$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/ed5d61e3-46f0-3c34-8be9-3ffce8ad8c0e.roa File: ed5d61e3-46f0-3c34-8be9-3ffce8ad8c0e.roa (raw, json) Hash identifier: b7ngd+X7VItG3F7hNhIkhpRgHJEfm4rh5M2KCmLzC08= Subject key identifier: 64:FA:C7:DB:14:6D:13:CD:E5:24:A5:BD:BD:15:41:8C:10:03:BC:F0 Certificate issuer: /CN=644bdcac-05fd-4dd5-adbd-9dbd2fb295c4 Certificate serial: 010D0C9F432858489E6B6E728F46EB6CDE340A80 Authority key identifier: 60:17:08:15:3B:F0:7A:BA:18:96:C4:50:13:84:C4:35:25:52:F0:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/ed5d61e3-46f0-3c34-8be9-3ffce8ad8c0e.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 40910 IP address blocks: 198.205.16.0/20 maxlen: 20 198.205.24.0/21 maxlen: 21 199.119.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:6e:72:8f:46:eb:6c:de:34:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644bdcac-05fd-4dd5-adbd-9dbd2fb295c4 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=1df85fc3-4ddf-4852-9f7f-f5bf8c954e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4c:89:52:b5:a3:ff:fe:a0:10:39:af:b0:9e: 52:c0:76:1e:5a:df:5b:ce:90:ee:b9:20:a3:d1:b0: c1:8a:a0:5e:f3:1c:4b:b3:23:8d:1d:b1:3b:a6:b9: e5:5b:bf:80:26:d8:71:b6:c4:a4:50:b8:28:85:56: fd:ef:44:1e:41:d1:ee:db:96:11:65:ad:ff:59:e2: 94:a1:72:cc:14:27:09:da:f8:a9:d3:00:03:9d:e7: 6a:b0:a7:4d:d9:c9:41:e6:3c:a0:83:82:88:df:f0: bd:11:a2:d0:17:2a:97:71:00:56:ee:13:c1:10:0a: 4c:7f:2a:4f:86:92:c5:89:91:47:99:fa:80:9e:c4: 7f:be:8e:81:11:10:55:dc:b6:3d:bd:a2:7c:02:23: d2:4d:c6:75:d9:08:d3:18:28:b7:4f:cb:fe:85:f7: c8:80:a5:c3:1a:6d:2a:8b:79:6e:14:54:74:1b:67: 43:ab:8e:11:f3:a3:5e:b0:5f:c4:97:06:83:01:0b: 60:61:19:42:43:e8:45:b1:f2:19:54:0a:8f:26:15: bb:f7:f6:c3:b4:77:0e:6c:66:5d:dd:4a:d9:41:06: 6f:d4:f8:97:2a:e2:75:83:14:12:1e:78:23:3e:3e: 6f:ba:28:86:46:27:af:90:c2:bb:2a:44:f7:9b:d7: 96:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FA:C7:DB:14:6D:13:CD:E5:24:A5:BD:BD:15:41:8C:10:03:BC:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/ed5d61e3-46f0-3c34-8be9-3ffce8ad8c0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.crl X509v3 Authority Key Identifier: keyid:60:17:08:15:3B:F0:7A:BA:18:96:C4:50:13:84:C4:35:25:52:F0:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.cer sbgp-ipAddrBlock: critical IPv4: 198.205.16.0/20 199.119.