$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e/ad5e7590-c068-35c0-9e3f-642180b60356.roa File: ad5e7590-c068-35c0-9e3f-642180b60356.roa (raw, json) Hash identifier: KD09svN75kalX9C1CPXIKjsdx50ElycLXJggi/Zfk58= Subject key identifier: 05:7A:7E:64:3F:AF:77:E4:6D:03:F8:80:97:1F:33:93:F5:5F:02:AC Certificate issuer: /CN=e6e2c8e3-cce6-4734-bf05-d45daaa2af3e Certificate serial: 010D0C9F4328584940394537DEBEEC9191C21980 Authority key identifier: BA:4F:D9:5B:71:8D:D4:4B:C8:0C:E0:4A:B2:B2:53:3A:15:9A:6A:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e/ad5e7590-c068-35c0-9e3f-642180b60356.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 33412 IP address blocks: 216.170.117.0/24 maxlen: 24 2602:fd86::/36 maxlen: 36 2602:fd86::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:45:37:de:be:ec:91:91:c2:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6e2c8e3-cce6-4734-bf05-d45daaa2af3e Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=7a39baa3-f0a3-4a5c-89bb-c0ac57c416e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3b:9d:6e:05:65:c2:91:b5:2b:c3:1a:b1:ca: 05:d5:60:fb:43:b6:15:a3:e1:37:17:cb:3c:37:c4: a0:85:c6:28:3c:2b:85:00:14:d7:b3:37:ca:f0:80: 4b:9f:ce:67:73:06:30:b0:57:69:20:3f:ce:59:96: 01:b5:28:31:f3:c8:c8:d3:a9:73:f7:51:c1:98:c0: 6d:ad:98:3b:5e:66:d1:27:1d:21:fd:e8:3f:53:74: a5:ff:e2:65:e6:dc:82:0d:16:55:fd:0c:d0:87:74: 71:e0:f6:bb:ef:85:5d:95:cf:d0:b3:8e:08:2d:2b: fb:e8:e7:8e:59:99:6e:f2:3e:b9:e3:8f:ec:d9:8e: 72:1b:dc:f0:6a:ed:a4:78:2a:a3:95:37:75:2f:15: 6f:d2:14:b4:18:aa:89:45:35:a3:fe:95:25:e3:ea: 33:34:18:28:2f:fd:1b:8a:0e:5a:2d:d8:79:f1:af: 54:92:e2:c0:b9:18:25:24:3f:34:83:dd:22:4c:f3: 90:e9:98:94:af:23:84:4c:a8:43:40:eb:f5:0e:73: 24:52:e7:34:89:47:42:3b:b4:fb:45:82:af:db:32: 3b:7b:54:8f:be:be:8c:e7:e6:82:2d:70:57:b8:73: 79:71:d6:f9:b3:b8:94:67:22:ca:79:b2:90:0c:ed: 8a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7A:7E:64:3F:AF:77:E4:6D:03:F8:80:97:1F:33:93:F5:5F:02:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e/ad5e7590-c068-35c0-9e3f-642180b60356.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e.crl X509v3 Authority Key Identifier: keyid:BA:4F:D9:5B:71:8D:D4:4B:C8:0C:E0:4A:B2:B2:53:3A:15:9A:6A:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e.cer sbgp-ipAddrBlock: critical IPv4: 216.170.117.0/24 IPv6: 2602:fd86::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:65:bd:38:64:d1:13:94:23:ce:87:a2:82:b2:5f:ba:37:53: 55:85:5a:a6:b7:93:f7:b7:6c:ad:fb:b6:05:f0:82:59:aa:ec: 