$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/6bfd8c06-649d-344f-9311-8c34c244a748.roa File: 6bfd8c06-649d-344f-9311-8c34c244a748.roa (raw, json) Hash identifier: AKpGY2DHqEatKsAWaceyTZssCeTHhoWxweloyIRA724= Subject key identifier: E7:27:9C:4E:A0:9D:E5:02:64:40:6C:8E:BA:B8:07:49:A9:E9:B5:EB Certificate issuer: /CN=f65be2e0-6a40-4cf1-8234-6eb4f40c788a Certificate serial: 010D0C9F43285848D4DB970EDC02F75B3DCE43C0 Authority key identifier: 7C:CA:20:FA:2B:1D:8F:D4:74:96:0A:8C:49:88:B7:54:60:A0:C6:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/6bfd8c06-649d-344f-9311-8c34c244a748.roa Signing time: Mon 10 Feb 2025 02:00:38 +0000 ROA not before: Mon 10 Feb 2025 02:00:38 +0000 ROA not after: Sun 11 May 2025 01:00:38 +0000 asID: 22121 IP address blocks: 172.99.224.0/22 maxlen: 24 199.21.136.0/21 maxlen: 24 2604:14c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d4:db:97:0e:dc:02:f7:5b:3d:ce:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f65be2e0-6a40-4cf1-8234-6eb4f40c788a Validity Not Before: Feb 10 02:00:38 2025 GMT Not After : May 11 01:00:38 2025 GMT Subject: CN=3b15114a-7d70-460f-b3c1-d061654b1dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1e:58:96:eb:70:b9:9b:98:1d:30:e2:0c:db: 93:9c:ab:c5:89:07:a2:2a:28:50:2c:b7:36:74:45: 41:11:24:85:79:de:31:d7:97:cd:57:f0:dd:97:06: d0:cd:23:c0:df:da:7b:3f:77:81:9e:cb:d4:b2:ea: 8a:4d:c3:e9:f9:fb:29:b9:fe:d7:9b:28:d8:75:bf: 0f:a2:3d:a6:34:91:32:fe:1c:0b:6a:46:54:80:4f: 0d:ba:9b:5d:47:62:26:c6:35:b8:c2:93:f4:cd:8b: 86:2f:50:29:fb:f3:70:fc:4e:f7:4c:30:16:0e:be: 83:69:7d:39:f4:e7:7a:62:22:7e:6d:10:81:1b:e3: eb:12:05:cb:f2:29:b8:48:11:38:6d:0f:d5:c5:f6: 9d:14:a0:3e:c6:b6:ca:37:f5:e2:73:a4:86:b9:08: b0:e0:c5:ac:7b:02:b6:d5:65:78:63:54:d9:96:32: 1c:0c:d1:69:a3:e3:3d:af:51:e1:ed:5e:fa:75:b9: af:84:36:b0:2e:fb:2d:00:6d:a8:29:2d:e7:89:6c: e2:e7:7f:c3:63:b7:33:b2:73:af:f1:c9:9a:ad:73: 49:66:34:53:ff:1e:aa:d6:a9:c9:e2:5e:2a:b8:1c: 7d:e7:7d:6a:08:f7:98:86:fb:78:3a:65:a3:f8:98: 5c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:27:9C:4E:A0:9D:E5:02:64:40:6C:8E:BA:B8:07:49:A9:E9:B5:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/6bfd8c06-649d-344f-9311-8c34c244a748.