$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5f9f509-a0f4-38d5-bd69-5afaabc9b1f9.roa File: b5f9f509-a0f4-38d5-bd69-5afaabc9b1f9.roa (raw, json) Hash identifier: bzzYvF9BFQKE7LK71LbWCnNJo/Gib5DCO4hk9bxq5m8= Subject key identifier: 33:9B:5A:27:2F:31:B8:74:92:0A:85:BB:E0:4F:53:A9:DD:24:E4:18 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926D6897145E3DD544F1400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5f9f509-a0f4-38d5-bd69-5afaabc9b1f9.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 36103 IP address blocks: 216.218.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:d6:89:71:45:e3:dd:54:4f:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=638f4f47-4f8b-459e-a8b9-3b58ae83f903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a5:77:18:f0:25:7c:31:36:e8:48:90:df:fa: 0c:97:6f:01:0d:3c:98:49:17:00:e3:6d:9e:c8:86: db:6c:8a:41:8f:7e:ed:7c:62:4a:8c:c7:a5:e9:14: b3:6b:58:e4:f1:4e:cb:18:0e:c3:ce:4c:b0:32:d7: d2:4d:de:b9:92:d9:e8:f5:1a:b2:8d:80:2b:92:c8: 1a:4c:ae:28:6e:dd:e3:c4:c3:90:f2:a6:5c:83:2a: 9c:58:27:9b:fc:86:f5:b7:82:00:e1:62:d2:2e:15: c2:1a:d7:8d:cb:26:0e:c4:64:50:3a:a7:72:eb:0d: 4c:cc:2f:69:a8:47:e8:43:03:67:14:23:19:ee:fc: 5a:ad:b9:2f:7f:fb:73:68:21:11:f2:1b:40:b2:d1: c8:a2:bf:72:5a:ef:36:22:21:3a:04:8c:51:dc:fb: 1d:44:de:e8:59:90:e0:ce:17:42:03:59:52:e3:d3: 22:38:13:38:ed:1d:23:02:a3:ab:35:fb:86:65:77: ae:82:a7:42:9a:e2:85:1f:59:71:f2:8d:a5:25:1c: f3:ba:89:4d:ab:33:52:7e:87:e9:d1:45:1b:c1:c2: 9e:89:20:d6:7d:d6:6c:dc:5c:ed:df:f6:49:90:b6: 2f:32:31:50:9e:5d:83:66:a6:b5:8e:d5:69:03:cc: d6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9B:5A:27:2F:31:B8:74:92:0A:85:BB:E0:4F:53:A9:DD:24:E4:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5f9f509-a0f4-38d5-bd69-5afaabc9b1f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 216.218.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:c9:d4:46:60:69:cd:90:5f:73:d7:f9:ff:53:2d:d9:c0:b1: 7b:f1:32:ed:c9:67:10:2d:7e:34:3d:be:e9:3b:7f:76:f8:4b: 8d:19:b0:5e:f3:e2:2e:bb:aa:00:a6:c8:e0:b4:3c:5d:66:6f: e4:6b:00:ef:e2:43:dc:91:49:a0:8a:70:1d:61:d8:a1:fb:7a: d6:af:6a:c9:07:1b:5a:85:3c:68:28:c7:a2:1a:92:60:d6:e7: fe:96:26:c6:ea:1f:a0:bf:33:98:a5:ad:71:eb:47:50:50:30: 43:38:9a:89:9d:b5:53:6d:47:c6:52:3e:e1:33:41:a9:b7:ef: ba:f2:50:3e:c2:65:1c:db:f6:e9:6d:cd:57:9a:6d:0d:ab:dc: de:a0:70:0a:81:fe:29:2e:57:f2:be:3c:69:38:77:cc:a0:28: 20:b4:42:ca:0b:02:a0:89:b4:40:ba:fe:32:13:ed:4e:e4:f5: 81:43:d7:6d:52:4d:ad:c1:7b:29:6f:b5:75:f0:b0:ac:21:a5: a3:a6:5f:35:53:6d:ee:34:92:d0:78:77:4b:5e:3d:7c:7f:3e: f4:21:c5:26:df:00:f3:7c:c1:f5:3a:8b:89:91:de:85:1c:c6: 82:9a:bb:7a:1b:fa:94:1e:6f:0a:f0:d5:47:76:2b:70:a8:52: 54:0d:d5:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JtaJcUXj3VRPFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NjM4ZjRmNDctNGY4Yi00NTllLWE4YjktM2I1OGFlODNmOTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqV3GPAlfDE26EiQ3/oMl28BDTyYSRcA422e yIbbbIpBj37tfGJKjMel6RSza1jk8U7LGA7DzkywMtfSTd65ktno9RqyjYArksga TK4obt3jxMOQ8qZcgyqcWCeb/Ib1t4IA4WLSLhXCGteNyyYOxGRQOqdy6w1MzC9p qEfoQwNnFCMZ7vxarbkvf/tzaCER8htAstHIor9yWu82IiE6BIxR3PsdRN7oWZDg zhdCA1lS49MiOBM47R0jAqOrNfuGZXeugqdCmuKFH1lx8o2lJRzzuolNqzNSfofp 0UUbwcKeiSDWfdZs3Fzt3/ZJkLYvMjFQnl2DZqa1jtVpA8zWUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDObWicvMbh0kgqFu+BPU6ndJOQYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjVmOWY1MDktYTBmNC0z OGQ1LWJkNjktNWFmYWFiYzliMWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NrTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfJ1EZgac2QX3PX+f9TLdnAsXvxMu3JZxAtfjQ9vuk7f3b4S40ZsF7z 4i67qgCmyOC0PF1mb+RrAO/iQ9yRSaCKcB1h2KH7etavaskHG1qFPGgox6IakmDW 5/6WJsbqH6C/M5ilrXHrR1BQMEM4momdtVNtR8ZSPuEzQam377ryUD7CZRzb9ult zVeabQ2r3N6gcAqB/ikuV/K+PGk4d8ygKCC0QsoLAqCJtEC6/jIT7U7k9YFD121S Ta3BeylvtXXwsKwhpaOmXzVTbe40ktB4d0tePXx/PvQhxSbfAPN8wfU6i4mR3oUc xoKau3ob+pQebwrw1Ud2K3CoUlQN1VA= -----END CERTIFICATE-----Generated at Fri Apr 4 17:44:14 2025 by rpki-client