$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/a1f25b08-c285-351d-a5ce-01201a16ceaa.roa File: a1f25b08-c285-351d-a5ce-01201a16ceaa.roa (raw, json) Hash identifier: HuIUGvemNvbR7eoMV8DS+q6MXiGJqgqFP2yUYJT7VMw= Subject key identifier: F2:40:C4:8E:E0:47:77:CF:3C:DD:C5:E5:93:C1:10:F5:84:E0:5F:0F Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F43285848FD56BDF29A108C03D79BFA00 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/a1f25b08-c285-351d-a5ce-01201a16ceaa.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 398202 IP address blocks: 23.148.80.0/24 maxlen: 24 66.118.240.0/22 maxlen: 24 69.64.116.0/22 maxlen: 24 2605:88c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:bd:f2:9a:10:8c:03:d7:9b:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=355fa281-2e01-45a5-b252-a9e32760bfaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1b:0c:7d:34:86:c6:81:76:f2:d7:fd:4c:8b: fd:6e:77:7e:8f:a5:c3:b5:4d:a4:00:1a:1a:cf:05: 35:72:bd:a4:59:65:75:2f:d3:5d:e7:9a:ff:e5:a1: 3f:5e:e7:a8:64:77:7b:58:52:35:57:49:d8:66:62: 5a:f4:f4:e7:c1:50:27:87:a6:32:8d:7e:75:a9:00: f3:57:f5:9e:d0:64:29:f3:ab:c9:cf:ec:ef:4a:dc: 61:44:32:de:6e:6a:65:7f:12:19:5b:e7:94:64:4e: 49:e9:cb:c5:81:74:28:62:45:9b:6b:19:6a:49:59: ff:44:6e:e9:69:a9:d2:40:78:26:e4:a4:a0:ff:18: a6:f3:47:a1:1f:4a:a0:5a:56:93:e7:a8:c9:79:d8: 27:e4:31:d8:a8:72:10:4f:81:af:1f:2c:50:b7:09: 87:1c:f1:d4:c2:aa:04:ae:22:76:44:39:db:ff:86: 68:29:57:cd:a3:7a:3d:58:74:86:e3:94:8e:6f:14: ca:f1:ea:ee:78:64:c6:be:0c:85:38:b8:19:97:d8: 61:4b:fb:ce:45:4c:cc:de:32:45:19:09:56:15:02: 32:16:0f:0f:27:bd:85:75:9b:17:f1:6a:e5:81:ca: 3e:94:82:ab:73:1d:db:1b:bf:cd:87:db:c3:2f:6d: bc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:40:C4:8E:E0:47:77:CF:3C:DD:C5:E5:93:C1:10:F5:84:E0:5F:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/a1f25b08-c285-351d-a5ce-01201a16ceaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 23.148.80.0/24 66.118.240.0/22 69.64.116.0/22 IPv6: 2605:88c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:d2:84:f2:14:4d:df:56:9b:09:f6:bd:f6:c3:3b:dc:f5:39: eb:4b:56:99:27:05:a7:20:2d:dd:ba:fc:27:0c:fb:07:ca:62: a8:ce:e3:0e:6d:69:2d:13:be:bf:3e:f4:3f:c2:d1:32:57:0e: 5f:27:92:30:7d:a8:f9:d5:9e:4b:5c:5f:3e:de:f7:ce:34:27: 72:5a:9b:39:af:e2:ee:0b:16:58:cf:ce:0f:1e:26:dd:3a:1e: f5:d3:35:fb:38:bc:4c:ab:b9:f7:87:36:7f:7a:b7:93:0b:82: 2b:75:18:6a:d5:61:c1:01:7d:a9:32:c5:b4:7f:e2:0c:e7:b9: 7e:56:25:30:ac:05:12:c9:07:54:d4:76:1f:53:90:09:e1:fa: 18:c2:3b:d6:1e:f4:de:c9:c2:0f:8d:0c:06:6e:43:dc:c1:40: c1:3d:e7:7c:13:d9:a4:38:ec:d6:68:dd:fe:00:81:e2:6f:5e: 31:ad:f6:5a:0e:5e:0c:7f:6c:46:c9:36:a7:12:9f:0c:f5:f2: 53:31:3e:69:17:75:95:85:2f:ce:ab:2b:ba:ee:d5:04:66:35: 89:4b:24:b8:66:08:aa:fa:df:54:8a:e7:bd:fe:38:66:2a:ce: 7f:55:11:40:13:84:8f:54:b2:cb:65:e7:f6:37:9b:58:23:e4: 4a:10:db:04 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEj9Vr3ymhCMA9eb+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk MzU1ZmEyODEtMmUwMS00NWE1LWIyNTItYTllMzI3NjBiZmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRsMfTSGxoF28tf9TIv9bnd+j6XDtU2kABoa zwU1cr2kWWV1L9Nd55r/5aE/XueoZHd7WFI1V0nYZmJa9PTnwVAnh6YyjX51qQDz V/We0GQp86vJz+zvStxhRDLebmplfxIZW+eUZE5J6cvFgXQoYkWbaxlqSVn/RG7p aanSQHgm5KSg/xim80ehH0qgWlaT56jJedgn5DHYqHIQT4GvHyxQtwmHHPHUwqoE riJ2RDnb/4ZoKVfNo3o9WHSG45SObxTK8erueGTGvgyFOLgZl9hhS/vORUzM3jJF GQlWFQIyFg8PJ72FdZsX8Wrlgco+lIKrcx3bG7/Nh9vDL228+wIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFPJAxI7gR3fPPN3F5ZPBEPWE4F8PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvYTFmMjViMDgtYzI4NS0z NTFkLWE1Y2UtMDEyMDFhMTZjZWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAF5RQAwQC QnbwAwQCRUB0MA0EAgACMAcDBQAmBYjAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJnShPIUTd9Wmwn2vfbD O9z1OetLVpknBacgLd26/CcM+wfKYqjO4w5taS0Tvr8+9D/C0TJXDl8nkjB9qPnV nktcXz7e9840J3Jamzmv4u4LFljPzg8eJt06HvXTNfs4vEyrufeHNn96t5MLgit1 GGrVYcEBfakyxbR/4gznuX5WJTCsBRLJB1TUdh9TkAnh+hjCO9Ye9N7Jwg+NDAZu Q9zBQME953wT2aQ47NZo3f4AgeJvXjGt9loOXgx/bEbJNqcSnwz18lMxPmkXdZWF L86rK7ru1QRmNYlLJLhmCKr631SK573+OGYqzn9VEUAThI9Usstl5/Y3m1gj5EoQ 2wQ= -----END CERTIFICATE-----Generated at Fri Apr 11 21:46:30 2025 by rpki-client