$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/0f7f6459-9a9b-3619-afd9-067a05684fe4.roa File: 0f7f6459-9a9b-3619-afd9-067a05684fe4.roa (raw, json) Hash identifier: 9/J0hcYMaHlXFNJPunXslXe7it5yrSiLK6e/7GCAqG8= Subject key identifier: 8D:14:72:90:6B:3E:70:7C:1A:71:1E:80:40:30:FB:84:C4:76:FB:2E Certificate issuer: /CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890 Certificate serial: 010D0C9F432858492CAE97EEA11099BA7AF98000 Authority key identifier: CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/0f7f6459-9a9b-3619-afd9-067a05684fe4.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 32482 IP address blocks: 216.82.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:97:ee:a1:10:99:ba:7a:f9:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=6d411573-c157-4694-a607-b160dd14b8f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:66:77:6e:8b:80:df:89:af:f9:2d:69:ed:71: f1:0f:b8:5b:87:dc:dc:18:f9:0f:24:e2:8b:51:c4: 79:48:4e:e9:00:71:a6:81:fb:99:dd:4e:b4:6c:75: b2:fc:5f:e6:8c:b0:b0:9e:d3:2c:e9:19:c4:e2:2e: 64:7e:3c:f0:83:65:e9:77:67:ac:36:4f:89:14:71: b7:ab:46:76:ee:16:58:75:71:9c:98:6b:57:70:68: b4:1a:4f:4b:9c:41:97:87:d7:9b:cd:6a:c6:09:bb: d0:b9:c1:22:8f:1e:82:93:4e:fd:15:45:b2:dc:37: be:7a:b9:aa:d3:02:ac:fc:cf:78:76:fc:76:5d:35: 9d:46:42:a1:e2:f8:e5:a5:49:ba:16:d1:cf:6a:a0: d5:3e:fc:96:12:52:6e:b6:d7:bc:f5:52:d8:b6:64: f8:19:69:2f:ff:ae:d3:0b:19:c9:ce:3c:99:e5:70: 18:60:58:23:3a:0c:ba:9b:95:e2:34:0c:32:73:e9: 10:2d:56:41:50:0f:1c:98:8b:55:5d:17:da:fd:50: 8e:45:5d:94:bf:07:b9:5f:35:73:ec:a7:3b:5e:f0: 59:2f:bf:0b:63:c0:6d:2c:69:4f:80:58:c8:35:45: 8a:cb:d1:9a:1d:3e:ee:b8:28:d8:6b:31:bc:9d:4f: ab:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:14:72:90:6B:3E:70:7C:1A:71:1E:80:40:30:FB:84:C4:76:FB:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/0f7f6459-9a9b-3619-afd9-067a05684fe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl X509v3 Authority Key Identifier: keyid:CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer sbgp-ipAddrBlock: critical IPv4: 216.82.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:16:4f:50:7b:e8:e5:67:b7:c3:33:88:df:73:0b:33:5e:df: 13:5b:65:db:7d:ec:5f:e0:cf:4e:7f:65:3b:8b:65:18:a7:d7: 46:6e:c1:b1:45:7d:e6:df:9e:96:39:d5:39:4d:4a:28:15:c2: df:56:d5:88:e2:45:50:02:9f:86:0c:5a:4a:6f:cc:4b:e8:e9: dc:4f:0e:95:2d:88:7f:40:93:63:fe:f6:d5:b4:ab:87:fb:9a: 7c:d2:e4:68:49:90:6d:e1:94:15:de:19:27:83:8a:5e:6c:37: ac:b3:5e:aa:91:89:a8:2a:7a:f5:fc:06:09:80:7f:70:23:ef: 76:ad:5a:4a:4e:7d:2a:3f:6b:fb:28:5b:e9:05:98:c2:22:db: 0f:78:48:92:67:f7:5d:bc:0a:7f:c7:53:88:0d:0c:a1:cf:5b: d8:44:3f:6e:5b:2a:a2:96:8d:6e:1a:b0:91:4e:e6:13:c1:01: 1f:1f:7f:9b:e1:46:be:cc:81:52:c6:70:33:7c:54:30:56:df: 59:e9:2b:e6:ab:64:47:ca:f0:1a:34:04:e2:5a:72:70:a7:dd: de:a5:32:bd:5f:2b:64:72:22:af:4c:09:ba:2d:eb:e5:fa:30: fe:73:21:35:fa:67:6b:d1:d4:ea:67:3b:f9:78:f2:4b:1a:95: e4:24:63:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrpfuoRCZunr5gAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRiZTVlMmQtYjdmOC00ZGJhLWI5N2ItOGI2MTY0ZTgz ODkwMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NmQ0MTE1NzMtYzE1Ny00Njk0LWE2MDctYjE2MGRkMTRiOGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2Z3bouA34mv+S1p7XHxD7hbh9zcGPkPJOKL UcR5SE7pAHGmgfuZ3U60bHWy/F/mjLCwntMs6RnE4i5kfjzwg2Xpd2esNk+JFHG3 q0Z27hZYdXGcmGtXcGi0Gk9LnEGXh9ebzWrGCbvQucEijx6Ck079FUWy3De+ermq 0wKs/M94dvx2XTWdRkKh4vjlpUm6FtHPaqDVPvyWElJutte89VLYtmT4GWkv/67T CxnJzjyZ5XAYYFgjOgy6m5XiNAwyc+kQLVZBUA8cmItVXRfa/VCORV2Uvwe5XzVz 7Kc7XvBZL78LY8BtLGlPgFjINUWKy9GaHT7uuCjYazG8nU+rkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0UcpBrPnB8GnEegEAw+4TEdvsuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZGJl NWUyZC1iN2Y4LTRkYmEtYjk3Yi04YjYxNjRlODM4OTAvMGY3ZjY0NTktOWE5Yi0z NjE5LWFmZDktMDY3YTA1Njg0ZmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGRiZTVlMmQtYjdmOC00ZGJhLWI5 N2ItOGI2MTY0ZTgzODkwLzhkYmU1ZTJkLWI3ZjgtNGRiYS1iOTdiLThiNjE2NGU4 Mzg5MC5jcmwwHwYDVR0jBBgwFoAUzLDLOqY6j/oqVO/oyOtafTNgXAUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZGJlNWUyZC1iN2Y4LTRkYmEtYjk3Yi04YjYx NjRlODM4OTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FLqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0WT1B76OVnt8MziN9zCzNe3xNbZdt97F/gz05/ZTuLZRin10ZuwbFF febfnpY51TlNSigVwt9W1YjiRVACn4YMWkpvzEvo6dxPDpUtiH9Ak2P+9tW0q4f7 mnzS5GhJkG3hlBXeGSeDil5sN6yzXqqRiagqevX8BgmAf3Aj73atWkpOfSo/a/so W+kFmMIi2w94SJJn9128Cn/HU4gNDKHPW9hEP25bKqKWjW4asJFO5hPBAR8ff5vh Rr7MgVLGcDN8VDBW31npK+arZEfK8Bo0BOJacnCn3d6lMr1fK2RyIq9MCbot6+X6 MP5zITX6Z2vR1OpnO/l48ksaleQkY60= -----END CERTIFICATE-----Generated at Wed Apr 30 13:56:43 2025 by rpki-client