$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ff22c2a8-09b0-379b-bd25-57cd982e4107.roa File: ff22c2a8-09b0-379b-bd25-57cd982e4107.roa (raw, json) Hash identifier: m+LFYggumhj/Xcd/kLgfTii5W60noQBoCOBhno6KijY= Subject key identifier: 24:F6:F0:DD:10:C4:0B:79:77:A2:3F:2A:50:87:7D:39:CD:5A:EA:D2 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F432858490881771CE56C0CCDAF3BBF00 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ff22c2a8-09b0-379b-bd25-57cd982e4107.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 7265 IP address blocks: 216.47.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:77:1c:e5:6c:0c:cd:af:3b:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=ad89dc6a-4d91-4e11-ad40-602123b16ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7a:4d:f0:d8:0f:46:3d:ca:8d:db:2c:51:e7: ac:28:68:18:22:1a:7d:5f:c0:58:d0:bd:b4:49:68: 9c:a4:e7:06:fb:e7:15:9c:95:d9:5f:c4:68:f7:18: d6:a8:37:3c:72:4e:95:65:db:7e:17:b2:9c:f6:7e: af:f2:d6:5b:7f:44:bd:4c:05:e6:23:90:d5:80:94: 9e:f4:47:19:50:00:26:13:50:3b:2d:d1:6f:a9:00: fe:4b:eb:4c:97:9a:ff:3a:06:f3:8f:34:5f:c0:55: 87:24:ca:f6:bb:3e:37:01:c9:f2:01:e8:67:d1:93: 28:ff:3e:c9:a2:21:23:3e:a8:82:98:ad:a5:43:77: e6:2f:b0:02:9b:e3:67:c4:c8:b2:28:64:fc:7b:1d: 40:00:cb:e7:ed:a8:19:bc:ed:23:a6:b6:78:8d:3a: ff:bf:ec:65:d3:73:58:81:f1:fc:8c:4a:b7:5d:e2: 55:77:d6:fe:13:58:8a:e2:01:de:c7:23:f2:83:c4: ce:0b:3e:a7:c9:9e:06:7a:52:b0:e6:f9:5e:7e:59: e9:8c:65:ce:85:33:68:22:7d:fc:65:ed:49:08:de: d1:22:23:2a:29:ac:15:f7:1d:38:17:6c:1d:3b:22: 02:52:49:4f:ff:6a:46:a5:ff:8c:c8:d5:ad:c2:6a: 15:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F6:F0:DD:10:C4:0B:79:77:A2:3F:2A:50:87:7D:39:CD:5A:EA:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ff22c2a8-09b0-379b-bd25-57cd982e4107.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 216.47.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:b4:80:f4:1b:af:59:fe:05:81:57:05:7e:04:c1:6b:d9:2f: f7:6b:72:21:c2:4c:ac:e0:b6:30:8e:e8:47:36:8e:69:75:49: 7c:4c:7b:04:86:2b:7f:3e:40:37:fd:b9:81:26:d5:30:95:8f: 82:0b:86:07:bc:d8:aa:0d:5f:ee:9e:ac:59:68:6c:dc:36:65: 6b:e4:30:c1:4f:e5:04:78:7e:d2:a1:7d:0b:82:fb:a9:38:5a: 38:c4:79:6f:9a:b3:84:ee:8c:32:2e:52:d9:8a:c0:2d:24:43: 7f:45:a0:da:d0:55:4c:09:ff:16:44:54:a8:24:69:67:5c:90: 6c:27:78:c8:8c:a1:6f:08:36:6f:a8:73:e2:1d:02:30:bf:35: ba:fc:38:f6:7f:e4:3e:35:d6:f4:63:b5:b0:66:7e:e1:b6:39: ae:79:8f:a1:ce:c5:c4:c8:72:12:82:17:5b:c4:17:08:a2:ef: 6d:dc:a9:ed:6a:06:84:6f:fb:0e:ba:d4:32:34:25:88:f8:c2: db:9e:b4:47:fe:be:d4:cf:f9:7a:54:d7:a8:95:6b:26:36:d8: 89:d2:60:83:81:39:95:31:b1:97:58:9d:73:f0:3e:29:ae:40: 21:84:0c:47:08:3c:5a:9c:45:cc:9b:57:c2:30:d5:ff:44:5d: a6:42:8f:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgXcc5WwMza87vwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk YWQ4OWRjNmEtNGQ5MS00ZTExLWFkNDAtNjAyMTIzYjE2ZWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3pN8NgPRj3KjdssUeesKGgYIhp9X8BY0L20 SWicpOcG++cVnJXZX8Ro9xjWqDc8ck6VZdt+F7Kc9n6v8tZbf0S9TAXmI5DVgJSe 9EcZUAAmE1A7LdFvqQD+S+tMl5r/OgbzjzRfwFWHJMr2uz43AcnyAehn0ZMo/z7J oiEjPqiCmK2lQ3fmL7ACm+NnxMiyKGT8ex1AAMvn7agZvO0jprZ4jTr/v+xl03NY gfH8jEq3XeJVd9b+E1iK4gHexyPyg8TOCz6nyZ4GelKw5vleflnpjGXOhTNoIn38 Ze1JCN7RIiMqKawV9x04F2wdOyICUklP/2pGpf+MyNWtwmoV0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCT28N0QxAt5d6I/KlCHfTnNWurSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvZmYyMmMyYTgtMDliMC0z NzliLWJkMjUtNTdjZDk4MmU0MTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2C/JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+0gPQbr1n+BYFXBX4EwWvZL/drciHCTKzgtjCO6Ec2jml1SXxMewSG K38+QDf9uYEm1TCVj4ILhge82KoNX+6erFlobNw2ZWvkMMFP5QR4ftKhfQuC+6k4 WjjEeW+as4TujDIuUtmKwC0kQ39FoNrQVUwJ/xZEVKgkaWdckGwneMiMoW8INm+o c+IdAjC/Nbr8OPZ/5D411vRjtbBmfuG2Oa55j6HOxcTIchKCF1vEFwii723cqe1q BoRv+w661DI0JYj4wtuetEf+vtTP+XpU16iVayY22InSYIOBOZUxsZdYnXPwPimu QCGEDEcIPFqcRcybV8Iw1f9EXaZCj5M= -----END CERTIFICATE-----Generated at Tue Apr 29 08:12:25 2025 by rpki-client