$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/342e01d8-199d-3c33-b2e9-aa985dc80d7f.roa File: 342e01d8-199d-3c33-b2e9-aa985dc80d7f.roa (raw, json) Hash identifier: oF8Eak0VW1jAGwUG9BtoMK5ZwS9ykTJMgwoxjC9p0jw= Subject key identifier: 87:17:00:08:77:8C:A3:B2:B3:C2:4C:C8:A5:0E:FD:78:01:3C:91:0B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848CF54E23760C85F6E6F5A4F80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/342e01d8-199d-3c33-b2e9-aa985dc80d7f.roa Signing time: Sat 08 Feb 2025 02:30:15 +0000 ROA not before: Sat 08 Feb 2025 02:30:15 +0000 ROA not after: Fri 09 May 2025 01:30:15 +0000 asID: 46188 IP address blocks: 216.66.44.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cf:54:e2:37:60:c8:5f:6e:6f:5a:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 8 02:30:15 2025 GMT Not After : May 9 01:30:15 2025 GMT Subject: CN=1fb6322c-3e71-4470-b878-d2c47909df6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:36:6e:85:7f:a3:77:5d:e6:d4:47:57:21:67: ec:73:f0:e2:8c:b9:88:fd:d1:5b:26:7a:2f:77:16: 3e:21:4d:56:58:08:03:e5:83:52:d8:31:88:43:6e: 7b:ed:8f:f1:d0:e9:fb:bb:d3:35:1d:95:ff:f0:7b: c0:d9:4d:21:44:fd:fd:69:66:3d:e6:55:88:21:74: 21:40:02:be:06:2c:13:48:41:3c:74:80:c3:48:73: b8:ba:74:30:fe:e1:dd:57:3f:80:de:65:98:72:02: 89:66:1b:0e:55:db:75:22:71:22:65:b8:6c:56:58: ba:68:c4:5e:c9:d7:d6:b6:13:70:f9:f8:0f:1e:96: 26:14:67:f5:f3:c3:12:c7:7b:d4:23:66:02:fa:12: 9e:c3:e6:ab:ba:93:4e:b7:72:bf:cb:56:b8:28:0b: 8d:b5:3a:f4:b9:70:58:99:06:60:f6:61:80:19:55: a5:fc:7a:dd:45:a3:0c:b1:fb:d5:2e:f9:01:9e:a7: 49:4c:15:6f:7e:2f:9b:c6:eb:df:cd:72:b4:b5:00: 31:56:20:a7:3f:2c:64:e1:15:a5:61:ff:47:3f:e4: cb:19:53:52:2a:20:c2:cc:f8:00:5b:db:83:55:65: 62:86:c6:b4:f0:61:ee:5a:be:f3:29:9e:06:7e:68: 56:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:17:00:08:77:8C:A3:B2:B3:C2:4C:C8:A5:0E:FD:78:01:3C:91:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/342e01d8-199d-3c33-b2e9-aa985dc80d7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 216.66.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:3f:82:f6:d4:03:ca:f0:8b:ee:ab:b6:0a:71:05:63:8a:ef: 27:07:a5:1f:f4:23:75:ae:d1:ab:be:9e:c6:2b:b7:62:26:6e: 1a:8b:28:fc:bd:e2:7f:5e:54:5f:27:2b:b5:50:b8:25:12:4b: 14:ef:32:c8:86:b1:a6:a3:c0:4f:0e:32:ad:cd:92:c3:3a:3e: 5a:c3:97:d9:47:e2:2b:22:fa:48:17:b4:1a:e7:24:09:99:0f: ca:a9:2c:33:b6:28:40:1e:95:47:6c:6b:19:06:4d:e4:8e:ac: d6:c1:e3:8b:ff:2f:02:90:af:08:76:d7:3b:e7:0d:b8:3e:db: cd:bf:5b:c3:c8:c2:3c:3e:47:05:19:a5:4e:5b:c4:6a:d2:29: 9d:29:25:ae:92:b9:9f:4a:d0:0c:dc:ca:5d:ee:19:f7:88:7f: 41:3e:92:92:c9:38:44:0e:be:3d:6e:b0:2e:79:5a:c3:6a:65: 13:09:eb:1a:e0:8e:9f:f6:3a:f9:a7:78:ca:f7:52:06:8b:25: 41:8f:91:cf:e3:26:f7:f0:4c:b2:6c:85:c3:73:c9:a0:b6:dd: 5f:a8:d0:b6:8d:ef:0b:c0:21:f4:6a:a0:ed:23:84:b4:8e:34: 7a:0c:9d:e7:4c:a1:54:e1:14:f7:09:f7:12:ce:fb:93:49:e5: 2d:40:c5:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjPVOI3YMhfbm9aT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIwODAyMzAxNVoXDTI1MDUwOTAxMzAxNVowLzEtMCsGA1UEAxMk MWZiNjMyMmMtM2U3MS00NDcwLWI4NzgtZDJjNDc5MDlkZjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojZuhX+jd13m1EdXIWfsc/DijLmI/dFbJnov dxY+IU1WWAgD5YNS2DGIQ2577Y/x0On7u9M1HZX/8HvA2U0hRP39aWY95lWIIXQh QAK+BiwTSEE8dIDDSHO4unQw/uHdVz+A3mWYcgKJZhsOVdt1InEiZbhsVli6aMRe ydfWthNw+fgPHpYmFGf188MSx3vUI2YC+hKew+arupNOt3K/y1a4KAuNtTr0uXBY mQZg9mGAGVWl/HrdRaMMsfvVLvkBnqdJTBVvfi+bxuvfzXK0tQAxViCnPyxk4RWl Yf9HP+TLGVNSKiDCzPgAW9uDVWVihsa08GHuWr7zKZ4GfmhWIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcXAAh3jKOys8JMyKUO/XgBPJELMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzQyZTAxZDgtMTk5ZC0z YzMzLWIyZTktYWE5ODVkYzgwZDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2EIsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKU/gvbUA8rwi+6rtgpxBWOK7ycHpR/0I3Wu0au+nsYrt2ImbhqLKPy9 4n9eVF8nK7VQuCUSSxTvMsiGsaajwE8OMq3NksM6PlrDl9lH4isi+kgXtBrnJAmZ D8qpLDO2KEAelUdsaxkGTeSOrNbB44v/LwKQrwh21zvnDbg+282/W8PIwjw+RwUZ pU5bxGrSKZ0pJa6SuZ9K0Azcyl3uGfeIf0E+kpLJOEQOvj1usC55WsNqZRMJ6xrg jp/2OvmneMr3UgaLJUGPkc/jJvfwTLJshcNzyaC23V+o0LaN7wvAIfRqoO0jhLSO NHoMnedMoVThFPcJ9xLO+5NJ5S1AxdM= -----END CERTIFICATE-----Generated at Fri Apr 4 17:46:13 2025 by rpki-client