$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9d823414-ae36-3307-b22a-ed7b04efc131.roa File: 9d823414-ae36-3307-b22a-ed7b04efc131.roa (raw, json) Hash identifier: up8ZlSHtQllaf5rz3Q5yQNvKyJQ620yjzzcIoZ8pCVc= Subject key identifier: AD:BD:94:08:B9:D1:3F:49:22:B3:BE:5C:E7:2A:A6:84:B5:3A:07:12 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F432858493AA3E4AA06238585C533A580 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9d823414-ae36-3307-b22a-ed7b04efc131.roa Signing time: Tue 18 Mar 2025 13:00:50 +0000 ROA not before: Tue 18 Mar 2025 13:00:50 +0000 ROA not after: Mon 16 Jun 2025 13:00:50 +0000 asID: 6939 IP address blocks: 216.218.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3a:a3:e4:aa:06:23:85:85:c5:33:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 18 13:00:50 2025 GMT Not After : Jun 16 13:00:50 2025 GMT Subject: CN=a6e357b7-dbba-4e7a-bfe8-75dbd35ad4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:94:28:24:37:e7:07:3c:21:6a:a0:08:7f:ed: c5:9b:16:cf:20:42:bb:98:bd:c2:c8:62:de:94:ee: 02:91:54:1b:90:66:01:e0:91:7b:b6:2e:26:77:89: 43:ec:58:c5:8d:f7:a9:1d:94:fe:0f:db:26:4c:e0: 5c:b2:53:90:61:51:ab:8a:c5:28:7c:66:ca:c6:1a: 14:fa:44:83:7e:bd:ec:cf:10:00:61:c5:eb:f0:0a: a6:b1:28:a5:81:3e:c2:9f:ae:a8:f0:24:e6:8c:21: 5d:ae:81:aa:53:0f:45:d6:b1:98:2d:56:a0:7c:be: 33:60:7e:e8:45:84:12:2d:2f:d2:27:aa:1e:d4:2f: fc:69:95:a9:7f:b7:e9:c7:be:38:29:32:78:c7:91: 21:9b:02:a0:6a:e4:6a:67:69:74:71:94:34:45:a0: 92:f2:5d:8b:3a:5b:f2:bc:d3:66:3d:f6:d6:98:6b: c7:c9:70:8f:5e:db:e2:33:46:d1:4b:2e:e3:83:f7: d0:70:70:5d:bf:c9:0e:3e:85:45:68:0e:54:bd:22: ea:8a:81:11:c1:9a:7b:e7:79:93:d8:1c:cd:db:07: c3:7c:09:d3:50:b1:be:44:79:f3:6e:d6:43:1e:fa: 60:13:f2:de:98:9c:b7:1d:d6:31:18:06:22:73:bc: 47:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:BD:94:08:B9:D1:3F:49:22:B3:BE:5C:E7:2A:A6:84:B5:3A:07:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9d823414-ae36-3307-b22a-ed7b04efc131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 216.218.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:96:19:eb:c1:96:60:45:1d:6c:99:87:51:7b:e6:70:fa:c8: e5:9c:a1:7e:d1:05:9a:7b:41:cf:6f:d6:4c:fa:69:c5:62:dc: 84:a5:23:16:ed:fb:0c:76:da:1d:73:b2:64:8c:a1:61:ec:de: e0:0c:47:a8:83:a9:2d:6c:90:d0:37:41:41:b4:6e:08:24:2d: b9:b4:94:67:a6:07:cd:63:48:5b:de:f7:9c:69:f0:ec:49:14: 21:f4:ed:f8:0b:b6:90:05:10:5b:ca:5e:de:71:3e:4c:13:15: d7:ab:fd:5c:f3:b9:a6:42:42:63:3e:e2:90:44:43:5f:33:65: 60:e1:82:86:aa:c0:3c:f9:1d:81:83:bc:75:16:bf:2e:dd:5b: 3b:4d:7a:cf:1d:d5:08:98:4f:81:c8:21:c4:aa:26:b6:aa:d9: ac:14:a3:8a:6b:40:0a:c3:54:9f:2e:cc:f6:e3:66:10:3b:ba: cb:57:d3:08:27:cf:f8:8f:25:1c:45:6c:4d:51:ec:f9:5e:96: 97:3b:71:1a:1f:44:dc:87:d1:05:3b:0c:93:a2:44:a2:d9:bb: d7:77:cf:e0:00:e1:03:55:38:e5:28:87:82:23:50:a9:8e:de: 5c:07:20:fb:ec:7e:93:bc:57:82:c1:ec:74:bc:ef:47:ea:7c: 89:86:79:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk6o+SqBiOFhcUzpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDMxODEzMDA1MFoXDTI1MDYxNjEzMDA1MFowLzEtMCsGA1UEAxMk YTZlMzU3YjctZGJiYS00ZTdhLWJmZTgtNzVkYmQzNWFkNGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpQoJDfnBzwhaqAIf+3FmxbPIEK7mL3CyGLe lO4CkVQbkGYB4JF7ti4md4lD7FjFjfepHZT+D9smTOBcslOQYVGrisUofGbKxhoU +kSDfr3szxAAYcXr8AqmsSilgT7Cn66o8CTmjCFdroGqUw9F1rGYLVagfL4zYH7o RYQSLS/SJ6oe1C/8aZWpf7fpx744KTJ4x5EhmwKgauRqZ2l0cZQ0RaCS8l2LOlvy vNNmPfbWmGvHyXCPXtviM0bRSy7jg/fQcHBdv8kOPoVFaA5UvSLqioERwZp753mT 2BzN2wfDfAnTULG+RHnzbtZDHvpgE/LemJy3HdYxGAYic7xHDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK29lAi50T9JIrO+XOcqpoS1OgcSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOWQ4MjM0MTQtYWUzNi0z MzA3LWIyMmEtZWQ3YjA0ZWZjMTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH2NqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOWGevBlmBFHWyZh1F75nD6yOWcoX7RBZp7Qc9v1kz6acVi3ISlIxbt +wx22h1zsmSMoWHs3uAMR6iDqS1skNA3QUG0bggkLbm0lGemB81jSFve95xp8OxJ FCH07fgLtpAFEFvKXt5xPkwTFder/VzzuaZCQmM+4pBEQ18zZWDhgoaqwDz5HYGD vHUWvy7dWztNes8d1QiYT4HIIcSqJraq2awUo4prQArDVJ8uzPbjZhA7ustX0wgn z/iPJRxFbE1R7Plelpc7cRofRNyH0QU7DJOiRKLZu9d3z+AA4QNVOOUoh4IjUKmO 3lwHIPvsfpO8V4LB7HS870fqfImGeXM= -----END CERTIFICATE-----Generated at Fri Apr 4 17:58:37 2025 by rpki-client