$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c633f19-3bff-4217-9409-4783b2531879/a2af7786-b5b4-367e-b12f-636d723d6caf.roa File: a2af7786-b5b4-367e-b12f-636d723d6caf.roa (raw, json) Hash identifier: w+7Cc5rp10ihFK7eZWSwOMdgC2u6vxNCYSwrLGdDGOk= Subject key identifier: 02:A6:A1:16:73:68:32:64:CE:02:4D:20:7C:65:A5:1B:DF:0C:E3:25 Certificate issuer: /CN=6c633f19-3bff-4217-9409-4783b2531879 Certificate serial: 010D0C9F4328584902EC30F5FB5D4CE0145B5700 Authority key identifier: 0F:AF:13:F5:53:2A:25:83:47:7B:28:EB:3C:15:60:EC:9E:38:14:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c633f19-3bff-4217-9409-4783b2531879.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c633f19-3bff-4217-9409-4783b2531879/a2af7786-b5b4-367e-b12f-636d723d6caf.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 198949 IP address blocks: 169.244.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c633f19-3bff-4217-9409-4783b2531879/6c633f19-3bff-4217-9409-4783b2531879.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c633f19-3bff-4217-9409-4783b2531879/6c633f19-3bff-4217-9409-4783b2531879.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c633f19-3bff-4217-9409-4783b2531879.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:30:f5:fb:5d:4c:e0:14:5b:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c633f19-3bff-4217-9409-4783b2531879 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=609a2460-b9fa-439d-861f-7f335394bf2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:dc:21:d5:97:62:2c:59:94:bd:cd:2c:76:8a: 21:b0:ef:81:ce:0e:41:47:7b:ae:4b:09:99:a8:83: 2e:09:9a:f9:ba:0a:e9:01:e5:41:5a:cf:60:6b:31: 5e:09:4f:9f:0e:7a:28:95:fe:fc:ba:ca:eb:2e:8c: 7f:21:35:a2:52:52:4c:c3:c4:08:5a:10:64:c7:58: 01:93:2d:af:ee:c9:01:b0:e9:b1:50:81:2b:e1:89: 77:a8:97:e0:2f:51:3c:da:ae:24:df:5a:91:db:7f: b5:05:7d:dc:85:cd:a7:4d:e7:e0:b4:ea:b7:5b:f1: c1:c3:ac:18:d6:db:88:82:d8:9a:4c:d1:9a:73:97: 6d:a9:b5:00:f3:dd:b7:18:51:cd:65:42:c5:37:11: 18:53:14:bd:f2:f9:37:a9:eb:4e:db:a6:f0:78:1b: f0:90:b2:aa:02:5f:61:56:ed:1a:8f:5e:fb:50:9f: e7:cf:79:19:a9:7b:2e:21:47:e7:fa:fc:8c:78:a1: 50:4c:df:6b:21:09:a7:88:78:07:ac:d3:07:b8:30: 2e:ed:b0:ee:02:a4:e7:ed:9c:da:6f:b0:8f:1e:97: 79:05:7b:a7:92:0e:ed:1f:34:98:4e:0a:63:e9:fa: 3d:48:17:74:d7:c1:4d:c8:1d:9f:9c:d3:6c:60:f0: bd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A6:A1:16:73:68:32:64:CE:02:4D:20:7C:65:A5:1B:DF:0C:E3:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c633f19-3bff-4217-9409-4783b2531879/a2af7786-b5b4-367e-b12f-636d723d6caf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c633f19-3bff-4217-9409-4783b2531879/6c633f19-3bff-4217-9409-4783b2531879.crl X509v3 Authority Key Identifier: keyid:0F:AF:13:F5:53:2A:25:83:47:7B:28:EB:3C:15:60:EC:9E:38:14:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6c633f19-3bff-4217-9409-4783b2531879.cer sbgp-ipAddrBlock: critical IPv4: 169.244.