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.crl X509v3 Authority Key Identifier: keyid:7C:CA:20:FA:2B:1D:8F:D4:74:96:0A:8C:49:88:B7:54:60:A0:C6:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.cer sbgp-ipAddrBlock: critical IPv4: 172.99.224.0/22 199.21.136.0/21 IPv6: 2604:14c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:b8:0c:d4:56:fc:1e:3b:22:c7:b9:14:e4:73:33:07:82:a7: 27:29:f9:22:cd:2a:53:9f:15:94:a6:5c:91:98:5e:7f:c2:b2: 5f:67:b1:74:cd:da:e5:87:58:c6:3f:f3:7b:5b:3f:56:32:aa: 3c:65:31:ce:c5:b5:f2:0d:23:3f:b6:df:22:15:1c:e9:64:28: d9:b5:a2:ba:d8:4a:3a:4c:1d:dc:1d:a4:8c:3e:f3:13:37:fc: 35:61:e5:8c:03:78:b7:1a:55:5b:aa:4c:02:00:23:15:b5:e9: d8:86:82:6c:7d:99:21:f6:6c:77:d5:0f:55:d9:c9:a4:11:fd: bb:27:07:57:28:e9:71:a5:9a:6c:46:26:a8:a2:36:3f:9b:19: 54:d1:bb:63:e3:5e:54:a1:68:24:35:32:7a:d1:4b:19:ad:20: 6e:11:46:1c:d8:06:21:ee:c4:ae:be:2f:e0:4d:38:27:9d:ce: 44:62:28:1b:dd:53:46:b2:02:d2:7c:26:7b:26:43:0b:2f:ac: 5d:4b:2c:df:71:d3:cc:a1:ed:91:67:f7:f6:ed:3f:a3:c4:4c: f2:a9:8e:7a:93:aa:92:2a:48:d5:e2:c5:7b:43:46:7a:3e:5d: 98:30:ca:51:c0:48:b2:01:d1:f5:08:bc:fc:70:66:22:e2:3c: 73:b6:19:0c -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEjU25cO3AL3Wz3OQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY1YmUyZTAtNmE0MC00Y2YxLTgyMzQtNmViNGY0MGM3 ODhhMB4XDTI1MDIxMDAyMDAzOFoXDTI1MDUxMTAxMDAzOFowLzEtMCsGA1UEAxMk M2IxNTExNGEtN2Q3MC00NjBmLWIzYzEtZDA2MTY1NGIxZGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkR5YlutwuZuYHTDiDNuTnKvFiQeiKihQLLc2 dEVBESSFed4x15fNV/DdlwbQzSPA39p7P3eBnsvUsuqKTcPp+fspuf7XmyjYdb8P oj2mNJEy/hwLakZUgE8NuptdR2ImxjW4wpP0zYuGL1Ap+/Nw/E73TDAWDr6DaX05 9Od6YiJ+bRCBG+PrEgXL8im4SBE4bQ/VxfadFKA+xrbKN/Xic6SGuQiw4MWsewK2 1WV4Y1TZljIcDNFpo+M9r1Hh7V76dbmvhDawLvstAG2oKS3niWzi53/DY7czsnOv 8cmarXNJZjRT/x6q1qnJ4l4quBx9531qCPeYhvt4OmWj+JhchQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFOcnnE6gneUCZEBsjrq4B0mp6bXrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mNjVi ZTJlMC02YTQwLTRjZjEtODIzNC02ZWI0ZjQwYzc4OGEvNmJmZDhjMDYtNjQ5ZC0z NDRmLTkzMTEtOGMzNGMyNDRhNzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjY1YmUyZTAtNmE0MC00Y2YxLTgy MzQtNmViNGY0MGM3ODhhL2Y2NWJlMmUwLTZhNDAtNGNmMS04MjM0LTZlYjRmNDBj Nzg4YS5jcmwwHwYDVR0jBBgwFoAUfMog+isdj9R0lgqMSYi3VGCgxvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mNjViZTJlMC02YTQwLTRjZjEtODIzNC02ZWI0 ZjQwYzc4OGEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCrGPgAwQD xxWIMA0EAgACMAcDBQAmBBTAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEy4DNRW/B47Ise5FORzMweCpycp +SLNKlOfFZSmXJGYXn/Csl9nsXTN2uWHWMY/83tbP1YyqjxlMc7FtfINIz+23yIV HOlkKNm1orrYSjpMHdwdpIw+8xM3/DVh5YwDeLcaVVuqTAIAIxW16diGgmx9mSH2 bHfVD1XZyaQR/bsnB1co6XGlmmxGJqiiNj+bGVTRu2PjXlShaCQ1MnrRSxmtIG4R RhzYBiHuxK6+L+BNOCedzkRiKBvdU0ayAtJ8JnsmQwsvrF1LLN9x08yh7ZFn9/bt P6PETPKpjnqTqpIqSNXixXtDRno+XZgwylHASLIB0fUIvPxwZiLiPHO2GQw= -----END CERTIFICATE-----Generated at Sat Apr 12 00:26:09 2025 by rpki-client