77:7e:64:33:ac:2d:b6:3a:aa:b3:0e:52:60:71:31:1a:50:d5: d3:82:c0:8b:a5:10:8c:5f:a5:a9:d3:22:12:20:14:70:17:a5: a9:9d:fb:40:b4:8d:b1:e3:01:31:70:81:95:11:20:23:08:4a: de:1d:52:28:bb:99:83:04:8b:d4:c4:d3:44:b7:28:77:ec:9a: 2b:c5:55:50:29:7b:6a:f1:c3:04:45:af:ae:ea:79:ff:a1:8c: bb:42:b9:71:3c:3e:02:1e:f2:0d:9d:7b:5f:43:fd:84:c7:e5: e7:3d:b7:2d:82:19:8b:82:09:81:8a:23:24:78:6b:32:ee:92: 8e:84:c5:e9:9d:79:ee:0c:24:37:eb:7e:af:52:68:47:8f:22: 16:ea:e0:44:0a:70:0c:61:5d:78:dc:6f:86:83:c4:0f:cc:bd: 4e:75:64:d3:22:81:35:88:8e:3b:21:6f:58:d7:d9:ed:2c:b9: 2c:a5:c9:f4:9c:82:81:ff:e9:cc:3d:71:bd:c3:bc:75:f7:fd: d3:fe:89:2b:a0:ee:21:d0:88:b0:ec:ff:0c:ec:91:1f:27:c7: 89:de:d1:1f -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWElAOUU33r7skZHCGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZlMmM4ZTMtY2NlNi00NzM0LWJmMDUtZDQ1ZGFhYTJh ZjNlMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk N2EzOWJhYTMtZjBhMy00YTVjLTg5YmItYzBhYzU3YzQxNmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTudbgVlwpG1K8MascoF1WD7Q7YVo+E3F8s8 N8SghcYoPCuFABTXszfK8IBLn85ncwYwsFdpID/OWZYBtSgx88jI06lz91HBmMBt rZg7XmbRJx0h/eg/U3Sl/+Jl5tyCDRZV/QzQh3Rx4Pa774Vdlc/Qs44ILSv76OeO WZlu8j6544/s2Y5yG9zwau2keCqjlTd1LxVv0hS0GKqJRTWj/pUl4+ozNBgoL/0b ig5aLdh58a9UkuLAuRglJD80g90iTPOQ6ZiUryOETKhDQOv1DnMkUuc0iUdCO7T7 RYKv2zI7e1SPvr6M5+aCLXBXuHN5cdb5s7iUZyLKebKQDO2K5wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAV6fmQ/r3fkbQP4gJcfM5P1XwKsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNmUy YzhlMy1jY2U2LTQ3MzQtYmYwNS1kNDVkYWFhMmFmM2UvYWQ1ZTc1OTAtYzA2OC0z NWMwLTllM2YtNjQyMTgwYjYwMzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTZlMmM4ZTMtY2NlNi00NzM0LWJm MDUtZDQ1ZGFhYTJhZjNlL2U2ZTJjOGUzLWNjZTYtNDczNC1iZjA1LWQ0NWRhYWEy YWYzZS5jcmwwHwYDVR0jBBgwFoAUuk/ZW3GN1EvIDOBKsrJTOhWaakowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNmUyYzhlMy1jY2U2LTQ3MzQtYmYwNS1kNDVk YWFhMmFmM2UuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQA2Kp1MA4E AgACMAgDBgQmAv2GADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6Zb04ZNETlCPOh6KCsl+6N1NVhVqmt5P3 t2yt+7YF8IJZqux3fmQzrC22OqqzDlJgcTEaUNXTgsCLpRCMX6Wp0yISIBRwF6Wp nftAtI2x4wExcIGVESAjCEreHVIou5mDBIvUxNNEtyh37JorxVVQKXtq8cMERa+u 6nn/oYy7QrlxPD4CHvINnXtfQ/2Ex+XnPbctghmLggmBiiMkeGsy7pKOhMXpnXnu DCQ3636vUmhHjyIW6uBECnAMYV143G+Gg8QPzL1OdWTTIoE1iI47IW9Y19ntLLks pcn0nIKB/+nMPXG9w7x19/3T/okroO4h0Iiw7P8M7JEfJ8eJ3tEf -----END CERTIFICATE-----Generated at Mon Apr 28 23:28:35 2025 by rpki-client