$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/c10be178-41da-38c0-aa71-3d02d08e892d.roa File: c10be178-41da-38c0-aa71-3d02d08e892d.roa (raw, json) Hash identifier: JO+nU950uBkIT+nUc86Whzh9/u0c1jmNMvRktkYVGds= Subject key identifier: 05:3A:43:C0:AA:90:49:F3:F7:42:F8:E3:17:13:C2:31:6C:DF:0A:FA Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F43285849088173CD96DFCC4E211E1880 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/c10be178-41da-38c0-aa71-3d02d08e892d.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 21657 IP address blocks: 64.147.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:73:cd:96:df:cc:4e:21:1e:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=1f486da5-70ae-4fd9-ab31-d8205f1d82d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3d:3f:6d:66:9d:02:90:28:01:b2:23:31:21: 03:ea:80:97:bd:51:fd:06:83:fd:11:49:79:cf:d4: c6:51:43:4c:92:2f:bc:39:78:0c:94:06:d5:6e:b4: 11:5d:1f:f6:f7:0b:16:69:58:a7:0c:75:dc:e8:4e: df:de:28:2c:da:b8:13:8b:91:dc:db:d1:e7:e0:b4: bc:a9:00:84:07:05:17:91:15:31:77:a1:45:92:16: 85:0e:28:e9:c2:40:4e:a3:0d:7b:a3:1f:02:85:d6: 9c:ab:95:cf:30:f1:f6:01:90:78:c7:c5:4e:1a:d1: 77:62:b0:b2:1e:43:31:c3:a2:38:dd:50:f2:6c:5a: ba:93:1e:16:f6:6c:74:cf:5e:10:c6:c8:53:d5:90: 15:86:9c:bf:a6:e1:26:2a:27:c4:6a:15:e8:0d:a1: 5f:32:e9:ce:22:f4:29:92:f1:77:e4:0f:6b:2e:50: 10:b4:12:69:fd:ff:33:0f:82:d8:08:a3:62:db:01: ca:d4:ab:69:13:da:b8:fd:92:75:31:05:83:94:41: 59:5b:8e:58:f9:98:60:a8:fb:fd:b2:47:c9:12:46: ea:bf:c4:4a:87:cf:a0:4e:4c:e8:be:09:d4:c3:fe: 9d:36:1e:e5:e9:e9:03:b3:30:32:80:7f:b8:3e:af: ff:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3A:43:C0:AA:90:49:F3:F7:42:F8:E3:17:13:C2:31:6C:DF:0A:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/c10be178-41da-38c0-aa71-3d02d08e892d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 64.147.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:45:be:9a:10:5a:db:fb:2b:4e:ef:24:3c:87:d1:71:56:53: c9:15:11:7a:a9:d7:b1:aa:e6:19:1e:14:1d:e6:d5:5b:79:d8: 81:b5:66:f2:36:2d:2e:85:dc:59:92:68:e9:d6:13:d4:cd:1d: 0a:d9:ce:df:f3:6a:62:12:17:5d:fc:a7:9e:c4:0b:f6:07:63: e6:e1:ae:f1:29:4b:a0:72:aa:5d:e7:f2:e3:8b:52:d4:77:99: bb:88:ba:9f:91:0d:79:7c:db:5c:b9:3e:50:94:08:58:33:fa: 6d:7d:91:c8:d8:dd:74:a0:ab:c4:35:a3:75:30:33:d2:31:d8: 09:43:92:bd:5d:a9:e1:10:4e:db:83:79:58:3d:a7:0f:61:00: a6:4a:fd:ed:02:b2:ea:42:fe:98:7d:d7:1f:56:7b:25:25:e2: 3a:b0:37:b0:92:c0:04:d9:61:aa:9e:3d:6a:2f:62:99:6c:56: 57:b0:b6:a6:8c:74:8b:30:09:61:4e:ca:4e:ff:16:d1:1f:83: 8b:5c:f3:fc:dc:0e:fb:8f:2b:7c:35:a2:54:9a:5f:ba:f9:d4: a6:9f:82:cc:84:60:00:75:f0:7f:3c:b1:22:37:b7:0f:93:a8: 66:c2:64:1a:4b:de:e4:76:2b:2f:6c:9a:f2:f2:5d:ac:ee:52: 9c:0b:6b:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgXPNlt/MTiEeGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MWY0ODZkYTUtNzBhZS00ZmQ5LWFiMzEtZDgyMDVmMWQ4MmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD0/bWadApAoAbIjMSED6oCXvVH9BoP9EUl5 z9TGUUNMki+8OXgMlAbVbrQRXR/29wsWaVinDHXc6E7f3igs2rgTi5Hc29Hn4LS8 qQCEBwUXkRUxd6FFkhaFDijpwkBOow17ox8Chdacq5XPMPH2AZB4x8VOGtF3YrCy HkMxw6I43VDybFq6kx4W9mx0z14QxshT1ZAVhpy/puEmKifEahXoDaFfMunOIvQp kvF35A9rLlAQtBJp/f8zD4LYCKNi2wHK1KtpE9q4/ZJ1MQWDlEFZW45Y+ZhgqPv9 skfJEkbqv8RKh8+gTkzovgnUw/6dNh7l6ekDszAygH+4Pq//JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAU6Q8CqkEnz90L44xcTwjFs3wr6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvYzEwYmUxNzgtNDFkYS0z OGMwLWFhNzEtM2QwMmQwOGU4OTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQJPlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxFvpoQWtv7K07vJDyH0XFWU8kVEXqp17Gq5hkeFB3m1Vt52IG1ZvI2 LS6F3FmSaOnWE9TNHQrZzt/zamISF138p57EC/YHY+bhrvEpS6Byql3n8uOLUtR3 mbuIup+RDXl821y5PlCUCFgz+m19kcjY3XSgq8Q1o3UwM9Ix2AlDkr1dqeEQTtuD eVg9pw9hAKZK/e0CsupC/ph91x9WeyUl4jqwN7CSwATZYaqePWovYplsVlewtqaM dIswCWFOyk7/FtEfg4tc8/zcDvuPK3w1olSaX7r51KafgsyEYAB18H88sSI3tw+T qGbCZBpL3uR2Ky9smvLyXazuUpwLa6M= -----END CERTIFICATE-----Generated at Sat Apr 12 13:57:01 2025 by rpki-client