$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a8d50708-183d-32fa-8e34-b0e93ebefc17.roa File: a8d50708-183d-32fa-8e34-b0e93ebefc17.roa (raw, json) Hash identifier: R3D9RAw8qpnP+l8RkXVB5LgMDi2qGEjvs80t0wanKuY= Subject key identifier: FA:9C:6A:75:4F:06:DA:DA:21:B8:28:97:51:B2:DB:5E:9A:52:AE:70 Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F4328584908817402281671EFA38BA100 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a8d50708-183d-32fa-8e34-b0e93ebefc17.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 394111 IP address blocks: 64.147.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:74:02:28:16:71:ef:a3:8b:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=34df32cd-4a20-47aa-82f5-0c98193e08cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:97:88:e4:1f:36:9e:f4:de:59:44:64:a8:12: da:e7:c9:39:0b:08:e4:e0:17:68:77:3f:c3:67:42: ab:6d:25:a9:b2:71:a2:92:da:ff:b5:4e:8b:a1:2a: 53:71:18:74:64:df:f9:18:63:73:bf:b2:a8:97:87: 4a:e2:41:4c:f9:f1:29:fd:fe:cf:f7:d7:70:c9:81: 36:a6:cd:e3:e0:5a:cb:66:16:33:c9:c9:dd:cb:63: 59:30:26:47:db:cd:b4:9a:65:16:a9:9f:53:1e:05: 77:04:50:1c:77:69:a2:90:7f:21:23:c3:67:57:80: 30:47:35:1d:a2:89:77:89:b8:12:09:2a:b6:b7:d5: bb:5e:fe:14:d4:ba:f0:9e:05:25:da:85:5f:58:72: 5b:a1:a1:e2:80:6c:2d:a9:a0:27:d5:7a:d7:07:98: 4e:e4:0b:bf:1f:26:0d:32:d3:a6:51:12:66:a9:04: 70:fe:5b:7e:5a:e3:de:01:2e:25:23:8a:5c:bc:b6: 50:4b:7b:fc:b6:db:57:14:30:f2:e9:d7:42:3a:54: fb:c4:07:be:f0:31:57:cb:dd:a9:36:07:aa:dd:19: 1e:dc:ab:a6:6a:a8:b0:b8:8c:db:f7:60:15:79:44: 22:87:b7:76:32:de:e7:7f:d2:0e:d0:82:f3:ca:d9: 56:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9C:6A:75:4F:06:DA:DA:21:B8:28:97:51:B2:DB:5E:9A:52:AE:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a8d50708-183d-32fa-8e34-b0e93ebefc17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 64.147.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:cb:65:ce:08:56:f8:fa:fb:b1:f2:74:b3:89:4d:20:3c:2b: ce:d4:33:73:1c:36:ca:a0:36:0f:28:2e:56:54:d3:b9:d1:51: 1e:d1:70:37:34:d9:27:c0:75:1c:89:1d:f0:a9:79:54:fd:c5: 32:16:cd:32:a0:f1:3d:f3:e2:d3:f4:c9:00:6f:bf:af:4e:bc: e8:e0:fd:b7:a9:14:88:ee:b1:f6:b2:0a:65:c9:cf:cd:98:29: 19:63:0b:6b:c5:11:19:3e:21:25:71:7c:6e:79:f5:c0:27:67: e4:21:64:4e:88:6d:a4:63:64:2e:4f:ba:0d:64:00:23:6a:bc: 62:60:e5:43:46:0f:25:ab:ed:bf:7f:22:80:2d:e4:55:b6:7d: 5d:c0:e7:76:13:7f:cf:18:03:e5:22:a6:8d:e2:b7:f6:09:0e: 0f:f5:92:89:1f:f3:88:3e:26:6d:e2:fc:3c:e2:aa:80:28:77: e2:f0:a1:91:6d:72:7b:d9:8d:34:5e:bd:77:cd:25:b0:b7:72: 5b:e7:3e:a2:ec:54:37:dc:ee:cf:da:c3:1d:20:ad:eb:97:ea: 8b:0c:4a:4a:a1:22:8e:03:31:31:1f:45:3f:8c:98:68:55:e6: 74:8c:6c:cf:36:af:af:fb:d2:4e:af:0d:8a:42:25:13:72:56: 15:83:93:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgXQCKBZx76OLoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MzRkZjMyY2QtNGEyMC00N2FhLTgyZjUtMGM5ODE5M2UwOGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpeI5B82nvTeWURkqBLa58k5Cwjk4Bdodz/D Z0KrbSWpsnGiktr/tU6LoSpTcRh0ZN/5GGNzv7Kol4dK4kFM+fEp/f7P99dwyYE2 ps3j4FrLZhYzycndy2NZMCZH2820mmUWqZ9THgV3BFAcd2mikH8hI8NnV4AwRzUd ool3ibgSCSq2t9W7Xv4U1LrwngUl2oVfWHJboaHigGwtqaAn1XrXB5hO5Au/HyYN MtOmURJmqQRw/lt+WuPeAS4lI4pcvLZQS3v8tttXFDDy6ddCOlT7xAe+8DFXy92p Ngeq3Rke3KumaqiwuIzb92AVeUQih7d2Mt7nf9IO0ILzytlWtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqcanVPBtraIbgol1Gy216aUq5wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvYThkNTA3MDgtMTgzZC0z MmZhLThlMzQtYjBlOTNlYmVmYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQJPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADLZc4IVvj6+7HydLOJTSA8K87UM3McNsqgNg8oLlZU07nRUR7RcDc0 2SfAdRyJHfCpeVT9xTIWzTKg8T3z4tP0yQBvv69OvOjg/bepFIjusfayCmXJz82Y KRljC2vFERk+ISVxfG559cAnZ+QhZE6IbaRjZC5Pug1kACNqvGJg5UNGDyWr7b9/ IoAt5FW2fV3A53YTf88YA+Uipo3it/YJDg/1kokf84g+Jm3i/DziqoAod+LwoZFt cnvZjTRevXfNJbC3clvnPqLsVDfc7s/awx0greuX6osMSkqhIo4DMTEfRT+MmGhV 5nSMbM82r6/70k6vDYpCJRNyVhWDkxU= -----END CERTIFICATE-----Generated at Sat Apr 12 14:05:12 2025 by rpki-client