$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/deb6fb94-6e53-3c64-92b3-0b44571a1cfa.roa File: deb6fb94-6e53-3c64-92b3-0b44571a1cfa.roa (raw, json) Hash identifier: pDxZEiRb5IBojuM+n5+18HvgkrG//iRFaKtaRyrgfOY= Subject key identifier: 78:36:9D:D7:5A:59:7C:44:5C:F9:9C:FB:71:18:E2:52:FE:4E:2E:24 Certificate issuer: /CN=fd691680-2c46-4e86-8545-3e0e0c0e305a Certificate serial: 010D0C9F432858499F2496161ED62E7B26AA9D80 Authority key identifier: A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/deb6fb94-6e53-3c64-92b3-0b44571a1cfa.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 23028 IP address blocks: 216.31.33.0/24 maxlen: 24 216.31.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:96:16:1e:d6:2e:7b:26:aa:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd691680-2c46-4e86-8545-3e0e0c0e305a Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=dcf771eb-e890-4267-b886-8b982b8f92df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:73:ac:ce:29:4a:aa:44:26:c6:54:64:3a:72: db:e9:01:b0:e7:c1:83:1a:2e:1e:1e:41:ab:0d:44: c6:bf:77:7b:d2:b1:d1:ae:c2:1d:6c:b3:4b:a6:11: 23:b5:b6:1c:7d:55:86:46:c4:c7:47:f9:be:57:76: 66:68:b8:6b:14:25:81:21:03:56:67:4a:62:6d:ec: 9e:6d:52:e8:fa:94:13:2c:4a:73:75:91:d0:1a:64: 98:80:f2:0c:16:f6:42:de:bf:b8:10:88:8a:32:e2: 52:bd:83:3a:40:04:a8:96:f3:12:82:b5:c2:aa:88: a2:b5:75:1b:ff:78:ee:81:17:cf:82:50:fb:8e:a6: 51:ac:23:60:42:04:de:98:d6:53:7b:b5:23:c9:c3: 4f:38:d4:1d:59:5e:41:14:48:32:c9:d0:a3:69:c6: f3:81:b7:8d:e8:95:19:0c:35:4f:51:44:88:e3:1e: 01:f1:5b:3a:92:ff:2c:00:6a:db:0a:9b:e6:53:c2: 6b:c9:84:bb:50:c6:c0:f4:54:74:75:97:55:d4:9f: a1:af:91:b5:dc:63:cc:3e:7f:c0:14:0a:aa:cb:b9: 1e:d3:82:d8:74:c9:a2:39:9e:e9:ab:65:14:2f:c0: 04:db:e2:a6:cd:45:d5:fa:57:db:4b:90:78:d7:12: ba:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:36:9D:D7:5A:59:7C:44:5C:F9:9C:FB:71:18:E2:52:FE:4E:2E:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/deb6fb94-6e53-3c64-92b3-0b44571a1cfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl X509v3 Authority Key Identifier: keyid:A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer sbgp-ipAddrBlock: critical IPv4: 216.31.33.0-216.31.35.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:cf:e3:ee:5a:f4:de:8e:44:d4:c1:bc:0f:fe:05:05:21:e9: 66:2d:7b:57:b5:38:15:9e:5f:39:11:64:41:bb:4b:bd:82:5d: d1:07:04:be:d2:da:17:fb:b0:c9:e3:49:48:cb:c9:8d:a5:b7: 55:16:07:41:8b:8c:54:e3:17:56:3a:a6:41:e8:4c:c7:39:38: 47:bb:f9:3c:fa:2e:0e:00:5a:64:64:8a:40:d1:c7:26:76:43: 40:13:66:d2:76:5f:84:52:7d:4f:77:32:b3:14:dd:74:3b:e3: 48:7f:62:f7:2e:e2:6c:c7:9a:68:ae:63:40:ae:f8:22:41:b7: bb:e0:67:7c:46:b0:24:5a:c3:d9:ed:85:97:54:f5:06:3a:19: 13:aa:9b:23:7c:81:73:fd:7a:b1:0f:73:24:79:c7:1a:22:5e: ee:14:75:bf:08:45:be:fe:7c:4f:f3:78:97:ca:0d:b0:e4:a0: b1:ec:27:1c:71:b7:bd:e3:4a:75:20:d7:af:38:c4:49:8a:c6: 0d:f7:5b:7d:2d:d0:f9:c1:aa:e9:17:55:55:6f:dc:f3:c1:10: 78:db:ec:92:eb:b1:c2:92:6a:d5:16:13:89:14:ac:06:69:9c: ab:27:72:24:f7:bf:cb:bf:99:93:e5:11:51:f7:cc:29:0f:a2: b0:b5:51:23 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEmfJJYWHtYueyaqnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ2OTE2ODAtMmM0Ni00ZTg2LTg1NDUtM2UwZTBjMGUz MDVhMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZGNmNzcxZWItZTg5MC00MjY3LWI4ODYtOGI5ODJiOGY5MmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3OszilKqkQmxlRkOnLb6QGw58GDGi4eHkGr DUTGv3d70rHRrsIdbLNLphEjtbYcfVWGRsTHR/m+V3ZmaLhrFCWBIQNWZ0pibeye bVLo+pQTLEpzdZHQGmSYgPIMFvZC3r+4EIiKMuJSvYM6QASolvMSgrXCqoiitXUb /3jugRfPglD7jqZRrCNgQgTemNZTe7UjycNPONQdWV5BFEgyydCjacbzgbeN6JUZ DDVPUUSI4x4B8Vs6kv8sAGrbCpvmU8JryYS7UMbA9FR0dZdV1J+hr5G13GPMPn/A FAqqy7ke04LYdMmiOZ7pq2UUL8AE2+KmzUXV+lfbS5B41xK6BQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFHg2nddaWXxEXPmc+3EY4lL+Ti4kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZDY5 MTY4MC0yYzQ2LTRlODYtODU0NS0zZTBlMGMwZTMwNWEvZGViNmZiOTQtNmU1My0z YzY0LTkyYjMtMGI0NDU3MWExY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmQ2OTE2ODAtMmM0Ni00ZTg2LTg1 NDUtM2UwZTBjMGUzMDVhL2ZkNjkxNjgwLTJjNDYtNGU4Ni04NTQ1LTNlMGUwYzBl MzA1YS5jcmwwHwYDVR0jBBgwFoAUpOLLMkryoIf+v49CQPitkF4srMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZDY5MTY4MC0yYzQ2LTRlODYtODU0NS0zZTBl MGMwZTMwNWEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADYHyED BALYHyAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAQM/j7lr03o5E1MG8D/4FBSHpZi17V7U4FZ5fORFkQbtL vYJd0QcEvtLaF/uwyeNJSMvJjaW3VRYHQYuMVOMXVjqmQehMxzk4R7v5PPouDgBa ZGSKQNHHJnZDQBNm0nZfhFJ9T3cysxTddDvjSH9i9y7ibMeaaK5jQK74IkG3u+Bn fEawJFrD2e2Fl1T1BjoZE6qbI3yBc/16sQ9zJHnHGiJe7hR1vwhFvv58T/N4l8oN sOSgsewnHHG3veNKdSDXrzjESYrGDfdbfS3Q+cGq6RdVVW/c88EQeNvskuuxwpJq 1RYTiRSsBmmcqydyJPe/y7+Zk+URUffMKQ+isLVRIw== -----END CERTIFICATE-----Generated at Sun Apr 27 07:51:39 2025 by rpki-client