$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a860f497-51c0-361c-b3d0-1e3dad4c7c02.roa File: a860f497-51c0-361c-b3d0-1e3dad4c7c02.roa (raw, json) Hash identifier: izxwJ9S/nldWKlRFTnCD9TwTGoNbsseWlMffmai1FcI= Subject key identifier: CE:86:85:99:7C:A9:8F:3E:09:4E:94:98:2A:C3:2B:27:CC:51:72:38 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F432858495EEEEB9FE4E1456BCE55E200 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a860f497-51c0-361c-b3d0-1e3dad4c7c02.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 16417 IP address blocks: 216.71.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:eb:9f:e4:e1:45:6b:ce:55:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=030a7638-02e9-4664-8cd0-e562d921289c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c5:c6:eb:a4:6e:c0:08:3d:87:fa:fd:d8:06: a5:6b:e0:8e:8b:c7:0d:9e:39:f4:14:b8:7b:01:6f: 5c:f5:2c:3e:34:1b:30:2d:b3:30:17:e6:9f:cb:db: 18:95:1e:05:23:f1:37:e0:a3:e9:62:08:cc:2b:ed: 43:c1:8c:81:c0:a9:b4:46:85:60:18:09:1a:97:7e: 59:a6:95:e6:14:b1:25:f7:52:0d:f4:9b:39:9f:db: 2f:df:2c:cc:6d:c3:21:e4:74:8c:70:71:82:43:5f: 4a:01:9c:9e:f8:81:8c:5b:11:db:e8:d1:39:5b:4a: b8:70:ec:61:4a:da:dd:61:3e:0f:0c:b4:1a:38:79: b9:4c:ac:38:29:a2:2e:21:eb:90:27:df:bb:36:d7: 85:5a:56:32:0a:b8:f0:48:be:70:74:e5:0c:1a:1d: e8:54:9b:84:55:7f:bd:95:09:5f:e4:5d:42:36:e0: 6b:d2:62:58:24:b3:f5:64:b2:48:1e:09:70:7d:27: f3:63:b1:8b:40:4a:ab:7f:8e:4b:4c:51:16:10:54: 00:5d:fe:3e:01:11:aa:87:60:9d:9c:09:4b:98:7f: 58:f9:46:8e:f3:85:31:ad:32:0b:9c:59:e6:9b:a8: 57:f1:1d:79:50:f2:f6:af:4f:69:b1:73:5b:9f:81: a6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:86:85:99:7C:A9:8F:3E:09:4E:94:98:2A:C3:2B:27:CC:51:72:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a860f497-51c0-361c-b3d0-1e3dad4c7c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 216.71.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:c9:f8:f3:ac:af:d4:dc:b5:c5:34:e1:17:7d:fd:54:d4:b7: ab:fa:6b:1f:93:4c:46:3c:95:cb:2e:e7:05:8b:9d:a3:d2:2f: 83:c3:b3:26:e2:36:48:d9:c6:09:00:ad:9c:7f:d0:cd:8c:4f: ee:27:00:66:c1:3b:1a:6a:cc:23:97:4a:c8:69:e6:a9:64:c0: 37:1a:35:c6:6d:69:8b:10:b3:b3:a2:29:91:64:ed:8b:ba:98: 9c:27:a3:fc:5a:e7:68:2e:7b:02:27:fb:00:c5:ac:dd:82:8a: e6:6c:38:09:fc:2e:c5:51:bc:0a:36:79:ad:8e:31:f0:5e:59: bc:4c:57:8c:dc:ed:0b:e9:af:1b:94:c8:40:c9:6e:0f:4d:9a: 5d:a0:ca:67:a0:4a:19:3f:0e:94:6c:46:24:43:d6:e4:43:6e: 50:d9:3f:02:ce:c8:21:a6:69:33:0a:5b:ff:e3:83:3c:6d:6b: 51:37:e9:20:1b:5b:fa:80:80:7f:0e:f6:e9:a9:e2:d6:97:72: 51:24:5a:67:49:7d:50:4e:fc:6b:39:61:14:a7:fb:e8:28:31: 3c:3c:b7:df:1c:eb:ff:91:9c:25:a7:c8:53:6f:f1:db:d1:7e: c0:06:c3:ee:56:6a:29:1f:d7:34:f0:f9:6b:a5:9b:31:f0:3d: e8:49:68:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7uuf5OFFa85V4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk MDMwYTc2MzgtMDJlOS00NjY0LThjZDAtZTU2MmQ5MjEyODljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisXG66RuwAg9h/r92Aala+COi8cNnjn0FLh7 AW9c9Sw+NBswLbMwF+afy9sYlR4FI/E34KPpYgjMK+1DwYyBwKm0RoVgGAkal35Z ppXmFLEl91IN9Js5n9sv3yzMbcMh5HSMcHGCQ19KAZye+IGMWxHb6NE5W0q4cOxh StrdYT4PDLQaOHm5TKw4KaIuIeuQJ9+7NteFWlYyCrjwSL5wdOUMGh3oVJuEVX+9 lQlf5F1CNuBr0mJYJLP1ZLJIHglwfSfzY7GLQEqrf45LTFEWEFQAXf4+ARGqh2Cd nAlLmH9Y+UaO84UxrTILnFnmm6hX8R15UPL2r09psXNbn4GmkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6GhZl8qY8+CU6UmCrDKyfMUXI4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYTg2MGY0OTctNTFjMC0z NjFjLWIzZDAtMWUzZGFkNGM3YzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EeHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzJ+POsr9TctcU04Rd9/VTUt6v6ax+TTEY8lcsu5wWLnaPSL4PDsybi NkjZxgkArZx/0M2MT+4nAGbBOxpqzCOXSshp5qlkwDcaNcZtaYsQs7OiKZFk7Yu6 mJwno/xa52guewIn+wDFrN2CiuZsOAn8LsVRvAo2ea2OMfBeWbxMV4zc7QvprxuU yEDJbg9Nml2gymegShk/DpRsRiRD1uRDblDZPwLOyCGmaTMKW//jgzxta1E36SAb W/qAgH8O9ump4taXclEkWmdJfVBO/Gs5YRSn++goMTw8t98c6/+RnCWnyFNv8dvR fsAGw+5Waikf1zTw+WulmzHwPehJaHM= -----END CERTIFICATE-----Generated at Mon Apr 28 15:04:19 2025 by rpki-client