$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/c924e861-00d4-373a-865f-b01a18ba8730.roa File: c924e861-00d4-373a-865f-b01a18ba8730.roa (raw, json) Hash identifier: XpQA+sQR7QXryKx9YsTJan5GAbfru5rKdFzznzQw0zk= Subject key identifier: 67:D1:26:81:C9:9E:1C:08:93:8A:03:1F:E9:62:31:2C:CC:4D:D1:11 Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Certificate serial: 010D0C9F4328584949FE91519B0A5B3E618B19C0 Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/c924e861-00d4-373a-865f-b01a18ba8730.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 393885 IP address blocks: 64.71.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:91:51:9b:0a:5b:3e:61:8b:19:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=1cb7f7c6-fc91-4f40-8a43-e7a72bc12691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8d:d4:6c:34:e6:d7:da:1c:e4:5c:f1:3f:38: eb:c6:7c:4e:a2:28:20:61:b0:e6:12:84:2f:18:39: f3:3b:34:f7:bb:e1:da:cc:8c:cf:0c:99:49:36:0f: dc:ce:14:6e:ca:4a:0e:eb:bd:91:84:11:b8:35:39: 8f:b7:57:3e:58:53:18:bb:72:8d:4d:57:65:31:f1: b6:81:74:53:15:2b:4f:29:a3:4a:d8:d6:5d:3b:7f: 63:c7:0a:21:e8:46:d7:d5:47:3d:67:3d:10:5d:47: 19:eb:10:9a:5c:6e:aa:14:a4:17:81:7b:89:54:a5: ca:74:17:d6:08:d1:e9:c3:06:aa:a3:4b:1f:1f:0c: 3f:63:22:ad:2b:69:4a:44:66:5f:65:74:4a:d4:09: 2f:6f:24:f6:55:92:cb:c9:69:b0:07:96:1a:29:bc: f4:13:75:03:17:2d:9e:7a:71:35:c3:76:e8:20:af: 94:9b:c7:ed:bc:88:26:8b:a0:70:96:11:5f:c0:de: dd:1a:69:6a:93:67:f8:79:0a:e4:a1:34:d9:1b:4d: c7:9f:51:12:2c:ec:b0:ec:da:ca:d1:8c:9a:46:7c: d6:c1:c3:76:02:8a:7c:9d:78:21:a4:48:4c:29:0d: 7c:7e:82:84:d9:2d:bb:ee:7b:20:ed:4e:a7:87:47: b8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D1:26:81:C9:9E:1C:08:93:8A:03:1F:E9:62:31:2C:CC:4D:D1:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/c924e861-00d4-373a-865f-b01a18ba8730.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl X509v3 Authority Key Identifier: keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer sbgp-ipAddrBlock: critical IPv4: 64.71.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:2e:5a:6c:72:e7:f5:81:58:7c:5b:04:15:99:a6:06:85:e1: ee:b8:de:e1:66:26:e8:52:12:30:ff:1e:ce:96:8e:23:1b:61: e4:da:39:dd:e8:19:70:5e:90:f0:18:52:b7:e2:28:28:c8:fe: c6:7e:1b:b5:cf:b3:43:fe:a9:3c:ec:29:bc:e5:cf:0c:07:74: a1:37:04:d7:b4:2c:b9:4d:6a:e7:44:1f:2f:ec:b2:58:54:7c: ef:a6:27:23:be:95:64:a4:46:5c:2a:1f:d8:8a:f6:de:60:74: 9f:4e:e4:46:78:b6:56:f1:4a:0f:47:b9:5a:9f:6f:60:6e:94: 61:db:55:4d:2d:38:0b:43:ef:07:59:2b:09:a7:58:b4:75:78: 84:60:82:cf:6c:07:d0:e4:47:e3:2f:4b:5f:67:42:44:1d:10: 7b:d0:f8:86:6e:16:75:bf:1c:63:f2:ea:5c:12:2f:c3:3b:42: 3d:80:af:de:93:6b:43:48:3e:c9:d6:e9:43:d3:d6:e0:45:a2: 4c:d6:23:09:8c:c5:54:40:af:32:c5:b4:14:01:73:8d:e9:1f: 33:cc:e2:b8:4e:18:3d:05:9c:39:94:a7:45:bb:50:df:cb:83: f1:1f:a1:dc:59:f6:1d:30:b1:b3:70:7c:48:d8:46:24:4c:7a: dd:cc:c1:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/pFRmwpbPmGLGcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk NjZkMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk MWNiN2Y3YzYtZmM5MS00ZjQwLThhNDMtZTdhNzJiYzEyNjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA643UbDTm19oc5FzxPzjrxnxOoiggYbDmEoQv GDnzOzT3u+HazIzPDJlJNg/czhRuykoO672RhBG4NTmPt1c+WFMYu3KNTVdlMfG2 gXRTFStPKaNK2NZdO39jxwoh6EbX1Uc9Zz0QXUcZ6xCaXG6qFKQXgXuJVKXKdBfW CNHpwwaqo0sfHww/YyKtK2lKRGZfZXRK1AkvbyT2VZLLyWmwB5YaKbz0E3UDFy2e enE1w3boIK+Um8ftvIgmi6BwlhFfwN7dGmlqk2f4eQrkoTTZG03Hn1ESLOyw7NrK 0YyaRnzWwcN2Aop8nXghpEhMKQ18foKE2S277nsg7U6nh0e4YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfRJoHJnhwIk4oDH+liMSzMTdERMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvYzkyNGU4NjEtMDBkNC0z NzNhLTg2NWYtYjAxYTE4YmE4NzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1 ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh M2UzNWQ2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQEfaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAuWmxy5/WBWHxbBBWZpgaF4e643uFmJuhSEjD/Hs6WjiMbYeTaOd3o GXBekPAYUrfiKCjI/sZ+G7XPs0P+qTzsKbzlzwwHdKE3BNe0LLlNaudEHy/sslhU fO+mJyO+lWSkRlwqH9iK9t5gdJ9O5EZ4tlbxSg9HuVqfb2BulGHbVU0tOAtD7wdZ KwmnWLR1eIRggs9sB9DkR+MvS19nQkQdEHvQ+IZuFnW/HGPy6lwSL8M7Qj2Ar96T a0NIPsnW6UPT1uBFokzWIwmMxVRArzLFtBQBc43pHzPM4rhOGD0FnDmUp0W7UN/L g/EfodxZ9h0wsbNwfEjYRiRMet3MwXg= -----END CERTIFICATE-----Generated at Sat Apr 12 10:08:27 2025 by rpki-client