$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/da228069-1e57-30ee-abed-61d9283ae7e4.roa File: da228069-1e57-30ee-abed-61d9283ae7e4.roa (raw, json) Hash identifier: 3sHQG6trsCHDXwZItH9ix2Ft687qjktqRHVZ6AplJPg= Subject key identifier: 0C:16:FE:51:B6:AA:81:F8:E0:ED:61:7E:93:0F:25:7E:48:AD:D7:A4 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858498CFF0248A5C2D118F9E2BD40 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/da228069-1e57-30ee-abed-61d9283ae7e4.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 21723 IP address blocks: 216.123.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:02:48:a5:c2:d1:18:f9:e2:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=2c31a6c7-3c9d-454e-838a-1c974559f7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:27:9c:79:fa:59:b5:9e:46:d0:49:13:02:3b: 1a:40:3f:7a:19:d3:1f:61:50:cb:56:da:e1:67:2f: b6:27:4f:39:d2:f9:17:5f:fd:3c:10:c7:31:4a:81: 9a:39:27:26:a9:29:1c:55:a3:94:49:bb:db:3c:41: b7:37:04:6a:b9:21:38:f5:c0:08:b7:25:10:9b:da: 39:2b:5c:53:ee:99:0f:e5:da:36:7a:ca:65:89:23: c9:d7:ed:b7:f8:6b:37:42:4f:c9:ff:48:1f:5c:91: c0:a9:72:2c:34:84:d6:d3:d8:f4:26:a4:70:a5:bf: be:3a:a1:98:58:10:18:05:4d:df:10:9b:68:39:35: b1:3c:94:e6:7c:df:93:63:1a:d5:f1:bf:2e:22:40: 4a:bd:6d:74:3e:0f:07:7e:e4:fa:ae:bf:34:1a:d2: 48:66:89:44:0e:2f:a9:f5:f9:a5:02:b4:c1:df:88: d2:3c:c2:e1:59:07:6b:4f:eb:36:c9:0a:1f:91:84: f2:9b:60:8c:d6:d3:a4:2c:a4:54:e3:55:5e:5c:cf: 06:9c:f1:00:67:ca:0e:db:57:70:84:97:53:9f:82: b9:2c:3a:bc:64:7a:ec:0e:57:8b:15:c6:c6:e5:1b: 40:68:37:f3:fe:fd:97:37:be:9c:16:8e:b6:9b:d9: ee:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:16:FE:51:B6:AA:81:F8:E0:ED:61:7E:93:0F:25:7E:48:AD:D7:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/da228069-1e57-30ee-abed-61d9283ae7e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 216.123.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ec:ce:f3:7c:d0:70:c8:89:d1:1f:5f:d6:54:f2:49:9e:b9: 51:8b:8b:ea:f5:b6:46:51:bd:7d:4b:17:c6:35:5a:fc:ba:01: 64:00:79:17:27:9e:d6:e2:d8:dc:76:e2:a2:d5:9a:76:51:4a: c7:da:81:f1:e2:6b:e5:49:83:6e:2b:5e:db:34:df:05:44:56: e8:59:bd:ea:8c:8d:ae:e5:80:dc:e8:04:a5:c6:d3:a5:26:99: de:72:3d:7b:38:92:b3:65:93:41:ce:4c:a2:e0:c3:aa:cb:17: d0:8f:00:c2:ca:11:b5:5f:f2:00:87:2f:00:4c:75:1e:62:23: 25:70:63:06:9f:34:bf:11:32:ff:6d:e4:04:05:39:8b:b2:10: 35:b0:b3:7f:a2:6e:22:ab:d0:0e:e8:5c:25:a3:c2:48:57:2c: 16:b8:1e:d8:90:6a:c7:30:09:0d:74:ba:3a:93:a9:71:40:1e: a1:16:19:b3:b2:cb:f6:78:c9:1c:fa:b8:5d:23:1a:bc:65:e3: 03:90:b9:23:b7:2f:f5:a5:f5:39:c7:0f:b7:f3:98:27:96:3f: 3d:fc:79:84:0b:88:05:c1:0c:ca:a7:f1:6a:e7:92:95:1b:65: 1a:d9:16:01:09:ab:96:6e:98:6b:af:ad:a8:e1:1c:93:08:07: e9:87:49:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/wJIpcLRGPnivUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk MmMzMWE2YzctM2M5ZC00NTRlLTgzOGEtMWM5NzQ1NTlmN2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSecefpZtZ5G0EkTAjsaQD96GdMfYVDLVtrh Zy+2J0850vkXX/08EMcxSoGaOScmqSkcVaOUSbvbPEG3NwRquSE49cAItyUQm9o5 K1xT7pkP5do2espliSPJ1+23+Gs3Qk/J/0gfXJHAqXIsNITW09j0JqRwpb++OqGY WBAYBU3fEJtoOTWxPJTmfN+TYxrV8b8uIkBKvW10Pg8HfuT6rr80GtJIZolEDi+p 9fmlArTB34jSPMLhWQdrT+s2yQofkYTym2CM1tOkLKRU41VeXM8GnPEAZ8oO21dw hJdTn4K5LDq8ZHrsDleLFcbG5RtAaDfz/v2XN76cFo62m9nunwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwW/lG2qoH44O1hfpMPJX5IrdekMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZGEyMjgwNjktMWU1Ny0z MGVlLWFiZWQtNjFkOTI4M2FlN2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2HvcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADszvN80HDIidEfX9ZU8kmeuVGLi+r1tkZRvX1LF8Y1Wvy6AWQAeRcn ntbi2Nx24qLVmnZRSsfagfHia+VJg24rXts03wVEVuhZveqMja7lgNzoBKXG06Um md5yPXs4krNlk0HOTKLgw6rLF9CPAMLKEbVf8gCHLwBMdR5iIyVwYwafNL8RMv9t 5AQFOYuyEDWws3+ibiKr0A7oXCWjwkhXLBa4HtiQascwCQ10ujqTqXFAHqEWGbOy y/Z4yRz6uF0jGrxl4wOQuSO3L/Wl9TnHD7fzmCeWPz38eYQLiAXBDMqn8WrnkpUb ZRrZFgEJq5ZumGuvrajhHJMIB+mHSWY= -----END CERTIFICATE-----Generated at Sun Apr 27 00:24:53 2025 by rpki-client