$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d1edd12e-ecf8-3c06-bf69-5d9918f38673.roa File: d1edd12e-ecf8-3c06-bf69-5d9918f38673.roa (raw, json) Hash identifier: fVoWvNbD39Oypq8VSY5ZeapGU54uSIl3dCGEDjGUmAE= Subject key identifier: F9:50:FE:EC:66:2E:51:EE:3D:1E:DE:7F:91:75:EC:A3:D6:C3:99:20 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584971142DE4DA46D88982645800 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d1edd12e-ecf8-3c06-bf69-5d9918f38673.roa Signing time: Mon 07 Apr 2025 01:00:47 +0000 ROA not before: Mon 07 Apr 2025 01:00:47 +0000 ROA not after: Sun 06 Jul 2025 01:00:47 +0000 asID: 23473 IP address blocks: 216.171.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:71:14:2d:e4:da:46:d8:89:82:64:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Apr 7 01:00:47 2025 GMT Not After : Jul 6 01:00:47 2025 GMT Subject: CN=6b63b291-2b31-4c2b-801f-f4d1f34384d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c7:24:bb:fc:b4:63:2b:69:e8:1d:21:b3:1c: 27:f5:44:9c:cc:c1:69:d4:7d:b9:e7:a8:13:6c:23: 71:b6:9b:2e:2a:c4:2e:cd:d5:be:e5:31:c4:a5:32: f7:1a:f1:90:b9:70:1a:9a:3c:fb:8a:34:d8:a4:ec: d3:8c:0a:c1:29:7c:3e:d6:a2:1a:84:21:73:4b:93: 73:0a:c2:39:da:60:30:17:ec:e7:02:6b:5c:f8:50: c5:88:9f:d3:3f:ca:25:55:14:33:f2:d9:cd:90:d6: fa:96:8d:7a:00:27:d7:db:48:46:9c:97:17:be:c5: 1a:e0:cb:a2:81:22:eb:1a:8f:8f:38:46:ff:07:0d: 5f:39:ef:32:9d:39:f0:27:68:31:ad:b2:a2:91:83: df:58:1d:ea:ab:fc:df:77:dc:8a:7d:91:5c:4f:99: 55:ba:bf:f2:83:d7:31:be:44:d6:7e:05:fc:bf:4c: 66:32:d3:cc:6f:4d:f6:cf:50:1e:a2:34:1e:ec:9a: 6b:66:bc:81:00:2c:f6:8f:1d:fc:e1:bc:da:f6:c8: 50:1f:11:35:5b:43:c9:9f:65:20:f5:0c:77:77:b6: 7d:ff:31:32:b7:45:0d:64:ad:ea:e4:1e:d1:ec:a2: b1:ec:21:22:91:02:80:8f:56:83:52:71:35:39:df: 3b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:50:FE:EC:66:2E:51:EE:3D:1E:DE:7F:91:75:EC:A3:D6:C3:99:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d1edd12e-ecf8-3c06-bf69-5d9918f38673.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:46:90:c1:65:bd:00:b4:55:a5:12:d5:82:cd:2c:c8:e0:7d: 96:e5:b3:2e:f2:d3:1e:f7:b4:cb:37:05:e3:f2:71:e2:58:d9: 6c:89:8a:18:13:7d:18:60:d2:d2:10:c4:9c:fc:75:19:30:fa: 29:0f:3a:1d:4d:35:04:2e:d8:a4:6a:c7:f5:0f:29:c0:8a:8e: 01:51:e1:33:19:f3:31:42:5a:31:6f:8d:86:04:cc:0e:21:c5: b9:ab:71:dc:1e:bc:58:2d:f2:e9:83:84:ba:27:06:cb:a2:b7: 72:0e:b7:47:d8:e2:04:c8:0b:1a:0f:53:51:97:a1:df:ab:ce: 35:04:2a:70:d2:ad:82:87:1a:8a:d3:6d:9d:cc:d5:39:40:5d: a8:b1:ab:90:b0:bb:c3:c0:87:21:41:c0:a9:78:dd:b4:fc:f0: 3d:25:9a:f6:5c:ad:9d:fd:b9:07:56:32:6f:52:a0:61:9e:b4: c3:ac:eb:21:de:bc:b6:a4:c0:5e:66:53:90:56:e3:f9:7a:1a: c5:e5:a5:4f:c9:33:1d:ba:52:8c:60:71:0a:71:73:e3:7a:3e: 5f:37:ae:18:51:1e:04:3c:db:e6:d8:01:3f:81:7f:60:11:4e: 8f:34:3e:f5:31:29:19:38:06:9a:43:83:5a:aa:ab:76:26:0d: af:3a:dc:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElxFC3k2kbYiYJkWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDQwNzAxMDA0N1oXDTI1MDcwNjAxMDA0N1owLzEtMCsGA1UEAxMk NmI2M2IyOTEtMmIzMS00YzJiLTgwMWYtZjRkMWYzNDM4NGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMcku/y0Yytp6B0hsxwn9USczMFp1H2556gT bCNxtpsuKsQuzdW+5THEpTL3GvGQuXAamjz7ijTYpOzTjArBKXw+1qIahCFzS5Nz CsI52mAwF+znAmtc+FDFiJ/TP8olVRQz8tnNkNb6lo16ACfX20hGnJcXvsUa4Mui gSLrGo+POEb/Bw1fOe8ynTnwJ2gxrbKikYPfWB3qq/zfd9yKfZFcT5lVur/yg9cx vkTWfgX8v0xmMtPMb032z1AeojQe7JprZryBACz2jx384bza9shQHxE1W0PJn2Ug 9Qx3d7Z9/zEyt0UNZK3q5B7R7KKx7CEikQKAj1aDUnE1Od87lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlQ/uxmLlHuPR7ef5F17KPWw5kgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZDFlZGQxMmUtZWNmOC0z YzA2LWJmNjktNWQ5OTE4ZjM4NjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpGkMFlvQC0VaUS1YLNLMjgfZblsy7y0x73tMs3BePyceJY2WyJihgT fRhg0tIQxJz8dRkw+ikPOh1NNQQu2KRqx/UPKcCKjgFR4TMZ8zFCWjFvjYYEzA4h xbmrcdwevFgt8umDhLonBsuit3IOt0fY4gTICxoPU1GXod+rzjUEKnDSrYKHGorT bZ3M1TlAXaixq5Cwu8PAhyFBwKl43bT88D0lmvZcrZ39uQdWMm9SoGGetMOs6yHe vLakwF5mU5BW4/l6GsXlpU/JMx26UoxgcQpxc+N6Pl83rhhRHgQ82+bYAT+Bf2AR To80PvUxKRk4BppDg1qqq3YmDa863Os= -----END CERTIFICATE-----Generated at Mon Apr 28 00:37:27 2025 by rpki-client