$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/17d58398-4ac1-3bdc-956f-c5d4d3463e85.roa File: 17d58398-4ac1-3bdc-956f-c5d4d3463e85.roa (raw, json) Hash identifier: RI6wUYB89Ya0SYf+kNivfes4Bo+CWrHfhsJKp7DyxWU= Subject key identifier: 3F:66:4C:D7:67:5F:76:E8:E6:E6:15:ED:02:3C:D3:98:C0:69:E5:29 Certificate issuer: /CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7 Certificate serial: 010D0C9F43285849D1650EF47F5EAEF77A78AB40 Authority key identifier: BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/17d58398-4ac1-3bdc-956f-c5d4d3463e85.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16880 IP address blocks: 216.99.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:0e:f4:7f:5e:ae:f7:7a:78:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=21af3a34-1cbf-4bef-b235-928a7b97d756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c1:cb:a6:33:da:b6:e6:f5:47:9b:5b:36:50: 1a:b6:c9:f9:76:69:26:64:c1:81:9a:3e:24:85:d8: 84:91:1f:fb:64:d3:f8:da:d8:53:ac:9f:a5:3c:61: 44:b5:7b:05:be:30:da:0c:bf:e4:6b:c5:8f:f2:07: 5d:e5:a1:ea:90:6a:a3:8e:20:f1:b7:9b:b8:bf:03: f3:08:0a:6c:16:78:c1:0f:4b:33:74:ba:13:f7:9e: e5:60:47:1f:46:c2:e7:6d:d1:f7:9c:f8:64:0a:ad: 8f:21:74:c7:33:34:53:31:7b:1f:75:46:a0:e3:44: 45:4e:24:4f:db:7c:21:4b:45:cc:07:1c:11:7c:79: 03:8d:a2:37:27:d9:7d:34:1e:e5:2d:37:93:73:12: 43:31:ad:28:18:6b:b0:e1:0b:24:0f:d8:67:f6:af: 5f:9d:b2:5f:39:65:7b:2e:79:13:c7:90:be:fd:35: 27:0c:56:93:3c:fb:73:4e:73:b5:00:59:69:f7:16: 96:f0:c9:43:30:e8:01:24:2a:1e:ef:ed:33:18:53: 2d:8a:54:ec:ef:f0:25:48:c1:5c:c1:1d:90:41:3e: 1d:ac:09:ab:b9:60:7e:52:cc:34:0e:95:78:66:47: 8a:d1:31:b1:02:f4:cc:e4:5c:d3:4d:d2:6b:4a:77: 4d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:66:4C:D7:67:5F:76:E8:E6:E6:15:ED:02:3C:D3:98:C0:69:E5:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/17d58398-4ac1-3bdc-956f-c5d4d3463e85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl X509v3 Authority Key Identifier: keyid:BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer sbgp-ipAddrBlock: critical IPv4: 216.99.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:6f:ea:08:72:10:24:97:27:eb:d5:90:97:b7:2b:75:bf:74: 26:01:2a:5e:72:1e:f0:e1:d8:b0:38:de:e2:6b:bb:1b:b0:7f: 27:cb:ba:30:00:37:ab:15:75:64:2a:40:9e:69:d5:84:5d:c5: c2:30:9c:98:e2:b1:68:1d:a5:21:cd:f8:ee:f0:eb:1e:ee:60: 7b:c3:26:fe:b1:d3:0c:14:62:1e:3b:1c:2e:b3:5c:75:fb:76: 8e:6a:2e:16:d1:e1:dc:90:32:ab:7c:85:8c:93:3f:84:9d:d3: 27:b6:da:a5:8e:a7:a2:15:c6:d4:42:eb:19:0b:d6:0c:73:95: 2d:36:26:44:10:32:38:03:7e:67:4a:e6:b3:b6:94:47:c1:17: d3:41:33:e6:45:06:ad:1b:15:53:df:ca:18:7c:0b:57:bd:e2: af:a6:bb:7b:d3:f1:09:d5:16:98:0c:00:b4:11:c9:42:b0:4b: 8d:c8:a7:1b:4b:3f:ef:b2:54:e4:d3:8a:04:51:a5:86:c4:9d: 18:f5:42:61:7d:47:7d:67:79:45:5c:a3:37:fa:bc:8e:b9:24: da:d0:45:54:59:49:3b:6e:30:b8:15:14:0c:dd:3f:4c:29:f1: 31:ee:91:46:8c:8f:79:b2:34:0b:0f:fc:92:15:1f:dd:45:b4: 3c:8a:d4:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZQ70f16u93p4q0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY3MmE3OTgtYTk3OS00ZjUxLTg1YWUtZTBlZWMzZGNi OWY3MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MjFhZjNhMzQtMWNiZi00YmVmLWIyMzUtOTI4YTdiOTdkNzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8HLpjPatub1R5tbNlAatsn5dmkmZMGBmj4k hdiEkR/7ZNP42thTrJ+lPGFEtXsFvjDaDL/ka8WP8gdd5aHqkGqjjiDxt5u4vwPz CApsFnjBD0szdLoT957lYEcfRsLnbdH3nPhkCq2PIXTHMzRTMXsfdUag40RFTiRP 23whS0XMBxwRfHkDjaI3J9l9NB7lLTeTcxJDMa0oGGuw4QskD9hn9q9fnbJfOWV7 LnkTx5C+/TUnDFaTPPtzTnO1AFlp9xaW8MlDMOgBJCoe7+0zGFMtilTs7/AlSMFc wR2QQT4drAmruWB+Usw0DpV4ZkeK0TGxAvTM5FzTTdJrSndN+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9mTNdnX3bo5uYV7QI805jAaeUpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNjcy YTc5OC1hOTc5LTRmNTEtODVhZS1lMGVlYzNkY2I5ZjcvMTdkNTgzOTgtNGFjMS0z YmRjLTk1NmYtYzVkNGQzNDYzZTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzY3MmE3OTgtYTk3OS00ZjUxLTg1 YWUtZTBlZWMzZGNiOWY3L2M2NzJhNzk4LWE5NzktNGY1MS04NWFlLWUwZWVjM2Rj YjlmNy5jcmwwHwYDVR0jBBgwFoAUuikoNWCwwHyqzvaenrqtsKIgNgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNjcyYTc5OC1hOTc5LTRmNTEtODVhZS1lMGVl YzNkY2I5ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2GOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhv6ghyECSXJ+vVkJe3K3W/dCYBKl5yHvDh2LA43uJruxuwfyfLujAA N6sVdWQqQJ5p1YRdxcIwnJjisWgdpSHN+O7w6x7uYHvDJv6x0wwUYh47HC6zXHX7 do5qLhbR4dyQMqt8hYyTP4Sd0ye22qWOp6IVxtRC6xkL1gxzlS02JkQQMjgDfmdK 5rO2lEfBF9NBM+ZFBq0bFVPfyhh8C1e94q+mu3vT8QnVFpgMALQRyUKwS43IpxtL P++yVOTTigRRpYbEnRj1QmF9R31neUVcozf6vI65JNrQRVRZSTtuMLgVFAzdP0wp 8THukUaMj3myNAsP/JIVH91FtDyK1Cc= -----END CERTIFICATE-----Generated at Sat Jun 7 16:40:01 2025 by rpki-client