$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bb6b9ed0-44ec-3b3c-9721-2f0052cc18e6.roa File: bb6b9ed0-44ec-3b3c-9721-2f0052cc18e6.roa (raw, json) Hash identifier: PAWSbqitO3bQZzldyTvk9iRvDJhTm8IEgayvkMCHRB8= Subject key identifier: 88:8A:15:B1:E5:6E:52:E5:D7:A7:DC:A2:30:21:20:FB:AA:52:32:3B Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F432858488DAB4E01D68EE1052DA68800 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bb6b9ed0-44ec-3b3c-9721-2f0052cc18e6.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 14618 IP address blocks: 216.219.126.0/24 maxlen: 24 216.219.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:4e:01:d6:8e:e1:05:2d:a6:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=89d7eee0-7635-4fd3-be37-f3f351ce1bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:35:44:58:15:6d:ae:6d:a3:11:85:ea:45:56: 45:25:65:52:84:9a:af:a4:88:52:b8:db:1d:72:86: de:c2:b9:cd:8e:08:e5:5a:18:33:66:83:1d:91:91: 1f:1b:bc:b0:67:5c:73:77:97:fe:82:58:7c:12:f3: e0:a5:81:0e:4a:64:56:ef:86:00:62:cc:7e:a5:43: 02:df:da:11:c0:5d:cd:c1:3a:31:2b:37:84:ec:f5: d0:7b:89:f5:61:19:a6:2f:7c:fd:ab:ae:53:e6:3c: ad:35:c0:7a:39:52:a5:da:22:43:91:e1:99:95:14: b1:8c:03:10:97:ca:b9:ce:fe:14:63:c4:18:14:d4: a3:6a:22:b0:c6:10:68:cc:e4:ca:ab:7e:51:8c:45: 7a:6d:93:0e:60:69:ae:82:5b:8e:07:a7:50:8e:aa: a3:52:09:c8:1e:a1:4d:69:bb:b8:04:ee:71:3a:bf: 7c:86:23:1f:8a:ce:64:d2:57:51:5d:53:68:7c:79: 57:29:50:b7:e0:4b:12:c9:05:74:cf:76:c1:67:14: d8:ca:3a:d2:58:0a:53:07:ca:35:06:8f:b8:0e:0a: 30:e9:a5:9c:be:31:f4:f8:6d:c6:d8:f6:18:96:5a: 06:ae:db:b4:5e:40:02:80:f1:3e:98:d7:e4:df:5b: fa:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8A:15:B1:E5:6E:52:E5:D7:A7:DC:A2:30:21:20:FB:AA:52:32:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bb6b9ed0-44ec-3b3c-9721-2f0052cc18e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 216.219.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:6c:98:bc:a1:4c:f2:12:5d:15:d3:dd:cc:2b:56:29:3a:68: 26:07:40:14:60:32:b5:65:6b:71:92:d9:11:02:19:df:bf:05: 1c:0c:47:66:48:2b:e7:0f:b1:e7:c9:01:84:7e:8b:e1:f8:9c: f8:a2:0e:69:e5:6b:6a:91:72:53:f8:03:b0:ea:05:08:79:bf: 06:68:d9:d1:7d:ee:46:4c:b9:9b:80:04:b5:5b:61:4a:80:77: 3a:a8:e6:d6:13:be:13:7e:6f:7a:55:50:7e:93:17:12:0d:f4: 4e:3e:de:98:3e:bd:f3:cc:d7:aa:6a:b4:20:0e:18:36:4f:cf: ad:1b:ea:7e:e3:54:73:5d:97:63:7c:50:f6:38:c2:80:2c:eb: 5a:a1:b2:85:a0:22:28:19:08:00:e5:01:69:4f:ca:a4:2d:d3: 71:60:e5:42:c5:37:24:84:c6:9b:96:12:84:0f:88:21:1c:c7: ee:e5:95:d5:f5:8a:2f:0c:db:0d:ab:33:50:fc:c9:90:07:53: aa:f1:c8:6b:ea:43:1b:50:2d:34:00:43:a2:11:ab:6d:0a:9c: 9d:bd:6a:7e:12:62:49:10:1e:24:82:ea:aa:65:92:68:4b:83: 5f:1d:56:5e:a9:40:ba:3c:48:4e:9f:bd:99:f9:97:78:df:b1: 1f:b6:55:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq04B1o7hBS2miAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk ODlkN2VlZTAtNzYzNS00ZmQzLWJlMzctZjNmMzUxY2UxYmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDVEWBVtrm2jEYXqRVZFJWVShJqvpIhSuNsd cobewrnNjgjlWhgzZoMdkZEfG7ywZ1xzd5f+glh8EvPgpYEOSmRW74YAYsx+pUMC 39oRwF3NwToxKzeE7PXQe4n1YRmmL3z9q65T5jytNcB6OVKl2iJDkeGZlRSxjAMQ l8q5zv4UY8QYFNSjaiKwxhBozOTKq35RjEV6bZMOYGmugluOB6dQjqqjUgnIHqFN abu4BO5xOr98hiMfis5k0ldRXVNofHlXKVC34EsSyQV0z3bBZxTYyjrSWApTB8o1 Bo+4Dgow6aWcvjH0+G3G2PYYlloGrtu0XkACgPE+mNfk31v62QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiKFbHlblLl16fcojAhIPuqUjI7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYmI2YjllZDAtNDRlYy0z YjNjLTk3MjEtMmYwMDUyY2MxOGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2Nt+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtsmLyhTPISXRXT3cwrVik6aCYHQBRgMrVla3GS2RECGd+/BRwMR2ZI K+cPsefJAYR+i+H4nPiiDmnla2qRclP4A7DqBQh5vwZo2dF97kZMuZuABLVbYUqA dzqo5tYTvhN+b3pVUH6TFxIN9E4+3pg+vfPM16pqtCAOGDZPz60b6n7jVHNdl2N8 UPY4woAs61qhsoWgIigZCADlAWlPyqQt03Fg5ULFNySExpuWEoQPiCEcx+7lldX1 ii8M2w2rM1D8yZAHU6rxyGvqQxtQLTQAQ6IRq20KnJ29an4SYkkQHiSC6qplkmhL g18dVl6pQLo8SE6fvZn5l3jfsR+2VRA= -----END CERTIFICATE-----Generated at Fri Apr 4 23:44:17 2025 by rpki-client