$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e/fa1c6b6a-b00d-3519-8d4f-3e24681f6178.roa File: fa1c6b6a-b00d-3519-8d4f-3e24681f6178.roa (raw, json) Hash identifier: +b9NxMBlPYIMwam6eDk/knZ6qVJOYFtIeVlnWw8fvcM= Subject key identifier: A8:27:AC:BB:40:5C:A2:B7:BC:6A:3D:33:2C:1D:FF:E0:F2:D6:7C:E5 Certificate issuer: /CN=0f420918-35e5-40cb-b0bd-59d73276fa1e Certificate serial: 010D0C9F432858493243E142B1C50F490C0571C0 Authority key identifier: CE:14:8A:A5:94:96:10:E8:87:9B:1A:BC:34:C7:E1:CB:01:F3:24:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e/fa1c6b6a-b00d-3519-8d4f-3e24681f6178.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 398146 IP address blocks: 216.24.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e/0f420918-35e5-40cb-b0bd-59d73276fa1e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e/0f420918-35e5-40cb-b0bd-59d73276fa1e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:e1:42:b1:c5:0f:49:0c:05:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f420918-35e5-40cb-b0bd-59d73276fa1e Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=0a3cfb81-3a73-4e12-91da-dcd3578c15de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:78:83:0b:48:e5:cb:48:32:fc:cb:d6:18:7f: a0:5e:5e:d6:4f:8a:d4:7d:21:81:36:3c:fb:da:21: a7:99:9a:e0:b3:ed:f0:b5:73:33:cc:6d:0c:6a:77: 5d:c8:03:d3:08:45:7f:e0:33:cc:96:19:48:fe:76: 04:82:ba:0c:72:01:ec:d8:ff:5e:a8:73:1c:3e:d9: cb:1b:8a:b5:1c:8e:e5:51:0b:d6:82:87:41:f6:76: a1:f2:d1:2c:ad:6a:fd:e4:9e:97:1f:37:fc:68:2d: 09:2f:cb:00:6b:fc:e5:29:e1:5f:af:60:e4:c4:3a: 48:fd:a7:9a:02:7f:21:66:80:db:bd:44:56:ed:97: c5:ff:93:75:39:68:5d:41:75:42:75:6a:e9:8d:5f: 81:fe:72:8a:0f:f9:4f:b0:3b:8d:a4:07:c6:ef:4d: 6c:e1:ea:4f:d5:53:3d:1d:1e:4d:7b:c9:c8:a6:4e: 08:84:fc:a9:13:09:c0:f2:e1:a0:18:f6:84:72:e6: da:88:24:90:9b:96:14:b7:c8:4b:8e:1a:d1:ae:25: 65:12:7b:42:c7:8b:ef:aa:18:99:fa:20:6b:15:a4: 16:ac:79:31:56:dd:4c:a3:92:38:7d:f7:65:02:59: 1f:94:29:e7:0f:52:36:c8:f7:bf:32:2f:96:82:b7: 9d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:27:AC:BB:40:5C:A2:B7:BC:6A:3D:33:2C:1D:FF:E0:F2:D6:7C:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e/fa1c6b6a-b00d-3519-8d4f-3e24681f6178.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e/0f420918-35e5-40cb-b0bd-59d73276fa1e.crl X509v3 Authority Key Identifier: keyid:CE:14:8A:A5:94:96:10:E8:87:9B:1A:BC:34:C7:E1:CB:01:F3:24:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e.cer sbgp-ipAddrBlock: critical IPv4: 216.24.