$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/8786f167-09ad-3485-abdb-4bdb10d1f4a8.roa File: 8786f167-09ad-3485-abdb-4bdb10d1f4a8.roa (raw, json) Hash identifier: tCybQ86Uyck1Kt+D7JwgurkSKXm3M/mFqKPXeJblfq0= Subject key identifier: F0:33:20:5D:89:78:1C:B8:3D:B9:A3:7A:51:97:A8:4B:45:49:A1:B1 Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F43285848FD569EA91306AED07DC3D540 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/8786f167-09ad-3485-abdb-4bdb10d1f4a8.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 6453 IP address blocks: 64.86.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:9e:a9:13:06:ae:d0:7d:c3:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=4daa812c-bcc3-4df0-ad3e-dc8c992b6968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:dc:c5:26:2d:d5:b4:70:97:93:18:04:40:9b: b0:4a:17:9e:91:73:db:36:22:5a:5b:35:49:0f:e3: dc:3a:18:09:c8:c1:7b:81:a5:5c:7c:82:53:84:78: 7b:ab:2c:11:c9:79:43:08:04:db:5c:aa:e9:3f:9d: 89:3d:e9:87:67:72:84:8c:a5:c3:1c:1e:be:63:6c: 00:b4:dc:0f:99:57:5d:39:41:81:38:35:ba:93:73: 57:09:82:07:36:8b:c6:bd:34:96:8c:f7:8e:82:4e: 4a:54:96:fd:ee:80:8c:df:f2:1a:df:53:f8:63:60: a4:92:ac:79:ba:da:8e:d3:42:db:d4:08:a0:8e:5f: 59:5d:d1:03:03:3a:ac:3b:69:9b:93:93:44:9e:5c: 7e:d2:89:f4:47:79:e1:cf:6d:51:98:96:be:ac:c1: ac:05:b9:e7:f3:37:54:a3:f4:3d:af:17:17:b4:ff: 43:d6:de:0d:19:6d:e0:45:f3:cb:cf:38:c0:5d:83: a2:10:24:f5:f5:4c:46:45:a9:13:ba:23:2e:82:a2: 96:b4:85:2b:6a:06:97:df:7d:a7:69:13:42:99:fc: 8f:e6:f7:a2:30:01:b2:08:c6:7e:0e:0c:d9:60:52: a9:97:a8:dc:d6:a3:21:98:e9:f0:18:26:db:35:02: 47:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:33:20:5D:89:78:1C:B8:3D:B9:A3:7A:51:97:A8:4B:45:49:A1:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/8786f167-09ad-3485-abdb-4bdb10d1f4a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 64.86.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:59:9c:c5:df:34:fb:e7:6f:82:e0:4c:74:bc:51:c7:da:4f: bb:74:30:e1:e7:11:71:67:3a:52:c8:a4:91:b8:73:02:73:1f: dc:a2:ba:39:17:31:0d:81:f7:c9:89:be:35:d2:7d:22:cd:d6: d4:93:10:a6:76:aa:d3:c4:2c:e4:65:e5:89:1f:e4:fd:96:8e: 69:27:ed:ae:45:89:0d:61:d4:38:10:94:40:e3:48:fe:a0:22: 22:d5:55:4f:fc:ce:f3:dc:bc:f1:34:63:d1:93:4b:d4:e1:4d: 68:bb:8e:ce:ab:cc:e4:01:e5:b0:39:20:6f:17:b3:4f:62:94: cf:cd:a4:49:57:b8:3c:fd:5b:55:89:ad:e5:29:d1:6e:e2:cc: cc:5b:96:0c:ae:cd:94:90:a2:76:f4:a1:15:9d:df:89:3a:6f: 49:f1:ab:2b:b7:53:d3:17:a8:fa:ac:3d:1e:be:26:15:f8:24: b3:05:77:af:71:04:a8:2c:5e:ae:04:f0:27:ed:00:58:09:f5: 0e:d7:37:30:c6:da:16:cd:d8:ed:72:96:39:15:ba:7a:0e:d1: ee:c4:b5:4c:f0:93:73:bf:80:95:48:08:55:4b:80:e9:7c:b2: 71:6c:64:5c:79:46:08:b5:63:78:94:f5:79:23:13:f7:7e:d4: 3e:90:de:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vp6pEwau0H3D1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk NGRhYTgxMmMtYmNjMy00ZGYwLWFkM2UtZGM4Yzk5MmI2OTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNzFJi3VtHCXkxgEQJuwSheekXPbNiJaWzVJ D+PcOhgJyMF7gaVcfIJThHh7qywRyXlDCATbXKrpP52JPemHZ3KEjKXDHB6+Y2wA tNwPmVddOUGBODW6k3NXCYIHNovGvTSWjPeOgk5KVJb97oCM3/Ia31P4Y2Ckkqx5 utqO00Lb1Aigjl9ZXdEDAzqsO2mbk5NEnlx+0on0R3nhz21RmJa+rMGsBbnn8zdU o/Q9rxcXtP9D1t4NGW3gRfPLzzjAXYOiECT19UxGRakTuiMugqKWtIUragaX332n aRNCmfyP5veiMAGyCMZ+DgzZYFKpl6jc1qMhmOnwGCbbNQJHCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAzIF2JeBy4PbmjelGXqEtFSaGxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvODc4NmYxNjctMDlhZC0z NDg1LWFiZGItNGJkYjEwZDFmNGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFZxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNZnMXfNPvnb4LgTHS8UcfaT7t0MOHnEXFnOlLIpJG4cwJzH9yiujkX MQ2B98mJvjXSfSLN1tSTEKZ2qtPELORl5Ykf5P2Wjmkn7a5FiQ1h1DgQlEDjSP6g IiLVVU/8zvPcvPE0Y9GTS9ThTWi7js6rzOQB5bA5IG8Xs09ilM/NpElXuDz9W1WJ reUp0W7izMxblgyuzZSQonb0oRWd34k6b0nxqyu3U9MXqPqsPR6+JhX4JLMFd69x BKgsXq4E8CftAFgJ9Q7XNzDG2hbN2O1yljkVunoO0e7EtUzwk3O/gJVICFVLgOl8 snFsZFx5Rgi1Y3iU9XkjE/d+1D6Q3go= -----END CERTIFICATE-----Generated at Fri Apr 11 23:46:15 2025 by rpki-client