$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/864d8067-3825-33b1-b76e-1c3b72be155f.roa File: 864d8067-3825-33b1-b76e-1c3b72be155f.roa (raw, json) Hash identifier: LHGFss6LNZENQDVnCe0pY/rEuJmcfE25IIouhbVqn8c= Subject key identifier: CC:7E:80:10:5C:23:27:E3:24:EA:11:BB:A3:C6:80:3D:22:5B:40:CD Certificate issuer: /CN=9c86f5c3-cc81-4acd-8209-c28b6f5b7984 Certificate serial: 010D0C9F43285848E2D10DF407F64499CF84CA00 Authority key identifier: 02:D2:86:34:A6:8D:40:07:1A:18:26:BB:67:47:8B:58:91:FF:D2:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/864d8067-3825-33b1-b76e-1c3b72be155f.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 18616 IP address blocks: 52.119.64.0/19 maxlen: 32 64.111.64.0/20 maxlen: 32 68.233.176.0/20 maxlen: 32 163.182.128.0/19 maxlen: 32 163.182.160.0/23 maxlen: 32 198.254.112.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:0d:f4:07:f6:44:99:cf:84:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c86f5c3-cc81-4acd-8209-c28b6f5b7984 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=95feab29-92e6-48d4-8ec6-b32dce6934a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7c:bc:2d:ca:0f:3d:33:1c:25:e0:f8:36:92: 62:b0:ac:c2:af:98:35:27:96:60:40:37:30:af:58: e3:d7:f4:03:4a:01:76:44:92:7e:af:a1:59:af:5b: c0:67:c7:59:b3:9b:21:ca:a7:4c:45:25:2a:5a:c5: b6:b6:69:bd:4a:cb:62:01:22:e1:ee:47:69:0b:37: a4:be:1f:5c:18:2a:1f:52:95:f9:28:82:90:85:a5: 33:8f:ae:88:54:08:95:23:df:41:07:c2:32:ba:8f: 8b:90:c1:5b:49:8b:30:39:48:9b:cd:f1:91:0c:ce: 65:15:1d:a7:0a:e8:18:a8:bd:a8:8b:32:17:27:2b: d5:aa:ed:1d:ac:28:c6:71:87:31:c9:e8:02:b4:39: bd:8c:9d:b6:7a:b0:f2:15:4e:d1:ff:c3:d0:94:38: 92:ce:6a:26:55:d8:33:2c:1a:99:f8:30:24:fe:1e: 62:e2:c9:03:ce:16:f3:50:cc:67:ec:62:cc:2f:b7: 4d:53:ac:52:ea:d0:da:b9:2f:a2:9c:3b:dd:7e:ec: 39:28:58:7f:ce:0d:2d:c4:4e:ec:9b:7f:53:da:7b: 57:94:29:04:66:b7:6a:f4:7e:8d:d5:da:99:3a:73: e8:c9:c5:dd:27:55:58:86:c7:3b:ac:0e:e5:5d:80: ab:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:7E:80:10:5C:23:27:E3:24:EA:11:BB:A3:C6:80:3D:22:5B:40:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/864d8067-3825-33b1-b76e-1c3b72be155f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.crl X509v3 Authority Key Identifier: keyid:02:D2:86:34:A6:8D:40:07:1A:18:26:BB:67:47:8B:58:91:FF:D2:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.cer sbgp-ipAddrBlock: critical IPv4: 52.119.64.0/19 64.111.64.0/20 68.233.176.0/20 163.182.128.0-163.182.161.255 198.254.