$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa File: dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa (raw, json) Hash identifier: p+x834PmV0Fx478zkwIMcKQnWvt9rQplGNtIkU3SI/Y= Subject key identifier: D9:39:3F:30:97:C8:41:C7:D7:0A:59:F3:26:9C:C3:EB:72:4D:4C:93 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F43285848CC7B95AFF259A53A31F829B0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 11090 IP address blocks: 64.4.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:95:af:f2:59:a5:3a:31:f8:29:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=5cebe90f-127d-4ed7-97c2-f586d04516e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:54:45:e8:06:1c:40:bd:4a:3e:cc:9e:91:e7: ce:28:38:ee:3d:c2:b2:9f:58:46:8a:0a:42:3e:24: 4a:56:67:b7:a7:87:19:f0:6c:b7:87:74:93:be:33: 2f:a1:39:2c:f8:dc:43:0e:29:80:c5:be:e9:b7:3b: 47:31:a1:da:f0:81:54:0d:44:15:04:5c:4c:cb:26: 87:03:63:6f:50:9c:59:af:61:c6:ee:4b:94:91:a9: 33:53:bb:d0:c2:97:9e:e0:2b:99:54:64:fa:d6:d5: ec:6a:c1:ab:4a:7d:06:c9:82:48:2e:7a:15:8c:72: 46:da:be:ba:ba:e8:33:d0:18:3f:16:1b:a1:b0:1f: 6f:5e:36:ff:27:52:92:bd:0c:86:65:62:12:f8:b1: 47:29:da:28:9a:08:07:0d:4d:00:58:16:49:27:08: 73:77:90:4d:5f:1c:27:38:4e:ea:f3:a7:3e:7f:e3: b8:56:0b:d4:b8:84:dd:06:57:9a:a3:29:d2:a5:8b: 08:a0:f7:43:e2:e0:09:2f:5d:8a:81:08:8f:92:42: ac:0c:32:bb:bf:da:f6:c2:80:71:e9:6d:4c:f5:68: 5f:9e:47:37:5e:61:e8:46:13:e7:99:6b:7c:77:25: 16:02:83:26:ee:6b:f2:83:86:ae:e5:82:01:fc:af: f3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:39:3F:30:97:C8:41:C7:D7:0A:59:F3:26:9C:C3:EB:72:4D:4C:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:67:5e:30:7b:b6:e0:ce:2a:7a:67:aa:27:38:ee:0c:d6:46: bf:c6:82:25:07:6a:bb:18:ba:e2:9d:e9:38:75:12:d7:72:e0: 12:3b:4a:64:46:62:fa:ab:33:45:cc:5e:31:0a:cd:c7:1e:4a: 97:c0:7f:19:36:21:fe:07:30:17:e7:2b:66:66:da:23:c1:0d: d9:40:29:a5:52:85:ee:f2:33:60:71:42:f5:a2:7b:5d:d2:55: 24:8e:bf:d4:97:5a:38:48:7f:bd:4a:d6:46:8a:4a:97:24:38: 04:48:c0:c6:1a:9b:a8:9b:ff:99:74:8e:67:95:62:6e:85:2f: 1a:ba:82:31:26:9f:66:51:6e:90:e4:9c:c8:72:5c:72:b8:9f: a7:16:fe:95:ea:2b:88:91:b0:10:b8:64:cb:d3:4e:38:e0:c3: 32:1f:e5:ad:64:a2:c1:ee:4c:b9:b3:02:99:0d:38:be:1f:a9: 87:a1:f1:2c:1f:5c:47:b3:b6:2a:1c:cc:f1:a4:ea:e6:73:96: 2f:cc:66:68:fa:5f:42:9a:4f:e5:a3:9b:1d:04:4f:e6:76:0b: 2b:3b:f3:92:30:06:dd:04:7e:53:27:59:9b:25:32:23:92:50: 45:1f:5f:2e:4d:8e:25:cd:b0:84:bf:17:25:8d:2d:40:f4:fe: c3:8d:e0:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe5Wv8lmlOjH4KbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk NWNlYmU5MGYtMTI3ZC00ZWQ3LTk3YzItZjU4NmQwNDUxNmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFRF6AYcQL1KPsyekefOKDjuPcKyn1hGigpC PiRKVme3p4cZ8Gy3h3STvjMvoTks+NxDDimAxb7ptztHMaHa8IFUDUQVBFxMyyaH A2NvUJxZr2HG7kuUkakzU7vQwpee4CuZVGT61tXsasGrSn0GyYJILnoVjHJG2r66 uugz0Bg/FhuhsB9vXjb/J1KSvQyGZWIS+LFHKdoomggHDU0AWBZJJwhzd5BNXxwn OE7q86c+f+O4VgvUuITdBleaoynSpYsIoPdD4uAJL12KgQiPkkKsDDK7v9r2woBx 6W1M9Whfnkc3XmHoRhPnmWt8dyUWAoMm7mvyg4au5YIB/K/zCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNk5PzCXyEHH1wpZ8yacw+tyTUyTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZGZmYzk3ZmItNzg2ZS0z MThiLWI0ZWUtMjkzZDFhMGYxZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQATgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZnXjB7tuDOKnpnqic47gzWRr/GgiUHarsYuuKd6Th1Etdy4BI7SmRG YvqrM0XMXjEKzcceSpfAfxk2If4HMBfnK2Zm2iPBDdlAKaVShe7yM2BxQvWie13S VSSOv9SXWjhIf71K1kaKSpckOARIwMYam6ib/5l0jmeVYm6FLxq6gjEmn2ZRbpDk nMhyXHK4n6cW/pXqK4iRsBC4ZMvTTjjgwzIf5a1kosHuTLmzApkNOL4fqYeh8Swf XEeztioczPGk6uZzli/MZmj6X0KaT+Wjmx0ET+Z2Cys785IwBt0EflMnWZslMiOS UEUfXy5NjiXNsIS/FyWNLUD0/sON4DQ= -----END CERTIFICATE-----Generated at Sun Apr 6 18:59:19 2025 by rpki-client