$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b2cc91dd-c083-3f44-bb2e-3fe0332aeffb.roa File: b2cc91dd-c083-3f44-bb2e-3fe0332aeffb.roa (raw, json) Hash identifier: lnwZXW8hQ+vU1ljxSJjRX4R0piWe8RlMhq1x+RcaxNI= Subject key identifier: D8:6B:F7:42:E9:25:F6:1E:83:0B:90:8E:5A:92:09:CC:1E:71:DE:05 Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Certificate serial: 010D0C9F4328584930DE6DFA091F841E9DBEB100 Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b2cc91dd-c083-3f44-bb2e-3fe0332aeffb.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 3356 IP address blocks: 216.168.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:6d:fa:09:1f:84:1e:9d:be:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=b9257fe3-6640-401b-bece-6642018aa67e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f8:27:2f:05:69:87:a0:49:60:b3:1c:4b:6c: a0:c2:78:82:1f:d1:e2:02:46:53:95:69:83:3a:68: bd:25:8c:97:aa:36:46:60:a9:bb:a7:ad:cb:77:4d: 9e:73:3e:af:03:99:0c:d4:b7:58:2d:41:df:4a:64: 57:23:b2:71:d3:74:e7:94:7a:24:c2:c4:3f:22:fa: 72:f0:a7:74:0f:45:dd:37:e5:cc:78:2f:d0:c6:20: 22:1b:77:3f:c1:71:89:1e:b1:2b:bc:c9:ae:5f:16: 49:1a:21:c9:3c:98:0b:cc:22:18:f1:17:84:68:db: 62:10:43:fc:8b:38:ff:67:3b:3c:1d:f2:b1:eb:6b: 7b:05:88:a1:dc:77:d7:ab:aa:74:56:7e:5c:18:8d: d4:89:5e:d0:e1:11:46:aa:95:a7:5c:d0:0d:6c:26: af:90:99:17:3d:b0:49:4a:c4:67:60:3a:64:d6:e5: f6:b9:dc:b3:5f:d1:f4:68:2b:c6:62:08:21:fe:1e: 3f:fb:ca:af:7d:53:d6:a4:17:89:b0:1c:61:57:af: 9b:e2:c4:35:1a:a7:74:49:ca:b5:6b:45:94:d4:9e: e2:4f:60:8a:5f:e3:61:d8:f0:e5:a5:f3:de:7c:b1: 6b:fd:3e:d1:a3:af:fc:25:56:31:c5:7e:ec:c4:69: e1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6B:F7:42:E9:25:F6:1E:83:0B:90:8E:5A:92:09:CC:1E:71:DE:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b2cc91dd-c083-3f44-bb2e-3fe0332aeffb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl X509v3 Authority Key Identifier: keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer sbgp-ipAddrBlock: critical IPv4: 216.168.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:2a:c1:29:2d:3f:a7:02:fe:4b:ed:23:84:7c:e9:3a:39:86: 3c:16:88:20:89:68:8f:4b:93:8d:4d:ab:de:23:b5:66:ed:f6: c7:c2:cd:d7:50:22:b3:d4:c2:02:2c:32:7b:e7:27:ae:11:0f: 18:f8:63:72:58:fd:1f:ec:29:18:63:67:33:74:74:fe:14:19: ba:6f:d1:f8:ef:3e:c0:27:b9:25:15:91:6f:15:93:81:df:03: 88:70:98:b3:bf:8d:bb:86:f0:70:e2:8a:ae:ac:84:d9:63:3c: 82:2b:40:0f:9a:ad:a8:60:5f:08:22:52:a5:2e:b5:5c:2a:56: 95:96:52:a1:8e:5c:1f:9d:93:66:dd:03:12:48:75:44:79:a1: 16:1b:d0:19:49:f6:3a:da:e9:93:68:1f:5b:12:4b:28:dd:b8: ba:35:aa:fd:f9:41:f3:f8:0c:69:7d:7a:40:e9:97:7d:fe:e8: 3a:ea:de:60:82:fb:95:a7:f3:0b:ec:9f:b6:eb:95:37:dc:2a: c7:76:91:58:b1:04:5d:4b:24:78:50:74:e4:8a:75:81:56:7c: 59:d0:20:da:d0:ec:79:7c:00:13:e3:16:2c:f6:1d:9d:f0:63: 78:5e:c4:3d:ad:c7:76:86:6e:a9:89:c3:4a:57:63:17:ed:e8: 27:99:23:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3m36CR+EHp2+sQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRm ZTE5MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk YjkyNTdmZTMtNjY0MC00MDFiLWJlY2UtNjY0MjAxOGFhNjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvgnLwVph6BJYLMcS2ygwniCH9HiAkZTlWmD Omi9JYyXqjZGYKm7p63Ld02ecz6vA5kM1LdYLUHfSmRXI7Jx03TnlHokwsQ/Ivpy 8Kd0D0XdN+XMeC/QxiAiG3c/wXGJHrErvMmuXxZJGiHJPJgLzCIY8ReEaNtiEEP8 izj/Zzs8HfKx62t7BYih3HfXq6p0Vn5cGI3UiV7Q4RFGqpWnXNANbCavkJkXPbBJ SsRnYDpk1uX2udyzX9H0aCvGYggh/h4/+8qvfVPWpBeJsBxhV6+b4sQ1Gqd0Scq1 a0WU1J7iT2CKX+Nh2PDlpfPefLFr/T7Ro6/8JVYxxX7sxGnhXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhr90LpJfYegwuQjlqSCcwecd4FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFj NDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvYjJjYzkxZGQtYzA4My0z ZjQ0LWJiMmUtM2ZlMDMzMmFlZmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxYzQyYTItM2RjNi00M2FmLWI3 MzQtZTkxOTU2YmRmZTE5LzE3MWM0MmEyLTNkYzYtNDNhZi1iNzM0LWU5MTk1NmJk ZmUxOS5jcmwwHwYDVR0jBBgwFoAU67DVPKZW9lZPxRZwuO2JkN4PJtMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5 NTZiZGZlMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYqwSktP6cC/kvtI4R86To5hjwWiCCJaI9Lk41Nq94jtWbt9sfCzddQ IrPUwgIsMnvnJ64RDxj4Y3JY/R/sKRhjZzN0dP4UGbpv0fjvPsAnuSUVkW8Vk4Hf A4hwmLO/jbuG8HDiiq6shNljPIIrQA+arahgXwgiUqUutVwqVpWWUqGOXB+dk2bd AxJIdUR5oRYb0BlJ9jra6ZNoH1sSSyjduLo1qv35QfP4DGl9ekDpl33+6Drq3mCC +5Wn8wvsn7brlTfcKsd2kVixBF1LJHhQdOSKdYFWfFnQINrQ7Hl8ABPjFiz2HZ3w Y3hexD2tx3aGbqmJw0pXYxft6CeZI4c= -----END CERTIFICATE-----Generated at Sat Apr 26 18:39:11 2025 by rpki-client