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:38:bf:d3:37:b0:6d:8e:f1:08:03:14:eb:d5:27:e8:15:35: 7f:e9:cc:83:21:09:77:e6:2b:43:46:be:07:29:be:dc:c4:ad: 35:90:de:f4:6a:d0:e9:b3:43:41:e4:ea:12:d5:ca:6d:8c:8f: 9d:55:47:2f:1b:10:2f:00:89:4f:83:43:1c:81:d4:91:16:3d: d2:6d:60:7c:18:2a:35:f8:04:42:e8:bc:5f:de:79:51:2b:10: e1:bb:5d:6c:c5:62:70:91:aa:cb:bf:cd:84:f7:89:50:6a:98: 39:25:58:37:c0:f9:a5:ca:b9:fa:04:0b:86:98:86:31:86:a8: a7:c7:d7:51:b1:c9:05:21:e8:e9:9f:dd:24:04:ae:f0:c4:13: 57:28:2f:36:e6:e2:0d:98:8f:4d:e4:aa:c2:b3:6e:4c:6c:39: 1a:b9:6f:bc:d7:30:96:da:18:ec:59:31:da:6c:4e:77:f0:3c: f5:30:6b:7b:8e:c8:4b:51:bd:7a:66:27:fe:8d:58:a3:35:cb: de:c9:f0:12:ef:f6:57:3e:96:dd:28:94:72:f4:50:09:d0:e7: 48:a9:3f:79:46:88:92:b3:86:e4:9a:ae:73:00:bc:2b:c4:7b: ec:7b:d2:fd:9c:a2:e9:4f:29:56:12:d4:e3:36:a9:38:b1:c5: 19:e4:ae:bf -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEji0Q30B/ZEmc+EygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM4NmY1YzMtY2M4MS00YWNkLTgyMDktYzI4YjZmNWI3 OTg0MB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk OTVmZWFiMjktOTJlNi00OGQ0LThlYzYtYjMyZGNlNjkzNGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXy8LcoPPTMcJeD4NpJisKzCr5g1J5ZgQDcw r1jj1/QDSgF2RJJ+r6FZr1vAZ8dZs5shyqdMRSUqWsW2tmm9SstiASLh7kdpCzek vh9cGCofUpX5KIKQhaUzj66IVAiVI99BB8Iyuo+LkMFbSYswOUibzfGRDM5lFR2n CugYqL2oizIXJyvVqu0drCjGcYcxyegCtDm9jJ22erDyFU7R/8PQlDiSzmomVdgz LBqZ+DAk/h5i4skDzhbzUMxn7GLML7dNU6xS6tDauS+inDvdfuw5KFh/zg0txE7s m39T2ntXlCkEZrdq9H6N1dqZOnPoycXdJ1VYhsc7rA7lXYCrewIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFMx+gBBcIyfjJOoRu6PGgD0iW0DNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Yzg2 ZjVjMy1jYzgxLTRhY2QtODIwOS1jMjhiNmY1Yjc5ODQvODY0ZDgwNjctMzgyNS0z M2IxLWI3NmUtMWMzYjcyYmUxNTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWM4NmY1YzMtY2M4MS00YWNkLTgy MDktYzI4YjZmNWI3OTg0LzljODZmNWMzLWNjODEtNGFjZC04MjA5LWMyOGI2ZjVi Nzk4NC5jcmwwHwYDVR0jBBgwFoAUAtKGNKaNQAcaGCa7Z0eLWJH/0icwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85Yzg2ZjVjMy1jYzgxLTRhY2QtODIwOS1jMjhi NmY1Yjc5ODQuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQFNHdAAwQE QG9AAwQEROmwMAwDBAejtoADBAGjtqADBATG/nAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEApDi/0zewbY7x CAMU69Un6BU1f+nMgyEJd+YrQ0a+Bym+3MStNZDe9GrQ6bNDQeTqEtXKbYyPnVVH LxsQLwCJT4NDHIHUkRY90m1gfBgqNfgEQui8X955USsQ4btdbMVicJGqy7/NhPeJ UGqYOSVYN8D5pcq5+gQLhpiGMYaop8fXUbHJBSHo6Z/dJASu8MQTVygvNubiDZiP TeSqwrNuTGw5GrlvvNcwltoY7Fkx2mxOd/A89TBre47IS1G9emYn/o1YozXL3snw Eu/2Vz6W3SiUcvRQCdDnSKk/eUaIkrOG5JqucwC8K8R77HvS/Zyi6U8pVhLU4zap OLHFGeSuvw== -----END CERTIFICATE-----Generated at Fri Mar 14 10:17:50 2025 by rpki-client