$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/b276deed-b654-31aa-aead-607837be5406.roa File: b276deed-b654-31aa-aead-607837be5406.roa (raw, json) Hash identifier: tsu+zgduaR2frtvPdOm1fpgd9+UfhhyNVWZyk625PY8= Subject key identifier: 57:CC:EA:19:73:4D:BE:17:ED:62:0E:B6:CD:1A:72:17:61:2B:27:C4 Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F43285848E0065FB6976F44F8C3755B00 Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/b276deed-b654-31aa-aead-607837be5406.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 16509 IP address blocks: 64.239.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:5f:b6:97:6f:44:f8:c3:75:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=60db1e1c-e9a6-43ec-958f-971be060c7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:37:01:b2:d6:2b:6d:46:7c:a8:ad:16:23:41: e5:c4:86:52:a1:84:45:c7:0b:8b:0b:93:6a:d1:36: 0d:a9:da:8f:4f:ff:22:b3:ca:af:32:27:dd:d8:34: c1:10:22:f7:5b:b6:65:cf:a4:cb:7b:dd:23:d6:ef: 19:e4:0a:94:61:ea:9a:42:96:e6:6f:48:e0:07:3a: 72:dd:66:3c:79:1b:c7:c5:ba:ef:34:f7:dd:dd:72: d0:aa:1b:d0:e8:51:9a:c6:df:d5:72:c8:66:1d:49: 9e:ac:6c:5b:5e:dd:72:f2:1e:41:46:12:4b:81:94: 61:0a:46:67:d6:9d:84:35:d7:00:bb:67:a2:0b:94: b0:cd:23:4e:5b:94:fb:32:39:ee:3b:c3:c7:70:4b: d2:78:44:26:c0:c7:4e:38:23:26:0d:ea:82:f7:ca: 53:f4:88:ea:99:99:b4:5e:11:57:30:b0:c5:3d:db: 8c:d7:2a:1c:0d:2d:cf:98:e4:c0:78:a4:3a:71:38: c6:74:a1:f9:e8:e8:b5:5b:04:f2:5a:2c:9a:e1:21: 3a:67:c9:d6:06:29:64:e5:fb:94:b1:02:f8:9b:12: f0:af:da:a2:b5:32:d5:bd:98:4f:4b:cd:98:2b:75: d6:97:be:50:77:c6:a8:c5:93:c0:15:7e:ca:e4:a0: ef:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:CC:EA:19:73:4D:BE:17:ED:62:0E:B6:CD:1A:72:17:61:2B:27:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/b276deed-b654-31aa-aead-607837be5406.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv4: 64.239.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:78:5d:b7:3c:23:a4:79:9d:ef:30:71:f5:7d:ab:b5:f3:6c: 6a:1d:ee:62:98:62:93:c1:39:fc:c1:ec:7c:71:0d:d8:20:7d: 9d:9c:d5:1a:ee:4f:d2:38:67:30:dd:13:83:bd:17:32:0b:cc: 90:57:db:84:fe:a4:b5:16:b8:45:c2:a9:99:c5:aa:e0:9a:1c: a1:ba:12:51:1f:3a:92:54:59:1c:16:fc:16:0d:ee:39:65:ec: f7:8f:83:cf:49:4c:e1:ac:d2:84:63:52:e4:84:39:93:01:92: 94:47:c3:0e:7b:cd:46:1a:09:4d:50:98:4a:e4:7f:d5:b7:52: 6d:1e:60:38:95:4c:0b:3a:4e:a0:50:56:bb:77:e3:c7:bb:cb: 62:16:26:64:25:a8:e5:d0:54:56:ad:b3:24:c6:61:89:3d:a2: ef:04:19:e8:a6:75:7e:81:82:ad:23:75:2f:98:b1:9e:55:46: b9:87:0f:b1:61:bf:c6:86:0d:dd:e4:7c:25:e3:52:04:a9:91: b5:c6:84:e6:5c:9f:d1:ca:e5:37:13:36:f3:28:9e:eb:88:cf: 83:78:29:20:ee:88:3f:9b:80:bb:44:06:51:1b:b6:24:72:33: 27:47:00:bc:1c:1b:be:5a:e2:0b:4c:d8:21:1a:c9:57:2f:f8: 3d:4a:70:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBl+2l29E+MN1WwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk NjBkYjFlMWMtZTlhNi00M2VjLTk1OGYtOTcxYmUwNjBjN2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9DcBstYrbUZ8qK0WI0HlxIZSoYRFxwuLC5Nq 0TYNqdqPT/8is8qvMifd2DTBECL3W7Zlz6TLe90j1u8Z5AqUYeqaQpbmb0jgBzpy 3WY8eRvHxbrvNPfd3XLQqhvQ6FGaxt/VcshmHUmerGxbXt1y8h5BRhJLgZRhCkZn 1p2ENdcAu2eiC5SwzSNOW5T7MjnuO8PHcEvSeEQmwMdOOCMmDeqC98pT9IjqmZm0 XhFXMLDFPduM1yocDS3PmOTAeKQ6cTjGdKH56Oi1WwTyWiya4SE6Z8nWBilk5fuU sQL4mxLwr9qitTLVvZhPS82YK3XWl75Qd8aoxZPAFX7K5KDvLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfM6hlzTb4X7WIOts0achdhKyfEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvYjI3NmRlZWQtYjY1NC0z MWFhLWFlYWQtNjA3ODM3YmU1NDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQO9tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKR4Xbc8I6R5ne8wcfV9q7XzbGod7mKYYpPBOfzB7HxxDdggfZ2c1Rru T9I4ZzDdE4O9FzILzJBX24T+pLUWuEXCqZnFquCaHKG6ElEfOpJUWRwW/BYN7jll 7PePg89JTOGs0oRjUuSEOZMBkpRHww57zUYaCU1QmErkf9W3Um0eYDiVTAs6TqBQ Vrt348e7y2IWJmQlqOXQVFatsyTGYYk9ou8EGeimdX6Bgq0jdS+YsZ5VRrmHD7Fh v8aGDd3kfCXjUgSpkbXGhOZcn9HK5TcTNvMonuuIz4N4KSDuiD+bgLtEBlEbtiRy MydHALwcG75a4gtM2CEayVcv+D1KcIY= -----END CERTIFICATE-----Generated at Sat Apr 5 11:21:33 2025 by rpki-client