$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b0b73ac7-5708-395a-bf74-65b25c103c59.roa File: b0b73ac7-5708-395a-bf74-65b25c103c59.roa (raw, json) Hash identifier: Qw2+T4roPvNBmvHp/FB45j3zsQMch+6mtZsNPGKJ42o= Subject key identifier: 7E:45:45:A6:F1:10:A7:5B:8A:3F:B6:63:13:77:C1:C0:2A:EF:37:F8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB5B0B5D916DD909593C80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b0b73ac7-5708-395a-bf74-65b25c103c59.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 216.239.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:5b:0b:5d:91:6d:d9:09:59:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=76abbf5b-4a1e-4d9e-9d0c-c1076d87fa2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1f:63:32:ac:69:81:89:98:37:54:97:b7:f8: fe:8d:74:ce:fa:0b:f7:9b:ac:50:37:00:eb:87:04: e1:cd:81:0d:bc:d2:b2:fd:23:89:76:af:55:1c:14: b0:77:90:da:f5:58:2d:d0:1c:e7:ab:55:b0:3b:d5: 64:67:bc:23:cc:d9:aa:ce:50:a7:ec:23:f0:c9:a3: fd:70:f1:68:04:cf:06:c3:44:c0:15:d9:e5:39:a8: da:51:79:c4:bb:47:88:32:20:61:54:0c:cb:05:3d: 0e:d5:11:e6:47:b2:5c:fa:13:71:60:8f:1d:66:42: 58:ad:5a:af:8b:4a:ff:1d:85:d5:72:2c:b7:2b:cf: d0:ab:8f:14:1a:6a:b0:82:92:46:5e:2e:be:fa:05: 25:e0:54:cd:8f:02:22:79:b0:8a:e6:a8:d9:ee:e4: e5:dd:f3:3f:35:4a:33:be:83:bf:01:ac:03:19:58: 6d:be:72:1a:c8:03:e7:ff:3c:8f:23:c5:1e:0d:68: 13:da:38:37:73:48:44:38:95:49:0e:a3:8c:18:88: 11:5a:d6:20:68:91:be:d4:27:bc:7c:df:3e:1e:fb: 4f:82:3e:b1:40:58:4f:ed:f2:c1:bc:ec:b3:7b:d7: 23:66:81:12:64:2c:33:c8:65:17:5a:c5:dc:16:fa: a8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:45:45:A6:F1:10:A7:5B:8A:3F:B6:63:13:77:C1:C0:2A:EF:37:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b0b73ac7-5708-395a-bf74-65b25c103c59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.239.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:1f:59:d6:41:65:18:c4:f2:2a:6c:3a:a2:4b:46:74:3f:a3: 30:f7:77:1c:d8:3f:5b:9d:a6:fe:78:b2:ab:ed:96:6f:1c:a0: 11:5a:e8:ab:57:e3:60:58:30:fd:51:0c:40:cb:42:da:14:49: aa:6a:a4:bf:d5:4b:8e:95:99:2e:14:e8:c0:20:50:e2:ea:b2: 85:86:a2:aa:58:bd:0a:5e:d6:87:01:2b:3f:82:4a:88:57:4c: a0:39:35:f1:03:39:8f:c4:14:c7:e7:f1:5a:2e:db:ec:2c:dc: 50:fd:36:97:c1:cf:70:23:86:76:69:83:a3:24:54:b6:f1:31: 2e:48:1e:04:8f:0d:93:92:5d:ff:a5:42:e2:d2:99:af:7f:97: 41:72:86:92:6e:bd:d8:e1:f0:71:82:f4:aa:6a:47:78:a8:fc: 16:4d:b7:61:a2:b1:c2:fd:cf:bb:19:69:0d:13:f8:44:9b:14: 1a:30:15:59:03:10:e1:7e:0e:f5:73:75:c3:a4:77:21:f9:72: 79:e2:bb:6d:f0:6a:5b:fe:8b:92:ad:d6:10:22:cf:76:8c:45: 6c:dc:b8:a0:0d:14:ec:00:42:84:30:a4:43:37:a7:a6:27:f6: 5d:37:37:de:06:cc:26:fd:fe:8f:98:4a:33:17:5f:5d:ef:14: 64:f3:8e:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1sLXZFt2QlZPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NzZhYmJmNWItNGExZS00ZDllLTlkMGMtYzEwNzZkODdmYTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB9jMqxpgYmYN1SXt/j+jXTO+gv3m6xQNwDr hwThzYENvNKy/SOJdq9VHBSwd5Da9Vgt0Bznq1WwO9VkZ7wjzNmqzlCn7CPwyaP9 cPFoBM8Gw0TAFdnlOajaUXnEu0eIMiBhVAzLBT0O1RHmR7Jc+hNxYI8dZkJYrVqv i0r/HYXVciy3K8/Qq48UGmqwgpJGXi6++gUl4FTNjwIiebCK5qjZ7uTl3fM/NUoz voO/AawDGVhtvnIayAPn/zyPI8UeDWgT2jg3c0hEOJVJDqOMGIgRWtYgaJG+1Ce8 fN8+HvtPgj6xQFhP7fLBvOyze9cjZoESZCwzyGUXWsXcFvqoGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5FRabxEKdbij+2YxN3wcAq7zf4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjBiNzNhYzctNTcwOC0z OTVhLWJmNzQtNjViMjVjMTAzYzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O8nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4fWdZBZRjE8ipsOqJLRnQ/ozD3dxzYP1udpv54sqvtlm8coBFa6KtX 42BYMP1RDEDLQtoUSapqpL/VS46VmS4U6MAgUOLqsoWGoqpYvQpe1ocBKz+CSohX TKA5NfEDOY/EFMfn8Vou2+ws3FD9NpfBz3AjhnZpg6MkVLbxMS5IHgSPDZOSXf+l QuLSma9/l0FyhpJuvdjh8HGC9KpqR3io/BZNt2GiscL9z7sZaQ0T+ESbFBowFVkD EOF+DvVzdcOkdyH5cnniu23walv+i5Kt1hAiz3aMRWzcuKANFOwAQoQwpEM3p6Yn 9l03N94GzCb9/o+YSjMXX13vFGTzjkU= -----END CERTIFICATE-----Generated at Sun Apr 27 01:01:09 2025 by rpki-client