$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/6ec4b6bf-d53f-3877-b36e-f669576d8063.roa File: 6ec4b6bf-d53f-3877-b36e-f669576d8063.roa (raw, json) Hash identifier: XxzOfZKtVEBlQzZgO6F3qyIU0WbqPaP1KdiHeJhUHFY= Subject key identifier: E3:6E:B6:7B:24:73:03:FD:2E:BB:CF:C6:D0:65:63:24:F8:EF:58:BA Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F43285849552954EF2BC0C2D1774A1C80 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/6ec4b6bf-d53f-3877-b36e-f669576d8063.roa Signing time: Fri 28 Mar 2025 01:00:41 +0000 ROA not before: Fri 28 Mar 2025 01:00:41 +0000 ROA not after: Thu 26 Jun 2025 01:00:41 +0000 asID: 6128 IP address blocks: 216.97.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:55:29:54:ef:2b:c0:c2:d1:77:4a:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Mar 28 01:00:41 2025 GMT Not After : Jun 26 01:00:41 2025 GMT Subject: CN=88476634-8acc-4d6e-a617-02ccbce29287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:57:1e:0f:56:bf:d0:fb:90:59:39:2d:d6:22: 93:f0:76:07:de:59:0b:0c:b5:40:f5:3e:5e:ed:d5: 80:05:e4:da:71:10:5b:2f:30:4c:00:af:b4:35:bc: 8e:1d:63:a9:3e:7f:7b:f9:51:84:3d:34:ff:3a:ca: 58:ff:03:2a:fd:7c:d7:7e:c3:a0:9f:42:ba:e2:ef: aa:86:38:b8:e6:9b:9d:b9:98:20:80:05:52:d0:36: b9:e9:ec:00:10:c3:3d:dd:fa:aa:0f:eb:20:fe:8d: 05:aa:43:05:0d:e1:33:72:ab:29:ff:58:66:67:77: 2a:72:6f:6c:a4:42:62:5a:6d:00:dd:dd:6a:67:5a: 71:c2:f3:bb:1d:a5:12:1f:98:08:f8:d3:a1:11:d5: 6a:b8:8d:13:16:09:4d:35:c5:ff:e8:83:14:fe:5f: 29:1f:5a:f4:ef:89:a0:0b:a1:5d:81:cd:96:17:7c: 5b:2d:f5:ae:cd:59:1d:62:96:56:88:26:d9:06:09: 6f:8b:b3:ac:8f:95:e1:78:99:cf:cb:2a:a5:a8:24: fd:d8:07:d8:d8:92:c3:db:85:fb:c4:23:fb:c6:90: a7:82:99:35:84:20:81:a1:89:f6:55:7c:1e:ad:b1: 7b:90:5c:b7:29:08:37:19:ba:39:8c:c5:c3:30:85: 49:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:6E:B6:7B:24:73:03:FD:2E:BB:CF:C6:D0:65:63:24:F8:EF:58:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/6ec4b6bf-d53f-3877-b36e-f669576d8063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 216.97.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:ec:21:ef:60:61:40:fb:10:aa:be:df:10:eb:b2:e1:40:46: 78:40:06:17:42:a4:ac:9f:fc:16:5c:a6:5e:fe:24:9a:9b:93: 7a:a3:af:8a:05:ee:93:d7:50:9e:ba:d3:28:21:bc:3f:09:5c: 12:99:e4:dd:cf:59:0e:0e:fa:7e:72:39:11:a5:20:8b:cb:17: 97:32:8f:c9:50:f7:ea:ef:70:f2:1c:0c:88:28:d5:46:78:f0: 13:77:e2:8c:03:dd:b0:42:85:de:20:8a:e1:73:d3:82:5b:73: 69:88:6e:32:3d:ce:39:10:42:e1:c8:ca:93:a6:a8:95:79:d6: e2:16:23:d1:3f:03:a5:a1:52:54:c5:e3:79:68:b8:fa:4f:bd: 30:92:ba:68:fe:e6:8c:15:d0:06:fd:c0:84:9e:b4:9e:65:e3: 0a:f3:bb:26:1e:0c:79:d6:b5:68:39:69:35:eb:f0:f4:f8:75: da:f5:d1:b5:8b:36:03:1c:e6:a5:19:20:82:2c:53:d2:2b:21: 16:41:b8:48:14:6d:c6:ef:0c:5a:71:04:20:c9:f9:11:ab:f6: e4:9f:a9:e6:25:6c:cb:38:8b:15:02:43:77:1d:6f:0d:8e:df: c3:ec:4f:f2:79:39:d1:d1:a7:a1:b9:fb:c2:13:fe:5d:ec:76: f6:9e:00:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElVKVTvK8DC0XdKHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk ODg0NzY2MzQtOGFjYy00ZDZlLWE2MTctMDJjY2JjZTI5Mjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllceD1a/0PuQWTkt1iKT8HYH3lkLDLVA9T5e 7dWABeTacRBbLzBMAK+0NbyOHWOpPn97+VGEPTT/OspY/wMq/XzXfsOgn0K64u+q hji45puduZgggAVS0Da56ewAEMM93fqqD+sg/o0FqkMFDeEzcqsp/1hmZ3cqcm9s pEJiWm0A3d1qZ1pxwvO7HaUSH5gI+NOhEdVquI0TFglNNcX/6IMU/l8pH1r074mg C6Fdgc2WF3xbLfWuzVkdYpZWiCbZBglvi7Osj5XheJnPyyqlqCT92AfY2JLD24X7 xCP7xpCngpk1hCCBoYn2VXwerbF7kFy3KQg3Gbo5jMXDMIVJXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONutnskcwP9LrvPxtBlYyT471i6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvNmVjNGI2YmYtZDUzZi0z ODc3LWIzNmUtZjY2OTU3NmQ4MDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTsIe9gYUD7EKq+3xDrsuFARnhABhdCpKyf/BZcpl7+JJqbk3qjr4oF 7pPXUJ660yghvD8JXBKZ5N3PWQ4O+n5yORGlIIvLF5cyj8lQ9+rvcPIcDIgo1UZ4 8BN34owD3bBChd4giuFz04Jbc2mIbjI9zjkQQuHIypOmqJV51uIWI9E/A6WhUlTF 43louPpPvTCSumj+5owV0Ab9wISetJ5l4wrzuyYeDHnWtWg5aTXr8PT4ddr10bWL NgMc5qUZIIIsU9IrIRZBuEgUbcbvDFpxBCDJ+RGr9uSfqeYlbMs4ixUCQ3cdbw2O 38PsT/J5OdHRp6G5+8IT/l3sdvaeAJo= -----END CERTIFICATE-----Generated at Sun Apr 27 01:08:27 2025 by rpki-client