$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/5147afa7-d75a-3a26-a44f-2942251cefbd.roa File: 5147afa7-d75a-3a26-a44f-2942251cefbd.roa (raw, json) Hash identifier: 2HO6GkfWHVuKOuXPoXN7a7SFqbEM8NKI7GcHIkYhx1w= Subject key identifier: 7C:E5:A1:77:BC:23:EB:67:31:53:D8:47:06:4B:DC:BE:B9:BF:4D:FB Certificate issuer: /CN=1f1cee84-663d-43bc-bc24-3b0050eff749 Certificate serial: 010D0C9F43285848D64112DCE7C4336A1E5169B0 Authority key identifier: D8:F8:E0:3D:15:39:A4:54:75:EE:EB:12:37:10:EB:7B:19:BA:C6:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/5147afa7-d75a-3a26-a44f-2942251cefbd.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 13977 IP address blocks: 64.222.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/1f1cee84-663d-43bc-bc24-3b0050eff749.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/1f1cee84-663d-43bc-bc24-3b0050eff749.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:12:dc:e7:c4:33:6a:1e:51:69:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f1cee84-663d-43bc-bc24-3b0050eff749 Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=efb0d7be-30f7-4614-a55c-f25a35e24460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:61:b2:96:66:6d:16:4b:b7:df:15:39:6b:90: 13:51:1c:e3:d3:10:fc:39:31:83:de:b1:ad:a3:9d: 40:82:4f:11:d4:cc:b1:62:bd:3b:6f:bf:3e:40:51: 3e:01:2d:b8:1f:68:56:a5:14:85:6c:c8:ff:37:cc: 73:23:94:11:ed:88:39:9e:bf:f7:1d:59:f8:bb:13: ef:b5:91:48:ea:90:c2:3d:a2:f3:a5:d8:70:c2:f9: 1a:eb:f3:a8:bb:3e:a0:ff:a6:93:ef:29:61:32:ef: 38:b3:24:a6:58:a6:47:c9:fc:18:ca:51:c7:2b:35: 9d:8c:5f:f8:0d:66:14:c3:00:67:a6:02:bc:56:2d: 34:ae:12:c8:f4:3e:3a:8e:8a:04:71:8c:70:8a:44: 29:55:ee:de:9c:16:3a:03:68:ef:82:90:2c:5d:ee: 4a:5f:93:6d:bc:5f:31:f5:fa:e6:8d:d1:a1:d3:9a: bc:f9:fc:7e:5d:2e:cc:0f:78:cc:69:aa:ec:c7:98: 25:21:8b:f8:c9:a5:92:36:c7:1a:c4:21:fe:4c:59: ce:75:00:0b:ea:e1:91:94:34:0c:83:78:c5:fe:16: ba:74:ff:56:03:ec:9d:62:89:5f:ed:59:ce:a8:70: 3b:7f:92:02:0f:6c:b6:e6:98:72:fe:d4:3e:a2:f4: a8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E5:A1:77:BC:23:EB:67:31:53:D8:47:06:4B:DC:BE:B9:BF:4D:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/5147afa7-d75a-3a26-a44f-2942251cefbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/1f1cee84-663d-43bc-bc24-3b0050eff749.crl X509v3 Authority Key Identifier: keyid:D8:F8:E0:3D:15:39:A4:54:75:EE:EB:12:37:10:EB:7B:19:BA:C6:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749.cer sbgp-ipAddrBlock: critical IPv4: 64.222.