$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5d2d0935-17e1-3554-804c-839e1fe3efbb.roa File: 5d2d0935-17e1-3554-804c-839e1fe3efbb.roa (raw, json) Hash identifier: uYsewe4tQl4rX6F0J7uwXYpQPEdCXa6fqBtgHJNnIb0= Subject key identifier: D8:01:98:25:75:83:36:6E:33:1E:19:EA:A6:E5:CE:86:8D:19:EA:9C Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858493C0931ECB374EF2D7A067780 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5d2d0935-17e1-3554-804c-839e1fe3efbb.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 30058 IP address blocks: 216.227.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:31:ec:b3:74:ef:2d:7a:06:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=93a2e707-7092-4dcf-af3e-d2e10a893d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:14:48:f3:e5:98:d5:22:19:77:b5:39:c7:22: 58:46:20:d9:de:85:74:97:37:7a:09:7f:38:04:ed: bc:28:01:b1:b2:73:99:2b:c4:e9:fc:ae:a6:ea:2b: a7:ca:86:41:db:7f:73:f0:43:73:4a:e0:32:47:bd: 42:df:b5:fc:2c:a4:d9:bb:57:25:b6:31:3a:ff:26: a0:b5:b6:5b:60:6e:df:ea:42:01:b4:17:6b:9b:5d: 63:46:c7:a5:01:8f:a1:28:ca:d0:75:91:8b:a2:d6: a2:a9:2c:2a:f6:e0:10:b8:60:98:95:c3:32:0e:1a: 77:0a:ba:a1:22:54:8e:bd:9f:ec:52:43:c9:1b:32: 41:37:34:3e:98:39:7c:75:93:8b:aa:8c:0c:d2:ec: ff:2a:9d:ec:f3:29:80:d9:10:48:02:e9:8c:c3:8f: c8:d1:76:b9:22:9a:cf:b5:63:7c:9f:24:00:cc:28: 4d:15:b5:49:50:fa:e1:d5:10:4e:28:62:30:55:c4: e5:9b:8f:82:23:28:48:2d:4c:3f:5f:b7:bd:bc:35: 8c:fb:60:6c:11:63:7c:94:22:f2:83:de:87:ea:fc: 49:00:db:43:83:13:8a:61:f7:a9:db:a1:60:a4:ab: e8:50:22:a9:ef:e5:4c:d2:79:78:61:f0:a7:aa:21: 67:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:01:98:25:75:83:36:6E:33:1E:19:EA:A6:E5:CE:86:8D:19:EA:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5d2d0935-17e1-3554-804c-839e1fe3efbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 216.227.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:0f:76:ae:de:a6:fb:67:3f:82:6c:5b:54:9c:e4:f4:c2:06: 2a:fa:bc:3b:24:56:3a:e8:02:4a:5d:52:55:97:f7:c4:47:5a: 20:da:60:c9:bc:7e:60:5d:12:cb:4d:42:99:83:d7:c8:53:d7: 32:ea:a4:af:b5:ca:03:3f:29:b5:55:2d:59:ee:ed:76:b6:11: a9:0b:d3:89:9c:7d:1f:23:60:f1:92:59:cd:85:46:37:cb:59: ed:a4:ac:c6:8a:bf:53:b1:d0:78:2f:7a:f8:e0:65:a4:b8:ca: ce:bb:98:b7:5a:5e:da:19:86:9d:e9:8d:8b:bd:fa:0b:eb:de: e6:45:9a:7d:1c:69:6e:b9:1d:15:af:42:4e:78:4e:08:c3:6c: f8:3a:c4:93:33:84:ec:b0:40:0f:37:06:17:c7:11:20:f5:bc: 1e:05:b2:03:04:ff:5d:a2:4a:59:df:6f:bf:05:46:21:20:d3: 30:28:66:49:e8:77:12:f0:dd:d6:9c:0a:e8:61:8a:c0:46:54: 37:d3:3e:95:48:0a:7c:f0:11:1c:90:d0:71:24:b2:4e:3a:bb: 81:70:81:76:cc:0b:24:9c:de:fa:34:5d:b5:0f:23:2b:71:4a: 47:75:4d:e4:74:f7:9f:4c:d6:57:3f:47:8e:bd:32:0c:8e:fb: f4:9f:cd:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CTHss3TvLXoGd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk OTNhMmU3MDctNzA5Mi00ZGNmLWFmM2UtZDJlMTBhODkzZDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRRI8+WY1SIZd7U5xyJYRiDZ3oV0lzd6CX84 BO28KAGxsnOZK8Tp/K6m6iunyoZB239z8ENzSuAyR71C37X8LKTZu1cltjE6/yag tbZbYG7f6kIBtBdrm11jRselAY+hKMrQdZGLotaiqSwq9uAQuGCYlcMyDhp3Crqh IlSOvZ/sUkPJGzJBNzQ+mDl8dZOLqowM0uz/Kp3s8ymA2RBIAumMw4/I0Xa5IprP tWN8nyQAzChNFbVJUPrh1RBOKGIwVcTlm4+CIyhILUw/X7e9vDWM+2BsEWN8lCLy g96H6vxJANtDgxOKYfep26FgpKvoUCKp7+VM0nl4YfCnqiFnVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgBmCV1gzZuMx4Z6qblzoaNGeqcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNWQyZDA5MzUtMTdlMS0z NTU0LTgwNGMtODM5ZTFmZTNlZmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OOCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALcPdq7epvtnP4JsW1Sc5PTCBir6vDskVjroAkpdUlWX98RHWiDaYMm8 fmBdEstNQpmD18hT1zLqpK+1ygM/KbVVLVnu7Xa2EakL04mcfR8jYPGSWc2FRjfL We2krMaKv1Ox0HgvevjgZaS4ys67mLdaXtoZhp3pjYu9+gvr3uZFmn0caW65HRWv Qk54TgjDbPg6xJMzhOywQA83BhfHESD1vB4FsgME/12iSlnfb78FRiEg0zAoZkno dxLw3dacCuhhisBGVDfTPpVICnzwERyQ0HEksk46u4FwgXbMCySc3vo0XbUPIytx Skd1TeR0959M1lc/R469MgyO+/SfzbQ= -----END CERTIFICATE-----Generated at Sun Apr 27 20:24:35 2025 by rpki-client