$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33d66f77-23e9-3fba-a372-f0a2d74a3921.roa File: 33d66f77-23e9-3fba-a372-f0a2d74a3921.roa (raw, json) Hash identifier: J7KykOXEvI6iPpQB4z0SRv00hwtvZGtbsGrTWsULVto= Subject key identifier: 9B:D1:4F:D7:86:F4:49:92:1C:39:06:D9:95:83:4E:15:76:9C:C9:36 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584897708D2CF9581D447CCB7F80 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33d66f77-23e9-3fba-a372-f0a2d74a3921.roa Signing time: Sun 19 Jan 2025 02:00:39 +0000 ROA not before: Sun 19 Jan 2025 02:00:39 +0000 ROA not after: Sat 19 Apr 2025 01:00:39 +0000 asID: 13768 IP address blocks: 64.227.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:97:70:8d:2c:f9:58:1d:44:7c:cb:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Jan 19 02:00:39 2025 GMT Not After : Apr 19 01:00:39 2025 GMT Subject: CN=c2ec3b01-0382-4632-b40d-13a649f6dfa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:80:52:45:ee:3e:16:65:ae:31:eb:10:c7:91: c1:f7:ad:73:26:af:63:b9:72:33:08:d4:32:42:37: 63:76:66:90:3a:ed:d3:08:46:d1:91:ed:cc:c3:ae: 21:2f:00:70:da:ca:83:c3:3b:6c:83:7d:ad:ef:ca: 8a:b1:63:13:8c:88:e2:44:55:a4:af:f7:93:0b:18: 5e:a5:2a:2e:d4:72:fb:5e:b7:4a:a5:3f:3e:ec:03: c3:35:29:71:c9:28:11:2e:c9:e0:01:d6:bc:61:82: af:cf:64:02:57:8b:83:5d:74:f0:3e:18:eb:80:c5: 9d:f9:56:12:a2:17:f7:74:80:ad:b9:05:3b:8f:45: b4:2b:b9:79:15:31:5f:91:b0:1c:d0:a2:31:7f:fa: 4e:c1:55:d7:62:8b:1a:60:c6:72:84:68:b0:54:ee: de:24:67:27:18:ce:cf:3a:4e:84:a3:e5:6f:5d:24: 59:4f:c3:1b:6a:ff:6c:d2:2b:20:41:bf:d9:d4:fb: 34:eb:0c:2c:4d:b7:51:e2:3a:4b:9a:4f:8e:8d:ec: 19:8c:13:42:1c:a3:d4:16:9d:b6:dd:e3:d7:56:66: 78:1d:c5:35:ff:e9:8d:4c:94:98:d4:69:04:e2:8a: 06:17:d4:5f:b4:6f:55:39:53:bf:12:17:d3:94:22: c0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D1:4F:D7:86:F4:49:92:1C:39:06:D9:95:83:4E:15:76:9C:C9:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33d66f77-23e9-3fba-a372-f0a2d74a3921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.227.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:2e:65:d7:7b:6b:08:6b:bc:ef:9e:5e:91:9c:a7:f7:aa:65: 5a:84:77:80:89:53:1e:2b:e8:4b:5d:6d:81:fd:3f:1b:31:8f: 5e:c4:ff:dc:35:1a:0a:fa:d4:0a:8b:12:06:06:4c:dc:99:31: 78:28:a8:aa:1c:95:2c:ba:08:33:a1:d7:72:34:42:10:a6:ce: fc:c9:9f:85:dd:32:95:61:1b:af:d1:6d:64:f8:84:fe:08:6f: d1:e6:85:fe:7e:80:6b:0c:9c:b5:f0:3c:82:58:6f:08:11:a9: 6f:f7:48:02:89:2d:ff:1b:4b:7d:27:37:c2:a9:2f:c9:d8:5f: d4:9d:b0:cc:43:3b:1b:98:be:ea:d9:1a:56:b7:42:f7:ac:54: e0:ce:d0:67:be:79:aa:82:1f:3b:74:71:30:ab:2c:0d:a3:6f: 27:73:52:d4:55:c9:b6:29:81:3c:a6:6e:0c:9b:34:50:66:ad: 27:04:26:9a:1a:2a:f7:16:6a:48:f9:a1:bb:01:c2:80:c5:c5: 3c:8a:88:4f:8d:8f:51:f8:ab:9f:47:9e:fc:cc:e5:89:fb:3f: ae:33:4a:a0:e5:a6:57:e7:8d:5f:85:89:23:1e:04:3e:ba:8b: 83:f7:f5:1a:79:f3:8f:da:7c:f3:b6:fb:64:ff:87:64:45:b5: a1:d5:ca:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiXcI0s+VgdRHzLf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDExOTAyMDAzOVoXDTI1MDQxOTAxMDAzOVowLzEtMCsGA1UEAxMk YzJlYzNiMDEtMDM4Mi00NjMyLWI0MGQtMTNhNjQ5ZjZkZmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYBSRe4+FmWuMesQx5HB961zJq9juXIzCNQy QjdjdmaQOu3TCEbRke3Mw64hLwBw2sqDwztsg32t78qKsWMTjIjiRFWkr/eTCxhe pSou1HL7XrdKpT8+7APDNSlxySgRLsngAda8YYKvz2QCV4uDXXTwPhjrgMWd+VYS ohf3dICtuQU7j0W0K7l5FTFfkbAc0KIxf/pOwVXXYosaYMZyhGiwVO7eJGcnGM7P Ok6Eo+VvXSRZT8Mbav9s0isgQb/Z1Ps06wwsTbdR4jpLmk+OjewZjBNCHKPUFp22 3ePXVmZ4HcU1/+mNTJSY1GkE4ooGF9RftG9VOVO/EhfTlCLAZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvRT9eG9EmSHDkG2ZWDThV2nMk2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvMzNkNjZmNzctMjNlOS0z ZmJhLWEzNzItZjBhMmQ3NGEzOTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQOPUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwuZdd7awhrvO+eXpGcp/eqZVqEd4CJUx4r6EtdbYH9Pxsxj17E/9w1 Ggr61AqLEgYGTNyZMXgoqKoclSy6CDOh13I0QhCmzvzJn4XdMpVhG6/RbWT4hP4I b9Hmhf5+gGsMnLXwPIJYbwgRqW/3SAKJLf8bS30nN8KpL8nYX9SdsMxDOxuYvurZ Gla3QvesVODO0Ge+eaqCHzt0cTCrLA2jbydzUtRVybYpgTymbgybNFBmrScEJpoa KvcWakj5obsBwoDFxTyKiE+Nj1H4q59HnvzM5Yn7P64zSqDlplfnjV+FiSMeBD66 i4P39Rp584/afPO2+2T/h2RFtaHVyvs= -----END CERTIFICATE-----Generated at Fri Mar 14 10:23:03 2025 by rpki-client