGIx2Jm8he740bGfyIESuNneR1FKcngnZFNazpzXCguz aqJ1TRF0jrY0ORN2NwmibCAX/w92jLU9OkGKGbu7yfN5RNKZzLzoVZDVFEL5TK4v w9nm6XqWMm5pmz5lOpBbnq0Ng/82N1w= -----END CERTIFICATE-----Generated at Sat Apr 5 08:47:29 2025 by rpki-client