$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3de7f99-f05f-367a-88b2-8b16d18db478.roa File: f3de7f99-f05f-367a-88b2-8b16d18db478.roa (raw, json) Hash identifier: 6r9rILbwfFmoxTnvCTpu0hOa6RZ1UCacUrPRuPewIWo= Subject key identifier: 58:18:4B:41:89:CD:7D:37:86:F1:D7:F9:20:5B:E0:E0:D3:92:08:4F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926C4161388A70623B9C520 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3de7f99-f05f-367a-88b2-8b16d18db478.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 212573 IP address blocks: 216.66.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:c4:16:13:88:a7:06:23:b9:c5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=e3e388c4-a52b-4ebe-b600-589b866289ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4b:d0:a1:40:b9:6a:dd:ba:98:47:4e:c7:17: cb:6a:a2:81:88:fd:1f:e1:ae:72:2a:68:a8:d7:35: 72:69:8f:55:68:9e:28:9e:55:0e:35:55:00:d4:46: d6:61:f8:af:5e:c1:03:d4:96:b0:cd:e8:a1:fe:43: 1f:15:02:25:62:b8:0a:08:d8:b3:0c:2e:85:22:dd: 8d:52:37:e9:65:b4:d4:b4:7b:ae:d0:8e:aa:62:6a: d7:7d:fc:2c:2a:7c:9d:c2:3b:5f:4f:48:e8:2a:77: 52:d1:3e:e4:87:b3:a8:18:ba:40:94:55:fe:23:2d: dc:3c:50:18:11:7c:f5:29:e4:3a:1e:5e:3e:2f:77: 7d:4e:66:04:0a:b7:aa:d1:ee:e3:a9:ae:81:d4:7c: 30:8f:1d:03:d0:cd:e7:47:e0:98:d4:af:7e:69:93: 30:f1:0e:04:12:fa:eb:ec:c2:a4:0e:66:8c:39:ee: f6:96:47:d1:d3:48:1f:b4:63:c9:1d:c4:a6:c1:cd: 87:df:be:1b:8a:7d:8f:d2:92:0b:3e:dd:b6:bd:eb: aa:9a:7e:9f:9b:24:5d:22:c0:40:10:e2:26:96:3a: 1e:39:4b:c0:84:53:1f:42:19:47:88:40:1c:56:0b: 61:99:c6:b3:fa:2d:76:da:be:45:c8:b1:70:8f:40: ba:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:18:4B:41:89:CD:7D:37:86:F1:D7:F9:20:5B:E0:E0:D3:92:08:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3de7f99-f05f-367a-88b2-8b16d18db478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 216.66.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:30:b5:58:81:57:1d:67:fc:f4:b2:9d:61:7d:5c:4e:9b:f1: be:e7:8d:f8:fe:66:62:86:9b:cc:8c:4d:e2:e6:c8:69:1a:2b: d1:13:62:e9:94:f3:9e:b1:db:99:23:5f:6b:bf:5b:37:b6:d0: 0d:70:f0:fe:c8:f4:42:4d:31:33:b0:53:c1:6a:89:c6:f8:cc: 9c:a1:6c:ef:7e:36:7e:e2:21:7b:2c:cd:bf:08:eb:c1:56:e1: 21:f1:81:45:ba:74:df:81:85:7b:c3:2b:0a:57:77:78:88:88: b4:92:42:05:af:dd:7a:8b:e2:ac:7d:8b:94:15:e3:84:0f:f1: 87:17:f4:7e:6c:06:76:4b:a9:6b:7f:4d:4c:b1:15:a8:8f:75: a5:95:0c:87:22:fa:18:44:97:7e:73:35:21:0d:97:71:9a:db: 05:29:c2:8d:e4:aa:3a:82:2c:00:2b:1f:d0:d1:20:0c:49:fe: d8:71:73:82:6e:2d:70:55:20:c6:d8:20:be:64:1d:89:e1:83: 28:4f:e2:9a:42:f7:bc:75:58:f0:74:ad:ef:35:b7:ce:74:12: fd:56:54:67:af:7a:09:76:ac:a5:05:bd:32:e0:b6:5b:5c:88: 90:22:68:bc:31:a3:b5:83:ad:ec:9d:d9:ab:e3:9e:92:74:79: 9a:5b:88:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JsQWE4inBiO5xSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ZTNlMzg4YzQtYTUyYi00ZWJlLWI2MDAtNTg5Yjg2NjI4OWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkvQoUC5at26mEdOxxfLaqKBiP0f4a5yKmio 1zVyaY9VaJ4onlUONVUA1EbWYfivXsED1Jawzeih/kMfFQIlYrgKCNizDC6FIt2N UjfpZbTUtHuu0I6qYmrXffwsKnydwjtfT0joKndS0T7kh7OoGLpAlFX+Iy3cPFAY EXz1KeQ6Hl4+L3d9TmYECreq0e7jqa6B1Hwwjx0D0M3nR+CY1K9+aZMw8Q4EEvrr 7MKkDmaMOe72lkfR00gftGPJHcSmwc2H374bin2P0pILPt22veuqmn6fmyRdIsBA EOImljoeOUvAhFMfQhlHiEAcVgthmcaz+i122r5FyLFwj0C6HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgYS0GJzX03hvHX+SBb4ODTkghPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjNkZTdmOTktZjA1Zi0z NjdhLTg4YjItOGIxNmQxOGRiNDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EJbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcwtViBVx1n/PSynWF9XE6b8b7njfj+ZmKGm8yMTeLmyGkaK9ETYumU 856x25kjX2u/Wze20A1w8P7I9EJNMTOwU8Fqicb4zJyhbO9+Nn7iIXsszb8I68FW 4SHxgUW6dN+BhXvDKwpXd3iIiLSSQgWv3XqL4qx9i5QV44QP8YcX9H5sBnZLqWt/ TUyxFaiPdaWVDIci+hhEl35zNSENl3Ga2wUpwo3kqjqCLAArH9DRIAxJ/thxc4Ju LXBVIMbYIL5kHYnhgyhP4ppC97x1WPB0re81t850Ev1WVGevegl2rKUFvTLgtltc iJAiaLwxo7WDreyd2avjnpJ0eZpbiIk= -----END CERTIFICATE-----Generated at Fri Apr 4 17:44:12 2025 by rpki-client