$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/609ec1e0-408b-3bfd-976b-3d0ccbd2931b.roa File: 609ec1e0-408b-3bfd-976b-3d0ccbd2931b.roa (raw, json) Hash identifier: eF08/0A8VtwIkm77PVU9fMxuaGaw3x+xnUVvEVZJ8y4= Subject key identifier: 54:2F:73:50:E2:A8:0D:87:FC:64:3D:0A:A3:EC:B8:D6:EC:80:6C:8E Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F43285849A354804D8F938AD605FE0CA8 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/609ec1e0-408b-3bfd-976b-3d0ccbd2931b.roa Signing time: Fri 25 Apr 2025 01:00:47 +0000 ROA not before: Fri 25 Apr 2025 01:00:47 +0000 ROA not after: Thu 24 Jul 2025 01:00:47 +0000 asID: 394002 IP address blocks: 216.230.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:54:80:4d:8f:93:8a:d6:05:fe:0c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Apr 25 01:00:47 2025 GMT Not After : Jul 24 01:00:47 2025 GMT Subject: CN=5f866c13-d9f1-4e06-a8c9-2353c8a04a4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:be:21:f7:ab:f9:05:f1:da:f3:47:c5:36:27: 6d:1b:45:68:30:e2:df:60:ce:27:0b:8f:19:18:98: c0:84:0b:0b:68:a1:6a:b0:89:06:ef:09:01:90:2a: 2d:51:a4:b6:43:68:c6:32:b2:32:2e:bf:04:73:f3: e9:c1:e6:9c:3c:5c:f3:58:ec:5c:22:2a:d8:5e:8c: f6:00:ae:f0:57:ee:c2:fc:05:b7:4c:c0:70:8a:1d: 73:7e:c1:6e:4c:26:c7:ad:1a:64:5b:ce:d9:33:92: 52:71:67:2c:52:e0:d6:c7:a8:3b:d5:a8:a9:43:cc: 27:0b:a7:dd:10:70:01:8a:f9:5f:ca:93:2c:28:4d: b8:de:77:e5:2b:6d:b8:45:13:59:bc:3f:5e:00:30: a0:c2:93:15:e8:c0:25:53:0d:1a:24:da:b6:0a:a8: e5:95:31:bb:a8:cd:d4:2d:66:56:b1:cb:61:d0:14: 90:27:22:63:7c:7a:d1:e0:61:8b:f1:f4:5d:da:06: 91:18:4c:6c:b8:57:ad:f3:86:db:f8:0b:84:21:6e: 18:96:30:75:24:88:5e:7f:6f:ef:a1:d2:37:dc:12: 33:24:3a:6b:f1:44:2f:fc:bc:23:cd:7a:ca:c6:52: 71:86:a9:4f:78:82:8d:a7:79:2d:6d:8b:31:ce:47: 35:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2F:73:50:E2:A8:0D:87:FC:64:3D:0A:A3:EC:B8:D6:EC:80:6C:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/609ec1e0-408b-3bfd-976b-3d0ccbd2931b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv4: 216.230.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:8b:47:f8:30:99:47:75:3d:47:ee:f1:93:51:50:9f:b8:63: ca:1e:85:7f:fc:4f:0e:65:d0:4c:e1:ae:89:5b:e6:17:f1:7e: 58:83:1f:e7:7d:31:8b:65:af:4b:71:38:31:92:e3:67:df:9a: 50:41:28:a3:28:22:84:5d:1c:70:15:6f:f6:15:71:b0:f2:86: b8:dc:ea:e5:9b:e1:a4:a6:b8:f5:28:4f:c6:2d:98:f6:18:73: 00:df:86:bb:96:dd:e3:a4:f5:67:fa:23:28:36:96:32:01:c8: 2f:c1:a3:de:f2:18:56:d7:57:e1:b9:e5:15:42:38:f9:56:b9: f3:2a:ff:1d:2c:a1:24:0b:a5:bf:59:7c:df:6a:dd:f4:96:e1: d4:34:50:69:87:cf:15:ae:72:8f:62:94:d2:d7:b9:34:77:2b: 82:75:5c:5b:ae:5f:75:a8:a5:11:5d:1a:cd:2a:ba:f1:d5:25: 2f:6c:0d:d7:93:25:66:86:f6:7e:fd:08:84:6b:49:2a:a0:18: 4f:95:a6:6e:18:65:dd:e6:fc:88:77:60:95:1b:fc:0a:47:ba: 73:85:90:68:69:ab:86:01:1c:cc:94:5e:42:41:80:f2:13:f8: 17:95:d5:c2:7e:2e:76:1d:c9:f9:9e:2a:43:d8:cf:2e:b0:82: ed:99:80:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmjVIBNj5OK1gX+DKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI1MDQyNTAxMDA0N1oXDTI1MDcyNDAxMDA0N1owLzEtMCsGA1UEAxMk NWY4NjZjMTMtZDlmMS00ZTA2LWE4YzktMjM1M2M4YTA0YTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb4h96v5BfHa80fFNidtG0VoMOLfYM4nC48Z GJjAhAsLaKFqsIkG7wkBkCotUaS2Q2jGMrIyLr8Ec/PpweacPFzzWOxcIirYXoz2 AK7wV+7C/AW3TMBwih1zfsFuTCbHrRpkW87ZM5JScWcsUuDWx6g71aipQ8wnC6fd EHABivlfypMsKE243nflK224RRNZvD9eADCgwpMV6MAlUw0aJNq2CqjllTG7qM3U LWZWscth0BSQJyJjfHrR4GGL8fRd2gaRGExsuFet84bb+AuEIW4YljB1JIhef2/v odI33BIzJDpr8UQv/LwjzXrKxlJxhqlPeIKNp3ktbYsxzkc1vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQvc1DiqA2H/GQ9CqPsuNbsgGyOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvNjA5ZWMxZTAtNDA4Yi0z YmZkLTk3NmItM2QwY2NiZDI5MzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OYdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuLR/gwmUd1PUfu8ZNRUJ+4Y8oehX/8Tw5l0Ezhrolb5hfxfliDH+d9 MYtlr0txODGS42ffmlBBKKMoIoRdHHAVb/YVcbDyhrjc6uWb4aSmuPUoT8YtmPYY cwDfhruW3eOk9Wf6Iyg2ljIByC/Bo97yGFbXV+G55RVCOPlWufMq/x0soSQLpb9Z fN9q3fSW4dQ0UGmHzxWuco9ilNLXuTR3K4J1XFuuX3WopRFdGs0quvHVJS9sDdeT JWaG9n79CIRrSSqgGE+Vpm4YZd3m/Ih3YJUb/ApHunOFkGhpq4YBHMyUXkJBgPIT +BeV1cJ+LnYdyfmeKkPYzy6wgu2ZgCg= -----END CERTIFICATE-----Generated at Thu May 1 11:18:34 2025 by rpki-client