$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3c318e52-80c2-3c11-897f-f6c9f4869930.roa File: 3c318e52-80c2-3c11-897f-f6c9f4869930.roa (raw, json) Hash identifier: sVaronnY7j3CGF7QUm+zLFLjKRjlYNKrY4/8oUAqHsU= Subject key identifier: 66:36:8E:83:76:B7:E1:C2:D2:E7:E2:6C:73:24:06:22:87:0C:93:78 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858492E13B10958F24F7B10109DC0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3c318e52-80c2-3c11-897f-f6c9f4869930.roa Signing time: Fri 14 Mar 2025 01:00:39 +0000 ROA not before: Fri 14 Mar 2025 01:00:39 +0000 ROA not after: Thu 12 Jun 2025 01:00:39 +0000 asID: 30058 IP address blocks: 216.227.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2e:13:b1:09:58:f2:4f:7b:10:10:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Mar 14 01:00:39 2025 GMT Not After : Jun 12 01:00:39 2025 GMT Subject: CN=cc3be075-043d-41d4-a06c-2b8bbc3fa67a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:05:d9:09:15:c1:5a:18:1e:15:fa:70:b5:77: 62:15:20:d6:b0:a6:cb:ef:5d:5b:83:52:a1:31:a5: 3d:84:0d:9c:f8:b9:bc:98:be:a6:f2:8b:10:c4:2f: 49:78:a9:6a:99:7a:3f:f4:94:a6:a7:5d:f9:77:76: ff:55:c7:d9:d3:45:25:df:58:4f:b2:f5:f3:f7:ac: 28:18:27:18:4d:6f:18:23:37:d5:e7:0f:aa:98:d1: fa:63:fa:f0:e8:0e:52:59:e6:81:ac:76:a9:de:c3: dd:bf:e0:be:43:45:64:21:ab:8c:67:36:fd:4f:c6: f6:17:e8:28:42:53:7f:9b:d7:e8:3f:7f:47:ea:6a: a5:40:82:ca:52:70:73:04:ea:97:3b:b0:9f:34:f0: 6f:f7:fd:8f:c1:6c:02:7d:ba:79:d0:bf:9d:c9:11: 27:fc:80:02:f7:d9:cf:10:6b:d5:b1:ca:b4:5e:d8: 46:52:d1:7f:2d:78:78:9a:21:69:3f:25:1c:e9:67: f6:1b:92:c2:70:4f:55:c2:83:78:56:5e:94:86:f2: 52:b3:d4:91:3b:d0:3e:5e:08:f3:ad:e2:89:6e:a2: cd:ae:d2:ce:8a:c0:ce:78:08:51:f9:f9:e8:61:6d: 53:60:77:12:fe:ad:b9:f3:cf:d6:3b:49:bb:35:0e: 15:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:36:8E:83:76:B7:E1:C2:D2:E7:E2:6C:73:24:06:22:87:0C:93:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3c318e52-80c2-3c11-897f-f6c9f4869930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 216.227.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:98:a7:1a:a2:ad:35:45:ea:59:a1:cf:82:7b:0d:9e:02:91: 5e:81:01:78:8b:e4:a0:23:5a:20:1a:e9:18:1b:76:93:b5:61: aa:98:64:9d:1c:48:1e:82:cb:02:f9:1d:50:6a:44:d4:86:1c: 3f:b0:62:5a:bf:45:a3:3f:91:db:67:74:4f:96:cd:98:92:9a: 28:fb:af:04:09:9b:be:e2:2f:e2:bc:81:cd:71:13:98:e2:50: ad:2c:51:74:43:ff:d6:f7:56:62:35:9a:4e:a3:32:57:1f:56: 4b:05:5f:81:a3:2d:94:a3:3b:6a:d9:95:af:a0:35:2a:92:b9: 66:00:59:41:5f:68:2e:a6:df:b1:68:8a:ba:72:de:82:6f:ef: d4:24:11:96:80:d4:20:8f:e2:76:73:38:a3:bf:fa:02:f8:85: dd:66:40:f6:0f:e9:64:dc:02:9a:e6:d2:ac:6f:8a:1d:c6:55: 4d:b6:bc:a9:f0:44:f8:de:51:c6:7a:70:06:70:74:4b:ae:b9: d2:90:5f:0a:8f:30:e1:af:e9:96:07:06:a4:74:0e:11:11:8d: f1:b5:28:8b:3c:0d:64:6e:16:98:f6:f1:ea:0d:ed:6c:e0:df: 60:32:22:a3:24:2a:78:78:ad:33:6f:09:40:a4:4d:f1:07:45: 39:19:5f:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkuE7EJWPJPexAQncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk Y2MzYmUwNzUtMDQzZC00MWQ0LWEwNmMtMmI4YmJjM2ZhNjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwXZCRXBWhgeFfpwtXdiFSDWsKbL711bg1Kh MaU9hA2c+Lm8mL6m8osQxC9JeKlqmXo/9JSmp135d3b/VcfZ00Ul31hPsvXz96wo GCcYTW8YIzfV5w+qmNH6Y/rw6A5SWeaBrHap3sPdv+C+Q0VkIauMZzb9T8b2F+go QlN/m9foP39H6mqlQILKUnBzBOqXO7CfNPBv9/2PwWwCfbp50L+dyREn/IAC99nP EGvVscq0XthGUtF/LXh4miFpPyUc6Wf2G5LCcE9VwoN4Vl6UhvJSs9SRO9A+Xgjz reKJbqLNrtLOisDOeAhR+fnoYW1TYHcS/q2588/WO0m7NQ4VpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGY2joN2t+HC0ufibHMkBiKHDJN4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvM2MzMThlNTItODBjMi0z YzExLTg5N2YtZjZjOWY0ODY5OTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OO9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyYpxqirTVF6lmhz4J7DZ4CkV6BAXiL5KAjWiAa6RgbdpO1YaqYZJ0c SB6CywL5HVBqRNSGHD+wYlq/RaM/kdtndE+WzZiSmij7rwQJm77iL+K8gc1xE5ji UK0sUXRD/9b3VmI1mk6jMlcfVksFX4GjLZSjO2rZla+gNSqSuWYAWUFfaC6m37Fo irpy3oJv79QkEZaA1CCP4nZzOKO/+gL4hd1mQPYP6WTcAprm0qxvih3GVU22vKnw RPjeUcZ6cAZwdEuuudKQXwqPMOGv6ZYHBqR0DhERjfG1KIs8DWRuFpj28eoN7Wzg 32AyIqMkKnh4rTNvCUCkTfEHRTkZX/Q= -----END CERTIFICATE-----Generated at Tue Apr 15 06:43:02 2025 by rpki-client