$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/b3798828-71b2-329f-8988-21b3e3f05b65.roa File: b3798828-71b2-329f-8988-21b3e3f05b65.roa (raw, json) Hash identifier: pzx58G1VNuXCmxJEKT3SAP8faVFf10tGpz2V6EyIgQM= Subject key identifier: 9A:9B:D2:19:85:1C:7F:B1:9F:DF:98:BD:6C:A3:8F:56:B3:62:01:F8 Certificate issuer: /CN=70057aa1-544d-4237-b549-304fd45324ba Certificate serial: 010D0C9F43285849806F270076A156922B0D1000 Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/b3798828-71b2-329f-8988-21b3e3f05b65.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 25617 IP address blocks: 216.222.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:27:00:76:a1:56:92:2b:0d:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=d44c4052-c7fb-4329-bbe0-71224efd0be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:aa:7e:5e:af:f8:ef:fc:80:28:89:a0:1c:a1: 2c:c8:3e:78:9a:ba:73:fc:aa:e4:53:7e:04:b7:a3: c3:1a:e6:e4:42:b1:d0:2f:7d:c4:cb:d7:4e:b5:51: 7f:77:86:5c:a5:fb:b4:c1:6a:d6:97:2c:fb:c0:d1: 8c:34:f6:b0:4b:9b:fc:29:d9:99:57:82:93:a6:b7: 91:32:1e:fd:7b:a9:2f:5f:d9:f0:eb:15:7c:de:ce: 25:85:e0:a9:7e:22:71:c4:a0:2c:90:b3:84:09:c0: 40:6d:54:44:42:9f:43:21:e5:61:15:2f:58:b1:05: fa:b9:91:53:45:bc:2d:68:2e:4e:28:e3:c8:fc:98: 18:8d:51:3e:bd:61:13:1e:73:58:f2:33:2b:97:e3: a3:36:6a:81:8f:d7:01:44:de:25:28:dc:b2:cd:c8: 1f:28:20:61:56:86:94:d2:ec:ac:84:14:fd:3d:98: 9a:5d:48:87:02:1f:5a:0b:ca:d6:b6:e4:20:c3:4a: 05:31:03:92:77:a3:b9:25:63:05:91:e8:21:2b:c5: a9:50:e8:bd:e8:8f:59:66:1d:e2:57:a1:37:2e:9e: 86:6e:f3:74:42:56:29:13:83:d9:8d:a1:a6:0a:cf: 3c:70:c0:7c:31:15:b8:e8:a0:a2:90:bc:70:fd:c7: e7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9B:D2:19:85:1C:7F:B1:9F:DF:98:BD:6C:A3:8F:56:B3:62:01:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/b3798828-71b2-329f-8988-21b3e3f05b65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl X509v3 Authority Key Identifier: keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer sbgp-ipAddrBlock: critical IPv4: 216.222.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:8b:9a:44:5c:da:35:b0:83:60:ff:d7:b3:c7:5f:33:0b:72: eb:6e:af:d7:2d:98:51:17:be:b6:50:25:ff:25:eb:d6:9b:4b: 05:83:97:5e:7f:f4:4d:02:3c:83:47:e3:a0:c6:a0:7b:d2:6d: 18:d9:af:5b:7e:df:be:27:16:cf:58:f1:88:e6:9a:dd:88:0f: 9c:14:94:ad:a5:1f:c7:6b:da:f7:37:ff:52:33:a8:9d:cf:15: ff:c5:4c:03:7f:45:73:61:49:6f:76:75:8e:56:2c:29:83:a3: 7c:b8:58:26:26:05:f4:69:fb:1a:f8:c4:35:0d:46:f4:8f:30: b6:7c:91:d5:41:05:b1:f5:31:c9:96:55:f0:17:2b:26:25:5e: d5:15:60:a3:81:2d:00:27:95:a4:35:ef:89:2c:9b:aa:21:15: 74:a0:3f:d9:ef:04:ef:a4:bb:c5:8b:2c:57:74:bd:ed:75:e5: 0b:b9:bb:46:60:95:57:8a:10:4d:4a:94:54:b5:0d:21:b6:77: 16:6f:92:aa:99:36:a6:3c:d3:d0:2f:a0:04:18:05:08:d1:93: 29:46:ff:2d:eb:be:5e:74:e6:f9:ca:47:6b:ca:41:90:fe:a5: 0c:c1:f3:a5:0c:5e:25:da:6b:63:53:d8:74:bf:c5:10:ae:52: 9e:83:72:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbycAdqFWkisNEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAwNTdhYTEtNTQ0ZC00MjM3LWI1NDktMzA0ZmQ0NTMy NGJhMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk ZDQ0YzQwNTItYzdmYi00MzI5LWJiZTAtNzEyMjRlZmQwYmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6p+Xq/47/yAKImgHKEsyD54mrpz/KrkU34E t6PDGubkQrHQL33Ey9dOtVF/d4Zcpfu0wWrWlyz7wNGMNPawS5v8KdmZV4KTpreR Mh79e6kvX9nw6xV83s4lheCpfiJxxKAskLOECcBAbVREQp9DIeVhFS9YsQX6uZFT RbwtaC5OKOPI/JgYjVE+vWETHnNY8jMrl+OjNmqBj9cBRN4lKNyyzcgfKCBhVoaU 0uyshBT9PZiaXUiHAh9aC8rWtuQgw0oFMQOSd6O5JWMFkeghK8WpUOi96I9ZZh3i V6E3Lp6GbvN0QlYpE4PZjaGmCs88cMB8MRW46KCikLxw/cfn0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqb0hmFHH+xn9+YvWyjj1azYgH4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MDA1 N2FhMS01NDRkLTQyMzctYjU0OS0zMDRmZDQ1MzI0YmEvYjM3OTg4MjgtNzFiMi0z MjlmLTg5ODgtMjFiM2UzZjA1YjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzAwNTdhYTEtNTQ0ZC00MjM3LWI1 NDktMzA0ZmQ0NTMyNGJhLzcwMDU3YWExLTU0NGQtNDIzNy1iNTQ5LTMwNGZkNDUz MjRiYS5jcmwwHwYDVR0jBBgwFoAU3kql0TNc/YfvMJELZq/wzmE2ZNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MDA1N2FhMS01NDRkLTQyMzctYjU0OS0zMDRm ZDQ1MzI0YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2N7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKLmkRc2jWwg2D/17PHXzMLcutur9ctmFEXvrZQJf8l69abSwWDl15/ 9E0CPINH46DGoHvSbRjZr1t+374nFs9Y8Yjmmt2ID5wUlK2lH8dr2vc3/1IzqJ3P Ff/FTAN/RXNhSW92dY5WLCmDo3y4WCYmBfRp+xr4xDUNRvSPMLZ8kdVBBbH1McmW VfAXKyYlXtUVYKOBLQAnlaQ174ksm6ohFXSgP9nvBO+ku8WLLFd0ve115Qu5u0Zg lVeKEE1KlFS1DSG2dxZvkqqZNqY809AvoAQYBQjRkylG/y3rvl505vnKR2vKQZD+ pQzB86UMXiXaa2NT2HS/xRCuUp6Dctg= -----END CERTIFICATE-----Generated at Sat May 3 05:43:32 2025 by rpki-client