$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3cffd828-cce9-3c73-a852-0976eaacdfbb.roa File: 3cffd828-cce9-3c73-a852-0976eaacdfbb.roa (raw, json) Hash identifier: 14BZK0IZAYU7WEDEGS+90k23T5rVS/ZYNGsFXACxoF0= Subject key identifier: B4:95:CC:E2:9D:65:36:B1:74:43:7D:12:93:81:26:A6:27:17:0F:65 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F43285849350E94C0038E0B119F3C4700 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3cffd828-cce9-3c73-a852-0976eaacdfbb.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 13576 IP address blocks: 216.106.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:94:c0:03:8e:0b:11:9f:3c:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=a5900968-ebc6-4166-98ef-01f868edaf46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e8:79:79:27:36:01:42:ee:eb:7c:19:73:3e: 4a:09:5e:81:66:1c:0c:9b:df:07:ba:dd:e7:28:61: 08:58:b7:25:2c:d8:86:89:d4:20:3c:a0:61:3a:57: 48:4a:e0:bc:0b:2b:4b:f4:9c:74:8b:61:2c:39:47: 84:99:a7:36:5c:33:5d:b0:5c:b2:cd:e6:cd:0c:38: e7:79:46:40:9c:e9:85:fd:67:31:93:73:b5:08:95: 84:fb:e7:df:79:5a:c7:9c:a8:d7:26:bf:82:90:88: c6:69:9e:56:b0:18:2b:f4:56:f0:9f:e3:98:9c:4c: 20:30:2a:8d:b4:f6:c7:6b:3c:3a:93:6a:fe:0c:a6: 10:ba:5a:18:39:b4:e3:1b:d7:c2:04:70:36:79:7d: f8:31:6f:80:81:65:cd:8f:0e:49:12:9c:cf:03:d0: e3:8f:12:d4:e1:01:80:ff:79:89:d6:2b:9b:a5:d2: 7f:1b:5e:d3:57:35:f8:a0:d2:dc:5f:e5:2d:97:ca: 76:51:45:3e:15:19:1a:34:68:b6:02:4c:62:01:b6: 67:32:bb:2e:a4:95:0f:34:58:bb:54:04:3f:cf:fb: d6:29:7e:bc:2d:68:d1:d6:58:1e:33:1d:e7:2d:07: ea:0d:8a:5a:5f:bb:9d:f7:c7:c0:ef:e5:06:d2:b5: 6f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:95:CC:E2:9D:65:36:B1:74:43:7D:12:93:81:26:A6:27:17:0F:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3cffd828-cce9-3c73-a852-0976eaacdfbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.106.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:54:d3:ae:41:47:20:69:b1:2f:df:d4:28:e6:0a:46:e8:3d: b7:fb:fb:29:3b:bf:f8:63:20:55:06:32:81:19:b2:ff:fd:44: 3a:44:80:58:d6:2b:03:d1:30:1e:8f:2f:2f:ba:cf:cf:62:65: 3a:d5:78:b9:a6:a7:44:b4:6b:8b:67:36:d6:f7:bf:0c:af:d4: c0:27:a6:9a:aa:0c:52:c4:97:02:a8:c5:6a:bf:43:f7:71:8e: 64:3e:cf:73:f2:92:a3:1a:84:0b:b1:c8:b6:7c:bc:e5:16:db: 2f:bb:c0:12:30:7a:47:cf:8d:09:85:9c:89:52:8b:33:45:84: 11:b6:43:ba:4f:7e:9a:a2:ba:52:23:5b:08:cf:1c:3d:fd:cb: d3:bc:32:1f:22:17:f0:c0:53:ed:1e:8a:23:ab:a9:10:cc:8b: e0:fd:16:ee:f2:17:2c:74:aa:b5:26:7a:61:8e:04:93:d4:ec: 44:85:b0:0f:af:71:9b:23:dc:a4:f4:8c:09:d6:16:f1:56:e5: 2d:5c:d3:be:b1:a8:99:d7:c3:4b:b8:56:e6:4b:f0:18:8f:68: 4a:61:dd:37:1d:e9:d9:40:ce:2f:8c:aa:c8:93:e1:c2:8a:ab: 2b:0a:d9:aa:6d:57:88:4d:60:f2:ea:69:3f:81:13:7f:98:f1: fb:9c:55:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DpTAA44LEZ88RwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YTU5MDA5NjgtZWJjNi00MTY2LTk4ZWYtMDFmODY4ZWRhZjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Oh5eSc2AULu63wZcz5KCV6BZhwMm98Hut3n KGEIWLclLNiGidQgPKBhOldISuC8CytL9Jx0i2EsOUeEmac2XDNdsFyyzebNDDjn eUZAnOmF/Wcxk3O1CJWE++ffeVrHnKjXJr+CkIjGaZ5WsBgr9Fbwn+OYnEwgMCqN tPbHazw6k2r+DKYQuloYObTjG9fCBHA2eX34MW+AgWXNjw5JEpzPA9DjjxLU4QGA /3mJ1iubpdJ/G17TVzX4oNLcX+Utl8p2UUU+FRkaNGi2AkxiAbZnMrsupJUPNFi7 VAQ/z/vWKX68LWjR1lgeMx3nLQfqDYpaX7ud98fA7+UG0rVvUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSVzOKdZTaxdEN9EpOBJqYnFw9lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvM2NmZmQ4MjgtY2NlOS0z YzczLWE4NTItMDk3NmVhYWNkZmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GroMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANJU065BRyBpsS/f1CjmCkboPbf7+yk7v/hjIFUGMoEZsv/9RDpEgFjW KwPRMB6PLy+6z89iZTrVeLmmp0S0a4tnNtb3vwyv1MAnppqqDFLElwKoxWq/Q/dx jmQ+z3PykqMahAuxyLZ8vOUW2y+7wBIwekfPjQmFnIlSizNFhBG2Q7pPfpqiulIj WwjPHD39y9O8Mh8iF/DAU+0eiiOrqRDMi+D9Fu7yFyx0qrUmemGOBJPU7ESFsA+v cZsj3KT0jAnWFvFW5S1c076xqJnXw0u4VuZL8BiPaEph3Tcd6dlAzi+MqsiT4cKK qysK2aptV4hNYPLqaT+BE3+Y8fucVQI= -----END CERTIFICATE-----Generated at Sun Apr 27 18:08:01 2025 by rpki-client