$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7c9c0f53-d891-3144-bfee-1bcb12654926.roa File: 7c9c0f53-d891-3144-bfee-1bcb12654926.roa (raw, json) Hash identifier: d7aPSZKzGj+FyffeDIqTTTlQsGcSQLbLjXhsSY4vgfk= Subject key identifier: 65:66:50:72:B6:7D:64:D1:A1:09:29:5A:07:DA:C1:CC:CC:73:97:09 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F43285848E59BCF922EB0BCEE93076C17 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7c9c0f53-d891-3144-bfee-1bcb12654926.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 16417 IP address blocks: 216.71.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:cf:92:2e:b0:bc:ee:93:07:6c:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=02f14639-df9e-4dd1-80a3-5d93fa543474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:56:2a:ac:5e:67:06:16:3f:3b:5d:cc:a8:55: 64:0b:8a:e8:9c:b5:20:95:e4:23:4a:f4:14:5a:6f: 76:28:ae:2f:00:9f:5c:b9:92:dd:65:8b:9c:63:7d: 3e:27:d6:37:1c:89:d7:cd:ce:b8:8b:31:90:c9:0f: 59:55:b7:ea:d4:57:67:00:c5:37:60:bc:44:a4:87: 5c:6d:9a:d8:53:4e:9c:3b:60:4c:cd:69:c2:72:28: 81:e3:7c:99:4b:e8:cc:62:81:af:75:32:06:04:a9: 9f:4c:ee:c0:b6:f4:41:cd:0e:45:35:2c:5f:3d:77: c1:ac:5c:6a:a1:75:04:ec:f3:ec:26:dd:d7:7f:67: 09:5a:b9:76:fc:2f:86:b2:75:51:38:c2:2c:9d:c6: bc:a8:24:b2:7e:07:40:89:0c:28:8b:d0:a6:b6:22: 1b:dc:71:30:82:a1:f1:63:c3:02:65:1a:d9:2d:63: 3a:f7:16:21:4d:6b:09:f1:53:3d:70:a0:34:0e:52: 7a:3e:f9:43:18:3f:b8:5b:88:fe:e0:ca:f8:dc:7b: 21:1d:c6:9b:5e:72:76:17:34:97:d4:e2:21:78:3c: ac:20:60:ce:64:1f:bb:f1:e5:03:16:c6:8a:6d:93: 9c:08:c3:08:81:62:5e:f4:07:ed:0c:e0:8b:f9:2c: da:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:66:50:72:B6:7D:64:D1:A1:09:29:5A:07:DA:C1:CC:CC:73:97:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7c9c0f53-d891-3144-bfee-1bcb12654926.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:58:e0:a3:db:45:eb:0d:e7:6a:84:31:b4:bf:c1:15:12:6d: 98:97:27:46:84:3f:34:90:87:a2:92:0b:f0:3f:7e:27:7b:04: d5:fd:c3:4b:29:59:43:b8:32:b5:1f:04:75:22:23:a1:a5:d2: ee:19:0e:bd:58:b2:20:e7:fd:50:a2:24:dc:bc:f2:40:af:b7: 02:68:2d:35:09:e8:bb:54:d8:13:fe:b2:50:5f:10:93:33:35: 9d:e8:58:6d:95:e0:04:94:85:17:20:e0:a0:d3:77:4d:f0:a6: 92:6a:9c:33:f8:c0:e6:48:8a:e0:d6:ff:79:84:d1:30:ac:5f: f5:90:e5:51:62:8c:d8:e1:62:bc:d5:68:b8:58:c0:ee:4e:d9: f1:39:b4:b9:8c:03:9c:72:ad:0d:40:24:90:f1:c8:df:01:7c: 8f:07:63:7e:60:49:f0:a0:c3:49:93:43:71:d7:b1:cd:7b:f5: 09:87:0e:d2:c4:aa:15:2e:f4:65:3e:01:02:60:3d:df:21:74: 22:68:ed:c8:70:25:ee:fd:88:6e:b9:7b:24:36:fb:16:01:21: b7:f6:bb:90:10:6e:da:da:6a:f7:a0:4d:12:25:82:53:7c:1f: 24:dd:2c:5c:15:f4:fb:dc:d6:51:44:76:59:52:bf:f3:54:a5: 09:ec:e9:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm8+SLrC87pMHbBcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk MDJmMTQ2MzktZGY5ZS00ZGQxLTgwYTMtNWQ5M2ZhNTQzNDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1YqrF5nBhY/O13MqFVkC4ronLUgleQjSvQU Wm92KK4vAJ9cuZLdZYucY30+J9Y3HInXzc64izGQyQ9ZVbfq1FdnAMU3YLxEpIdc bZrYU06cO2BMzWnCciiB43yZS+jMYoGvdTIGBKmfTO7AtvRBzQ5FNSxfPXfBrFxq oXUE7PPsJt3Xf2cJWrl2/C+GsnVROMIsnca8qCSyfgdAiQwoi9CmtiIb3HEwgqHx Y8MCZRrZLWM69xYhTWsJ8VM9cKA0DlJ6PvlDGD+4W4j+4Mr43HshHcabXnJ2FzSX 1OIheDysIGDOZB+78eUDFsaKbZOcCMMIgWJe9AftDOCL+SzahQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVmUHK2fWTRoQkpWgfawczMc5cJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvN2M5YzBmNTMtZDg5MS0z MTQ0LWJmZWUtMWJjYjEyNjU0OTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpY4KPbResN52qEMbS/wRUSbZiXJ0aEPzSQh6KSC/A/fid7BNX9w0sp WUO4MrUfBHUiI6Gl0u4ZDr1YsiDn/VCiJNy88kCvtwJoLTUJ6LtU2BP+slBfEJMz NZ3oWG2V4ASUhRcg4KDTd03wppJqnDP4wOZIiuDW/3mE0TCsX/WQ5VFijNjhYrzV aLhYwO5O2fE5tLmMA5xyrQ1AJJDxyN8BfI8HY35gSfCgw0mTQ3HXsc179QmHDtLE qhUu9GU+AQJgPd8hdCJo7chwJe79iG65eyQ2+xYBIbf2u5AQbtraavegTRIlglN8 HyTdLFwV9Pvc1lFEdllSv/NUpQns6UQ= -----END CERTIFICATE-----Generated at Tue Apr 29 16:21:17 2025 by rpki-client