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:e5:7e:e2:66:15:ec:0a:a5:0b:a4:dd:d5:16:41:69:58:65: e4:e8:90:ea:21:c3:07:33:cd:df:fc:b3:86:90:c7:6c:bb:d1: aa:ac:5c:93:40:11:9c:4c:a4:08:85:7e:cf:14:3f:b0:87:94: 08:c8:ee:10:73:c0:de:81:fb:e3:1b:f7:c2:0d:fa:fb:63:63: c4:0a:20:2a:d2:96:ec:36:a6:19:e0:35:b2:3c:d1:1b:e9:ca: e7:1f:3b:fc:14:7c:4f:c3:9a:f1:df:8c:e8:c0:1b:3c:ab:ba: ee:73:d2:4d:2f:e9:df:bd:fc:03:74:b0:3e:3a:c3:1a:67:fa: ba:80:4c:40:ea:72:41:e6:37:13:d6:77:ce:60:2a:6f:0c:bb: 7f:5c:52:31:87:a8:6e:88:a7:1e:74:ac:77:4a:08:c2:97:9f: c5:31:6f:23:77:21:cb:ce:68:18:48:57:db:52:6f:fd:9d:0d: f7:fe:86:45:a3:5b:7b:03:d0:b3:81:a2:2d:68:14:98:7a:5a: d2:bc:44:c3:39:88:e3:84:31:6e:76:82:bf:c1:35:13:c9:5f: 79:52:2c:9a:2c:7b:e9:7a:8b:8e:47:26:c4:e9:28:75:1b:f5: 1b:f3:a7:b6:7a:96:73:7a:a5:6e:e1:fb:ed:18:f4:f9:74:e2: 40:6c:f8:b4 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEiea25yj0brbN40CoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ0YmRjYWMtMDVmZC00ZGQ1LWFkYmQtOWRiZDJmYjI5 NWM0MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MWRmODVmYzMtNGRkZi00ODUyLTlmN2YtZjViZjhjOTU0ZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUyJUrWj//6gEDmvsJ5SwHYeWt9bzpDuuSCj 0bDBiqBe8xxLsyONHbE7prnlW7+AJthxtsSkULgohVb970QeQdHu25YRZa3/WeKU oXLMFCcJ2vip0wADnedqsKdN2clB5jygg4KI3/C9EaLQFyqXcQBW7hPBEApMfypP hpLFiZFHmfqAnsR/vo6BERBV3LY9vaJ8AiPSTcZ12QjTGCi3T8v+hffIgKXDGm0q i3luFFR0G2dDq44R86NesF/ElwaDAQtgYRlCQ+hFsfIZVAqPJhW79/bDtHcObGZd 3UrZQQZv1PiXKuJ1gxQSHngjPj5vuiiGRievkMK7KkT3m9eWtwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGT6x9sUbRPN5SSlvb0VQYwQA7zwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDRi ZGNhYy0wNWZkLTRkZDUtYWRiZC05ZGJkMmZiMjk1YzQvZWQ1ZDYxZTMtNDZmMC0z YzM0LThiZTktM2ZmY2U4YWQ4YzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ0YmRjYWMtMDVmZC00ZGQ1LWFk YmQtOWRiZDJmYjI5NWM0LzY0NGJkY2FjLTA1ZmQtNGRkNS1hZGJkLTlkYmQyZmIy OTVjNC5jcmwwHwYDVR0jBBgwFoAUYBcIFTvweroYlsRQE4TENSVS8BUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDRiZGNhYy0wNWZkLTRkZDUtYWRiZC05ZGJk MmZiMjk1YzQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQExs0QAwQA x3cZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAH/lfuJmFewKpQuk3dUWQWlYZeTokOohwwczzd/8s4aQx2y7 0aqsXJNAEZxMpAiFfs8UP7CHlAjI7hBzwN6B++Mb98IN+vtjY8QKICrSluw2phng NbI80RvpyucfO/wUfE/DmvHfjOjAGzyruu5z0k0v6d+9/AN0sD46wxpn+rqATEDq ckHmNxPWd85gKm8Mu39cUjGHqG6Ipx50rHdKCMKXn8UxbyN3IcvOaBhIV9tSb/2d Dff+hkWjW3sD0LOBoi1oFJh6WtK8RMM5iOOEMW52gr/BNRPJX3lSLJose+l6i45H JsTpKHUb9Rvzp7Z6lnN6pW7h++0Y9Pl04kBs+LQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:20 2025 by rpki-client