$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/7f3d8716-5084-3bfc-ba53-053fa3abb716.roa File: 7f3d8716-5084-3bfc-ba53-053fa3abb716.roa (raw, json) Hash identifier: BjuH9nQ8IMDUW8yFXh+NQC75kBQLcMevzZswtahpi8Y= Subject key identifier: 25:0B:75:FC:F5:07:E8:8D:6B:F8:37:9B:03:EC:DC:80:73:35:3A:C8 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F432858491AA6C7A67EAAAACF3D103C80 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/7f3d8716-5084-3bfc-ba53-053fa3abb716.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 394708 IP address blocks: 216.255.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:c7:a6:7e:aa:aa:cf:3d:10:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=314a2a95-0c4d-46b2-bdf1-44cc51dc9d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a6:76:a5:37:2c:d3:1c:1d:92:b0:11:c1:13: c2:39:72:f5:fe:eb:97:04:24:77:0d:98:22:d7:f7: 09:02:b2:ee:1b:0e:40:1b:34:05:c4:ad:0b:88:80: 92:89:75:91:e3:09:40:1b:b2:5c:02:34:fd:d9:05: 49:66:21:23:ed:ce:e2:d8:4b:1c:35:c3:90:c8:0a: 63:fd:1b:d9:6c:1f:ec:bc:e4:d8:6a:12:8c:20:bf: 42:d2:21:9d:b8:e5:ce:28:81:1a:0e:fd:f3:83:52: d2:c1:58:3d:51:fd:44:23:a8:e3:ba:02:64:e8:13: bf:ec:36:3e:4c:1a:b8:7a:ef:49:82:ee:f6:10:53: b6:40:80:3b:a0:2a:fa:7b:3e:30:ff:e2:11:12:3b: f8:2f:5b:c0:df:09:95:28:e6:3d:10:71:b7:b8:b3: 43:d0:f5:38:01:c9:90:4d:41:29:62:f2:38:d8:3c: fc:75:2a:fe:6a:e3:74:40:60:43:da:76:bc:f2:e0: c4:a0:63:6a:66:f6:1f:b3:20:0e:de:4e:fb:be:f1: 38:7d:94:63:bd:32:62:83:2d:50:b6:61:50:cf:a2: 96:5c:c7:f4:dd:4e:4e:87:7b:b7:64:73:07:7e:4b: 96:9c:43:b3:00:f5:fd:4d:c6:8f:4c:88:8c:1a:cf: 28:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0B:75:FC:F5:07:E8:8D:6B:F8:37:9B:03:EC:DC:80:73:35:3A:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/7f3d8716-5084-3bfc-ba53-053fa3abb716.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 216.255.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:71:b9:a3:44:c9:cd:d7:0c:6d:c8:ec:2a:3f:dd:65:74:08: 76:95:5e:77:0e:5c:6f:e7:3c:d7:5f:b9:dd:31:f7:db:6b:51: 14:a4:f1:30:14:bd:34:83:cc:b5:be:cb:7e:72:ab:47:da:e2: 59:18:c0:a4:7d:a8:e8:b9:d0:98:2c:e3:a7:1e:51:48:bf:e4: 40:98:0c:d8:f6:c0:0d:58:0f:30:ab:64:fe:1f:6e:fa:33:d7: 17:9c:19:e8:75:1f:49:92:76:18:47:f7:40:6c:e3:17:db:28: 95:62:52:3d:7f:b4:35:5e:b1:cc:39:80:c8:89:60:0c:59:c3: 9d:d0:46:fc:dd:4f:7a:c0:79:5c:d7:f3:aa:36:02:0f:c7:ec: 6d:05:5f:33:19:17:10:73:6a:48:38:4c:b2:5d:67:16:39:d6: 58:2a:00:c7:53:3c:fa:c7:95:b0:06:6c:23:80:c4:09:fc:a1: 12:28:88:11:70:0c:ca:b3:df:8c:20:b5:d5:b8:2b:0a:c8:9c: 95:db:ea:13:89:02:49:fa:99:0e:7d:66:49:e1:8d:34:df:4f: b5:b7:da:9d:66:c4:0c:09:b0:3c:6b:71:f1:b9:8b:00:5e:10: b6:df:54:68:be:8d:e4:79:43:7b:f8:72:ef:09:78:96:a2:00: d6:49:76:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkapsemfqqqzz0QPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk MzE0YTJhOTUtMGM0ZC00NmIyLWJkZjEtNDRjYzUxZGM5ZDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6Z2pTcs0xwdkrARwRPCOXL1/uuXBCR3DZgi 1/cJArLuGw5AGzQFxK0LiICSiXWR4wlAG7JcAjT92QVJZiEj7c7i2EscNcOQyApj /RvZbB/svOTYahKMIL9C0iGduOXOKIEaDv3zg1LSwVg9Uf1EI6jjugJk6BO/7DY+ TBq4eu9Jgu72EFO2QIA7oCr6ez4w/+IREjv4L1vA3wmVKOY9EHG3uLND0PU4AcmQ TUEpYvI42Dz8dSr+auN0QGBD2na88uDEoGNqZvYfsyAO3k77vvE4fZRjvTJigy1Q tmFQz6KWXMf03U5Oh3u3ZHMHfkuWnEOzAPX9TcaPTIiMGs8odQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCULdfz1B+iNa/g3mwPs3IBzNTrIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvN2YzZDg3MTYtNTA4NC0z YmZjLWJhNTMtMDUzZmEzYWJiNzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2P88MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERxuaNEyc3XDG3I7Co/3WV0CHaVXncOXG/nPNdfud0x99trURSk8TAU vTSDzLW+y35yq0fa4lkYwKR9qOi50Jgs46ceUUi/5ECYDNj2wA1YDzCrZP4fbvoz 1xecGeh1H0mSdhhH90Bs4xfbKJViUj1/tDVescw5gMiJYAxZw53QRvzdT3rAeVzX 86o2Ag/H7G0FXzMZFxBzakg4TLJdZxY51lgqAMdTPPrHlbAGbCOAxAn8oRIoiBFw DMqz34wgtdW4KwrInJXb6hOJAkn6mQ59ZknhjTTfT7W32p1mxAwJsDxrcfG5iwBe ELbfVGi+jeR5Q3v4cu8JeJaiANZJdvg= -----END CERTIFICATE-----Generated at Tue Apr 29 03:44:00 2025 by rpki-client