$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/296474ca-9a2b-35f1-a900-62276c4b824d.roa File: 296474ca-9a2b-35f1-a900-62276c4b824d.roa (raw, json) Hash identifier: e8468S5EsvvutSLJ7ZkRP+Csy6w7ILuAGbdDAW79KNY= Subject key identifier: C5:96:5B:58:00:B6:7D:9B:83:B6:49:26:56:4E:1B:9D:17:28:F8:0D Certificate issuer: /CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5 Certificate serial: 010D0C9F43285848A13610814BD0EA64978C0080 Authority key identifier: 0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/296474ca-9a2b-35f1-a900-62276c4b824d.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 64.207.222.0/24 maxlen: 24 64.207.223.0/24 maxlen: 24 67.222.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:10:81:4b:d0:ea:64:97:8c:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=8265a046-74aa-4aa1-9b9c-24f78b0d3f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:26:08:91:86:a5:1e:ae:31:c2:92:5b:4b:cf: bc:5e:af:6c:9d:27:3e:90:9a:75:10:e1:cf:3a:07: 50:32:f0:92:d3:c3:f6:57:ad:ad:63:ef:5d:f6:68: 46:5e:5f:98:f0:ca:06:93:d5:3f:b1:7a:66:5a:ba: 20:f5:94:ec:ca:a1:fc:67:93:9e:69:c3:14:a0:06: 59:15:3f:ae:61:81:a0:c1:bf:cd:74:32:75:5b:69: 6a:37:35:6c:a8:24:fb:b3:41:1b:f5:10:48:51:66: c2:90:b7:43:be:31:2e:5b:1d:9f:f4:8d:76:80:be: ff:07:81:c6:2a:75:07:97:c5:32:f7:3c:48:05:6c: cf:da:f2:0b:d1:52:ab:fe:24:96:7b:95:41:a6:0e: 0b:62:1c:29:ac:9c:88:84:89:5f:87:c8:c0:f9:6e: 49:a0:14:80:ec:cc:80:a2:2b:7b:52:d5:e2:c4:51: 92:8e:16:7e:1d:9c:bf:3f:fd:95:40:a8:67:6f:f8: 58:6f:94:e9:17:4f:c6:e2:b7:58:68:a1:6c:d7:15: 9d:bd:28:e5:77:9d:3e:93:b7:ad:fa:6f:3f:24:f2: 3d:31:d1:97:85:cd:f4:57:a9:57:2e:9d:db:1d:3a: a5:be:c4:de:3a:c7:e8:60:db:82:e1:d1:db:a8:c3: b5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:96:5B:58:00:B6:7D:9B:83:B6:49:26:56:4E:1B:9D:17:28:F8:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/296474ca-9a2b-35f1-a900-62276c4b824d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl X509v3 Authority Key Identifier: keyid:0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer sbgp-ipAddrBlock: critical IPv4: 64.207.222.0/23 67.222.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:6a:0f:fe:cf:ad:86:dd:2d:9a:a1:96:09:c5:73:f3:42:6b: 80:b6:d9:0d:24:44:1b:ce:4c:45:55:57:16:72:c4:57:b5:ea: 3d:68:f5:e4:b5:57:b8:ad:59:dc:81:bc:0f:87:82:f1:39:3f: 2a:2b:b7:6f:40:ed:4c:ca:14:2e:b4:4c:64:b6:0c:8f:15:55: 9a:ff:18:f2:ac:b9:2e:59:71:b3:db:68:41:e0:bd:06:e6:30: dd:55:76:db:0d:90:2c:30:c9:d2:53:1a:fb:81:95:0e:26:2c: 4c:d9:68:0a:ab:e1:ca:22:b4:89:57:08:8c:24:96:6d:a1:7c: 02:a5:59:e1:78:6b:36:19:54:7d:4c:e3:7c:17:62:9b:a1:fe: cd:25:58:84:cb:41:38:d8:24:3e:a4:ab:7e:74:5c:a4:9b:b6: 0a:b3:5a:b4:fd:c3:ea:f1:ce:ca:ce:e6:1a:8d:a5:c0:ef:b3: 7f:ee:27:82:6e:0e:d1:fa:f1:48:9b:c7:0c:84:77:ba:21:bd: a4:50:8e:0e:07:45:f4:ef:67:8a:2e:0e:da:25:63:f8:aa:7b: 06:08:5d:a0:c5:b3:cf:7f:b0:8b:08:19:74:d9:2f:77:ed:96: c9:fa:2b:39:3c:90:8e:76:2e:bc:e2:c8:f1:3d:8f:03:96:86: 97:a2:e3:16 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEihNhCBS9DqZJeMAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllM2NkZTEtOGFiMi00MzQzLWE1OTctMjRlNmRiNWM4 ZmU1MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk ODI2NWEwNDYtNzRhYS00YWExLTliOWMtMjRmNzhiMGQzZjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyYIkYalHq4xwpJbS8+8Xq9snSc+kJp1EOHP OgdQMvCS08P2V62tY+9d9mhGXl+Y8MoGk9U/sXpmWrog9ZTsyqH8Z5OeacMUoAZZ FT+uYYGgwb/NdDJ1W2lqNzVsqCT7s0Eb9RBIUWbCkLdDvjEuWx2f9I12gL7/B4HG KnUHl8Uy9zxIBWzP2vIL0VKr/iSWe5VBpg4LYhwprJyIhIlfh8jA+W5JoBSA7MyA oit7UtXixFGSjhZ+HZy/P/2VQKhnb/hYb5TpF0/G4rdYaKFs1xWdvSjld50+k7et +m8/JPI9MdGXhc30V6lXLp3bHTqlvsTeOsfoYNuC4dHbqMO1wQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMWWW1gAtn2bg7ZJJlZOG50XKPgNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWUz Y2RlMS04YWIyLTQzNDMtYTU5Ny0yNGU2ZGI1YzhmZTUvMjk2NDc0Y2EtOWEyYi0z NWYxLWE5MDAtNjIyNzZjNGI4MjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODllM2NkZTEtOGFiMi00MzQzLWE1 OTctMjRlNmRiNWM4ZmU1Lzg5ZTNjZGUxLThhYjItNDM0My1hNTk3LTI0ZTZkYjVj OGZlNS5jcmwwHwYDVR0jBBgwFoAUC3drIWzbMlwhsUiL5FVLiXcMGx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWUzY2RlMS04YWIyLTQzNDMtYTU5Ny0yNGU2 ZGI1YzhmZTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBQM/eAwQA Q97+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADtqD/7PrYbdLZqhlgnFc/NCa4C22Q0kRBvOTEVVVxZyxFe1 6j1o9eS1V7itWdyBvA+HgvE5Pyort29A7UzKFC60TGS2DI8VVZr/GPKsuS5ZcbPb aEHgvQbmMN1VdtsNkCwwydJTGvuBlQ4mLEzZaAqr4coitIlXCIwklm2hfAKlWeF4 azYZVH1M43wXYpuh/s0lWITLQTjYJD6kq350XKSbtgqzWrT9w+rxzsrO5hqNpcDv s3/uJ4JuDtH68UibxwyEd7ohvaRQjg4HRfTvZ4ouDtolY/iqewYIXaDFs89/sIsI GXTZL3ftlsn6Kzk8kI52LrziyPE9jwOWhpei4xY= -----END CERTIFICATE-----Generated at Fri Mar 14 13:22:44 2025 by rpki-client