$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194/f3485625-9688-304a-b7ce-39a5f6982850.roa File: f3485625-9688-304a-b7ce-39a5f6982850.roa (raw, json) Hash identifier: vjQowO6764ZUsr2LgiFjyvHVkqBThtRjLkBKXQGBQ20= Subject key identifier: 66:39:67:04:FB:5F:A4:43:2E:1C:F4:A8:A4:4B:5A:D5:E7:83:CB:86 Certificate issuer: /CN=1dc67402-ba21-48d8-9973-37169338b194 Certificate serial: 010D0C9F432858491511597951BB038650A226C0 Authority key identifier: CF:E1:95:6F:E0:AD:DE:15:72:C2:1F:CF:03:85:B9:BB:87:08:1D:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194/f3485625-9688-304a-b7ce-39a5f6982850.roa Signing time: Wed 05 Mar 2025 02:00:40 +0000 ROA not before: Wed 05 Mar 2025 02:00:40 +0000 ROA not after: Tue 03 Jun 2025 01:00:40 +0000 asID: 396982 IP address blocks: 216.114.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194/1dc67402-ba21-48d8-9973-37169338b194.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194/1dc67402-ba21-48d8-9973-37169338b194.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:15:11:59:79:51:bb:03:86:50:a2:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dc67402-ba21-48d8-9973-37169338b194 Validity Not Before: Mar 5 02:00:40 2025 GMT Not After : Jun 3 01:00:40 2025 GMT Subject: CN=ea2494e9-4c04-4771-92fe-b3dfeecbaef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7a:e3:1d:c0:7a:7a:8c:2b:35:8d:a4:c3:f8: a3:1e:ca:f4:09:65:22:1a:bb:8f:0a:3a:3e:82:ee: 4c:99:f3:a4:52:ba:7e:7c:c8:35:ec:87:d8:de:7d: 8c:43:76:cd:72:1b:cf:c6:d9:cf:0b:49:f8:55:f8: ad:29:c5:39:63:67:0b:11:1c:dd:a9:77:15:b5:13: f6:42:c2:87:d3:f0:25:82:5b:e5:b4:39:e3:ba:97: fa:2a:2d:06:e2:08:fc:e8:bd:50:0a:b2:91:92:79: 0b:67:ed:bd:d8:17:31:90:9a:7d:50:9f:ba:10:e7: 6a:17:5e:bf:86:85:37:41:05:6c:0a:97:c5:92:ed: f4:06:77:c1:2d:1e:74:18:37:a7:94:b5:f4:b2:cc: 53:17:6e:41:5f:2a:44:48:a5:9e:93:b9:a1:f6:7a: 63:a7:ed:64:2a:1b:0a:27:3a:da:22:06:11:9b:7b: da:a6:9c:01:5f:1b:17:b1:d9:99:57:c2:17:e4:d5: c4:98:3a:0c:73:58:ab:f4:6f:0d:e9:1a:84:20:4c: 47:99:5e:d1:19:a2:e0:31:0d:14:23:93:6f:ce:c0: 91:f8:ea:11:64:f6:da:0e:00:ce:a6:df:e1:4e:22: e9:99:01:bc:c1:db:a3:9d:36:ef:5d:ae:65:01:0d: 75:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:39:67:04:FB:5F:A4:43:2E:1C:F4:A8:A4:4B:5A:D5:E7:83:CB:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194/f3485625-9688-304a-b7ce-39a5f6982850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194/1dc67402-ba21-48d8-9973-37169338b194.crl X509v3 Authority Key Identifier: keyid:CF:E1:95:6F:E0:AD:DE:15:72:C2:1F:CF:03:85:B9:BB:87:08:1D:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194.cer sbgp-ipAddrBlock: critical IPv4: 216.114.