$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/da2805f3-2f45-37d2-81ac-675892bd2fa3.roa File: da2805f3-2f45-37d2-81ac-675892bd2fa3.roa (raw, json) Hash identifier: kLv3B2JkYM8VJVgqAihyCHmGaytFsvOZfLnWxmBJuTE= Subject key identifier: 60:AD:40:EA:EE:E6:5A:45:23:11:9F:57:35:E0:49:0C:85:2B:32:24 Certificate issuer: /CN=82d0f472-6865-4d16-9252-e75f7b91368a Certificate serial: 010D0C9F43285848B78B7C69A0EE4DBA9F1C5C80 Authority key identifier: 91:F2:68:F5:92:28:40:C7:86:D1:B2:A2:58:B7:AE:F9:4D:9E:BC:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/da2805f3-2f45-37d2-81ac-675892bd2fa3.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 401382 IP address blocks: 64.190.20.0/24 maxlen: 24 2602:f7e7::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/82d0f472-6865-4d16-9252-e75f7b91368a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/82d0f472-6865-4d16-9252-e75f7b91368a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:7c:69:a0:ee:4d:ba:9f:1c:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82d0f472-6865-4d16-9252-e75f7b91368a Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=86eeca3d-197c-4923-b210-c10a55fb12e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:dd:8a:1d:e1:54:f1:0d:66:2a:88:66:f6:e3: 22:ec:64:5c:f2:e3:9a:1e:aa:38:c9:3f:d0:8a:e4: 60:bb:fc:d8:ce:10:58:1d:13:33:51:15:19:15:76: e8:03:42:00:b0:57:ff:6b:98:43:7c:97:6f:bf:e1: 83:c6:83:f6:0f:dd:22:0e:b7:d7:cb:a5:48:db:5f: 37:50:60:df:5e:bb:f5:d0:6e:80:d3:e9:b0:dc:23: e3:51:9a:4f:35:13:02:1e:98:08:de:d6:d3:fe:f9: 41:a2:3e:0d:07:b8:8b:84:6e:ee:7c:16:13:4b:b2: 00:6a:97:85:57:f6:09:92:3b:6d:9f:a0:87:97:9e: e1:20:10:ad:3b:fb:6b:0c:ca:fc:2e:87:20:4c:13: cc:35:65:99:68:a2:a6:54:a1:3a:75:3b:fb:3a:30: d3:e9:2d:85:99:7d:c3:9a:cf:1f:98:12:11:3d:2e: 30:9d:49:63:d1:ea:3f:2c:63:df:f6:37:ef:8d:13: 80:10:d1:88:03:f1:42:3e:dc:08:72:5c:e4:29:da: 13:0b:29:97:a2:42:79:50:8d:8b:94:d9:9c:0c:b7: 14:fd:bd:d9:e1:2c:e0:10:aa:34:84:9e:ee:fb:ab: a4:2f:a5:33:5b:a1:5a:7a:48:4c:71:e8:85:99:4d: 30:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AD:40:EA:EE:E6:5A:45:23:11:9F:57:35:E0:49:0C:85:2B:32:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/da2805f3-2f45-37d2-81ac-675892bd2fa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/82d0f472-6865-4d16-9252-e75f7b91368a.crl X509v3 Authority Key Identifier: keyid:91:F2:68:F5:92:28:40:C7:86:D1:B2:A2:58:B7:AE:F9:4D:9E:BC:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a.cer sbgp-ipAddrBlock: critical IPv4: 64.190.20.0/24 IPv6: 2602:f7e7::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:33:81:88:b3:63:5e:e0:a6:2d:af:ca:c2:ad:8a:7e:e8:e6: