$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/04e3c588-4dd6-35ca-bf5f-dd5e7e08801f.roa File: 04e3c588-4dd6-35ca-bf5f-dd5e7e08801f.roa (raw, json) Hash identifier: u9IjSYqRKWFCZ1hPxxqoonySyCwKZl2se0fLq1/HN6c= Subject key identifier: F6:9A:0B:93:95:7B:82:EA:E2:31:4B:CD:5A:BC:85:1C:C4:C6:51:7B Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F43285848388547CA89CE8EAB910D9880 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/04e3c588-4dd6-35ca-bf5f-dd5e7e08801f.roa Signing time: Mon 16 Dec 2024 02:00:39 +0000 ROA not before: Mon 16 Dec 2024 02:00:39 +0000 ROA not after: Sun 16 Mar 2025 01:00:39 +0000 asID: 7029 IP address blocks: 64.20.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:38:85:47:ca:89:ce:8e:ab:91:0d:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Dec 16 02:00:39 2024 GMT Not After : Mar 16 01:00:39 2025 GMT Subject: CN=f158dd36-1c5c-4add-ad09-78fc57320cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:32:29:be:3d:94:e8:cd:80:c8:88:a0:a1:d3: e6:a5:fa:d8:9d:26:cb:a5:50:2c:6a:3c:01:0a:b8: 12:1c:73:52:ab:ac:0c:b8:2f:07:fa:3e:b0:61:18: 7f:4b:a7:9c:90:4b:db:dc:9a:ec:52:7a:fb:2d:0b: 4f:f2:65:ec:a0:58:36:de:ca:61:91:5c:9f:ea:b8: a1:e1:1e:55:19:6d:56:3b:f2:4c:50:5b:47:87:c0: 38:a6:9c:0f:09:02:1c:5b:10:3e:bc:7d:2d:8e:57: f6:eb:ba:83:fa:7d:94:f0:91:0d:88:46:fb:57:d9: cc:8f:de:3f:43:01:5e:40:eb:d3:a2:4d:b6:c5:6b: 0f:b3:62:6c:49:98:45:36:e3:df:d6:0c:dc:1a:93: ae:0a:ba:88:7c:85:61:ff:0e:5f:4e:d8:ab:c6:9c: 7f:d6:90:74:6e:7e:7c:32:34:02:66:fb:c9:f2:f9: 93:f6:2a:c4:83:33:95:b5:9a:22:2e:67:5e:7a:7d: bf:0e:30:e0:02:8a:4b:1b:29:04:b4:34:1d:e9:09: 61:d9:c1:49:2a:69:f2:3b:d7:78:2c:7f:3e:bd:7d: 71:9d:2d:89:3a:73:dd:0c:9c:a8:5d:bb:2d:78:c3: 6b:bc:12:87:69:82:be:1f:6f:61:f8:af:4f:76:c2: f3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9A:0B:93:95:7B:82:EA:E2:31:4B:CD:5A:BC:85:1C:C4:C6:51:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/04e3c588-4dd6-35ca-bf5f-dd5e7e08801f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 64.20.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:37:ca:1b:88:4a:00:78:b2:a1:c5:35:75:5b:12:c4:27:36: b0:45:5b:eb:f6:90:9a:0b:05:16:18:67:c4:23:f4:c8:4a:0d: cc:4f:0c:46:db:f6:2b:f6:1d:e0:21:01:dc:38:c1:58:8c:ec: f0:74:83:c0:eb:50:ef:55:b4:17:dc:ca:0a:a7:2f:04:a5:3a: c6:ad:2e:1f:d9:ff:63:d9:86:1c:91:ea:cd:1c:72:1e:ed:91: 59:67:58:b5:2b:b5:9c:15:61:76:80:9b:a6:8d:e0:86:9e:bf: c7:4d:03:fd:40:09:43:1e:36:68:69:da:97:2a:88:7b:63:f8: 10:ab:8e:64:09:10:0b:dc:c6:c1:f6:f3:53:5c:2c:65:7c:5c: 34:1d:6f:fe:47:79:4c:dd:42:a5:68:c8:de:1f:df:f9:58:5e: e4:23:d7:32:f5:90:1f:97:3d:ec:d3:4e:22:2c:e2:38:e2:4b: 3c:c2:5d:99:cc:9b:b2:47:9a:85:ce:af:a0:9e:a4:8d:ac:83: 15:16:33:f6:93:6f:8a:bf:99:85:8e:62:10:01:cf:92:02:46: 77:55:7a:3a:b6:2f:93:00:85:ae:b4:34:53:12:ad:ec:57:bf: b2:8f:c8:21:2e:87:5e:f7:cb:a6:05:37:43:ea:c9:84:49:17: 62:ec:98:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg4hUfKic6Oq5ENmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk ZjE1OGRkMzYtMWM1Yy00YWRkLWFkMDktNzhmYzU3MzIwY2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojIpvj2U6M2AyIigodPmpfrYnSbLpVAsajwB CrgSHHNSq6wMuC8H+j6wYRh/S6eckEvb3JrsUnr7LQtP8mXsoFg23sphkVyf6rih 4R5VGW1WO/JMUFtHh8A4ppwPCQIcWxA+vH0tjlf267qD+n2U8JENiEb7V9nMj94/ QwFeQOvTok22xWsPs2JsSZhFNuPf1gzcGpOuCrqIfIVh/w5fTtirxpx/1pB0bn58 MjQCZvvJ8vmT9irEgzOVtZoiLmdeen2/DjDgAopLGykEtDQd6Qlh2cFJKmnyO9d4 LH8+vX1xnS2JOnPdDJyoXbsteMNrvBKHaYK+H29h+K9PdsLzBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaaC5OVe4Lq4jFLzVq8hRzExlF7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvMDRlM2M1ODgtNGRkNi0z NWNhLWJmNWYtZGQ1ZTdlMDg4MDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBTSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABo3yhuISgB4sqHFNXVbEsQnNrBFW+v2kJoLBRYYZ8Qj9MhKDcxPDEbb 9iv2HeAhAdw4wViM7PB0g8DrUO9VtBfcygqnLwSlOsatLh/Z/2PZhhyR6s0cch7t kVlnWLUrtZwVYXaAm6aN4Iaev8dNA/1ACUMeNmhp2pcqiHtj+BCrjmQJEAvcxsH2 81NcLGV8XDQdb/5HeUzdQqVoyN4f3/lYXuQj1zL1kB+XPezTTiIs4jjiSzzCXZnM m7JHmoXOr6CepI2sgxUWM/aTb4q/mYWOYhABz5ICRndVejq2L5MAha60NFMSrexX v7KPyCEuh173y6YFN0PqyYRJF2LsmI0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:14 2025 by rpki-client