$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/3bb61dcd-da0f-3ec1-8416-831c406b030b.roa File: 3bb61dcd-da0f-3ec1-8416-831c406b030b.roa (raw, json) Hash identifier: m2wusTJvB4eokZGCdiexHaoxpdcm+FJbiJuIKl8qHFM= Subject key identifier: 71:9B:A3:9D:68:0D:2E:B0:23:CD:A0:FB:A5:ED:8D:94:AA:1A:0A:5D Certificate issuer: /CN=dafe2535-2dc5-4d47-b03e-d44eea26032f Certificate serial: 010D0C9F43285849088171FE1A8C09F021FF1400 Authority key identifier: 37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/3bb61dcd-da0f-3ec1-8416-831c406b030b.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 15054 IP address blocks: 63.246.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:71:fe:1a:8c:09:f0:21:ff:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafe2535-2dc5-4d47-b03e-d44eea26032f Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=2dd0e59b-b223-4889-bdf1-49951cdcf2a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:07:ba:a7:4e:d8:c7:f3:0e:8f:0f:c2:08:72: 4c:2a:65:d4:63:e7:1b:c3:74:97:10:1c:5a:07:54: 1f:3d:41:1a:c9:6b:81:8d:4a:9b:7d:de:3c:23:26: f4:33:ad:50:26:64:35:ea:ac:80:90:a8:67:19:97: bc:60:14:ea:2b:9e:94:0a:bd:0a:4f:6d:9e:e9:00: ad:d8:b8:a7:e0:84:94:1e:b3:45:d5:ed:bb:83:52: da:b5:cf:d0:b5:53:4a:4b:78:35:f5:f9:a2:4a:c5: 54:4f:55:6a:af:b6:3f:b4:0a:7a:e3:77:df:55:b1: 90:5b:15:de:f7:ad:a9:b5:7b:d7:c7:5f:ca:f9:03: af:47:b7:5f:56:c0:da:76:7e:b2:1a:14:8c:6e:c0: d9:06:b2:2f:37:9e:35:3f:95:30:f9:23:af:a9:3d: 36:38:d8:3a:c4:d8:16:ec:72:69:33:c7:87:72:86: c9:93:92:95:b2:bf:1d:39:45:2e:ce:29:a6:f1:07: 33:bc:b2:a7:52:ef:e4:c4:a2:5d:39:12:d6:a7:be: f0:13:fe:9d:94:44:61:02:87:be:8b:bf:6a:0e:75: 24:ce:be:d3:27:e8:1b:2d:3c:ac:cc:07:54:f6:ee: 98:68:95:15:95:12:58:88:76:97:ae:80:c8:c6:c0: f8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9B:A3:9D:68:0D:2E:B0:23:CD:A0:FB:A5:ED:8D:94:AA:1A:0A:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/3bb61dcd-da0f-3ec1-8416-831c406b030b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl X509v3 Authority Key Identifier: keyid:37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer sbgp-ipAddrBlock: critical IPv4: 63.246.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:98:e5:63:b7:ef:5d:e1:8e:e8:f6:7e:6f:d3:a3:d5:ee:5a: 75:63:47:e3:1b:f3:d9:4e:25:c4:98:81:ae:d7:c3:26:64:d3: e5:d1:c3:54:49:b8:e7:27:c5:b3:9f:af:bf:8b:60:bc:87:e8: 97:8d:dc:3e:36:d2:33:24:55:d3:fe:6d:ea:ea:44:61:66:89: a2:03:00:af:c9:69:41:38:61:da:b4:8f:53:99:fd:ca:ac:1c: 1f:c8:a7:4a:d8:fe:6e:d6:fa:3a:11:1f:ae:f7:a6:38:0a:54: a0:0a:75:77:72:4b:91:5b:40:88:ab:5e:5e:42:e6:bc:09:fd: c5:a6:34:a2:4b:2b:72:0d:c3:c1:22:24:1e:ea:17:1e:30:c9: df:69:fc:61:27:7a:e8:82:62:05:4a:dd:50:32:7a:37:c6:08: b7:31:df:7d:36:ec:1b:62:f1:63:a5:be:b5:bb:cc:e4:97:b2: 01:68:49:a5:82:89:bd:92:79:1f:61:02:aa:bb:d0:c2:23:62: f6:a7:f5:a3:43:90:eb:8d:f4:cd:c3:4c:d3:f0:07:cd:8d:9c: 8c:1e:82:bb:a5:f3:8e:ba:bb:6a:a7:88:4e:44:b3:82:0e:1a: 7f:da:91:4e:68:f4:70:63:08:88:bd:90:fb:0e:d0:31:4f:5a: c3:64:4a:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgXH+GowJ8CH/FAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFmZTI1MzUtMmRjNS00ZDQ3LWIwM2UtZDQ0ZWVhMjYw MzJmMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MmRkMGU1OWItYjIyMy00ODg5LWJkZjEtNDk5NTFjZGNmMmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAe6p07Yx/MOjw/CCHJMKmXUY+cbw3SXEBxa B1QfPUEayWuBjUqbfd48Iyb0M61QJmQ16qyAkKhnGZe8YBTqK56UCr0KT22e6QCt 2Lin4ISUHrNF1e27g1Latc/QtVNKS3g19fmiSsVUT1Vqr7Y/tAp643ffVbGQWxXe 962ptXvXx1/K+QOvR7dfVsDadn6yGhSMbsDZBrIvN541P5Uw+SOvqT02ONg6xNgW 7HJpM8eHcobJk5KVsr8dOUUuzimm8QczvLKnUu/kxKJdORLWp77wE/6dlERhAoe+ i79qDnUkzr7TJ+gbLTyszAdU9u6YaJUVlRJYiHaXroDIxsD42QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGbo51oDS6wI82g+6XtjZSqGgpdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZl MjUzNS0yZGM1LTRkNDctYjAzZS1kNDRlZWEyNjAzMmYvM2JiNjFkY2QtZGEwZi0z ZWMxLTg0MTYtODMxYzQwNmIwMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGFmZTI1MzUtMmRjNS00ZDQ3LWIw M2UtZDQ0ZWVhMjYwMzJmL2RhZmUyNTM1LTJkYzUtNGQ0Ny1iMDNlLWQ0NGVlYTI2 MDMyZi5jcmwwHwYDVR0jBBgwFoAUN8t1jDs52bn6L7Uc75kQZ5e56xAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZlMjUzNS0yZGM1LTRkNDctYjAzZS1kNDRl ZWEyNjAzMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEP/YwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmY5WO3713hjuj2fm/To9XuWnVjR+Mb89lOJcSYga7XwyZk0+XRw1RJ uOcnxbOfr7+LYLyH6JeN3D420jMkVdP+berqRGFmiaIDAK/JaUE4Ydq0j1OZ/cqs HB/Ip0rY/m7W+joRH673pjgKVKAKdXdyS5FbQIirXl5C5rwJ/cWmNKJLK3INw8Ei JB7qFx4wyd9p/GEneuiCYgVK3VAyejfGCLcx33027Bti8WOlvrW7zOSXsgFoSaWC ib2SeR9hAqq70MIjYvan9aNDkOuN9M3DTNPwB82NnIwegrul8466u2qniE5Es4IO Gn/akU5o9HBjCIi9kPsO0DFPWsNkSh0= -----END CERTIFICATE-----Generated at Tue Apr 8 13:28:21 2025 by rpki-client