$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/2ff7164d-6098-3c3f-b325-e4b4aa2fb8ab.roa File: 2ff7164d-6098-3c3f-b325-e4b4aa2fb8ab.roa (raw, json) Hash identifier: gC9bxxKeFoKMUAfVTLHKZZBQAtWblKGqVALiido+SXc= Subject key identifier: DA:0F:A5:F5:BD:A5:6F:02:AC:BB:70:C9:26:2A:5E:AD:CF:86:DA:38 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584988CF286F1117CB2A441F9540 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/2ff7164d-6098-3c3f-b325-e4b4aa2fb8ab.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 14477 IP address blocks: 216.59.69.0/24 maxlen: 24 216.59.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:28:6f:11:17:cb:2a:44:1f:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=67f9e459-c639-4189-8423-622833208a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:40:c5:aa:8b:89:de:97:4f:18:eb:37:e4:cd: 5a:74:04:ee:b9:f2:a4:e3:0b:d8:c3:52:04:0c:29: 91:63:c1:8f:d6:27:a4:f6:14:36:b2:55:e1:27:43: 3c:46:da:7b:18:b4:2b:fc:14:01:df:27:86:76:b7: de:fc:6b:ab:b8:7b:c1:fa:a4:01:8e:9c:ed:11:06: a5:0e:22:c8:a5:dd:e7:f1:02:b0:c7:91:49:fc:ec: 01:7c:df:34:37:d9:2d:b7:34:12:b4:f8:f2:eb:b4: 08:63:51:57:11:6e:67:63:d0:f6:c0:e7:a3:d6:d3: 8b:22:62:c7:bf:f2:9d:70:91:0e:32:83:39:3c:cd: d5:51:16:72:a2:7b:68:5f:3e:51:6c:a2:a5:b9:b0: 55:3f:87:91:0e:dd:f8:15:30:1e:44:3e:07:c7:cb: 70:af:30:28:07:76:2e:24:7a:76:94:fa:c1:7f:86: 97:76:d0:85:d9:a7:a8:38:6d:0e:7b:42:7c:70:61: cc:c7:17:04:57:bd:42:51:ef:d4:e4:7b:12:af:67: 2b:73:6f:af:e3:e1:34:db:83:52:2d:e6:5f:f3:c9: 0b:c3:04:ca:06:06:f4:0a:ea:d9:cf:22:3e:78:18: 28:32:27:19:a0:7d:fb:34:b1:58:49:38:b4:8f:7b: 28:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:0F:A5:F5:BD:A5:6F:02:AC:BB:70:C9:26:2A:5E:AD:CF:86:DA:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/2ff7164d-6098-3c3f-b325-e4b4aa2fb8ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.59.69.0/24 216.59.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:8e:70:8f:0c:af:a8:fc:f9:86:da:dc:46:24:fc:b6:cb:9b: bf:ea:6f:c3:cf:cb:ba:5d:8c:ac:55:5f:88:26:df:ea:c1:d5: 27:d7:fa:ac:5f:6b:a4:45:38:cd:2e:0d:b1:dc:cd:76:70:c4: 17:5a:2d:4c:e6:48:ba:be:63:d6:0b:a2:4d:a5:de:c9:fc:61: ae:12:cb:de:b0:e1:b8:d1:ee:28:d7:90:44:a1:31:26:95:f6: 4e:62:b0:ab:d9:49:16:b2:80:69:f7:ed:1b:a3:32:ae:e3:fc: 09:53:6c:27:72:4c:e5:ea:54:ad:b2:85:67:f3:95:67:69:d1: f1:6e:cf:b8:1f:18:c7:ba:05:31:c1:90:36:c0:c0:49:eb:9b: a5:21:16:94:c4:70:d2:e2:bb:ad:b4:3b:8b:f3:7d:50:76:9a: 1b:db:64:43:4a:7b:25:41:2f:81:6b:98:9a:e5:90:ec:9a:97: f2:c5:7c:70:ec:37:94:d0:df:75:4f:7a:9d:a7:fc:79:59:d9: 06:0f:93:eb:c2:34:af:3d:a4:88:d6:62:cc:aa:cd:81:6a:be: 28:aa:99:2e:89:8a:95:60:2a:83:f6:0d:06:d6:1d:34:a0:b5: 5e:c6:9a:6e:1b:ce:6d:52:83:0f:96:75:38:eb:d7:87:8f:a5: aa:0b:06:0a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmIzyhvERfLKkQflUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk NjdmOWU0NTktYzYzOS00MTg5LTg0MjMtNjIyODMzMjA4YTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0DFqouJ3pdPGOs35M1adATuufKk4wvYw1IE DCmRY8GP1iek9hQ2slXhJ0M8Rtp7GLQr/BQB3yeGdrfe/GuruHvB+qQBjpztEQal DiLIpd3n8QKwx5FJ/OwBfN80N9kttzQStPjy67QIY1FXEW5nY9D2wOej1tOLImLH v/KdcJEOMoM5PM3VURZyontoXz5RbKKlubBVP4eRDt34FTAeRD4Hx8twrzAoB3Yu JHp2lPrBf4aXdtCF2aeoOG0Oe0J8cGHMxxcEV71CUe/U5HsSr2crc2+v4+E024NS LeZf88kLwwTKBgb0CurZzyI+eBgoMicZoH37NLFYSTi0j3soBQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNoPpfW9pW8CrLtwySYqXq3Phto4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMmZmNzE2NGQtNjA5OC0z YzNmLWIzMjUtZTRiNGFhMmZiOGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2DtFAwQA 2DtHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAMOOcI8Mr6j8+Yba3EYk/LbLm7/qb8PPy7pdjKxVX4gm3+rB 1SfX+qxfa6RFOM0uDbHczXZwxBdaLUzmSLq+Y9YLok2l3sn8Ya4Sy96w4bjR7ijX kEShMSaV9k5isKvZSRaygGn37RujMq7j/AlTbCdyTOXqVK2yhWfzlWdp0fFuz7gf GMe6BTHBkDbAwEnrm6UhFpTEcNLiu620O4vzfVB2mhvbZENKeyVBL4FrmJrlkOya l/LFfHDsN5TQ33VPep2n/HlZ2QYPk+vCNK89pIjWYsyqzYFqviiqmS6JipVgKoP2 DQbWHTSgtV7Gmm4bzm1Sgw+WdTjr14ePpaoLBgo= -----END CERTIFICATE-----Generated at Tue Apr 29 09:28:39 2025 by rpki-client