$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/5d50b9b0-7a1b-35b3-a063-70c3967938c8.roa File: 5d50b9b0-7a1b-35b3-a063-70c3967938c8.roa (raw, json) Hash identifier: n/ReeN7H1hsaHa1bVDjnbM8fAc9wgWAw1gvsAUftI5s= Subject key identifier: 1A:B3:A5:D5:99:01:B0:12:BF:94:0C:44:B0:02:70:DC:0A:E3:AE:8D Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F432858490451340AD1EAA7CB4C2D2F4A Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/5d50b9b0-7a1b-35b3-a063-70c3967938c8.roa Signing time: Thu 27 Feb 2025 02:00:39 +0000 ROA not before: Thu 27 Feb 2025 02:00:39 +0000 ROA not after: Wed 28 May 2025 01:00:39 +0000 asID: 834 IP address blocks: 65.87.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:04:51:34:0a:d1:ea:a7:cb:4c:2d:2f:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: Feb 27 02:00:39 2025 GMT Not After : May 28 01:00:39 2025 GMT Subject: CN=a4ca1259-9176-43bb-a958-82566bd7374f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f9:b0:e2:35:9a:ff:88:0f:18:7d:01:eb:d4: d9:d2:d9:04:76:56:60:4b:41:16:6a:32:02:3d:da: d7:f9:43:c7:e1:87:a7:4f:6b:79:e5:e4:61:32:70: c3:17:78:2b:bf:49:ef:bb:1c:20:0e:f1:60:85:9b: 93:cc:d4:23:6b:a0:9f:1a:14:50:7e:5f:d8:5d:5c: 88:18:f1:a0:87:a6:1f:14:a4:00:c1:0d:40:56:f7: 23:99:00:0c:78:ec:09:5c:43:61:56:cc:4b:35:07: fb:93:df:b4:a3:61:82:3e:35:d7:32:16:1d:a1:44: 43:05:5d:05:b1:54:0e:e5:44:a4:24:89:02:29:58: 33:e5:00:bf:2b:79:14:a2:b6:71:c6:35:ea:b3:04: 6a:fd:af:34:eb:7b:88:df:ab:c3:b7:03:63:be:b5: de:92:24:75:c4:58:7b:77:c8:96:23:71:5e:8a:a5: 2a:d2:58:05:f2:8c:1b:3d:f7:1a:b8:c8:ff:24:48: 57:45:60:b2:e4:a1:40:a6:55:55:7d:15:20:63:b7: 4a:ff:c8:81:bc:48:74:79:a5:3e:03:af:04:05:7f: 1b:be:bf:11:55:bc:60:bf:f1:e5:fa:c0:4f:e8:da: 69:1e:8c:0d:93:cc:10:d5:52:df:f0:9d:60:98:49: bd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B3:A5:D5:99:01:B0:12:BF:94:0C:44:B0:02:70:DC:0A:E3:AE:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/5d50b9b0-7a1b-35b3-a063-70c3967938c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:bf:87:aa:ac:59:4f:8f:9a:d5:30:25:ed:c4:a1:ad:5e:a5: e7:ab:45:3a:91:6d:84:ba:d0:25:fa:3f:71:72:eb:19:a7:c1: aa:fb:dc:af:6e:db:95:85:bf:8a:43:01:52:5c:06:5d:b7:1a: bb:a3:f5:9d:33:85:b7:7d:5c:21:32:fc:41:a9:d6:e9:7a:4b: da:6f:9e:a6:dc:70:6c:5a:e3:a0:d9:9e:6c:c9:b5:31:11:6e: 5f:38:62:7e:69:61:2e:49:fd:43:b3:68:4e:65:85:17:73:79: f5:be:41:54:9e:84:d8:f9:3a:aa:29:12:21:0d:6b:53:c4:2c: a7:ba:88:c8:8c:f2:98:a7:81:eb:45:a9:db:be:ee:19:29:b5: 6c:ce:9f:9a:a6:a9:aa:83:40:2b:81:9d:53:47:d5:49:ac:b7: a1:01:e6:51:3f:8a:6f:82:af:0b:d4:41:6a:a7:c1:ac:05:f6: 5d:6b:07:d4:35:c5:fa:84:f0:56:3c:f4:cd:93:ab:9c:f4:0d: 72:13:76:b3:f3:44:63:3e:35:00:25:7e:d2:de:9f:91:01:a4: 93:35:fd:38:8f:79:55:75:8d:e6:57:e0:19:7a:be:1f:9f:75: 0b:7c:c1:1f:2d:00:ac:55:ef:af:7f:64:61:39:64:3d:d4:95: 0a:12:46:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkEUTQK0eqny0wtL0owDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI1MDIyNzAyMDAzOVoXDTI1MDUyODAxMDAzOVowLzEtMCsGA1UEAxMk YTRjYTEyNTktOTE3Ni00M2JiLWE5NTgtODI1NjZiZDczNzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/mw4jWa/4gPGH0B69TZ0tkEdlZgS0EWajIC PdrX+UPH4YenT2t55eRhMnDDF3grv0nvuxwgDvFghZuTzNQja6CfGhRQfl/YXVyI GPGgh6YfFKQAwQ1AVvcjmQAMeOwJXENhVsxLNQf7k9+0o2GCPjXXMhYdoURDBV0F sVQO5USkJIkCKVgz5QC/K3kUorZxxjXqswRq/a8063uI36vDtwNjvrXekiR1xFh7 d8iWI3FeiqUq0lgF8owbPfcauMj/JEhXRWCy5KFAplVVfRUgY7dK/8iBvEh0eaU+ A68EBX8bvr8RVbxgv/Hl+sBP6NppHowNk8wQ1VLf8J1gmEm9CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqzpdWZAbASv5QMRLACcNwK466NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvNWQ1MGI5YjAtN2ExYi0z NWIzLWEwNjMtNzBjMzk2NzkzOGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQVcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABC/h6qsWU+PmtUwJe3Eoa1epeerRTqRbYS60CX6P3Fy6xmnwar73K9u 25WFv4pDAVJcBl23Gruj9Z0zhbd9XCEy/EGp1ul6S9pvnqbccGxa46DZnmzJtTER bl84Yn5pYS5J/UOzaE5lhRdzefW+QVSehNj5OqopEiENa1PELKe6iMiM8pingetF qdu+7hkptWzOn5qmqaqDQCuBnVNH1Umst6EB5lE/im+CrwvUQWqnwawF9l1rB9Q1 xfqE8FY89M2Tq5z0DXITdrPzRGM+NQAlftLen5EBpJM1/TiPeVV1jeZX4Bl6vh+f dQt8wR8tAKxV769/ZGE5ZD3UlQoSRjE= -----END CERTIFICATE-----Generated at Fri Apr 4 16:08:01 2025 by rpki-client