$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/9494c1ec-acab-3c5c-afa0-1dd39fc3b193.roa File: 9494c1ec-acab-3c5c-afa0-1dd39fc3b193.roa (raw, json) Hash identifier: 2SuODSImH3fdod/HNTXVlAvbOJe/9B4sEOo9Mrq31lE= Subject key identifier: 68:09:C3:A5:3E:6A:BD:7A:02:1C:CB:C5:DE:03:CD:4E:55:47:44:A9 Certificate issuer: /CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Certificate serial: 010D0C9F432858492E13BE04F893759008B08D80 Authority key identifier: 88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/9494c1ec-acab-3c5c-afa0-1dd39fc3b193.roa Signing time: Fri 14 Mar 2025 01:00:39 +0000 ROA not before: Fri 14 Mar 2025 01:00:39 +0000 ROA not after: Thu 12 Jun 2025 01:00:39 +0000 asID: 13880 IP address blocks: 64.57.32.0/20 maxlen: 24 216.230.48.0/20 maxlen: 24 2620:110:7000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2e:13:be:04:f8:93:75:90:08:b0:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Validity Not Before: Mar 14 01:00:39 2025 GMT Not After : Jun 12 01:00:39 2025 GMT Subject: CN=f6bc3c68-0fc2-4f0b-bac2-6dfbe37dd8a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d4:53:5e:39:9b:0f:54:ac:46:af:e2:90:5c: 08:eb:77:ef:49:07:ca:44:94:23:0a:fa:af:7e:31: 05:3b:18:64:9f:36:5f:4a:9c:3a:b6:d1:87:7a:b7: 3d:f9:fe:bd:d1:a6:c9:1f:d6:ee:34:27:31:3b:0a: 31:e6:d5:a7:b1:3a:d7:64:f8:76:a7:13:27:21:da: fc:73:1f:8f:58:c9:54:10:fc:41:81:0d:af:09:8b: 6a:c9:d4:a4:ee:74:0d:1b:da:21:e9:8b:f0:84:c7: 27:34:a8:aa:89:4b:3b:95:f8:ab:1e:e4:4a:69:5c: a3:d8:c5:c8:f7:d0:1c:22:5f:c5:04:a4:59:7f:25: bb:78:bc:2e:71:7a:fa:38:e8:11:bb:0b:67:ed:c2: 0e:85:8a:64:58:fe:ef:62:bf:74:45:8f:c2:c1:92: 99:e0:52:b7:e5:5f:14:d7:7a:95:ff:95:8a:a5:87: 31:69:61:f1:29:8a:1d:c9:fa:86:28:be:ac:69:58: 56:ed:a3:f5:ae:7d:e3:f4:4f:b5:ad:1b:7b:4f:bc: 31:fa:20:3a:d8:7f:3b:d3:de:db:25:38:55:13:02: bf:b2:c6:ca:90:97:9e:c2:14:93:55:78:ba:1c:95: e5:d8:20:e5:64:14:e1:4e:a2:88:66:8b:c6:ab:21: 56:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:09:C3:A5:3E:6A:BD:7A:02:1C:CB:C5:DE:03:CD:4E:55:47:44:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/9494c1ec-acab-3c5c-afa0-1dd39fc3b193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl X509v3 Authority Key Identifier: keyid:88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer sbgp-ipAddrBlock: critical IPv4: 64.57.32.0/20 216.230.48.0/20 IPv6: 2620:110:7000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:c6:89:6f:31:81:12:4e:44:60:03:9b:66:1c:a3:fb:d7:1c: 30:af:39:7d:9d:01:4d:25:4d:0b:da:a0:35:41:5e:68:2f:11: