$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d276ac5d-18b3-388d-9bdf-4f7aca4cabb5.roa File: d276ac5d-18b3-388d-9bdf-4f7aca4cabb5.roa (raw, json) Hash identifier: aCrcd8Ccl7jP7BRwNvpo7gKDpJojjYnlEDrXG6j4tqw= Subject key identifier: 85:B5:B6:8F:5E:C0:36:A2:F4:E0:3B:23:6F:02:4D:BF:B7:54:82:DB Certificate issuer: /CN=ae61ef28-fe03-45bb-a38f-17e4725b6c25 Certificate serial: 010D0C9F4328584929E3CB37D64103CB324BA000 Authority key identifier: AC:9C:DD:19:64:FA:91:50:77:CA:9F:DF:E1:53:16:6B:53:5A:2C:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d276ac5d-18b3-388d-9bdf-4f7aca4cabb5.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 16509 IP address blocks: 216.24.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:cb:37:d6:41:03:cb:32:4b:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae61ef28-fe03-45bb-a38f-17e4725b6c25 Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=ac02e8d3-1a53-4e8f-939a-c81f6fe8d545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:36:3e:2b:b6:49:44:19:6b:51:02:3f:9d:f6: 22:1e:c9:e5:53:d9:e0:f0:f2:66:db:54:c7:c9:d3: b7:90:f1:8f:03:40:23:e3:9f:dc:88:1e:9c:2e:03: 27:af:2e:bc:6c:42:c0:b9:f1:ed:ae:41:14:3e:17: 3b:1e:9d:c9:0d:ad:d6:a6:36:8c:f5:6a:22:71:4e: 7f:f5:68:1b:d9:31:39:7a:da:55:cf:d7:48:6e:39: 60:b3:3a:1d:8c:00:3c:cc:e8:5e:0d:2d:62:11:98: 00:08:77:03:d2:0c:6f:b0:5e:b3:29:8a:5d:13:9f: d5:27:82:6e:cb:a2:ef:94:15:3f:80:4f:4f:5f:59: 58:47:27:b2:a9:df:d0:ea:90:1c:b1:63:01:79:45: 77:12:57:c8:ed:5f:17:07:32:58:bf:d2:d5:67:47: ff:ef:26:18:68:73:1a:dd:80:57:a8:fe:91:f0:31: 89:98:e4:b7:91:ff:77:31:b3:c4:d3:82:13:c3:a7: 17:f5:8e:3c:5f:39:e2:0b:9e:0e:ad:5a:d6:3c:10: c3:96:31:c3:6b:5d:28:28:6a:a9:1d:a9:d0:5a:97: c8:03:a3:8d:d9:34:5d:c0:ec:47:8a:94:53:e8:6e: 87:28:27:b9:69:38:76:77:16:d4:cd:ad:91:d1:ff: ce:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B5:B6:8F:5E:C0:36:A2:F4:E0:3B:23:6F:02:4D:BF:B7:54:82:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d276ac5d-18b3-388d-9bdf-4f7aca4cabb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.crl X509v3 Authority Key Identifier: keyid:AC:9C:DD:19:64:FA:91:50:77:CA:9F:DF:E1:53:16:6B:53:5A:2C:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer sbgp-ipAddrBlock: critical IPv4: 216.24.