$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/4d5e8188-243c-3e1d-8dd9-99991af6feec.roa File: 4d5e8188-243c-3e1d-8dd9-99991af6feec.roa (raw, json) Hash identifier: pjXtjPqPsB6Fhn5TljkSElUcdgQTROQpKD4HG8lNihE= Subject key identifier: DD:45:DE:3B:5B:CF:9D:C4:03:45:A6:E5:A7:FA:C1:41:47:01:72:D2 Certificate issuer: /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Certificate serial: 010D0C9F43285849350EAC685143BEADF3BAEAC8 Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/4d5e8188-243c-3e1d-8dd9-99991af6feec.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 393474 IP address blocks: 64.90.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:ac:68:51:43:be:ad:f3:ba:ea:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=b06b71b8-ec4d-4e15-bfdd-8a3b2eb15210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c4:15:c5:6e:bc:a1:45:b0:6e:5c:70:6c:a5: 32:54:72:5e:e2:ac:6d:51:18:3d:66:40:d2:10:88: 51:42:e3:86:e2:9e:cf:9f:03:78:da:75:4e:67:c4: 6b:55:ba:21:16:4e:e0:17:5d:53:1e:19:bb:6a:e3: 82:f6:c9:20:48:8f:44:5f:c5:fa:3f:1a:2e:6a:91: f3:4d:71:a8:43:10:40:c6:90:ab:44:ce:21:06:c8: 1f:75:aa:f0:1f:bf:2f:cd:be:6e:d8:b5:a0:92:04: 7a:47:1e:8f:cc:38:27:78:31:79:ce:c3:a9:5c:c2: 85:b2:e8:e9:3e:d1:aa:f7:ee:3a:4e:e2:74:72:5b: f0:72:9b:c5:c3:f4:6a:63:0e:84:fe:b3:4f:f3:27: f3:60:55:f5:00:ee:5e:ac:49:53:54:17:22:4b:51: 4d:bb:c3:22:00:b0:5d:b4:26:21:04:97:b3:99:87: 96:2f:fa:cd:1c:88:e5:b3:9f:d6:4d:c0:9c:eb:6e: 60:37:40:4c:1f:e4:3d:d8:bb:5a:75:48:54:6e:ac: aa:29:cf:f8:fe:6a:bd:83:4a:8b:73:d9:d3:cf:8a: de:75:3a:17:c5:26:ed:de:72:61:0c:71:5d:52:3a: f3:45:d8:8b:29:b2:da:a1:c2:5c:83:5e:81:82:25: f3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:45:DE:3B:5B:CF:9D:C4:03:45:A6:E5:A7:FA:C1:41:47:01:72:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/4d5e8188-243c-3e1d-8dd9-99991af6feec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl X509v3 Authority Key Identifier: keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer sbgp-ipAddrBlock: critical IPv4: 64.90.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:80:63:44:c6:a7:ce:9c:33:2b:c8:12:b7:10:51:38:05:c8: e9:19:71:2e:25:29:17:62:85:7a:a5:aa:08:c9:53:0a:15:52: d4:c7:c3:1f:8a:b6:3d:2d:e7:ff:1c:e3:81:c1:a7:45:44:84: c1:6b:4f:f6:88:c2:de:52:71:1d:1c:29:da:6b:40:0a:cd:61: ef:85:6b:07:28:08:e0:57:1b:53:e5:8a:43:d2:08:e5:56:f6: d4:90:b2:32:d1:47:11:27:ce:8c:c8:95:ae:c3:79:6e:49:61: 20:f3:7a:78:cd:94:5f:cb:1b:5b:65:d4:d8:23:d3:32:62:1a: 37:a7:a0:3a:d5:a7:df:da:15:7f:e9:38:5f:cf:07:47:90:61: 0a:b7:e2:fe:a5:59:1f:e5:49:d9:14:91:b6:fd:4c:33:2b:a6: 49:40:da:de:0d:11:eb:a5:2d:c9:33:bb:32:52:9d:04:5f:b5: 11:b1:4a:45:f9:8f:d7:97:f9:13:4c:ba:a1:7f:10:1b:36:d4: 37:fe:59:6f:9c:94:b7:76:74:69:21:82:09:96:52:68:f9:18: 43:81:5c:02:2e:45:36:61:e7:8e:4c:98:70:09:35:a3:49:14: 48:4f:67:dd:87:b7:08:42:11:8e:b2:87:79:77:f9:17:2a:fc: a8:4a:0e:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DqxoUUO+rfO66sgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwMmRjOWMtMTJlOS00YjY2LThjNmQtZTI5OTRhMjFh MWJkMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YjA2YjcxYjgtZWM0ZC00ZTE1LWJmZGQtOGEzYjJlYjE1MjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMQVxW68oUWwblxwbKUyVHJe4qxtURg9ZkDS EIhRQuOG4p7PnwN42nVOZ8RrVbohFk7gF11THhm7auOC9skgSI9EX8X6PxouapHz TXGoQxBAxpCrRM4hBsgfdarwH78vzb5u2LWgkgR6Rx6PzDgneDF5zsOpXMKFsujp PtGq9+46TuJ0clvwcpvFw/RqYw6E/rNP8yfzYFX1AO5erElTVBciS1FNu8MiALBd tCYhBJezmYeWL/rNHIjls5/WTcCc625gN0BMH+Q92LtadUhUbqyqKc/4/mq9g0qL c9nTz4redToXxSbt3nJhDHFdUjrzRdiLKbLaocJcg16BgiXzaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1F3jtbz53EA0Wm5af6wUFHAXLSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAy ZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5NGEyMWExYmQvNGQ1ZTgxODgtMjQzYy0z ZTFkLThkZDktOTk5OTFhZjZmZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTMwMmRjOWMtMTJlOS00YjY2LThj NmQtZTI5OTRhMjFhMWJkL2EzMDJkYzljLTEyZTktNGI2Ni04YzZkLWUyOTk0YTIx YTFiZC5jcmwwHwYDVR0jBBgwFoAUD9wvbjNkX+N70ljHXoRo2VwdIpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAyZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5 NGEyMWExYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOAY0TGp86cMyvIErcQUTgFyOkZcS4lKRdihXqlqgjJUwoVUtTHwx+K tj0t5/8c44HBp0VEhMFrT/aIwt5ScR0cKdprQArNYe+FawcoCOBXG1PlikPSCOVW 9tSQsjLRRxEnzozIla7DeW5JYSDzenjNlF/LG1tl1Ngj0zJiGjenoDrVp9/aFX/p OF/PB0eQYQq34v6lWR/lSdkUkbb9TDMrpklA2t4NEeulLckzuzJSnQRftRGxSkX5 j9eX+RNMuqF/EBs21Df+WW+clLd2dGkhggmWUmj5GEOBXAIuRTZh545MmHAJNaNJ FEhPZ92HtwhCEY6yh3l3+Rcq/KhKDjQ= -----END CERTIFICATE-----Generated at Fri Apr 11 21:39:25 2025 by rpki-client