$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/6a0554af-7437-369a-b4d4-9a1915634372.roa File: 6a0554af-7437-369a-b4d4-9a1915634372.roa (raw, json) Hash identifier: A6LgpzCapcJB/dLiWFggY0BO4xIzfSa/j09jUX38qT0= Subject key identifier: DE:98:20:13:C5:DE:D9:17:55:C8:85:9C:4B:D5:E9:32:42:7A:DB:6B Certificate issuer: /CN=d2294e65-4da1-4c07-9bc0-820cdb1e2c48 Certificate serial: 010D0C9F43285848E16BD9C9C8D5B5D18735B000 Authority key identifier: A2:FA:26:93:6E:E2:D1:F0:D6:4F:44:71:93:66:33:0D:F3:27:A1:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/6a0554af-7437-369a-b4d4-9a1915634372.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 2552 IP address blocks: 65.254.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:d9:c9:c8:d5:b5:d1:87:35:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2294e65-4da1-4c07-9bc0-820cdb1e2c48 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=12df8fc4-c363-4f74-80a6-55b414cffa6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ac:39:28:ad:9f:3b:60:05:90:30:33:5c:48: 04:4f:9b:3f:4c:f3:58:fb:a8:5c:db:6f:44:2a:ee: bb:45:48:c6:d8:81:ef:05:52:40:7d:53:b2:86:28: b1:a9:d4:a0:15:df:e4:84:e4:49:57:26:cb:9c:e8: 35:7b:68:32:5f:3d:45:cd:e7:43:8a:07:74:a9:ac: fa:f1:79:71:ff:37:04:a9:39:13:8c:70:f6:1f:59: 14:db:c5:01:48:ea:6c:05:84:d2:35:59:a6:41:8a: d7:0a:de:10:5d:4e:4e:1f:78:89:04:ba:f0:ca:82: 7c:db:f9:13:e7:4a:95:09:91:d1:ec:3b:83:ef:bd: 68:5b:94:cf:77:2c:95:d7:1e:e5:9a:c0:3a:01:ad: eb:af:e0:65:9f:ca:34:b7:8c:ca:8d:45:79:42:c2: ae:7c:88:fe:9c:71:c8:25:99:98:4c:55:db:6b:47: f3:08:2f:ba:c1:02:fc:7a:c2:94:c5:d6:9b:14:0e: 0f:50:d4:ee:93:2f:00:5a:fd:81:0e:1c:c3:1d:80: a0:b2:f4:dd:65:11:d8:f9:98:a5:d6:2f:14:be:65: ab:a5:17:8b:d1:15:5c:e0:d7:04:00:62:00:a7:33: 37:ef:30:81:e8:ec:0b:13:1c:e4:6b:23:68:79:30: cc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:98:20:13:C5:DE:D9:17:55:C8:85:9C:4B:D5:E9:32:42:7A:DB:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/6a0554af-7437-369a-b4d4-9a1915634372.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.crl X509v3 Authority Key Identifier: keyid:A2:FA:26:93:6E:E2:D1:F0:D6:4F:44:71:93:66:33:0D:F3:27:A1:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.cer sbgp-ipAddrBlock: critical IPv4: 65.254.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:84:2e:c9:df:7b:27:10:e3:d7:d8:c1:6a:8c:a6:62:85:2c: 35:dc:c5:d1:29:25:33:b2:57:12:ca:31:f7:4c:f2:62:58:3a: cc:20:70:07:1f:07:71:5f:0f:cd:9a:81:67:b0:26:be:34:30: b1:5d:62:b2:94:a5:02:9b:94:83:d6:d7:e4:7c:e6:69:23:79: 48:fd:a7:53:91:d1:3d:63:03:17:e2:d2:4a:29:f6:a7:4e:b9: db:6e:33:70:f9:79:80:da:6e:25:97:17:6b:28:7f:a6:43:00: e2:ce:6e:37:22:b7:49:18:74:b7:32:03:9e:94:da:10:4f:a4: 86:43:48:09:49:ae:9c:c8:09:a0:5a:23:79:33:db:f0:c5:20: a9:ce:70:bc:3e:e1:32:23:0c:2d:af:69:1f:cb:30:b4:a9:19: de:e2:79:df:05:a8:2c:43:64:35:30:9e:a6:f8:06:3a:3b:7c: 72:e7:36:6a:15:03:cc:a0:c1:d8:f5:85:ed:e2:4a:45:4d:f5: f5:d7:1c:6c:aa:65:67:ea:c9:45:82:16:b9:34:d5:9a:39:fd: d9:20:59:9c:17:b8:c3:da:ff:ae:b0:ac:21:d6:55:a7:a5:94: 14:b8:5f:7e:f1:bc:e7:ac:fc:28:ad:d1:99:c1:ff:86:4d:a2: 50:7e:a8:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha9nJyNW10Yc1sAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIyOTRlNjUtNGRhMS00YzA3LTliYzAtODIwY2RiMWUy YzQ4MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk MTJkZjhmYzQtYzM2My00Zjc0LTgwYTYtNTViNDE0Y2ZmYTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aw5KK2fO2AFkDAzXEgET5s/TPNY+6hc229E Ku67RUjG2IHvBVJAfVOyhiixqdSgFd/khORJVybLnOg1e2gyXz1FzedDigd0qaz6 8Xlx/zcEqTkTjHD2H1kU28UBSOpsBYTSNVmmQYrXCt4QXU5OH3iJBLrwyoJ82/kT 50qVCZHR7DuD771oW5TPdyyV1x7lmsA6Aa3rr+Bln8o0t4zKjUV5QsKufIj+nHHI JZmYTFXba0fzCC+6wQL8esKUxdabFA4PUNTuky8AWv2BDhzDHYCgsvTdZRHY+Zil 1i8UvmWrpReL0RVc4NcEAGIApzM37zCB6OwLExzkayNoeTDM/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6YIBPF3tkXVciFnEvV6TJCettrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kMjI5 NGU2NS00ZGExLTRjMDctOWJjMC04MjBjZGIxZTJjNDgvNmEwNTU0YWYtNzQzNy0z NjlhLWI0ZDQtOWExOTE1NjM0MzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDIyOTRlNjUtNGRhMS00YzA3LTli YzAtODIwY2RiMWUyYzQ4L2QyMjk0ZTY1LTRkYTEtNGMwNy05YmMwLTgyMGNkYjFl MmM0OC5jcmwwHwYDVR0jBBgwFoAUovomk27i0fDWT0Rxk2YzDfMnofUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kMjI5NGU2NS00ZGExLTRjMDctOWJjMC04MjBj ZGIxZTJjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQf5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOELsnfeycQ49fYwWqMpmKFLDXcxdEpJTOyVxLKMfdM8mJYOswgcAcf B3FfD82agWewJr40MLFdYrKUpQKblIPW1+R85mkjeUj9p1OR0T1jAxfi0kop9qdO udtuM3D5eYDabiWXF2sof6ZDAOLObjcit0kYdLcyA56U2hBPpIZDSAlJrpzICaBa I3kz2/DFIKnOcLw+4TIjDC2vaR/LMLSpGd7ied8FqCxDZDUwnqb4Bjo7fHLnNmoV A8ygwdj1he3iSkVN9fXXHGyqZWfqyUWCFrk01Zo5/dkgWZwXuMPa/66wrCHWVael lBS4X37xvOes/Cit0ZnB/4ZNolB+qAQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:56:07 2025 by rpki-client