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:1f:e2:5e:d3:6d:4d:bd:41:b1:40:0c:45:c6:fd:f2:13:45: a0:68:7b:3f:e2:2d:23:87:1f:1f:2e:60:a0:45:1f:1a:aa:54: 9d:86:cd:6e:e3:1e:09:31:d3:13:23:19:db:82:64:f3:90:b2: 3c:f3:f0:c8:0b:c7:c6:9f:66:f4:9e:38:b5:74:69:f4:3d:12: 08:6f:99:45:f6:30:e5:a3:1c:d5:ae:11:dd:eb:27:1c:f1:ee: c9:02:30:13:e8:da:c7:f0:d7:ee:e3:c1:90:af:ab:9b:fd:0c: c3:d8:df:02:8d:24:03:0c:05:75:73:a2:c8:3a:54:9a:fe:fa: 2d:47:e6:97:ed:67:35:6e:b7:64:67:f3:6c:bb:e5:4d:d7:1c: f6:70:13:55:d8:55:f9:8e:cb:5c:40:5b:7f:fe:82:4b:8b:32: 0a:26:d4:f8:a1:9f:d8:21:d3:30:fc:45:22:de:f0:db:c1:74: 7d:7a:92:0f:ef:aa:17:3b:6d:04:fb:2c:80:62:da:4e:7e:96: e7:47:17:fb:8a:c6:64:f7:60:5e:06:83:6c:fb:99:3f:57:0a: 3e:f7:9f:df:ed:d0:80:74:c6:cd:b0:12:16:cd:10:38:e0:95: cb:fd:dc:0b:1b:e9:88:79:be:0c:5a:06:c5:2d:96:46:b5:77: ca:56:b2:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkp48s31kEDyzJLoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU2MWVmMjgtZmUwMy00NWJiLWEzOGYtMTdlNDcyNWI2 YzI1MB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk YWMwMmU4ZDMtMWE1My00ZThmLTkzOWEtYzgxZjZmZThkNTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizY+K7ZJRBlrUQI/nfYiHsnlU9ng8PJm21TH ydO3kPGPA0Aj45/ciB6cLgMnry68bELAufHtrkEUPhc7Hp3JDa3WpjaM9WoicU5/ 9Wgb2TE5etpVz9dIbjlgszodjAA8zOheDS1iEZgACHcD0gxvsF6zKYpdE5/VJ4Ju y6LvlBU/gE9PX1lYRyeyqd/Q6pAcsWMBeUV3ElfI7V8XBzJYv9LVZ0f/7yYYaHMa 3YBXqP6R8DGJmOS3kf93MbPE04ITw6cX9Y48XzniC54OrVrWPBDDljHDa10oKGqp HanQWpfIA6ON2TRdwOxHipRT6G6HKCe5aTh2dxbUza2R0f/ONwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIW1to9ewDai9OA7I28CTb+3VILbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZTYx ZWYyOC1mZTAzLTQ1YmItYTM4Zi0xN2U0NzI1YjZjMjUvZDI3NmFjNWQtMThiMy0z ODhkLTliZGYtNGY3YWNhNGNhYmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWU2MWVmMjgtZmUwMy00NWJiLWEz OGYtMTdlNDcyNWI2YzI1L2FlNjFlZjI4LWZlMDMtNDViYi1hMzhmLTE3ZTQ3MjVi NmMyNS5jcmwwHwYDVR0jBBgwFoAUrJzdGWT6kVB3yp/f4VMWa1NaLLYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZTYxZWYyOC1mZTAzLTQ1YmItYTM4Zi0xN2U0 NzI1YjZjMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Bg8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEf4l7TbU29QbFADEXG/fITRaBoez/iLSOHHx8uYKBFHxqqVJ2GzW7j Hgkx0xMjGduCZPOQsjzz8MgLx8afZvSeOLV0afQ9EghvmUX2MOWjHNWuEd3rJxzx 7skCMBPo2sfw1+7jwZCvq5v9DMPY3wKNJAMMBXVzosg6VJr++i1H5pftZzVut2Rn 82y75U3XHPZwE1XYVfmOy1xAW3/+gkuLMgom1Pihn9gh0zD8RSLe8NvBdH16kg/v qhc7bQT7LIBi2k5+ludHF/uKxmT3YF4Gg2z7mT9XCj73n9/t0IB0xs2wEhbNEDjg lcv93Asb6Yh5vgxaBsUtlka1d8pWsm8= -----END CERTIFICATE-----Generated at Sat Apr 26 15:57:43 2025 by rpki-client