$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/f2344786-e936-3125-abb5-5f6da46e1208.roa File: f2344786-e936-3125-abb5-5f6da46e1208.roa (raw, json) Hash identifier: Gm0lkopbxreQV7sh7RLc1QJQ9XgRH2haXCpxn1lljPE= Subject key identifier: 27:2E:EC:64:03:A5:6C:01:27:29:5A:F3:8D:EC:DF:86:4A:D6:51:38 Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Certificate serial: 010D0C9F43285849218407B100D7EC11A4115880 Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/f2344786-e936-3125-abb5-5f6da46e1208.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 399804 IP address blocks: 216.126.231.0/24 maxlen: 24 2604:4cc0:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:07:b1:00:d7:ec:11:a4:11:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=ada14282-6139-4f7f-a2ec-970be7238c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:30:36:9f:72:ad:6a:73:1e:1e:fb:7f:6e:51: 2e:d2:f6:e1:9b:b7:b2:50:9e:fe:b0:d9:17:de:3f: 0a:4b:04:50:7a:e8:4d:ee:2f:22:a2:15:fc:b7:6e: 6b:fe:d5:ac:ca:4a:47:f7:d3:87:b1:5a:5c:c8:07: 82:4e:2f:91:ef:4e:26:bf:3c:95:30:94:02:36:14: 9f:d5:96:3d:39:dc:21:ff:ae:3c:89:63:2b:f9:b3: 4a:71:71:a7:e4:79:ae:f7:d0:62:b1:30:1c:ac:1f: a2:86:8a:0e:28:fb:0f:d4:b4:e7:77:b0:51:c8:9f: c9:8f:7a:5b:18:e8:a3:66:4e:16:c9:3c:6c:6d:aa: 54:0e:be:7d:ca:77:22:80:2d:be:61:d7:a1:ed:50: c5:f3:1c:2d:4a:44:80:1c:c4:45:00:3b:cf:a1:40: 6b:64:dd:6f:d5:6c:8d:a4:cc:26:d1:d0:27:28:7a: 3a:5c:ae:c8:3e:6e:c8:81:44:56:97:f5:d9:10:f7: 09:06:d3:fc:59:1a:bf:c3:5e:65:76:7d:53:19:f6: 81:14:05:c3:79:5f:50:c3:12:10:68:96:5b:05:cc: eb:18:cb:6d:21:9e:da:2c:01:bf:2c:93:d6:28:5f: 27:f7:3c:dd:6d:75:b6:0f:c9:38:fc:83:a6:6e:b3: df:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2E:EC:64:03:A5:6C:01:27:29:5A:F3:8D:EC:DF:86:4A:D6:51:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/f2344786-e936-3125-abb5-5f6da46e1208.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl X509v3 Authority Key Identifier: keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer sbgp-ipAddrBlock: critical IPv4: 216.126.231.0/24 IPv6: 2604:4cc0:11::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:34:70:b5:25:c4:2e:54:c3:10:c2:41:3e:dc:2a:e6:bf:f7: 65:a9:a8:a4:57:8d:1e:e9:fe:67:ff:63:71:ec:68:b8:6b:0c: a0:29:e7:db:c0:bc:58:c5:cf:57:2f:65:86:c8:e2:e0:9b:e2: 69:4e:11:f6:c2:75:62:2f:d0:92:8a:50:70:f9:a3:85:cb:44: 73:fe:aa:39:2d:f4:d5:96:9c:3e:df:b6:3b:2a:f2:da:79:c8: a3:ea:ba:88:3b:aa:d7:09:84:0b:97:4b:8a:1a:11:c1:71:21: 70:2a:3a:99:f1:b9:f4:5e:e8:7b:a1:4a:04:1e:49:8a:85:a1: e5:33:a3:56:4a:85:64:b7:e8:22:08:dd:71:70:7e:ea:a1:d5: ee:33:d6:0d:3f:a1:90:bc:71:19:21:eb:7d:d8:9c:a6:c1:0f: ce:49:a7:6d:7a:79:ea:32:10:6a:7e:00:76:6d:6b:d7:c9:10: e7:97:7e:19:2d:d9:63:9a:f8:07:06:dd:95:26:3e:8d:a2:b2: df:7d:dc:f1:e9:a1:d0:0f:8a:fc:b0:d5:06:db:5f:ea:62:5c: fe:ca:a9:78:e5:b3:43:54:5b:f9:9f:37:99:30:4a:41:07:e8: 94:95:7b:04:5d:9e:3d:4b:20:6d:51:5e:85:51:33:17:12:ec: 67:6f:27:73 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEkhhAexANfsEaQRWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3 Y2IzMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk YWRhMTQyODItNjEzOS00ZjdmLWEyZWMtOTcwYmU3MjM4YzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzA2n3KtanMeHvt/blEu0vbhm7eyUJ7+sNkX 3j8KSwRQeuhN7i8iohX8t25r/tWsykpH99OHsVpcyAeCTi+R704mvzyVMJQCNhSf 1ZY9Odwh/648iWMr+bNKcXGn5Hmu99BisTAcrB+ihooOKPsP1LTnd7BRyJ/Jj3pb GOijZk4WyTxsbapUDr59yncigC2+Ydeh7VDF8xwtSkSAHMRFADvPoUBrZN1v1WyN pMwm0dAnKHo6XK7IPm7IgURWl/XZEPcJBtP8WRq/w15ldn1TGfaBFAXDeV9QwxIQ aJZbBczrGMttIZ7aLAG/LJPWKF8n9zzdbXW2D8k4/IOmbrPfxwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFCcu7GQDpWwBJyla843s34ZK1lE4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0 OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvZjIzNDQ3ODYtZTkzNi0z MTI1LWFiYjUtNWY2ZGE0NmUxMjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw OGUxYzdjYjMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA2H7nMA8E AgACMAkDBwAmBEzAABEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhjRwtSXELlTDEMJBPtwq5r/3ZamopFeN Hun+Z/9jcexouGsMoCnn28C8WMXPVy9lhsji4JviaU4R9sJ1Yi/QkopQcPmjhctE c/6qOS301ZacPt+2Oyry2nnIo+q6iDuq1wmEC5dLihoRwXEhcCo6mfG59F7oe6FK BB5JioWh5TOjVkqFZLfoIgjdcXB+6qHV7jPWDT+hkLxxGSHrfdicpsEPzkmnbXp5 6jIQan4Adm1r18kQ55d+GS3ZY5r4BwbdlSY+jaKy333c8emh0A+K/LDVBttf6mJc /sqpeOWzQ1Rb+Z83mTBKQQfolJV7BF2ePUsgbVFehVEzFxLsZ28ncw== -----END CERTIFICATE-----Generated at Fri Mar 14 13:25:57 2025 by rpki-client