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:d4:35:78:f1:9a:53:70:e9:92:5a:ae:fb:00:80:77:ef:50: 9e:77:f4:2d:f3:44:cc:b7:3b:e5:86:c9:df:fc:c2:90:59:93: fb:d5:7a:2a:fd:e7:ac:41:3d:26:c3:f6:c8:34:b6:32:4e:ff: c6:49:df:d1:b4:67:b5:c5:02:36:94:65:b3:c2:e6:86:c2:3e: bb:76:7e:e4:01:00:98:80:8b:62:de:2c:1f:f9:15:89:fc:a2: d1:4a:22:7d:74:e1:f1:23:c3:6b:0b:f4:02:ae:e8:4c:81:72: 7e:d1:74:7c:f7:cd:b9:09:53:ec:fc:de:75:f5:32:58:f0:aa: 25:92:47:b5:c2:3e:37:c9:fe:b7:6e:46:df:02:08:24:20:56: 96:32:c1:01:60:b2:cc:3c:63:6d:5c:c3:01:00:d9:80:2a:71: bc:45:d9:d7:61:b5:56:1e:9b:d4:3e:55:9f:a2:59:07:ed:cc: 9d:cf:d8:d1:bc:aa:f3:ae:57:83:76:92:fa:28:98:4b:9d:6b: fc:b2:ff:ae:25:23:4f:a9:5c:3b:89:33:17:15:31:0c:9f:3a: 30:e4:1d:af:2c:f1:1f:0c:07:9b:e7:46:62:a7:c4:0f:5b:49: fa:68:5e:46:62:7e:b6:d2:ce:c2:b4:c1:6a:c2:fa:b7:27:54: cc:bc:e6:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ+FCscUPSQwFccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY0MjA5MTgtMzVlNS00MGNiLWIwYmQtNTlkNzMyNzZm YTFlMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk MGEzY2ZiODEtM2E3My00ZTEyLTkxZGEtZGNkMzU3OGMxNWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3iDC0jly0gy/MvWGH+gXl7WT4rUfSGBNjz7 2iGnmZrgs+3wtXMzzG0ManddyAPTCEV/4DPMlhlI/nYEgroMcgHs2P9eqHMcPtnL G4q1HI7lUQvWgodB9nah8tEsrWr95J6XHzf8aC0JL8sAa/zlKeFfr2DkxDpI/aea An8hZoDbvURW7ZfF/5N1OWhdQXVCdWrpjV+B/nKKD/lPsDuNpAfG701s4epP1VM9 HR5Ne8nIpk4IhPypEwnA8uGgGPaEcubaiCSQm5YUt8hLjhrRriVlEntCx4vvqhiZ +iBrFaQWrHkxVt1Mo5I4ffdlAlkflCnnD1I2yPe/Mi+WgredaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgnrLtAXKK3vGo9Mywd/+Dy1nzlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wZjQy MDkxOC0zNWU1LTQwY2ItYjBiZC01OWQ3MzI3NmZhMWUvZmExYzZiNmEtYjAwZC0z NTE5LThkNGYtM2UyNDY4MWY2MTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGY0MjA5MTgtMzVlNS00MGNiLWIw YmQtNTlkNzMyNzZmYTFlLzBmNDIwOTE4LTM1ZTUtNDBjYi1iMGJkLTU5ZDczMjc2 ZmExZS5jcmwwHwYDVR0jBBgwFoAUzhSKpZSWEOiHmxq8NMfhywHzJCkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wZjQyMDkxOC0zNWU1LTQwY2ItYjBiZC01OWQ3 MzI3NmZhMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Bg4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3UNXjxmlNw6ZJarvsAgHfvUJ539C3zRMy3O+WGyd/8wpBZk/vVeir9 56xBPSbD9sg0tjJO/8ZJ39G0Z7XFAjaUZbPC5obCPrt2fuQBAJiAi2LeLB/5FYn8 otFKIn104fEjw2sL9AKu6EyBcn7RdHz3zbkJU+z83nX1MljwqiWSR7XCPjfJ/rdu Rt8CCCQgVpYywQFgssw8Y21cwwEA2YAqcbxF2ddhtVYem9Q+VZ+iWQftzJ3P2NG8 qvOuV4N2kvoomEuda/yy/64lI0+pXDuJMxcVMQyfOjDkHa8s8R8MB5vnRmKnxA9b SfpoXkZifrbSzsK0wWrC+rcnVMy85iI= -----END CERTIFICATE-----Generated at Wed Apr 30 16:12:51 2025 by rpki-client