$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/376f1606-d35e-3cb6-b663-26b1e90c408b.roa File: 376f1606-d35e-3cb6-b663-26b1e90c408b.roa (raw, json) Hash identifier: arMdnKTUz5pPNdrcbOLsrbaejIn53oKKDGELpvVJo+c= Subject key identifier: 4C:79:47:42:8F:9D:D4:BD:C3:8E:2C:7E:4C:B9:EC:68:28:CD:57:6A Certificate issuer: /CN=da733fda-b405-4eb1-adbe-811e8f7eacd4 Certificate serial: 010D0C9F43285848B62620B53FB917C0580DF9A0 Authority key identifier: CF:9A:BF:04:C8:42:8F:3F:52:AA:0D:50:E8:C7:7B:D2:75:46:E5:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/376f1606-d35e-3cb6-b663-26b1e90c408b.roa Signing time: Thu 30 Jan 2025 02:00:40 +0000 ROA not before: Thu 30 Jan 2025 02:00:40 +0000 ROA not after: Wed 30 Apr 2025 01:00:40 +0000 asID: 55159 IP address blocks: 64.89.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:26:20:b5:3f:b9:17:c0:58:0d:f9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da733fda-b405-4eb1-adbe-811e8f7eacd4 Validity Not Before: Jan 30 02:00:40 2025 GMT Not After : Apr 30 01:00:40 2025 GMT Subject: CN=55e7943c-8f79-40d2-a8ed-205a4fe6dacb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:6a:af:0b:96:96:15:3f:cf:4d:33:9f:4c:73: f3:1a:29:3e:92:84:50:fc:f8:bf:d2:93:31:a3:15: 0b:a2:65:14:88:04:46:6a:65:3e:33:5d:16:03:5a: 7c:67:40:24:4b:c1:2e:f9:dd:81:1d:c2:82:b4:c2: 30:42:eb:6d:35:b2:d8:d3:f0:07:3c:b0:70:d1:b6: 7c:b0:30:5b:bc:33:98:2d:ce:bd:13:86:ce:73:27: 43:17:e3:54:d9:b0:c3:18:f3:c8:ac:33:16:31:45: af:d4:28:c4:d0:27:40:eb:50:15:9f:b1:61:16:48: 69:58:9a:53:74:c8:50:5b:f8:ee:04:d3:f1:5c:4a: 49:29:e9:eb:7a:87:ce:51:0a:0d:93:b8:e7:53:5e: d7:66:aa:de:77:9b:23:42:d1:f1:9f:3e:7b:4b:ea: 25:d8:88:a5:d9:85:70:54:85:02:7c:5d:02:de:09: c2:52:94:78:ba:a9:3a:0c:4e:ec:0e:93:9e:67:1b: 14:1e:bb:55:0c:ea:4f:54:41:68:10:86:86:d6:a1: 1f:c4:76:ad:f7:56:eb:d5:fc:40:b2:3f:8a:80:28: 65:96:84:84:51:d5:e7:51:00:d3:75:10:79:42:79: f7:a1:2e:c5:67:ed:d6:8a:32:d2:8d:dd:d4:1b:23: bd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:79:47:42:8F:9D:D4:BD:C3:8E:2C:7E:4C:B9:EC:68:28:CD:57:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/376f1606-d35e-3cb6-b663-26b1e90c408b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.crl X509v3 Authority Key Identifier: keyid:CF:9A:BF:04:C8:42:8F:3F:52:AA:0D:50:E8:C7:7B:D2:75:46:E5:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4.cer sbgp-ipAddrBlock: critical IPv4: 64.89.