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:23:4c:77:6d:0c:b3:2c:1a:1c:08:15:cb:90:f7:58:77:b3: 2d:f1:2e:1f:f2:ec:bb:8b:0e:97:e8:4e:fa:55:fb:0d:04:ff: b2:6e:e1:d8:28:fc:eb:68:a4:bc:e1:19:eb:88:aa:86:58:62: d4:91:15:1f:0e:b1:46:c4:c8:49:ce:fd:6c:70:0d:16:d3:d7: 9d:39:56:4f:0e:a2:4b:a1:d9:40:36:fa:a3:47:64:26:fc:fa: 5b:df:62:6d:f3:cc:ea:c2:b9:9c:38:6a:3d:15:51:63:ae:80: 1b:df:60:5a:aa:73:99:85:1a:e6:cc:7d:02:db:6b:54:8a:54: cb:3c:f8:cf:c9:a4:32:e7:57:71:25:30:a3:49:d8:b2:dc:d0: 41:fd:ef:96:b0:e2:95:67:5a:49:e5:f5:65:83:d3:9f:39:c3: b5:1b:58:1a:f3:d0:52:18:d9:5a:97:80:59:7a:bb:48:2d:c0: 33:f7:73:b0:a7:cf:bf:ef:92:13:17:6a:52:a8:0b:eb:a0:f4: 78:b1:7b:8e:f5:f7:5d:16:9d:39:f0:87:41:20:7d:37:db:0e: fe:12:a8:6d:d4:8a:69:11:d7:23:2e:9c:a3:d2:02:8f:87:86: 85:a4:7b:08:65:3a:e8:b1:fd:09:19:04:79:54:6e:5c:5d:36: e6:ad:62:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkVEVl5UbsDhlCiJsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRjNjc0MDItYmEyMS00OGQ4LTk5NzMtMzcxNjkzMzhi MTk0MB4XDTI1MDMwNTAyMDA0MFoXDTI1MDYwMzAxMDA0MFowLzEtMCsGA1UEAxMk ZWEyNDk0ZTktNGMwNC00NzcxLTkyZmUtYjNkZmVlY2JhZWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHrjHcB6eowrNY2kw/ijHsr0CWUiGruPCjo+ gu5MmfOkUrp+fMg17IfY3n2MQ3bNchvPxtnPC0n4VfitKcU5Y2cLERzdqXcVtRP2 QsKH0/AlglvltDnjupf6Ki0G4gj86L1QCrKRknkLZ+292BcxkJp9UJ+6EOdqF16/ hoU3QQVsCpfFku30BnfBLR50GDenlLX0ssxTF25BXypESKWek7mh9npjp+1kKhsK JzraIgYRm3vappwBXxsXsdmZV8IX5NXEmDoMc1ir9G8N6RqEIExHmV7RGaLgMQ0U I5NvzsCR+OoRZPbaDgDOpt/hTiLpmQG8wdujnTbvXa5lAQ11kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGY5ZwT7X6RDLhz0qKRLWtXng8uGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZGM2 NzQwMi1iYTIxLTQ4ZDgtOTk3My0zNzE2OTMzOGIxOTQvZjM0ODU2MjUtOTY4OC0z MDRhLWI3Y2UtMzlhNWY2OTgyODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWRjNjc0MDItYmEyMS00OGQ4LTk5 NzMtMzcxNjkzMzhiMTk0LzFkYzY3NDAyLWJhMjEtNDhkOC05OTczLTM3MTY5MzM4 YjE5NC5jcmwwHwYDVR0jBBgwFoAUz+GVb+Ct3hVywh/PA4W5u4cIHcEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZGM2NzQwMi1iYTIxLTQ4ZDgtOTk3My0zNzE2 OTMzOGIxOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HJMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAjTHdtDLMsGhwIFcuQ91h3sy3xLh/y7LuLDpfoTvpV+w0E/7Ju4dgo /OtopLzhGeuIqoZYYtSRFR8OsUbEyEnO/WxwDRbT1505Vk8Ookuh2UA2+qNHZCb8 +lvfYm3zzOrCuZw4aj0VUWOugBvfYFqqc5mFGubMfQLba1SKVMs8+M/JpDLnV3El MKNJ2LLc0EH975aw4pVnWknl9WWD0585w7UbWBrz0FIY2VqXgFl6u0gtwDP3c7Cn z7/vkhMXalKoC+ug9Hixe471910WnTnwh0EgfTfbDv4SqG3UimkR1yMunKPSAo+H hoWkewhlOuix/QkZBHlUblxdNuatYgs= -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:35 2025 by rpki-client