$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/7f5391ad-06b1-31d5-8a01-1923e0d28015.roa File: 7f5391ad-06b1-31d5-8a01-1923e0d28015.roa (raw, json) Hash identifier: TvFzaIsGxtltR2NBRTpIv68yUye29cH+g9Kh9rFIzYE= Subject key identifier: A6:59:BC:00:E6:1E:B0:64:C3:90:83:C0:07:2B:CA:AB:D6:35:E9:17 Certificate issuer: /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec Certificate serial: 010D0C9F432858498E648C6757ACD28FED9D6600 Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/7f5391ad-06b1-31d5-8a01-1923e0d28015.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 16509 IP address blocks: 216.52.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:8c:67:57:ac:d2:8f:ed:9d:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=085a2303-5cb8-4399-8eb3-65448cb23620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:93:e5:f0:c9:a3:3f:e5:dd:15:b7:70:bd:5a: 25:ed:7d:38:76:eb:f8:53:cf:94:d1:dd:d5:6e:3c: 4f:81:1f:b2:f2:d1:ff:1d:5a:37:bd:00:0d:0c:cc: 1d:a8:78:6d:9f:93:d1:9e:67:01:db:d7:1b:12:93: d1:c3:7f:a0:08:f3:e2:77:81:11:1f:05:b8:48:32: 13:c8:5f:20:c7:36:cc:39:ce:69:38:a5:fc:57:95: c2:c7:72:11:d5:06:30:1b:55:0d:2a:04:71:60:03: 35:ec:40:11:d6:33:a1:90:da:f1:14:58:0d:05:d2: ad:aa:94:74:31:ab:9b:78:58:37:d5:9d:3d:bc:03: 00:74:66:00:87:f4:93:31:8b:eb:39:ce:d1:36:aa: 09:16:c4:2f:bb:8b:9d:62:2d:d1:96:58:c3:ad:c4: 57:d9:06:d9:84:23:5e:4b:d9:0a:29:ad:13:c9:af: de:0e:74:27:ad:69:10:06:43:8d:24:66:2e:63:e8: 13:d7:44:d0:d8:a7:2e:e9:f9:87:7c:b4:f1:af:c7: a4:8f:36:c4:49:37:2a:a3:84:62:64:3e:5f:f2:72: 82:aa:d8:f8:41:b0:36:2f:ac:d3:03:34:4d:ec:bb: 59:2c:51:08:ab:28:ba:08:8d:26:e7:f5:d2:dc:e8: 29:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:59:BC:00:E6:1E:B0:64:C3:90:83:C0:07:2B:CA:AB:D6:35:E9:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/7f5391ad-06b1-31d5-8a01-1923e0d28015.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl X509v3 Authority Key Identifier: keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer sbgp-ipAddrBlock: critical IPv4: 216.52.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:80:c2:02:28:49:d3:85:a9:ba:e0:03:3f:4e:e1:68:96:bd: 14:76:d9:15:4e:ad:f4:ba:72:45:10:63:a1:56:fe:34:3c:aa: 4a:62:31:bf:4f:c7:80:0c:a8:57:e7:20:6a:3c:07:ac:11:c9: 64:6a:af:54:7b:98:f9:97:a0:ab:85:ca:c0:2b:0d:05:eb:09: 96:3c:7a:90:a0:5b:b0:ca:74:07:a9:11:f0:74:4f:64:1e:a6: 22:f2:36:71:7c:16:c9:42:56:36:6c:7d:84:71:6a:07:ca:d2: c2:c2:ee:ea:cc:93:c1:ca:b7:9e:1e:b2:48:04:cb:b7:73:96: e4:ac:a4:2c:ab:37:1c:32:d8:68:36:32:d8:8c:df:f4:c5:c3: 47:3c:d2:ba:32:f8:ed:38:27:88:54:bb:ef:52:58:6b:8d:20: 39:7f:66:87:72:6f:78:28:5a:b1:45:d6:7d:d8:ad:cd:10:bc: 46:ef:a7:d1:e1:0f:00:ad:bb:99:0b:f4:1d:1a:e9:a2:a6:d7: 93:b2:4c:51:ee:b7:11:27:d2:3c:b3:f6:cd:c7:5c:02:10:41: d4:eb:97:ec:eb:02:6d:28:46:88:d0:4d:13:54:14:aa:4c:58: e2:a6:7a:f3:76:ef:36:8e:c6:56:65:d3:20:9e:cc:77:7a:61: 89:4f:c4:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZIxnV6zSj+2dZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdjOGUxYTItNjk1NS00NWFhLWJkNTgtYzJlYzI2ZThl NWVjMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk MDg1YTIzMDMtNWNiOC00Mzk5LThlYjMtNjU0NDhjYjIzNjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pPl8MmjP+XdFbdwvVol7X04duv4U8+U0d3V bjxPgR+y8tH/HVo3vQANDMwdqHhtn5PRnmcB29cbEpPRw3+gCPPid4ERHwW4SDIT yF8gxzbMOc5pOKX8V5XCx3IR1QYwG1UNKgRxYAM17EAR1jOhkNrxFFgNBdKtqpR0 MaubeFg31Z09vAMAdGYAh/STMYvrOc7RNqoJFsQvu4udYi3RlljDrcRX2QbZhCNe S9kKKa0Tya/eDnQnrWkQBkONJGYuY+gT10TQ2Kcu6fmHfLTxr8ekjzbESTcqo4Ri ZD5f8nKCqtj4QbA2L6zTAzRN7LtZLFEIqyi6CI0m5/XS3OgpZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZZvADmHrBkw5CDwAcryqvWNekXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82N2M4 ZTFhMi02OTU1LTQ1YWEtYmQ1OC1jMmVjMjZlOGU1ZWMvN2Y1MzkxYWQtMDZiMS0z MWQ1LThhMDEtMTkyM2UwZDI4MDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjdjOGUxYTItNjk1NS00NWFhLWJk NTgtYzJlYzI2ZThlNWVjLzY3YzhlMWEyLTY5NTUtNDVhYS1iZDU4LWMyZWMyNmU4 ZTVlYy5jcmwwHwYDVR0jBBgwFoAUPNX2nFOg47bXPQIwtOEtAyhsMGgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82N2M4ZTFhMi02OTU1LTQ1YWEtYmQ1OC1jMmVj MjZlOGU1ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DQRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiAwgIoSdOFqbrgAz9O4WiWvRR22RVOrfS6ckUQY6FW/jQ8qkpiMb9P x4AMqFfnIGo8B6wRyWRqr1R7mPmXoKuFysArDQXrCZY8epCgW7DKdAepEfB0T2Qe piLyNnF8FslCVjZsfYRxagfK0sLC7urMk8HKt54eskgEy7dzluSspCyrNxwy2Gg2 MtiM3/TFw0c80roy+O04J4hUu+9SWGuNIDl/Zodyb3goWrFF1n3Yrc0QvEbvp9Hh DwCtu5kL9B0a6aKm15OyTFHutxEn0jyz9s3HXAIQQdTrl+zrAm0oRojQTRNUFKpM WOKmevN27zaOxlZl0yCezHd6YYlPxMQ= -----END CERTIFICATE-----Generated at Sat Apr 26 14:51:51 2025 by rpki-client