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:45:e5:88:c9:9c:31:88:6a:33:4a:10:45:36:3a:9d:0d:0a: 82:e0:88:6f:f7:56:1c:0d:e5:03:7a:2a:e4:e7:30:d2:af:d6: 3f:83:b1:4f:a0:58:05:6f:1d:92:8c:a1:b3:9b:13:64:be:95: 30:32:1a:20:37:29:38:85:1f:f6:2c:ee:27:a2:c5:2c:bb:c2: c4:5e:6e:08:a7:71:ca:0a:c9:48:55:e3:80:60:e0:9a:b9:84: ed:f3:23:30:02:b9:fe:05:ec:46:56:05:68:93:bd:16:af:dc: 9f:6f:1a:ea:f8:5f:31:12:82:ff:6f:fa:93:12:86:42:c7:9b: 10:9f:4f:b2:40:91:09:1d:39:29:46:2f:a5:51:65:1b:ca:7c: ea:69:14:2d:5b:61:8a:d0:a0:83:fb:ee:61:f4:73:dd:a1:c6: 74:08:51:18:0f:3e:1e:c3:70:1f:a6:21:36:35:37:e9:9b:44: f9:4c:be:99:62:a6:e4:19:d4:75:6d:cf:ce:ab:d1:40:0f:93: 3f:a9:91:dc:ec:58:5f:fd:d8:b0:44:fa:c5:af:79:5b:87:bc: f4:9e:39:4d:d2:21:b0:3f:43:f5:b3:5c:47:60:0b:83:c5:59: 03:54:0c:b4:f3:0e:20:10:a6:ce:bb:c1:15:ec:fa:ad:c2:bc: 77:19:82:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi2JiC1P7kXwFgN+aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE3MzNmZGEtYjQwNS00ZWIxLWFkYmUtODExZThmN2Vh Y2Q0MB4XDTI1MDEzMDAyMDA0MFoXDTI1MDQzMDAxMDA0MFowLzEtMCsGA1UEAxMk NTVlNzk0M2MtOGY3OS00MGQyLWE4ZWQtMjA1YTRmZTZkYWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA82qvC5aWFT/PTTOfTHPzGik+koRQ/Pi/0pMx oxULomUUiARGamU+M10WA1p8Z0AkS8Eu+d2BHcKCtMIwQuttNbLY0/AHPLBw0bZ8 sDBbvDOYLc69E4bOcydDF+NU2bDDGPPIrDMWMUWv1CjE0CdA61AVn7FhFkhpWJpT dMhQW/juBNPxXEpJKenreofOUQoNk7jnU17XZqred5sjQtHxnz57S+ol2Iil2YVw VIUCfF0C3gnCUpR4uqk6DE7sDpOeZxsUHrtVDOpPVEFoEIaG1qEfxHat91br1fxA sj+KgChlloSEUdXnUQDTdRB5Qnn3oS7FZ+3WijLSjd3UGyO9nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEx5R0KPndS9w44sfky57GgozVdqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kYTcz M2ZkYS1iNDA1LTRlYjEtYWRiZS04MTFlOGY3ZWFjZDQvMzc2ZjE2MDYtZDM1ZS0z Y2I2LWI2NjMtMjZiMWU5MGM0MDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGE3MzNmZGEtYjQwNS00ZWIxLWFk YmUtODExZThmN2VhY2Q0L2RhNzMzZmRhLWI0MDUtNGViMS1hZGJlLTgxMWU4Zjdl YWNkNC5jcmwwHwYDVR0jBBgwFoAUz5q/BMhCjz9Sqg1Q6Md70nVG5TgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kYTczM2ZkYS1iNDA1LTRlYjEtYWRiZS04MTFl OGY3ZWFjZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQFmoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANF5YjJnDGIajNKEEU2Op0NCoLgiG/3VhwN5QN6KuTnMNKv1j+DsU+g WAVvHZKMobObE2S+lTAyGiA3KTiFH/Ys7ieixSy7wsRebginccoKyUhV44Bg4Jq5 hO3zIzACuf4F7EZWBWiTvRav3J9vGur4XzESgv9v+pMShkLHmxCfT7JAkQkdOSlG L6VRZRvKfOppFC1bYYrQoIP77mH0c92hxnQIURgPPh7DcB+mITY1N+mbRPlMvpli puQZ1HVtz86r0UAPkz+pkdzsWF/92LBE+sWveVuHvPSeOU3SIbA/Q/WzXEdgC4PF WQNUDLTzDiAQps67wRXs+q3CvHcZgqs= -----END CERTIFICATE-----Generated at Sun Apr 6 13:26:41 2025 by rpki-client