$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/356617d6-d98a-3c12-9d4a-857c06ded68b.roa File: 356617d6-d98a-3c12-9d4a-857c06ded68b.roa (raw, json) Hash identifier: vrmOXvwGTEaLY6ESm35/RHltBlCNKkOBb9S+FCAK5IM= Subject key identifier: A1:2B:2B:A3:80:01:1B:86:E1:B3:53:15:95:39:9A:C6:E0:DA:82:50 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F43285848E59BCFB718AD127F1F574600 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/356617d6-d98a-3c12-9d4a-857c06ded68b.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 16417 IP address blocks: 216.71.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:cf:b7:18:ad:12:7f:1f:57:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=cf9838b6-f18b-4dc8-a260-2bc6de093c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:42:bd:58:32:6c:f2:c6:15:b6:90:0e:44:be: 3c:02:df:59:96:5f:f9:70:83:bf:11:1a:95:d9:24: d1:0b:34:7d:52:cd:4c:ad:11:5f:dd:ae:13:04:7c: a8:97:8f:94:95:33:ae:e8:d1:fd:83:67:97:c9:ae: 3f:8a:f4:5d:c0:f6:61:77:af:cc:96:7d:b9:d2:55: ad:1a:32:54:0f:f2:b0:dc:f3:f6:83:90:9d:1b:43: 60:7f:e5:5e:48:ec:e7:bd:98:b8:88:9e:25:bc:10: 59:29:4b:0b:3a:51:17:d7:e2:ac:08:b9:1f:85:c7: ac:5c:9a:e2:4c:3a:d5:f1:af:2f:cf:c8:62:79:b3: dd:f7:3e:f7:59:18:02:8b:bf:6d:36:ed:c3:d0:86: 55:38:a5:0f:83:b6:36:a6:a4:4a:8a:8c:da:2f:1e: f6:08:e1:34:f6:b9:df:03:f9:da:ca:d9:6c:86:98: 81:55:a0:49:87:a7:bf:8b:17:aa:f1:35:9e:9e:e8: b7:32:37:c9:bc:0f:ea:22:62:f1:26:67:90:68:32: 05:e3:31:32:02:2e:a0:ef:b9:ba:4b:f3:dd:f2:d9: b4:fc:46:75:a7:d7:5b:c4:dc:68:80:1d:80:db:9e: c5:f2:5e:61:23:7b:b7:cb:3a:fb:22:00:5c:c5:d5: 6c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:2B:2B:A3:80:01:1B:86:E1:B3:53:15:95:39:9A:C6:E0:DA:82:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/356617d6-d98a-3c12-9d4a-857c06ded68b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:cd:52:b0:2d:77:4f:d3:d8:39:e7:5c:f2:c4:7d:68:7c:ca: 3a:99:b0:d5:13:d9:39:eb:2c:6d:49:2b:1b:b3:d6:fe:25:27: 7d:6f:49:d6:63:b5:2a:74:2e:63:3a:65:49:fb:81:87:74:2e: 68:a6:65:cc:a8:3a:bb:4e:53:32:d4:01:16:b0:8f:51:31:ba: 03:53:61:46:41:e0:80:d2:53:7a:16:51:c4:7f:93:72:e8:32: af:37:1a:16:88:82:e4:b1:93:14:9b:69:67:7b:b5:d5:30:4b: d2:67:06:26:d8:d8:79:97:bc:f2:69:06:54:ee:ee:9a:38:d3: d0:fe:c3:61:74:9f:e8:33:31:0c:cb:e5:06:3f:9d:1d:15:49: 8b:c9:77:4d:fb:d5:1f:bf:d2:d0:4c:15:9a:43:8a:72:0d:d1: 80:82:53:e5:aa:00:39:c0:4e:90:ac:09:41:c9:b8:1c:22:24: c6:33:ea:4c:aa:6e:0b:8e:08:52:00:3d:fe:9d:a0:4e:c2:e5: f0:8d:eb:ec:7f:94:13:b2:e2:15:25:8e:6a:82:0b:06:f9:34: ae:c1:04:84:20:ce:ed:b5:df:8b:35:f8:ce:0f:36:6c:fa:e2: 97:cc:91:b6:5f:75:2f:9f:09:88:0a:1b:77:20:a8:e9:94:4e: 17:e0:4c:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm8+3GK0Sfx9XRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk Y2Y5ODM4YjYtZjE4Yi00ZGM4LWEyNjAtMmJjNmRlMDkzYzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEK9WDJs8sYVtpAORL48At9Zll/5cIO/ERqV 2STRCzR9Us1MrRFf3a4TBHyol4+UlTOu6NH9g2eXya4/ivRdwPZhd6/Mln250lWt GjJUD/Kw3PP2g5CdG0Ngf+VeSOznvZi4iJ4lvBBZKUsLOlEX1+KsCLkfhcesXJri TDrV8a8vz8hiebPd9z73WRgCi79tNu3D0IZVOKUPg7Y2pqRKiozaLx72COE09rnf A/naytlshpiBVaBJh6e/ixeq8TWenui3MjfJvA/qImLxJmeQaDIF4zEyAi6g77m6 S/Pd8tm0/EZ1p9dbxNxogB2A257F8l5hI3u3yzr7IgBcxdVsBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKErK6OAARuG4bNTFZU5msbg2oJQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzU2NjE3ZDYtZDk4YS0z YzEyLTlkNGEtODU3YzA2ZGVkNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzNUrAtd0/T2DnnXPLEfWh8yjqZsNUT2TnrLG1JKxuz1v4lJ31vSdZj tSp0LmM6ZUn7gYd0LmimZcyoOrtOUzLUARawj1ExugNTYUZB4IDSU3oWUcR/k3Lo Mq83GhaIguSxkxSbaWd7tdUwS9JnBibY2HmXvPJpBlTu7po409D+w2F0n+gzMQzL 5QY/nR0VSYvJd0371R+/0tBMFZpDinIN0YCCU+WqADnATpCsCUHJuBwiJMYz6kyq bguOCFIAPf6doE7C5fCN6+x/lBOy4hUljmqCCwb5NK7BBIQgzu2134s1+M4PNmz6 4pfMkbZfdS+fCYgKG3cgqOmUThfgTJw= -----END CERTIFICATE-----Generated at Mon Apr 28 15:24:25 2025 by rpki-client