$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/cb7308f9-7051-33bc-ad9f-9ff79b88b811.roa File: cb7308f9-7051-33bc-ad9f-9ff79b88b811.roa (raw, json) Hash identifier: vPCm7rPAL/5yvHUqJGxcr9tZPOU+DOAu1NX5krRxHdo= Subject key identifier: A1:B4:8A:80:97:83:60:90:B3:92:2A:A8:18:A2:6D:06:95:B4:54:BD Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F43285848CC7B94EB34D9E8214D5C8E80 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/cb7308f9-7051-33bc-ad9f-9ff79b88b811.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 11090 IP address blocks: 64.4.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:94:eb:34:d9:e8:21:4d:5c:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=2bb56035-6d7c-46ff-acc7-4280b0338479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b0:6f:48:2d:10:72:05:c8:ce:a3:fb:8e:b8: 93:ce:7f:32:0c:ad:1b:5a:d4:42:3f:f3:d3:0c:86: 59:6c:b9:a3:6a:49:be:07:43:ac:1c:7f:91:c2:40: b6:ed:62:71:58:29:99:67:70:5a:6f:d5:07:96:3a: 24:17:88:e0:aa:8d:ed:dd:1e:ec:9e:d6:a6:05:b2: 8d:f5:cf:e4:4f:9e:87:6f:a5:81:72:26:0d:6d:87: 4b:cc:91:20:8e:4d:7f:2b:5d:6f:24:21:6c:6f:6d: ed:1b:f7:84:50:0a:01:5c:fd:ca:7b:2f:ea:8c:63: cf:9f:92:17:05:b5:6c:d9:c2:98:e0:ea:71:88:11: 2d:63:ae:3b:cc:3a:77:8c:c7:6e:ad:76:05:80:d0: 35:1c:d1:fe:83:78:62:17:ad:5e:3c:3e:06:56:66: f6:32:e2:b5:03:31:7a:49:a7:d4:79:0c:cc:5b:d3: 5f:1b:e0:c9:7f:f4:88:c8:69:3f:c9:ab:bc:95:d6: 81:a3:f8:95:6c:c8:03:77:a2:df:7a:01:e0:d8:45: be:65:de:44:75:12:5e:c8:d0:f3:84:31:fc:ec:91: 6b:45:f9:5d:37:34:23:27:70:7f:b4:40:a1:ae:a0: 6f:d2:6c:72:63:97:81:43:21:78:34:56:31:57:5c: 29:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B4:8A:80:97:83:60:90:B3:92:2A:A8:18:A2:6D:06:95:B4:54:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/cb7308f9-7051-33bc-ad9f-9ff79b88b811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:1e:06:ec:9d:5a:32:a3:7e:72:59:6b:b1:ae:63:8f:b3:6c: 3e:6a:8d:fe:2b:8c:f3:00:ac:51:ff:d8:14:f1:26:7f:f9:4b: 88:1e:5c:e6:ba:40:90:0f:7e:99:ab:c6:12:88:91:6e:c5:ba: 3c:11:91:34:2d:72:58:57:42:e2:cf:7f:3d:a3:54:2f:26:58: 76:83:bb:07:fb:48:bd:c9:a6:74:e7:59:ac:f4:bb:06:49:f4: 32:41:8a:e5:d4:41:2f:69:bc:f6:23:20:f6:19:da:cf:e0:bf: 5c:ff:fa:6b:27:3b:73:0a:96:71:93:4d:5d:40:72:f2:e9:21: 7d:84:38:f7:74:62:8c:59:f8:a0:2e:5d:b5:a7:80:32:ea:63: ff:e0:ca:f0:f1:a6:cb:6e:e7:93:db:55:c6:47:2f:1c:b9:7e: b1:dd:40:60:8f:ed:cd:f5:a0:8d:85:a2:24:5e:86:15:9e:06: 2a:23:64:bb:21:ac:1e:40:3e:74:cb:d5:9d:12:d7:6e:db:d4: 6e:30:42:17:a8:64:fe:52:18:42:4f:5b:e0:3f:be:ba:34:8a: ac:44:42:57:10:a0:bf:8e:03:6f:2a:d5:e4:2b:bf:56:45:27: 09:e3:ed:39:09:03:af:e8:46:de:f6:d5:88:68:99:fe:dc:c5: 58:10:7b:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe5TrNNnoIU1cjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk MmJiNTYwMzUtNmQ3Yy00NmZmLWFjYzctNDI4MGIwMzM4NDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7BvSC0QcgXIzqP7jriTzn8yDK0bWtRCP/PT DIZZbLmjakm+B0OsHH+RwkC27WJxWCmZZ3Bab9UHljokF4jgqo3t3R7sntamBbKN 9c/kT56Hb6WBciYNbYdLzJEgjk1/K11vJCFsb23tG/eEUAoBXP3Key/qjGPPn5IX BbVs2cKY4OpxiBEtY647zDp3jMdurXYFgNA1HNH+g3hiF61ePD4GVmb2MuK1AzF6 SafUeQzMW9NfG+DJf/SIyGk/yau8ldaBo/iVbMgDd6LfegHg2EW+Zd5EdRJeyNDz hDH87JFrRfldNzQjJ3B/tEChrqBv0mxyY5eBQyF4NFYxV1wpxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKG0ioCXg2CQs5IqqBiibQaVtFS9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvY2I3MzA4ZjktNzA1MS0z M2JjLWFkOWYtOWZmNzliODhiODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQATsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL0eBuydWjKjfnJZa7GuY4+zbD5qjf4rjPMArFH/2BTxJn/5S4geXOa6 QJAPfpmrxhKIkW7FujwRkTQtclhXQuLPfz2jVC8mWHaDuwf7SL3JpnTnWaz0uwZJ 9DJBiuXUQS9pvPYjIPYZ2s/gv1z/+msnO3MKlnGTTV1AcvLpIX2EOPd0YoxZ+KAu XbWngDLqY//gyvDxpstu55PbVcZHLxy5frHdQGCP7c31oI2FoiRehhWeBiojZLsh rB5APnTL1Z0S127b1G4wQheoZP5SGEJPW+A/vro0iqxEQlcQoL+OA28q1eQrv1ZF Jwnj7TkJA6/oRt721Yhomf7cxVgQeyA= -----END CERTIFICATE-----Generated at Sun Apr 6 04:34:51 2025 by rpki-client