$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/26ad5884-9be1-3a84-8877-20f244a55c1e.roa File: 26ad5884-9be1-3a84-8877-20f244a55c1e.roa (raw, json) Hash identifier: dmUxpVMWGuaFrOXM+RY36JnWm2jDyDKrst5RMxWWd8c= Subject key identifier: D5:67:1E:AD:DF:A3:69:B8:16:22:AF:AA:97:EA:25:C9:E4:3D:71:6F Certificate issuer: /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Certificate serial: 010D0C9F432858499DBF378E03F9FE1BC67213C8 Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/26ad5884-9be1-3a84-8877-20f244a55c1e.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 40501 IP address blocks: 216.235.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:37:8e:03:f9:fe:1b:c6:72:13:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=d4bbeb1a-fd91-4801-9098-a421cb9d3bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b6:fd:17:8c:82:06:c0:e1:59:cb:f2:07:4a: 89:79:49:87:5d:a2:d3:94:38:65:87:90:b1:02:b2: 46:18:8a:2e:5a:22:a9:68:2a:6e:39:9b:5b:c9:7a: 47:ca:ce:7f:6d:40:69:4a:94:6c:53:21:73:31:d3: 91:2f:ef:ed:82:cd:4d:22:83:b7:8e:9d:c2:89:d6: 43:7b:5c:9d:13:e9:c0:ca:2e:cc:88:6d:98:5a:92: e0:50:3b:89:32:be:3f:ec:0e:a9:9e:3c:25:cd:c4: fd:44:4c:7e:88:f4:88:a5:46:3d:68:c8:06:59:82: 95:d3:94:a9:49:af:63:fe:6a:62:45:f7:c5:08:2a: ec:84:4b:ac:d6:dc:1e:6f:c4:29:a7:28:08:b7:74: f3:3a:c8:cf:82:f9:01:b1:b5:82:7c:50:2a:89:89: 57:9e:d0:cb:13:1f:b3:bb:08:0a:24:cb:df:c2:e2: c8:f1:c4:b2:ec:9f:0b:22:78:7b:4a:1b:61:7c:83: d5:bf:db:89:41:30:fa:53:66:64:e9:96:8e:3f:92: 0f:21:80:88:61:30:c9:0f:a1:8e:19:5e:71:f4:ac: 50:7f:a3:2d:3d:19:04:aa:12:c5:33:1e:bc:8c:49: 42:44:94:83:8e:e9:53:52:ce:bd:7b:4d:48:54:92: 8d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:67:1E:AD:DF:A3:69:B8:16:22:AF:AA:97:EA:25:C9:E4:3D:71:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/26ad5884-9be1-3a84-8877-20f244a55c1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl X509v3 Authority Key Identifier: keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer sbgp-ipAddrBlock: critical IPv4: 216.235.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:34:01:8f:40:9e:9e:12:0e:fb:73:9e:67:42:35:63:95:71: c4:0e:13:9b:7b:86:b5:81:4a:1d:d5:fa:71:a0:1b:b2:39:d1: 6d:cf:ff:89:7d:66:f1:cc:dc:ad:6b:9e:98:6c:c2:94:07:f2: 0b:7e:d4:2e:c0:7f:d9:53:78:0e:58:f8:d3:9e:7f:55:7c:53: a7:48:1e:ee:5c:ac:b8:64:9f:c3:5d:43:ac:23:81:6d:aa:61: d8:65:27:09:09:a1:f5:26:f8:36:2c:0f:86:f8:84:50:77:24: 12:88:c4:c1:44:b0:cf:1d:5d:4d:3c:84:29:2d:76:6e:21:c6: 84:89:f4:9d:aa:87:fb:1c:46:7a:ac:ec:a7:56:2d:26:6c:52: 61:a0:10:b0:83:e1:03:aa:60:bb:6a:9a:8b:8a:a3:ca:81:10: ef:2f:7c:0e:3d:df:cf:20:c0:2b:85:c6:99:a1:de:9b:5c:87: 14:c3:6a:26:88:10:f5:7c:6c:89:f9:8c:0c:e8:90:e4:ac:84: 64:bc:65:6c:9c:f5:31:62:78:aa:6a:57:85:92:49:70:34:3f: af:c6:9a:ce:9b:af:b7:76:51:be:f8:9d:04:b3:4e:9e:e2:f8: 5b:55:7a:5d:6a:a1:1a:dc:7e:84:a3:90:de:cc:2a:59:e6:fe: 2f:d1:09:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzeOA/n+G8ZyE8gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRkMzQ0MTEtMjM1ZC00ZGJlLThhOWMtZjJkYzExZDc1 NTY2MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk ZDRiYmViMWEtZmQ5MS00ODAxLTkwOTgtYTQyMWNiOWQzYmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLb9F4yCBsDhWcvyB0qJeUmHXaLTlDhlh5Cx ArJGGIouWiKpaCpuOZtbyXpHys5/bUBpSpRsUyFzMdORL+/tgs1NIoO3jp3CidZD e1ydE+nAyi7MiG2YWpLgUDuJMr4/7A6pnjwlzcT9REx+iPSIpUY9aMgGWYKV05Sp Sa9j/mpiRffFCCrshEus1tweb8QppygIt3TzOsjPgvkBsbWCfFAqiYlXntDLEx+z uwgKJMvfwuLI8cSy7J8LInh7ShthfIPVv9uJQTD6U2Zk6ZaOP5IPIYCIYTDJD6GO GV5x9KxQf6MtPRkEqhLFMx68jElCRJSDjulTUs69e01IVJKNowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVnHq3fo2m4FiKvqpfqJcnkPXFvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQz NDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRjMTFkNzU1NjYvMjZhZDU4ODQtOWJlMS0z YTg0LTg4NzctMjBmMjQ0YTU1YzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjRkMzQ0MTEtMjM1ZC00ZGJlLThh OWMtZjJkYzExZDc1NTY2L2Y0ZDM0NDExLTIzNWQtNGRiZS04YTljLWYyZGMxMWQ3 NTU2Ni5jcmwwHwYDVR0jBBgwFoAU1gky9BKV+ISXC+5uyq+8ckes3QowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQzNDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRj MTFkNzU1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OtXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD40AY9Anp4SDvtznmdCNWOVccQOE5t7hrWBSh3V+nGgG7I50W3P/4l9 ZvHM3K1rnphswpQH8gt+1C7Af9lTeA5Y+NOef1V8U6dIHu5crLhkn8NdQ6wjgW2q YdhlJwkJofUm+DYsD4b4hFB3JBKIxMFEsM8dXU08hCktdm4hxoSJ9J2qh/scRnqs 7KdWLSZsUmGgELCD4QOqYLtqmouKo8qBEO8vfA49388gwCuFxpmh3ptchxTDaiaI EPV8bIn5jAzokOSshGS8ZWyc9TFieKpqV4WSSXA0P6/Gms6br7d2Ub74nQSzTp7i +FtVel1qoRrcfoSjkN7MKlnm/i/RCTk= -----END CERTIFICATE-----Generated at Tue Apr 29 07:50:57 2025 by rpki-client