e0:55:e3:30:46:ca:93:ca:b8:db:b2:3e:3a:22:66:df:1f:2d: 5a:52:80:25:11:27:76:4b:73:a7:16:a5:38:01:9a:fa:91:91: 8b:17:ce:b8:16:f1:f9:65:7e:45:c8:5f:3f:c8:ba:bc:4b:4c: 09:37:61:8a:4c:10:53:36:f2:56:f6:b0:51:62:e3:8c:aa:dd: 7f:2b:4b:6e:ea:80:57:1b:50:1a:e6:fb:1a:a4:4b:97:d8:d5: 14:1b:6e:a3:9d:1b:13:92:80:01:50:e5:df:b2:b1:bc:e3:86: 98:88:29:6d:e8:af:e0:23:d9:d0:34:66:25:13:02:81:90:7b: ef:53:ff:5e:90:74:8d:04:16:64:01:fb:6c:40:35:0e:da:3d: 5a:7e:8c:b1:d5:b1:40:2a:c0:8b:f4:5b:7d:0b:93:41:f3:df: b8:4a:42:f7:54:27:69:38:03:29:84:ea:73:75:53:fc:7d:c7: a0:14:49:e7:4b:e5:95:72:20:62:c4:52:33:31:8c:3b:eb:cf: 89:e7:df:6e:76:9f:dc:60:29:e4:a4:dd:e5:cd:97:89:d4:fc: c9:1f:3d:70:88:d3:ff:9d:91:54:3f:ae:c6:33:51:a7:50:67: a2:cb:ce:17 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEi3i3xpoO5Nup8cXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODJkMGY0NzItNjg2NS00ZDE2LTkyNTItZTc1ZjdiOTEz NjhhMB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk ODZlZWNhM2QtMTk3Yy00OTIzLWIyMTAtYzEwYTU1ZmIxMmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4t2KHeFU8Q1mKohm9uMi7GRc8uOaHqo4yT/Q iuRgu/zYzhBYHRMzURUZFXboA0IAsFf/a5hDfJdvv+GDxoP2D90iDrfXy6VI2183 UGDfXrv10G6A0+mw3CPjUZpPNRMCHpgI3tbT/vlBoj4NB7iLhG7ufBYTS7IAapeF V/YJkjttn6CHl57hIBCtO/trDMr8LocgTBPMNWWZaKKmVKE6dTv7OjDT6S2FmX3D ms8fmBIRPS4wnUlj0eo/LGPf9jfvjROAENGIA/FCPtwIclzkKdoTCymXokJ5UI2L lNmcDLcU/b3Z4SzgEKo0hJ7u+6ukL6UzW6FaekhMceiFmU0wSwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGCtQOru5lpFIxGfVzXgSQyFKzIkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MmQw ZjQ3Mi02ODY1LTRkMTYtOTI1Mi1lNzVmN2I5MTM2OGEvZGEyODA1ZjMtMmY0NS0z N2QyLTgxYWMtNjc1ODkyYmQyZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODJkMGY0NzItNjg2NS00ZDE2LTky NTItZTc1ZjdiOTEzNjhhLzgyZDBmNDcyLTY4NjUtNGQxNi05MjUyLWU3NWY3Yjkx MzY4YS5jcmwwHwYDVR0jBBgwFoAUkfJo9ZIoQMeG0bKiWLeu+U2evCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MmQwZjQ3Mi02ODY1LTRkMTYtOTI1Mi1lNzVm N2I5MTM2OGEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAQL4UMA4E AgACMAgDBgAmAvfnADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBlM4GIs2Ne4KYtr8rCrYp+6ObgVeMwRsqT yrjbsj46ImbfHy1aUoAlESd2S3OnFqU4AZr6kZGLF864FvH5ZX5FyF8/yLq8S0wJ N2GKTBBTNvJW9rBRYuOMqt1/K0tu6oBXG1Aa5vsapEuX2NUUG26jnRsTkoABUOXf srG844aYiClt6K/gI9nQNGYlEwKBkHvvU/9ekHSNBBZkAftsQDUO2j1afoyx1bFA KsCL9Ft9C5NB89+4SkL3VCdpOAMphOpzdVP8fcegFEnnS+WVciBixFIzMYw768+J 599udp/cYCnkpN3lzZeJ1PzJHz1wiNP/nZFUP67GM1GnUGeiy84X -----END CERTIFICATE-----Generated at Fri Mar 14 11:17:59 2025 by rpki-client