$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/ad644e07-d08c-3cd4-9561-0b393653ed46.roa File: ad644e07-d08c-3cd4-9561-0b393653ed46.roa (raw, json) Hash identifier: He4NhjXUYr7HrSjOgoV7p0a1xIfzKp3L8kybQBpyGaY= Subject key identifier: A0:48:B3:A9:70:67:AE:40:45:39:58:06:39:0D:26:61:B7:22:D4:13 Certificate issuer: /CN=f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f Certificate serial: 010D0C9F432858491246A835CB5E67852CDFC600 Authority key identifier: A0:0B:C0:59:A2:CE:5C:2B:20:7A:E2:90:8B:CA:DA:4E:04:82:F5:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/ad644e07-d08c-3cd4-9561-0b393653ed46.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 60171 IP address blocks: 139.64.228.0/22 maxlen: 24 2605:ba40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:a8:35:cb:5e:67:85:2c:df:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=930c426d-8634-48bf-9dd4-e1d6f113b1f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:88:bb:ef:6a:85:f4:aa:46:46:b1:50:ba:ac: c8:5a:a5:1f:73:b2:94:a8:dc:e3:0b:b6:d0:a9:90: be:e3:9e:82:aa:2c:8d:49:1a:c2:6f:bc:ca:cc:83: 33:00:af:51:46:0f:e3:f2:c2:d6:c4:35:9b:0c:fd: e8:e6:41:ff:e1:32:ce:5c:80:dd:cc:42:9e:9b:30: a7:2e:be:42:6b:b6:f6:84:47:15:72:3a:d3:d5:76: d7:8e:80:7a:4c:8e:ba:11:0e:39:73:92:f7:14:b4: 17:1c:49:e4:e6:ad:2f:01:dc:a9:f3:88:58:c5:e5: 95:6e:2c:f3:20:87:1b:31:33:dd:18:ed:c7:c2:59: 0b:50:a4:33:18:f7:5f:9a:1b:23:f6:24:e8:97:5f: a9:cc:4f:da:0d:18:f1:97:df:da:a9:50:cf:91:46: 70:8a:ba:51:8a:30:73:ae:2b:e7:88:5a:e0:b6:12: 78:4f:09:d9:6a:8c:10:40:a5:a4:70:75:95:1c:1a: df:54:93:b2:f8:9a:76:35:f7:ca:74:17:ad:91:75: e6:7e:01:38:62:27:26:26:33:ae:74:8b:2e:ae:66: f0:6c:5e:e0:28:40:cc:30:a8:91:1f:c9:16:12:25: c8:cc:39:9e:af:2e:ac:7f:a0:b9:53:90:18:e0:39: 51:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:48:B3:A9:70:67:AE:40:45:39:58:06:39:0D:26:61:B7:22:D4:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/ad644e07-d08c-3cd4-9561-0b393653ed46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.crl X509v3 Authority Key Identifier: keyid:A0:0B:C0:59:A2:CE:5C:2B:20:7A:E2:90:8B:CA:DA:4E:04:82:F5:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer sbgp-ipAddrBlock: critical IPv4: 139.64.228.0/22 IPv6: 2605:ba40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:a4:45:9c:a2:18:c1:59:b0:25:9a:41:9c:23:af:a1:9c:03: 4b:42:93:dd:5e:92:d6:00:ba:46:c4:7c:e5:7b:c8:37:60:17: d3:72:1a:09:23:4d:db:c2:cc:95:48:0d:f4:7c:93:c4:5f:c9: 47:d8:a7:d1:c1:3b:97:eb:3d:b1:c6:41:8b:9a:99:ce:ac:a9: 67:7a:77:22:c3:27:37:6e:11:b2:70:bf:3b:e4:e4:fd:2c:a5: ce:12:f1:59:b3:4c:12:bb:4b:4f:4a:ef:32:fd:bb:c4:c4:2e: 71:09:8a:a5:7f:19:a2:13:be:b6:28:a8:1d:2f:f5:b7:c8:2a: 5f:12:2a:0b:d1:f4:07:1d:25:15:10:18:44:76:5d:6e:f2:a6: 6d:1b:6c:e3:b5:b7:d0:3f:c1:b9:47:3e:2f:51:1a:28:d7:41: 4e:a3:c8:c9:7d:71:9a:33:b2:b7:37:ed:65:21:96:70:bf:ce: 6e:07:da:48:92:a8:13:5f:92:04:a3:d9:58:ea:c3:6b:60:96: d4:95:df:d0:87:ed:52:d6:7b:3e:2d:24:27:ab:55:95:22:fe: a4:a6:76:d0:29:c5:b1:84:56:a1:9b:07:9d:7e:74:de:22:9a: de:01:f5:7f:7a:d4:29:84:4f:89:1f:fd:03:1e:28:82:4e:88: d2:8e:bc:85 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEkSRqg1y15nhSzfxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiZjZhYTItN2I3Zi00NmI0LWJkZjItZGQ0ZDA3NWUy NjZmMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk OTMwYzQyNmQtODYzNC00OGJmLTlkZDQtZTFkNmYxMTNiMWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYi772qF9KpGRrFQuqzIWqUfc7KUqNzjC7bQ qZC+456CqiyNSRrCb7zKzIMzAK9RRg/j8sLWxDWbDP3o5kH/4TLOXIDdzEKemzCn Lr5Ca7b2hEcVcjrT1XbXjoB6TI66EQ45c5L3FLQXHEnk5q0vAdyp84hYxeWVbizz IIcbMTPdGO3HwlkLUKQzGPdfmhsj9iTol1+pzE/aDRjxl9/aqVDPkUZwirpRijBz rivniFrgthJ4TwnZaowQQKWkcHWVHBrfVJOy+Jp2NffKdBetkXXmfgE4YicmJjOu dIsurmbwbF7gKEDMMKiRH8kWEiXIzDmery6sf6C5U5AY4DlRawIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFKBIs6lwZ65ARTlYBjkNJmG3ItQTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jm NmFhMi03YjdmLTQ2YjQtYmRmMi1kZDRkMDc1ZTI2NmYvYWQ2NDRlMDctZDA4Yy0z Y2Q0LTk1NjEtMGIzOTM2NTNlZDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiZjZhYTItN2I3Zi00NmI0LWJk ZjItZGQ0ZDA3NWUyNjZmL2YzYmY2YWEyLTdiN2YtNDZiNC1iZGYyLWRkNGQwNzVl MjY2Zi5jcmwwHwYDVR0jBBgwFoAUoAvAWaLOXCsgeuKQi8raTgSC9UkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JmNmFhMi03YjdmLTQ2YjQtYmRmMi1kZDRk MDc1ZTI2NmYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCi0DkMA0E AgACMAcDBQAmBbpAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAEakRZyiGMFZsCWaQZwjr6GcA0tCk91ektYA ukbEfOV7yDdgF9NyGgkjTdvCzJVIDfR8k8RfyUfYp9HBO5frPbHGQYuamc6sqWd6 dyLDJzduEbJwvzvk5P0spc4S8VmzTBK7S09K7zL9u8TELnEJiqV/GaITvrYoqB0v 9bfIKl8SKgvR9AcdJRUQGER2XW7ypm0bbOO1t9A/wblHPi9RGijXQU6jyMl9cZoz src37WUhlnC/zm4H2kiSqBNfkgSj2Vjqw2tgltSV39CH7VLWez4tJCerVZUi/qSm dtApxbGEVqGbB51+dN4imt4B9X961CmET4kf/QMeKIJOiNKOvIU= -----END CERTIFICATE-----Generated at Sat Apr 12 04:55:01 2025 by rpki-client