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:e7:7a:0f:78:16:a8:93:d7:20:2b:f7:83:34:6c:b3:f4:27: 8e:fe:64:62:37:56:95:c1:b1:86:41:c6:d6:4a:df:99:51:ca: 31:d7:f8:c0:0c:10:b1:2b:ae:32:e2:02:85:6b:14:e5:1e:f4: ef:19:6d:cb:5c:65:3f:67:d8:22:7e:80:30:38:13:1f:40:e0: ed:78:a2:38:b4:8b:66:99:3f:2e:51:1c:d8:7b:6f:ef:62:c0: c0:d9:c8:0e:0e:8a:cf:48:20:b3:e3:b1:1e:50:5d:8c:2a:95: 93:62:b8:e1:e8:2b:c2:78:64:65:65:4d:1c:49:a7:97:57:5e: 34:98:35:10:a9:b2:38:b7:a8:43:93:ae:18:a3:50:36:f9:b1: 09:be:8d:45:db:af:d7:41:33:a0:fc:4c:90:63:ac:3e:41:f1: c6:4a:c2:f8:17:33:7e:81:a6:81:24:6d:4a:d4:bc:70:57:05: 8e:f1:69:d1:8f:31:3c:af:ff:73:e9:56:d8:e3:24:0e:3f:36: 28:e1:60:a7:15:b9:e2:6b:c4:1f:81:66:8c:4b:71:be:fe:94: be:73:89:dc:de:e4:40:67:13:b5:9d:c7:50:cf:71:d9:91:77: 06:92:20:94:2c:aa:27:34:c2:30:85:f1:a6:ef:ff:2e:b3:06: e1:d4:f1:f4 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkC7DD1+11M4BRbVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM2MzNmMTktM2JmZi00MjE3LTk0MDktNDc4M2IyNTMx ODc5MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk NjA5YTI0NjAtYjlmYS00MzlkLTg2MWYtN2YzMzUzOTRiZjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9wh1ZdiLFmUvc0sdoohsO+Bzg5BR3uuSwmZ qIMuCZr5ugrpAeVBWs9gazFeCU+fDnoolf78usrrLox/ITWiUlJMw8QIWhBkx1gB ky2v7skBsOmxUIEr4Yl3qJfgL1E82q4k31qR23+1BX3chc2nTefgtOq3W/HBw6wY 1tuIgtiaTNGac5dtqbUA8923GFHNZULFNxEYUxS98vk3qetO26bweBvwkLKqAl9h Vu0aj177UJ/nz3kZqXsuIUfn+vyMeKFQTN9rIQmniHgHrNMHuDAu7bDuAqTn7Zza b7CPHpd5BXunkg7tHzSYTgpj6fo9SBd018FNyB2fnNNsYPC9bQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAKmoRZzaDJkzgJNIHxlpRvfDOMlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YzYz M2YxOS0zYmZmLTQyMTctOTQwOS00NzgzYjI1MzE4NzkvYTJhZjc3ODYtYjViNC0z NjdlLWIxMmYtNjM2ZDcyM2Q2Y2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmM2MzNmMTktM2JmZi00MjE3LTk0 MDktNDc4M2IyNTMxODc5LzZjNjMzZjE5LTNiZmYtNDIxNy05NDA5LTQ3ODNiMjUz MTg3OS5jcmwwHwYDVR0jBBgwFoAUD68T9VMqJYNHeyjrPBVg7J44FOgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82YzYzM2YxOS0zYmZmLTQyMTctOTQwOS00Nzgz YjI1MzE4NzkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqfQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAMed6D3gWqJPXICv3gzRss/Qnjv5kYjdWlcGxhkHG1krfmVHKMdf4wAwQ sSuuMuIChWsU5R707xlty1xlP2fYIn6AMDgTH0Dg7XiiOLSLZpk/LlEc2Htv72LA wNnIDg6Kz0ggs+OxHlBdjCqVk2K44egrwnhkZWVNHEmnl1deNJg1EKmyOLeoQ5Ou GKNQNvmxCb6NRduv10EzoPxMkGOsPkHxxkrC+BczfoGmgSRtStS8cFcFjvFp0Y8x PK//c+lW2OMkDj82KOFgpxW54mvEH4FmjEtxvv6UvnOJ3N7kQGcTtZ3HUM9x2ZF3 BpIglCyqJzTCMIXxpu//LrMG4dTx9A== -----END CERTIFICATE-----Generated at Sun Apr 6 06:05:13 2025 by rpki-client