$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/7f2bb030-6124-30be-b08b-a5654c3506c4.roa File: 7f2bb030-6124-30be-b08b-a5654c3506c4.roa (raw, json) Hash identifier: MXsQ0HWMvd0F6H7QcdzM7w7oHe6YagbTjo63hL/qJjY= Subject key identifier: EC:0E:F9:7E:6B:65:84:D7:03:43:0C:70:F2:08:11:A9:4A:66:18:C9 Certificate issuer: /CN=487abf98-3073-43c6-b10e-a615e64ccc65 Certificate serial: 010D0C9F43285849350E87F1E592D99C0B786340 Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/7f2bb030-6124-30be-b08b-a5654c3506c4.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 216.9.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:87:f1:e5:92:d9:9c:0b:78:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=e21362b1-f70b-4f5b-8e01-dc5d244a9adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:22:06:fd:e6:17:4d:c8:da:a5:b8:a4:e8:6d: 32:cf:e2:48:77:0c:00:98:bd:d4:43:82:15:32:84: 42:89:36:de:e8:c2:52:e6:b9:be:0c:52:64:6b:1e: bd:53:75:ca:ca:b1:26:a3:0f:ae:16:1f:4d:0d:95: a8:f2:0f:c0:a5:c3:59:4a:8d:54:c6:1a:cc:9d:99: 54:c3:4e:b3:30:87:ed:1a:70:5c:e7:8e:9f:a2:d3: 6f:7b:a7:67:2f:9e:1b:6d:3c:05:d6:fb:c4:c6:ec: 67:3c:20:c6:f2:ab:c5:63:4c:29:c4:e4:2e:fb:9a: 84:54:e4:e4:3e:d5:c4:40:88:a3:df:78:dd:53:7f: 4a:1a:f3:45:14:3a:be:20:e8:79:1f:93:e8:7a:8e: ba:cf:75:95:a1:20:75:33:e5:91:16:92:12:db:2a: 81:69:7a:51:24:2c:c2:ec:58:f7:4c:6e:c8:e2:6d: 00:55:07:54:84:a9:77:41:9b:36:e0:bb:fc:7b:0e: 50:49:b8:c3:6e:55:1f:7e:55:a6:04:39:e2:47:a4: cb:f8:36:86:de:22:8b:ce:de:f1:fb:a6:84:b8:10: ae:c6:cd:b3:9e:b8:3f:df:5a:37:c9:50:02:cb:f8: 3b:6f:b6:84:1d:52:06:82:a9:fa:2c:e5:28:ea:02: ea:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0E:F9:7E:6B:65:84:D7:03:43:0C:70:F2:08:11:A9:4A:66:18:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/7f2bb030-6124-30be-b08b-a5654c3506c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl X509v3 Authority Key Identifier: keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer sbgp-ipAddrBlock: critical IPv4: 216.9.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:fe:78:2e:87:04:a6:4f:1d:4c:79:aa:e8:a4:13:b5:14:32: c1:91:da:ca:69:da:7d:07:8c:7a:bb:da:b9:22:97:a1:c8:a8: 2c:ed:cd:9b:d8:b8:57:2d:cd:f8:75:57:76:24:05:58:be:b8: e7:db:33:92:8e:2d:88:92:d0:c5:03:c3:57:58:2c:ba:dd:e0: 53:d4:36:8a:1b:4f:36:fd:57:01:c7:0c:3a:74:bc:c8:62:97: 33:bb:55:ed:b0:8f:a6:ff:34:3f:ca:7c:e4:3e:e8:63:2e:fc: 60:e1:31:62:36:15:8c:73:c3:09:88:86:05:8a:4a:07:30:5f: f8:10:09:a2:02:aa:c0:c6:61:28:81:b4:82:84:29:35:23:c8: 5b:d1:0d:c2:0c:44:e3:8f:7c:fd:eb:e8:43:8e:eb:da:20:09: 8f:74:65:42:b1:be:43:c2:59:3b:5a:7f:3b:0e:93:99:13:d0: 0f:8a:28:63:d3:25:ac:3b:e9:5c:75:6d:b1:4d:00:6d:9a:ec: 31:29:34:4d:51:ef:c5:c7:ad:40:ab:ba:81:db:4e:81:0b:e3: b5:0c:ea:96:4c:2f:f6:f3:e0:77:91:de:9b:8a:b7:02:5a:d1: 82:16:43:52:85:d1:67:d4:cb:1c:1c:0c:73:23:24:95:2d:6a: a9:eb:97:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Dofx5ZLZnAt4Y0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg3YWJmOTgtMzA3My00M2M2LWIxMGUtYTYxNWU2NGNj YzY1MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk ZTIxMzYyYjEtZjcwYi00ZjViLThlMDEtZGM1ZDI0NGE5YWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSIG/eYXTcjapbik6G0yz+JIdwwAmL3UQ4IV MoRCiTbe6MJS5rm+DFJkax69U3XKyrEmow+uFh9NDZWo8g/ApcNZSo1UxhrMnZlU w06zMIftGnBc546fotNve6dnL54bbTwF1vvExuxnPCDG8qvFY0wpxOQu+5qEVOTk PtXEQIij33jdU39KGvNFFDq+IOh5H5Poeo66z3WVoSB1M+WRFpIS2yqBaXpRJCzC 7Fj3TG7I4m0AVQdUhKl3QZs24Lv8ew5QSbjDblUfflWmBDniR6TL+DaG3iKLzt7x +6aEuBCuxs2znrg/31o3yVACy/g7b7aEHVIGgqn6LOUo6gLqGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwO+X5rZYTXA0MMcPIIEalKZhjJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdh YmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1ZTY0Y2NjNjUvN2YyYmIwMzAtNjEyNC0z MGJlLWIwOGItYTU2NTRjMzUwNmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDg3YWJmOTgtMzA3My00M2M2LWIx MGUtYTYxNWU2NGNjYzY1LzQ4N2FiZjk4LTMwNzMtNDNjNi1iMTBlLWE2MTVlNjRj Y2M2NS5jcmwwHwYDVR0jBBgwFoAUUHrkAjzYg+et9qTUFubnFT8KBQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdhYmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1 ZTY0Y2NjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2AnMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABb+eC6HBKZPHUx5quikE7UUMsGR2spp2n0HjHq72rkil6HIqCztzZvY uFctzfh1V3YkBVi+uOfbM5KOLYiS0MUDw1dYLLrd4FPUNoobTzb9VwHHDDp0vMhi lzO7Ve2wj6b/ND/KfOQ+6GMu/GDhMWI2FYxzwwmIhgWKSgcwX/gQCaICqsDGYSiB tIKEKTUjyFvRDcIMROOPfP3r6EOO69ogCY90ZUKxvkPCWTtafzsOk5kT0A+KKGPT Jaw76Vx1bbFNAG2a7DEpNE1R78XHrUCruoHbToEL47UM6pZML/bz4HeR3puKtwJa 0YIWQ1KF0WfUyxwcDHMjJJUtaqnrl8M= -----END CERTIFICATE-----Generated at Sun Apr 27 01:11:53 2025 by rpki-client