e1:61:47:77:f1:a2:bf:b3:73:e5:cd:be:d3:3b:c8:a0:a4:c4: 74:0e:85:bf:c1:c0:d5:70:1b:d1:66:b8:89:bd:50:d2:86:85: dc:dc:a7:72:30:28:35:52:ad:f0:2e:9b:3e:7a:36:a8:1b:d2: 7b:95:12:7a:36:22:92:04:9d:69:34:a1:3d:eb:8a:66:c8:66: 82:9e:e4:80:bd:9d:55:45:27:13:b8:04:3d:1a:79:ec:65:a7: f1:d5:a2:d2:1b:f2:8e:94:88:0d:63:97:6c:42:23:13:7d:83: 52:86:f2:e5:76:93:5f:b1:be:ca:dd:d0:d1:e7:97:ab:09:a3: ae:e1:9e:e8:e3:66:ab:22:9e:0c:9c:87:81:9c:5c:73:87:3c: 35:3d:48:42:15:b7:68:44:fd:95:ef:3e:7e:a3:4d:a2:12:6c: 75:29:4d:7d:f0:4e:7d:16:b5:1f:12:86:2f:7f:43:d2:8e:17: 63:38:c5:77:a6:ec:9c:7c:79:a5:a9:5a:6f:dd:a3:49:2f:c4: f1:b3:fb:b5:5d:3e:c0:93:c1:4e:7e:2a:49:a9:36:70:92:34: 67:21:91:b5 -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEkuE74E+JN1kAiwjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQzZjY2MjAtMDU3Ni00NmQ4LWIwNWQtM2UyY2RkMDZh ZmEzMB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk ZjZiYzNjNjgtMGZjMi00ZjBiLWJhYzItNmRmYmUzN2RkOGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtRTXjmbD1SsRq/ikFwI63fvSQfKRJQjCvqv fjEFOxhknzZfSpw6ttGHerc9+f690abJH9buNCcxOwox5tWnsTrXZPh2pxMnIdr8 cx+PWMlUEPxBgQ2vCYtqydSk7nQNG9oh6YvwhMcnNKiqiUs7lfirHuRKaVyj2MXI 99AcIl/FBKRZfyW7eLwucXr6OOgRuwtn7cIOhYpkWP7vYr90RY/CwZKZ4FK35V8U 13qV/5WKpYcxaWHxKYodyfqGKL6saVhW7aP1rn3j9E+1rRt7T7wx+iA62H87097b JThVEwK/ssbKkJeewhSTVXi6HJXl2CDlZBThTqKIZovGqyFWjwIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFGgJw6U+ar16AhzLxd4DzU5VR0SpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZDNm NjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJjZGQwNmFmYTMvOTQ5NGMxZWMtYWNhYi0z YzVjLWFmYTAtMWRkMzlmYzNiMTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWQzZjY2MjAtMDU3Ni00NmQ4LWIw NWQtM2UyY2RkMDZhZmEzL2FkM2Y2NjIwLTA1NzYtNDZkOC1iMDVkLTNlMmNkZDA2 YWZhMy5jcmwwHwYDVR0jBBgwFoAUiN/bmDDB0UzVtzGE7Kf8YPRf8tMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZDNmNjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJj ZGQwNmFmYTMuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQEQDkgAwQE 2OYwMA8EAgACMAkDBwQmIAEQcAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAcaJbzGBEk5EYAObZhyj+9cc MK85fZ0BTSVNC9qgNUFeaC8R4WFHd/Giv7Nz5c2+0zvIoKTEdA6Fv8HA1XAb0Wa4 ib1Q0oaF3NyncjAoNVKt8C6bPno2qBvSe5USejYikgSdaTShPeuKZshmgp7kgL2d VUUnE7gEPRp57GWn8dWi0hvyjpSIDWOXbEIjE32DUoby5XaTX7G+yt3Q0eeXqwmj ruGe6ONmqyKeDJyHgZxcc4c8NT1IQhW3aET9le8+fqNNohJsdSlNffBOfRa1HxKG L39D0o4XYzjFd6bsnHx5palab92jSS/E8bP7tV0+wJPBTn4qSak2cJI0ZyGRtQ== -----END CERTIFICATE-----Generated at Fri Apr 11 22:51:39 2025 by rpki-client