$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c81bbaaa-f879-3851-9be2-8e32b27159e2.roa File: c81bbaaa-f879-3851-9be2-8e32b27159e2.roa (raw, json) Hash identifier: zLnHq8L91b1A/5W4XWVYgEodHACF0WOvOP2fd2myeFg= Subject key identifier: 76:D8:E5:98:DE:25:C4:8B:76:60:01:02:07:15:E2:86:BA:4C:4A:D3 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584937D93B6A56DD227394E67180 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c81bbaaa-f879-3851-9be2-8e32b27159e2.roa Signing time: Mon 17 Mar 2025 13:00:52 +0000 ROA not before: Mon 17 Mar 2025 13:00:52 +0000 ROA not after: Sun 15 Jun 2025 13:00:52 +0000 asID: 13576 IP address blocks: 216.249.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:37:d9:3b:6a:56:dd:22:73:94:e6:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 17 13:00:52 2025 GMT Not After : Jun 15 13:00:52 2025 GMT Subject: CN=fbca5dcb-e3f0-4b32-afe5-3f3ebec9abe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:16:1a:3f:5b:90:1f:e3:7f:56:c1:7d:c8:80: 4a:3d:b5:b5:44:f4:73:23:ff:d1:94:d6:b1:d3:fa: 65:77:63:ed:10:91:f3:52:25:20:e4:ec:4e:65:24: 72:44:1b:f9:84:4d:cd:ed:97:92:8e:40:2e:95:f9: 82:10:43:0c:62:5b:43:21:ec:32:f4:83:c8:dd:60: 63:0b:4d:f5:a0:c2:b0:19:44:74:e6:6f:11:2c:2d: 23:77:fd:a8:7d:e2:70:eb:58:b0:08:9e:44:d0:55: 5d:d7:69:c7:fa:7a:35:69:e8:61:09:fa:87:f0:44: 95:a2:34:5d:3e:8e:1e:48:0e:a6:41:1a:d6:70:c1: 08:7f:58:fb:83:3c:85:34:80:24:75:b6:54:0e:ec: 90:41:e2:d5:55:da:49:7a:99:95:5e:d2:3f:0a:2d: 52:50:7a:10:2f:ed:57:af:dc:69:69:1d:4a:a6:68: bd:62:e4:79:68:a0:74:22:a8:db:38:06:83:7e:50: ad:28:0c:43:77:83:71:86:32:37:92:07:ee:0b:dc: 34:17:82:02:63:cd:7e:2f:e4:71:d3:93:c9:c5:f5: bd:93:6b:5e:ba:be:bb:7e:70:5e:5d:63:cb:86:3d: 06:91:c2:d5:b2:a4:0b:59:d0:7e:27:a0:84:b2:54: 39:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D8:E5:98:DE:25:C4:8B:76:60:01:02:07:15:E2:86:BA:4C:4A:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c81bbaaa-f879-3851-9be2-8e32b27159e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:02:09:5f:c2:66:4b:e6:b6:28:0f:fd:e3:32:3e:8c:05:dc: 68:aa:d5:dc:42:7a:ef:dd:80:a1:b6:25:90:80:4f:98:fd:70: af:9f:11:6b:7d:03:3d:9e:ee:ae:bc:7d:71:97:6d:45:60:ed: 0f:ee:09:88:76:f5:46:fe:2e:c7:9d:f7:24:f2:cc:d4:aa:0d: 6b:62:28:99:86:fe:ab:91:ba:d2:18:4c:39:51:53:43:cb:1b: c6:c0:fd:e9:2b:ec:97:9a:21:68:b3:89:87:78:c5:85:86:56: b7:83:b8:90:89:eb:0f:a4:dc:26:40:cf:b0:8c:3d:57:71:07: 7e:d9:de:20:68:60:fb:e3:86:aa:88:8e:21:00:ab:46:18:8f: f2:f2:5e:5c:c0:98:d8:a3:45:3d:cd:60:21:03:4a:12:9a:23: 36:5d:6c:2b:71:3a:52:80:ce:ed:9e:8a:1d:73:bb:ba:aa:9f: 80:5e:7d:b0:a0:55:16:0d:3e:df:ae:17:01:a6:78:0a:9d:6a: c7:ca:28:0a:ce:f0:af:72:37:12:77:56:77:34:cd:4b:3c:d1: 08:5a:11:ae:13:f8:9b:59:2e:df:0c:4a:d9:37:6e:60:26:3e: f2:0e:87:c4:18:02:ab:d2:c6:64:e9:e3:fb:e2:61:78:3b:0f: 99:94:ea:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32TtqVt0ic5TmcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk ZmJjYTVkY2ItZTNmMC00YjMyLWFmZTUtM2YzZWJlYzlhYmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RYaP1uQH+N/VsF9yIBKPbW1RPRzI//RlNax 0/pld2PtEJHzUiUg5OxOZSRyRBv5hE3N7ZeSjkAulfmCEEMMYltDIewy9IPI3WBj C031oMKwGUR05m8RLC0jd/2ofeJw61iwCJ5E0FVd12nH+no1aehhCfqH8ESVojRd Po4eSA6mQRrWcMEIf1j7gzyFNIAkdbZUDuyQQeLVVdpJepmVXtI/Ci1SUHoQL+1X r9xpaR1Kpmi9YuR5aKB0IqjbOAaDflCtKAxDd4NxhjI3kgfuC9w0F4ICY81+L+Rx 05PJxfW9k2teur67fnBeXWPLhj0GkcLVsqQLWdB+J6CEslQ5oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbY5ZjeJcSLdmABAgcV4oa6TErTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYzgxYmJhYWEtZjg3OS0z ODUxLTliZTItOGUzMmIyNzE1OWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PnUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQCCV/CZkvmtigP/eMyPowF3Giq1dxCeu/dgKG2JZCAT5j9cK+fEWt9 Az2e7q68fXGXbUVg7Q/uCYh29Ub+Lsed9yTyzNSqDWtiKJmG/quRutIYTDlRU0PL G8bA/ekr7JeaIWiziYd4xYWGVreDuJCJ6w+k3CZAz7CMPVdxB37Z3iBoYPvjhqqI jiEAq0YYj/LyXlzAmNijRT3NYCEDShKaIzZdbCtxOlKAzu2eih1zu7qqn4BefbCg VRYNPt+uFwGmeAqdasfKKArO8K9yNxJ3Vnc0zUs80QhaEa4T+JtZLt8MStk3bmAm PvIOh8QYAqvSxmTp4/viYXg7D5mU6jo= -----END CERTIFICATE-----Generated at Mon Apr 28 06:08:28 2025 by rpki-client