$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a854a339-946b-37a9-aece-f00e7f2492da.roa File: a854a339-946b-37a9-aece-f00e7f2492da.roa (raw, json) Hash identifier: yWweazmak7Xv72youE0QH2t8xeMUEpxQpWjsb6Lcd8s= Subject key identifier: 6F:E9:25:0F:B1:57:0A:03:81:F4:F8:9D:11:40:2D:7F:81:89:6E:29 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848DBD6749C7EB86176B998B638 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a854a339-946b-37a9-aece-f00e7f2492da.roa Signing time: Wed 12 Feb 2025 14:00:53 +0000 ROA not before: Wed 12 Feb 2025 14:00:53 +0000 ROA not after: Tue 13 May 2025 13:00:53 +0000 asID: 214315 IP address blocks: 216.66.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:db:d6:74:9c:7e:b8:61:76:b9:98:b6:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 12 14:00:53 2025 GMT Not After : May 13 13:00:53 2025 GMT Subject: CN=9932ba08-1660-411f-b651-866c4f87cebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8f:ff:06:44:5b:72:2d:67:5a:e2:b5:8b:d9: 3c:9f:8f:65:75:21:10:f1:91:e9:ce:50:8b:4b:b3: 23:5b:1e:8b:90:e3:19:f7:04:eb:59:65:90:c6:e3: dd:b1:86:a8:ab:e3:c8:58:42:48:04:2b:a0:d3:96: e6:3c:6d:af:b5:83:79:63:0c:a1:9f:5e:57:bd:28: 64:1f:90:f5:7c:68:f9:d4:76:c5:99:e2:02:9d:70: db:1e:f3:29:bc:4b:b6:3c:d2:2f:f0:f1:86:ec:bf: ba:c1:a6:da:0f:94:e1:ce:18:27:df:c5:f2:10:0e: 1e:1c:a0:90:09:aa:f6:7b:ff:b0:77:3b:9f:83:a5: 7d:af:49:a5:51:b9:83:6d:f4:b1:21:54:ba:38:84: 0d:79:e4:0b:c9:5e:9e:9d:bb:ed:f5:cc:e3:f4:a1: 71:a0:23:88:1b:9e:95:56:90:98:c3:1c:6e:d8:e5: 5e:b0:51:34:ef:de:05:0a:4b:92:ea:e2:3b:7b:bf: 5e:2b:b6:1b:37:43:a1:06:5e:3f:e0:ca:b0:79:17: 28:f3:76:2f:63:96:6f:28:2b:1d:e8:a6:aa:f9:d9: be:2c:8d:50:1c:4c:a2:95:c1:4d:2f:05:ec:db:a1: bf:de:09:40:21:25:cf:82:0d:98:02:a0:4a:82:3d: 41:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E9:25:0F:B1:57:0A:03:81:F4:F8:9D:11:40:2D:7F:81:89:6E:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a854a339-946b-37a9-aece-f00e7f2492da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 216.66.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:95:55:2a:4b:d2:68:01:69:55:7a:d8:bb:78:1b:d5:18:04: f6:6d:10:61:87:46:c3:ff:b2:c3:e5:bd:f0:7d:74:42:c5:aa: e5:b7:0b:fd:d8:b1:8a:66:44:ed:e9:a3:6b:7a:bf:15:9e:23: 0f:43:c6:58:20:95:36:da:fa:70:b7:fd:e2:b7:9c:0b:ea:7c: 92:8f:c0:d2:89:c0:c0:97:99:cb:22:45:f5:62:01:b8:82:cf: ce:af:32:9d:fd:51:21:c2:13:a4:a5:db:b0:fb:0a:3f:c1:88: ad:96:16:31:3a:37:28:28:c1:58:90:85:fe:c3:ec:9a:3e:6b: 95:c3:e2:57:b0:57:60:67:5d:c1:54:ac:bf:89:2f:40:f3:b8: 69:ba:37:63:68:ce:bc:64:58:eb:e2:3c:a5:e2:eb:34:ac:61: bc:c2:1a:26:19:35:78:2c:bb:29:94:81:67:13:e2:22:2a:f8: c3:48:cc:b2:f3:94:43:e4:96:35:4c:c5:14:d2:db:9f:a7:09: 66:58:59:ca:f2:82:c3:83:a3:91:30:2e:4e:80:95:df:5d:c8: 66:fd:75:ba:04:e5:78:4c:0d:bd:e6:6c:fb:bf:39:08:9c:25: 35:ba:1a:2f:74:c2:94:15:3f:4c:b4:da:47:c2:6f:b1:61:98: 25:6e:9b:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjb1nScfrhhdrmYtjgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIxMjE0MDA1M1oXDTI1MDUxMzEzMDA1M1owLzEtMCsGA1UEAxMk OTkzMmJhMDgtMTY2MC00MTFmLWI2NTEtODY2YzRmODdjZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o//BkRbci1nWuK1i9k8n49ldSEQ8ZHpzlCL S7MjWx6LkOMZ9wTrWWWQxuPdsYaoq+PIWEJIBCug05bmPG2vtYN5Ywyhn15XvShk H5D1fGj51HbFmeICnXDbHvMpvEu2PNIv8PGG7L+6wabaD5Thzhgn38XyEA4eHKCQ Car2e/+wdzufg6V9r0mlUbmDbfSxIVS6OIQNeeQLyV6enbvt9czj9KFxoCOIG56V VpCYwxxu2OVesFE0794FCkuS6uI7e79eK7YbN0OhBl4/4MqweRco83YvY5ZvKCsd 6Kaq+dm+LI1QHEyilcFNLwXs26G/3glAISXPgg2YAqBKgj1BlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/pJQ+xVwoDgfT4nRFALX+BiW4pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTg1NGEzMzktOTQ2Yi0z N2E5LWFlY2UtZjAwZTdmMjQ5MmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EIiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqVVSpL0mgBaVV62Lt4G9UYBPZtEGGHRsP/ssPlvfB9dELFquW3C/3Y sYpmRO3po2t6vxWeIw9DxlgglTba+nC3/eK3nAvqfJKPwNKJwMCXmcsiRfViAbiC z86vMp39USHCE6Sl27D7Cj/BiK2WFjE6NygowViQhf7D7Jo+a5XD4lewV2BnXcFU rL+JL0DzuGm6N2NozrxkWOviPKXi6zSsYbzCGiYZNXgsuymUgWcT4iIq+MNIzLLz lEPkljVMxRTS25+nCWZYWcrygsODo5EwLk6Ald9dyGb9dboE5XhMDb3mbPu/OQic JTW6Gi90wpQVP0y02kfCb7FhmCVum30= -----END CERTIFICATE-----Generated at Fri Apr 4 17:52:21 2025 by rpki-client