$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b4a158a2-272e-3b73-a744-6a2495246355.roa File: b4a158a2-272e-3b73-a744-6a2495246355.roa (raw, json) Hash identifier: Ycwj6HbzR1t+Te7Xf3LGergw3Yk2dYCTy/EiatBDI3I= Subject key identifier: AF:CA:A7:7B:FF:9E:0A:E4:DB:27:41:28:FA:D7:1E:E1:4A:6A:B2:FF Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858494B6428F737C4F121BBF2A920 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b4a158a2-272e-3b73-a744-6a2495246355.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 19905 IP address blocks: 64.6.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:28:f7:37:c4:f1:21:bb:f2:a9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=05348e31-85fe-4e91-aa35-15f4768a745c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0e:04:92:61:e9:39:93:b2:82:80:95:69:61: b3:79:e1:1a:36:5d:5b:52:a6:89:44:ad:d8:7b:8c: 6a:9e:d2:c9:c1:c1:7b:ab:72:93:b9:2f:58:86:95: a4:dc:11:82:d8:d8:bb:d2:0f:51:a9:0d:eb:0c:fc: c3:b8:3c:87:86:8b:e2:b3:ab:bb:d1:2a:5a:94:78: 34:b9:80:ca:ed:29:80:1c:74:4c:7d:7a:2b:22:a6: 26:ec:ae:b5:6c:b6:30:6b:d0:2b:ad:66:bc:3c:df: 73:0e:87:ca:f2:c3:13:6e:53:76:83:95:54:23:6e: f9:c9:0e:31:23:b8:fe:69:a3:6b:3e:5b:dc:14:3d: 31:80:35:a9:d7:a0:74:b5:b0:e1:f7:50:b5:32:ca: cb:88:ae:d4:19:3c:3c:ef:38:b8:22:17:65:48:92: 54:f4:4b:0b:46:73:15:f9:af:a7:a0:59:48:8e:f4: 8c:d4:b6:e4:df:fd:63:7f:0f:78:02:6f:56:c9:ed: ce:58:92:1a:0b:6f:55:64:27:53:08:a0:a2:9f:50: 91:d7:b9:bb:b0:52:7d:a6:dd:21:ca:9d:d6:d3:d2: d7:8d:a4:19:9a:4d:c9:20:a9:92:37:99:ba:c3:a2: 86:f2:9e:2c:c6:c5:ab:af:be:b4:21:17:d0:0c:92: 29:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:CA:A7:7B:FF:9E:0A:E4:DB:27:41:28:FA:D7:1E:E1:4A:6A:B2:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b4a158a2-272e-3b73-a744-6a2495246355.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 64.6.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:80:01:07:55:95:b8:7e:8e:3f:09:89:c8:83:5b:63:50:7c: 68:3b:72:f1:2e:1c:90:c4:1f:41:2a:58:84:87:2f:34:75:44: 62:85:6a:20:89:4f:5f:f4:8b:14:1e:30:c7:50:c9:2a:0a:26: 69:b8:71:93:9e:4d:e5:48:57:62:5d:ec:3e:16:76:90:de:93: 21:9d:e1:ea:a7:c1:db:bb:6f:aa:09:f2:c3:92:5e:46:01:01: d9:d8:b0:e8:d7:1e:4c:e8:44:24:6d:c1:4c:e8:fc:3d:4d:5b: 8c:71:ab:b7:ea:cf:9e:44:c0:62:4c:db:3d:b3:3d:83:0d:8b: bf:3d:c4:fb:e8:ed:4d:fc:2f:c3:39:2c:9a:9f:c9:ef:a3:2b: 13:9f:06:f1:49:35:34:2f:c6:15:d4:29:fe:cb:ed:9e:9d:7d: 00:72:9c:42:14:66:2d:f2:58:59:34:bc:1b:6d:1b:41:d9:90: cc:b9:c0:cf:32:de:35:c1:74:44:0c:83:a1:be:7f:3e:3c:dc: 20:75:2b:72:64:ad:ac:91:6d:12:67:96:23:cd:23:bf:79:c9: d4:0d:a3:43:d9:b0:69:1d:68:82:9e:32:53:30:e7:29:0a:a4: 22:d0:20:1d:e5:13:32:f6:28:18:84:10:2b:d2:29:b6:4a:e9: c9:74:d2:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCj3N8TxIbvyqSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MDUzNDhlMzEtODVmZS00ZTkxLWFhMzUtMTVmNDc2OGE3NDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg4EkmHpOZOygoCVaWGzeeEaNl1bUqaJRK3Y e4xqntLJwcF7q3KTuS9YhpWk3BGC2Ni70g9RqQ3rDPzDuDyHhovis6u70SpalHg0 uYDK7SmAHHRMfXorIqYm7K61bLYwa9ArrWa8PN9zDofK8sMTblN2g5VUI275yQ4x I7j+aaNrPlvcFD0xgDWp16B0tbDh91C1MsrLiK7UGTw87zi4IhdlSJJU9EsLRnMV +a+noFlIjvSM1Lbk3/1jfw94Am9Wye3OWJIaC29VZCdTCKCin1CR17m7sFJ9pt0h yp3W09LXjaQZmk3JIKmSN5m6w6KG8p4sxsWrr760IRfQDJIpGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/Kp3v/ngrk2ydBKPrXHuFKarL/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjRhMTU4YTItMjcyZS0z YjczLWE3NDQtNmEyNDk1MjQ2MzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaAAQdVlbh+jj8JiciDW2NQfGg7cvEuHJDEH0EqWISHLzR1RGKFaiCJ T1/0ixQeMMdQySoKJmm4cZOeTeVIV2Jd7D4WdpDekyGd4eqnwdu7b6oJ8sOSXkYB AdnYsOjXHkzoRCRtwUzo/D1NW4xxq7fqz55EwGJM2z2zPYMNi789xPvo7U38L8M5 LJqfye+jKxOfBvFJNTQvxhXUKf7L7Z6dfQBynEIUZi3yWFk0vBttG0HZkMy5wM8y 3jXBdEQMg6G+fz483CB1K3JkrayRbRJnliPNI795ydQNo0PZsGkdaIKeMlMw5ykK pCLQIB3lEzL2KBiEECvSKbZK6cl00p4= -----END CERTIFICATE-----Generated at Mon Apr 7 13:09:39 2025 by rpki-client