$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/d3d8afbd-2ac9-3c4d-8849-a6744709a78b.roa File: d3d8afbd-2ac9-3c4d-8849-a6744709a78b.roa (raw, json) Hash identifier: M+i6Bbx0cto5a10edKaQKQslihBix8QOlD1mI0LHxJ4= Subject key identifier: B3:A9:42:0C:8A:25:4C:AD:F5:7F:33:F8:48:8B:B6:61:C2:A8:5B:CB Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F43285849A4BACF3526BE07F4ADFA66A0 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/d3d8afbd-2ac9-3c4d-8849-a6744709a78b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 36492 IP address blocks: 216.252.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:cf:35:26:be:07:f4:ad:fa:66:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=875e0c48-3f4e-49ad-8105-e3e78129b26a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2f:b8:7a:e2:6b:f4:d2:65:b5:ee:7e:ac:42: dd:49:ef:f6:0d:48:2a:86:0b:fa:77:d2:37:46:5b: b8:7f:1c:4a:22:8a:e6:34:0e:af:5d:8a:45:fb:3b: 69:e3:d7:da:cf:bb:76:1c:f3:1f:19:55:ed:e3:b8: b4:e3:0b:b5:82:8b:93:59:6c:a7:39:01:14:f5:a8: 8e:78:f7:84:cc:b7:0f:2f:7d:66:6d:90:d4:eb:73: 69:f7:9a:f9:96:68:48:64:ed:d6:b6:4c:76:4d:d6: ff:a2:c2:e3:47:ff:2d:88:b3:51:7e:e9:49:a1:0f: 13:d2:01:1c:1b:d1:15:3c:a0:72:f4:5b:b5:f6:fb: dc:98:62:c8:19:5f:bb:8c:6c:43:9d:0c:59:77:f8: 32:12:d8:7e:eb:c2:cd:75:d7:ac:e7:30:72:b9:d7: 02:26:72:cb:a9:17:5d:fb:58:3e:06:35:e0:7e:00: 9f:e6:51:c7:6b:ef:0f:a2:a8:3b:85:6b:c6:05:68: 2b:cf:d0:45:27:dd:0a:5b:5b:b9:f9:b0:25:e4:e8: 2b:1a:28:aa:c9:77:df:55:ed:07:d1:7e:0c:1d:6d: 17:20:47:cd:7a:75:14:dd:60:eb:8a:74:a8:6d:a0: e3:99:a4:71:e2:37:c4:61:14:16:cb:1a:85:8c:0b: 09:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A9:42:0C:8A:25:4C:AD:F5:7F:33:F8:48:8B:B6:61:C2:A8:5B:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/d3d8afbd-2ac9-3c4d-8849-a6744709a78b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 216.252.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:3f:a2:ca:01:64:2a:7b:65:17:32:ef:b0:52:87:91:e1:5c: c6:c1:9e:4e:4c:64:c9:38:6a:42:40:0b:72:d1:cd:07:6f:ef: 76:1b:0e:6d:f2:6e:c3:f6:f3:94:ab:ea:83:37:81:01:5c:b2: 9f:d8:15:64:bc:7f:80:13:22:8f:bc:1e:f2:bb:35:f2:6e:65: 54:06:a3:87:0f:49:d2:ec:aa:48:24:f3:d3:f2:f5:be:7a:98: e2:ac:52:cd:ac:f4:26:05:f3:f6:f2:9b:a5:54:f1:c5:5c:3b: d5:f0:46:9d:e4:c9:67:d0:34:09:25:cb:23:3c:6a:84:14:ff: a6:e6:a3:26:c4:bd:74:14:84:75:23:eb:60:dc:00:79:a0:fb: fc:b8:6e:50:54:22:11:99:37:78:0d:c8:f3:90:b1:68:03:6a: 47:fc:2b:15:c3:4e:bf:6d:70:ff:69:33:09:c1:f5:54:7c:1f: e9:5c:d4:e0:dd:37:42:79:7b:b1:4e:57:34:9b:ce:48:81:60: bf:bd:ee:37:7a:21:8e:15:95:42:93:f8:db:d5:75:78:af:41: 9b:03:00:cd:08:dd:1e:6c:f2:ef:f9:9b:76:f2:41:45:49:90: f8:8e:f0:c5:23:61:82:a3:f0:7b:dc:d7:a1:0e:bf:d6:71:12: 37:25:91:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkus81Jr4H9K36ZqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODc1ZTBjNDgtM2Y0ZS00OWFkLTgxMDUtZTNlNzgxMjliMjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC+4euJr9NJlte5+rELdSe/2DUgqhgv6d9I3 Rlu4fxxKIormNA6vXYpF+ztp49faz7t2HPMfGVXt47i04wu1gouTWWynOQEU9aiO ePeEzLcPL31mbZDU63Np95r5lmhIZO3Wtkx2Tdb/osLjR/8tiLNRfulJoQ8T0gEc G9EVPKBy9Fu19vvcmGLIGV+7jGxDnQxZd/gyEth+68LNddes5zByudcCJnLLqRdd +1g+BjXgfgCf5lHHa+8Poqg7hWvGBWgrz9BFJ90KW1u5+bAl5OgrGiiqyXffVe0H 0X4MHW0XIEfNenUU3WDrinSobaDjmaRx4jfEYRQWyxqFjAsJKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOpQgyKJUyt9X8z+EiLtmHCqFvLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvZDNkOGFmYmQtMmFjOS0z YzRkLTg4NDktYTY3NDQ3MDlhNzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABM/osoBZCp7ZRcy77BSh5HhXMbBnk5MZMk4akJAC3LRzQdv73YbDm3y bsP285Sr6oM3gQFcsp/YFWS8f4ATIo+8HvK7NfJuZVQGo4cPSdLsqkgk89Py9b56 mOKsUs2s9CYF8/bym6VU8cVcO9XwRp3kyWfQNAklyyM8aoQU/6bmoybEvXQUhHUj 62DcAHmg+/y4blBUIhGZN3gNyPOQsWgDakf8KxXDTr9tcP9pMwnB9VR8H+lc1ODd N0J5e7FOVzSbzkiBYL+97jd6IY4VlUKT+NvVdXivQZsDAM0I3R5s8u/5m3byQUVJ kPiO8MUjYYKj8Hvc16EOv9ZxEjclkdE= -----END CERTIFICATE-----Generated at Sun Apr 27 01:00:06 2025 by rpki-client