$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d73092b4-54aa-3405-a3ca-45d7d6798270.roa File: d73092b4-54aa-3405-a3ca-45d7d6798270.roa (raw, json) Hash identifier: ZkL6eYVrv0btg7S2cAcI1tVpEABjFgEUlcBc0af325E= Subject key identifier: AA:A4:D0:5A:C7:69:E5:02:3E:7B:45:36:76:78:DF:F0:28:5C:FC:45 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584971142E019040ACDEEDA59580 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d73092b4-54aa-3405-a3ca-45d7d6798270.roa Signing time: Mon 07 Apr 2025 01:00:47 +0000 ROA not before: Mon 07 Apr 2025 01:00:47 +0000 ROA not after: Sun 06 Jul 2025 01:00:47 +0000 asID: 23473 IP address blocks: 216.171.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:71:14:2e:01:90:40:ac:de:ed:a5:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Apr 7 01:00:47 2025 GMT Not After : Jul 6 01:00:47 2025 GMT Subject: CN=a83c5a3a-4447-4be6-803d-02364ef84214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ad:e4:57:74:d6:64:f5:e3:95:8d:06:2d:2f: 23:35:68:f4:7d:82:6b:a9:22:64:da:dc:d7:f0:b9: 6c:9d:6a:3d:c3:08:fe:a5:ae:8c:1b:44:e0:85:35: 31:c2:32:6c:54:d3:d2:59:ef:ee:da:e7:a8:db:60: c5:46:20:2a:4b:d1:6e:ea:56:f8:d1:24:53:fa:71: 08:65:35:89:1f:25:11:ad:1b:08:a2:5a:21:66:59: 2d:df:81:ea:33:28:5d:4c:54:11:04:09:50:13:b7: 2d:95:d5:0d:c1:0b:a4:bd:9e:2e:d0:9f:18:1b:57: 39:d3:8b:be:1b:6d:9e:04:e1:e8:7e:10:e2:fe:3d: a4:4d:32:fd:cc:23:6c:8c:1b:4b:bf:80:c6:e8:6e: fd:54:4e:a1:f2:c2:b6:87:21:24:eb:5e:2a:94:4e: 16:f4:36:79:2e:bb:48:ab:e2:d2:e7:29:69:93:75: 14:b8:62:30:2e:17:74:cd:0a:f1:c0:fd:46:14:23: ae:54:8b:7b:52:c4:30:eb:b0:8c:26:6d:86:11:34: 37:6c:5d:0f:1f:39:d0:8c:f8:6a:52:3c:02:11:5a: 32:82:dc:be:ea:78:91:1f:91:73:52:87:c2:a0:99: 2d:02:ec:e8:2b:32:61:27:ed:da:ff:d2:3e:fc:23: 63:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A4:D0:5A:C7:69:E5:02:3E:7B:45:36:76:78:DF:F0:28:5C:FC:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d73092b4-54aa-3405-a3ca-45d7d6798270.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:6c:3b:63:31:78:dd:e9:ca:8c:db:34:dd:a0:d5:a0:ea:8b: a1:77:29:f8:ea:b3:79:b2:35:25:f1:a5:49:ab:07:6c:37:77: 45:b2:5b:53:73:e2:1c:de:fd:75:ce:73:c2:d9:40:d9:56:60: 98:2a:d8:c0:95:ad:8a:d2:8e:36:66:93:17:60:6b:36:ad:3c: 59:1b:53:be:d6:51:a1:7f:7d:a2:9f:91:ce:fc:cd:07:26:8b: 09:c6:49:ae:ee:a0:ed:de:5e:89:58:65:51:5e:a3:db:0e:c8: ac:7e:2f:dc:be:a2:cb:ea:4f:66:8c:09:38:d9:83:ac:60:63: a2:6c:2f:e2:a7:ff:c9:d1:b4:32:12:7f:2d:9a:5b:ab:4a:c4: db:f2:cf:d7:84:eb:78:7a:bb:9b:51:d9:e5:7a:bb:99:de:68: 70:66:f8:7c:df:14:fd:7d:0a:90:dd:03:59:5c:d1:9c:06:8a: 9a:96:15:a6:4e:56:88:d8:57:1c:ba:ff:60:4a:4f:bb:26:27: cd:cb:77:63:bc:f2:4c:76:71:03:47:71:27:95:ff:b3:09:4e: 6a:18:53:b8:af:c4:f9:a5:fe:00:f7:99:59:5f:c6:46:72:79: 47:3b:b6:31:61:79:49:26:70:d5:6c:40:6d:51:44:e3:27:a1: 74:45:11:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElxFC4BkECs3u2llYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDQwNzAxMDA0N1oXDTI1MDcwNjAxMDA0N1owLzEtMCsGA1UEAxMk YTgzYzVhM2EtNDQ0Ny00YmU2LTgwM2QtMDIzNjRlZjg0MjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK3kV3TWZPXjlY0GLS8jNWj0fYJrqSJk2tzX 8LlsnWo9wwj+pa6MG0TghTUxwjJsVNPSWe/u2ueo22DFRiAqS9Fu6lb40SRT+nEI ZTWJHyURrRsIolohZlkt34HqMyhdTFQRBAlQE7ctldUNwQukvZ4u0J8YG1c504u+ G22eBOHofhDi/j2kTTL9zCNsjBtLv4DG6G79VE6h8sK2hyEk614qlE4W9DZ5LrtI q+LS5ylpk3UUuGIwLhd0zQrxwP1GFCOuVIt7UsQw67CMJm2GETQ3bF0PHznQjPhq UjwCEVoygty+6niRH5FzUofCoJktAuzoKzJhJ+3a/9I+/CNjEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqk0FrHaeUCPntFNnZ43/AoXPxFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZDczMDkyYjQtNTRhYS0z NDA1LWEzY2EtNDVkN2Q2Nzk4MjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFsO2MxeN3pyozbNN2g1aDqi6F3Kfjqs3myNSXxpUmrB2w3d0WyW1Nz 4hze/XXOc8LZQNlWYJgq2MCVrYrSjjZmkxdgazatPFkbU77WUaF/faKfkc78zQcm iwnGSa7uoO3eXolYZVFeo9sOyKx+L9y+osvqT2aMCTjZg6xgY6JsL+Kn/8nRtDIS fy2aW6tKxNvyz9eE63h6u5tR2eV6u5neaHBm+HzfFP19CpDdA1lc0ZwGipqWFaZO VojYVxy6/2BKT7smJ83Ld2O88kx2cQNHcSeV/7MJTmoYU7ivxPml/gD3mVlfxkZy eUc7tjFheUkmcNVsQG1RROMnoXRFEQM= -----END CERTIFICATE-----Generated at Tue Apr 29 22:52:34 2025 by rpki-client