$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/15302cbf-57f0-373f-96de-03dd65f8b849.roa File: 15302cbf-57f0-373f-96de-03dd65f8b849.roa (raw, json) Hash identifier: TSUMhc6t07La4p2DpZDtmmLCdIyggrn110TwTWVnRPU= Subject key identifier: 70:CE:C2:6A:E0:AE:3C:97:F9:92:31:8A:B5:9C:1D:D3:95:48:D6:96 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F43285849350EA1A5F1A436C05569E200 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/15302cbf-57f0-373f-96de-03dd65f8b849.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 13576 IP address blocks: 216.106.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:a1:a5:f1:a4:36:c0:55:69:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=9f584e79-5b9a-46b0-9333-c2344af13eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c3:cb:5c:2d:a0:70:70:b4:5b:3d:b8:d1:21: 59:6d:55:bd:cb:c1:d3:a6:36:64:a7:46:58:2f:3f: 06:b4:4f:e7:51:8b:6c:be:ad:de:bd:79:bc:87:ee: ca:4d:5b:82:5a:cf:ea:89:35:7c:f4:95:a0:2a:b7: b5:aa:a0:33:c6:07:26:48:56:16:ba:6a:7c:2e:1c: 67:9e:d3:23:ab:0b:16:df:f8:0e:19:26:32:b4:16: 7e:5a:0b:e1:5f:e4:1d:e0:16:03:10:ef:b2:7f:b9: 0d:f5:94:d7:81:a5:8b:56:93:6c:7a:46:94:e4:08: 41:0a:06:54:05:63:4e:70:5f:72:49:73:4e:e0:90: 64:e3:b1:3d:b6:21:6f:27:ba:14:a0:10:8f:97:e6: 19:bf:51:28:38:8b:65:c4:e7:16:1c:c7:83:25:d3: 65:90:3d:3c:7f:df:c7:19:6d:3a:36:92:da:40:44: a5:e6:dc:cc:86:a2:a8:34:32:9c:9b:d1:a7:f4:23: f0:0d:12:15:58:13:9e:a8:b5:9e:c6:bb:93:4e:65: 8b:b8:a4:7d:32:33:2f:44:4b:26:0e:c6:50:ae:e5: 58:24:ec:39:42:64:3c:15:be:2a:8b:da:cd:a3:1b: b6:2e:79:5b:61:3f:c5:ae:86:f2:2d:6b:a5:fb:38: cc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CE:C2:6A:E0:AE:3C:97:F9:92:31:8A:B5:9C:1D:D3:95:48:D6:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/15302cbf-57f0-373f-96de-03dd65f8b849.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.106.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:c4:bc:5e:38:91:8f:32:9a:ef:ff:c8:cb:81:e2:5e:8b:fd: 55:be:65:3a:c0:10:6e:0e:94:df:47:ed:d9:e9:2c:e4:3a:8c: 43:75:39:c6:ec:a6:8e:62:42:00:90:f6:6f:8c:a5:30:de:38: af:04:b9:f7:db:98:68:93:a4:27:e3:35:fa:5c:a6:65:f8:c0: 3f:ce:04:ba:90:b4:a3:6f:58:7b:8f:01:cc:f7:85:4c:3c:04: 61:9e:42:1c:d5:99:64:f5:29:7f:20:ea:fc:9b:fe:f1:3a:7b: c4:11:f3:55:9d:da:e0:88:9f:7d:9d:43:12:29:ea:6f:7d:7c: a5:de:09:e1:7d:6c:24:37:1a:a8:a8:a9:de:86:ee:02:48:f0: f2:4f:58:20:01:00:6d:c9:51:0c:5f:97:d5:30:e9:85:f8:c3: be:b3:ec:ac:37:75:27:f8:25:5c:dc:b5:6f:dc:6e:91:90:52: d9:f6:24:7b:87:97:5d:8f:15:35:4e:57:d4:ad:87:36:1b:8d: 1d:c8:08:3d:ce:ce:fd:1a:2b:fd:c1:d9:a8:b5:8f:26:d5:3a: 15:41:f4:b8:b7:8c:11:1e:3f:a9:4a:14:24:fd:67:47:4c:1f: 59:1c:69:61:ff:1b:63:dc:8a:42:47:4f:f7:9f:9f:ab:c9:64: 77:c4:de:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DqGl8aQ2wFVp4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk OWY1ODRlNzktNWI5YS00NmIwLTkzMzMtYzIzNDRhZjEzZWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8PLXC2gcHC0Wz240SFZbVW9y8HTpjZkp0ZY Lz8GtE/nUYtsvq3evXm8h+7KTVuCWs/qiTV89JWgKre1qqAzxgcmSFYWump8Lhxn ntMjqwsW3/gOGSYytBZ+WgvhX+Qd4BYDEO+yf7kN9ZTXgaWLVpNsekaU5AhBCgZU BWNOcF9ySXNO4JBk47E9tiFvJ7oUoBCPl+YZv1EoOItlxOcWHMeDJdNlkD08f9/H GW06NpLaQESl5tzMhqKoNDKcm9Gn9CPwDRIVWBOeqLWexruTTmWLuKR9MjMvREsm DsZQruVYJOw5QmQ8Fb4qi9rNoxu2LnlbYT/FrobyLWul+zjM1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDOwmrgrjyX+ZIxirWcHdOVSNaWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMTUzMDJjYmYtNTdmMC0z NzNmLTk2ZGUtMDNkZDY1ZjhiODQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GrYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7EvF44kY8ymu//yMuB4l6L/VW+ZTrAEG4OlN9H7dnpLOQ6jEN1Ocbs po5iQgCQ9m+MpTDeOK8EuffbmGiTpCfjNfpcpmX4wD/OBLqQtKNvWHuPAcz3hUw8 BGGeQhzVmWT1KX8g6vyb/vE6e8QR81Wd2uCIn32dQxIp6m99fKXeCeF9bCQ3Gqio qd6G7gJI8PJPWCABAG3JUQxfl9Uw6YX4w76z7Kw3dSf4JVzctW/cbpGQUtn2JHuH l12PFTVOV9SthzYbjR3ICD3Ozv0aK/3B2ai1jybVOhVB9Li3jBEeP6lKFCT9Z0dM H1kcaWH/G2PcikJHT/efn6vJZHfE3ns= -----END CERTIFICATE-----Generated at Tue Apr 29 09:17:28 2025 by rpki-client