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:75:90:0f:f6:83:9e:0f:10:57:1e:e0:72:0e:ae:c4:67:4f: c8:8c:f8:31:f3:3e:a9:b0:d5:80:11:0e:fc:ce:12:75:67:71: c5:a1:f1:d6:40:48:a7:7c:50:48:a3:f3:d2:d5:55:bc:30:7e: ed:5a:14:bc:3b:c9:90:6e:7b:68:df:47:7d:1d:ef:b0:e0:be: 09:a2:4a:ea:fd:72:03:c1:80:ea:35:1b:06:b8:fb:91:61:eb: d3:6f:97:f9:bb:a9:4c:c3:2e:77:35:ab:d8:fc:55:97:b4:8c: 24:0a:8a:ec:fb:c5:36:ff:ac:88:b5:6a:ff:7c:bd:db:23:62: 29:a4:f5:35:26:7d:b7:5b:02:86:d3:09:5b:54:9d:e7:d2:fe: 03:7d:6f:e7:c5:cd:e4:12:e9:e4:8c:c9:84:6d:51:58:44:13: 12:0a:02:a8:ae:6b:17:1a:66:6a:2b:9d:d9:a6:8a:4c:ee:73: cc:23:ff:52:3d:94:37:49:35:bb:ee:bd:ad:bc:c7:7f:2f:1a: 55:14:01:1c:3d:a2:30:76:e7:6f:3d:dd:2b:d5:e2:f1:ad:4a: 85:25:43:bc:b5:2a:ea:ed:c9:ef:b7:d9:ff:0b:4d:7a:b1:a9: c5:79:0c:19:a3:38:4a:bc:85:c3:ac:60:0e:00:44:34:b3:15: b3:67:a9:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQRLc58Qzah5RabAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWYxY2VlODQtNjYzZC00M2JjLWJjMjQtM2IwMDUwZWZm NzQ5MB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZWZiMGQ3YmUtMzBmNy00NjE0LWE1NWMtZjI1YTM1ZTI0NDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmGylmZtFku33xU5a5ATURzj0xD8OTGD3rGt o51Agk8R1MyxYr07b78+QFE+AS24H2hWpRSFbMj/N8xzI5QR7Yg5nr/3HVn4uxPv tZFI6pDCPaLzpdhwwvka6/Oouz6g/6aT7ylhMu84sySmWKZHyfwYylHHKzWdjF/4 DWYUwwBnpgK8Vi00rhLI9D46jooEcYxwikQpVe7enBY6A2jvgpAsXe5KX5NtvF8x 9frmjdGh05q8+fx+XS7MD3jMaarsx5glIYv4yaWSNscaxCH+TFnOdQAL6uGRlDQM g3jF/ha6dP9WA+ydYolf7VnOqHA7f5ICD2y25phy/tQ+ovSoDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzloXe8I+tnMVPYRwZL3L65v037MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZjFj ZWU4NC02NjNkLTQzYmMtYmMyNC0zYjAwNTBlZmY3NDkvNTE0N2FmYTctZDc1YS0z YTI2LWE0NGYtMjk0MjI1MWNlZmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWYxY2VlODQtNjYzZC00M2JjLWJj MjQtM2IwMDUwZWZmNzQ5LzFmMWNlZTg0LTY2M2QtNDNiYy1iYzI0LTNiMDA1MGVm Zjc0OS5jcmwwHwYDVR0jBBgwFoAU2PjgPRU5pFR17usSNxDrexm6xtowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZjFjZWU4NC02NjNkLTQzYmMtYmMyNC0zYjAw NTBlZmY3NDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQN7+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHh1kA/2g54PEFce4HIOrsRnT8iM+DHzPqmw1YARDvzOEnVnccWh8dZA SKd8UEij89LVVbwwfu1aFLw7yZBue2jfR30d77DgvgmiSur9cgPBgOo1Gwa4+5Fh 69Nvl/m7qUzDLnc1q9j8VZe0jCQKiuz7xTb/rIi1av98vdsjYimk9TUmfbdbAobT CVtUnefS/gN9b+fFzeQS6eSMyYRtUVhEExIKAqiuaxcaZmorndmmikzuc8wj/1I9 lDdJNbvuva28x38vGlUUARw9ojB252893SvV4vGtSoUlQ7y1Kurtye+32f8LTXqx qcV5DBmjOEq8hcOsYA4ARDSzFbNnqWk= -----END CERTIFICATE-----Generated at Mon Apr 7 23:39:01 2025 by rpki-client