$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136302e302f32342d3234203d3e20313337353137.roa File: 3231362e3135312e3136302e302f32342d3234203d3e20313337353137.roa (raw, json) Hash identifier: Clde0/dHtcGVKH4rjkmndu5iS1tfU3ZCZXsTbyWJ6es= Subject key identifier: 33:FA:94:48:37:DE:74:9C:19:91:56:E5:9E:2E:76:B3:6C:FF:95:52 Certificate issuer: /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b Certificate serial: 2DBA15FC839DDE3F7AA77CCF0665A2566901EA72 Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136302e302f32342d3234203d3e20313337353137.roa Signing time: Tue 15 Apr 2025 14:06:40 +0000 ROA not before: Tue 15 Apr 2025 14:01:40 +0000 ROA not after: Tue 14 Apr 2026 14:06:40 +0000 asID: 137517 IP address blocks: 216.151.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 08:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:ba:15:fc:83:9d:de:3f:7a:a7:7c:cf:06:65:a2:56:69:01:ea:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b Validity Not Before: Apr 15 14:01:40 2025 GMT Not After : Apr 14 14:06:40 2026 GMT Subject: CN=33FA944837DE749C199156E59E2E76B36CFF9552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4d:a3:87:ee:22:d8:ae:b7:8a:5f:5d:a9:39: 44:b4:ff:4d:3d:12:bd:f8:15:1e:03:1e:2c:1d:f4: 2c:8d:74:cf:05:f1:d9:a4:1f:86:b8:b3:3d:ef:40: 39:49:86:bf:02:25:b9:c7:56:39:da:cd:b2:33:68: af:50:c0:16:8d:c3:7b:c3:1b:a7:c1:97:bf:c8:5a: 7c:9f:98:7a:48:9e:fa:1e:a6:8f:12:f4:e9:ef:9d: 9f:71:e1:b3:77:d6:9c:b4:15:fd:96:9c:60:eb:36: e0:cd:78:20:76:70:5b:5f:ee:17:34:70:bd:91:5b: 6f:96:29:f6:87:79:e9:61:28:cc:18:5a:52:29:32: f8:e4:22:ba:09:79:85:39:be:40:00:03:53:1e:e0: e5:91:fd:fa:c9:52:db:d5:5b:e7:ed:dc:03:fb:3d: e3:58:91:9e:d5:ca:c0:fd:a3:02:a2:9c:82:62:a8: 81:a4:10:c4:3b:08:f8:fd:02:e6:d7:20:73:80:1d: c5:11:e5:8e:ae:21:7e:bc:bd:5f:3d:3a:e8:b8:96: ff:7b:a6:24:f2:c3:f9:68:93:3b:21:f8:29:eb:e8: d5:a8:6c:13:02:dc:d0:de:47:a6:62:cb:3e:ed:d2: e7:03:e0:c1:51:34:0d:a6:96:18:f7:af:13:c2:ac: 7d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FA:94:48:37:DE:74:9C:19:91:56:E5:9E:2E:76:B3:6C:FF:95:52 X509v3 Authority Key Identifier: keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136302e302f32342d3234203d3e20313337353137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.151.160.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:3a:29:22:0a:d1:d6:1d:fb:a2:63:2e:83:27:a3:c6:94:1b: 98:90:4d:5c:3a:0b:69:43:40:88:61:75:94:ba:d7:1d:82:54: f4:8d:37:47:e3:64:27:26:f0:6a:db:e1:8d:33:c0:f5:ec:08: ba:a9:71:24:3b:e2:81:d8:85:d9:5b:1f:8e:e0:a3:1e:75:61: 82:aa:b5:55:1d:b4:ea:ce:61:f0:39:f9:9e:10:70:9e:c5:79: fe:8a:28:e8:eb:2a:84:fa:34:41:5d:3f:99:5d:c6:7f:14:50: e5:19:68:b6:e5:21:09:7c:d5:e4:e1:cc:c4:7b:7e:56:ba:05: 03:4e:89:9f:a8:27:d6:54:68:c9:1b:e6:52:cd:c8:3f:0d:b5: f3:23:96:11:db:2f:82:aa:63:51:33:f5:f8:7e:f2:6d:fd:9c: de:ab:c4:a5:b6:d4:bf:b1:56:28:3d:97:21:bf:34:43:48:01: 57:e6:a2:a2:bc:52:9e:75:6a:ff:99:4f:bb:fd:12:49:f6:a8: ef:e7:7d:63:cd:2b:34:d9:31:42:38:82:9a:fb:e6:4a:75:85: 2f:9b:46:d2:83:fc:ca:91:f1:a2:04:10:ce:81:05:3a:4f:67: c5:bf:36:39:db:6e:76:28:d8:e7:b3:14:52:66:34:bb:02:1a: 42:af:10:ab -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIULboV/IOd3j96p3zPBmWiVmkB6nIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2UyYmI0ZTU2Y2RmZTJmNDBmODI0YWJkY2NkOWI1MjM0 NjZlY2NkZGIzMDZjOTBjNWIwHhcNMjUwNDE1MTQwMTQwWhcNMjYwNDE0MTQwNjQw WjAzMTEwLwYDVQQDEygzM0ZBOTQ0ODM3REU3NDlDMTk5MTU2RTU5RTJFNzZCMzZD RkY5NTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU2jh+4i2K63 il9dqTlEtP9NPRK9+BUeAx4sHfQsjXTPBfHZpB+GuLM970A5SYa/AiW5x1Y52s2y M2ivUMAWjcN7wxunwZe/yFp8n5h6SJ76HqaPEvTp752fceGzd9actBX9lpxg6zbg zXggdnBbX+4XNHC9kVtvlin2h3npYSjMGFpSKTL45CK6CXmFOb5AAANTHuDlkf36 yVLb1Vvn7dwD+z3jWJGe1crA/aMCopyCYqiBpBDEOwj4/QLm1yBzgB3FEeWOriF+ vL1fPTrouJb/e6Yk8sP5aJM7Ifgp6+jVqGwTAtzQ3kemYss+7dLnA+DBUTQNppYY 968Twqx9wQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFDP6lEg33nScGZFW5Z4udrNs /5VSMB8GA1UdIwQYMBaAFMOj2Rf0OZvCbApodxgr6jzZ/vQCMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGZkZWQxYTAwMTkwMDZlOTdjYjEyOGVmLzAv QzNBM0Q5MTdGNDM5OUJDMjZDMEE2ODc3MTgyQkVBM0NEOUZFRjQwMi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh Yjk3YzI1L2VmYTAxYWNiLTUxZWMtNDA0OC04NTg5LWQwOTM5MDc5MWFlZC83ZTJi YjRlNTZjZGZlMmY0MGY4MjRhYmRjY2Q5YjUyMzQ2NmVjY2RkYjMwNmM5MGM1Yi5j ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThmZGVkMWEwMDE5MDA2 ZTk3Y2IxMjhlZi8wLzMyMzEzNjJlMzEzNTMxMmUzMTM2MzAyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMTMzMzczNTMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADYl6AwDQYJKoZIhvcN AQELBQADggEBACo6KSIK0dYd+6JjLoMno8aUG5iQTVw6C2lDQIhhdZS61x2CVPSN N0fjZCcm8Grb4Y0zwPXsCLqpcSQ74oHYhdlbH47gox51YYKqtVUdtOrOYfA5+Z4Q cJ7Fef6KKOjrKoT6NEFdP5ldxn8UUOUZaLblIQl81eThzMR7fla6BQNOiZ+oJ9ZU aMkb5lLNyD8NtfMjlhHbL4KqY1Ez9fh+8m39nN6rxKW21L+xVig9lyG/NENIAVfm oqK8Up51av+ZT7v9Ekn2qO/nfWPNKzTZMUI4gpr75kp1hS+bRtKD/MqR8aIEEM6B BTpPZ8W/NjnbbnYo2OezFFJmNLsCGkKvEKs= -----END CERTIFICATE-----Generated at Tue Apr 29 00:21:46 2025 by rpki-client