$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a010b967-c3ee-39ad-90e8-efa3cbc3bb72.roa File: a010b967-c3ee-39ad-90e8-efa3cbc3bb72.roa (raw, json) Hash identifier: lS/MG2otSMEY7hnhMQO4oRU9UZ8u1NsOqE1x4F2pXIk= Subject key identifier: 30:CD:02:95:E0:FE:56:00:25:6E:AA:B2:BD:66:D3:1F:86:F7:B8:D0 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848BBBB771762BA6AE164727360 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a010b967-c3ee-39ad-90e8-efa3cbc3bb72.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 852 IP address blocks: 64.114.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:77:17:62:ba:6a:e1:64:72:73:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=62cc9d71-7ee7-429d-84e6-a98ff2dd79a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:54:bb:d3:38:55:6f:b6:94:48:ab:c5:a7:d4: ee:39:74:f4:22:cf:25:e7:58:6c:85:01:a2:de:e2: 31:70:b9:00:8e:99:b8:83:16:83:ed:e4:50:6d:af: 03:13:6a:84:12:f1:ce:94:9c:90:35:5c:fd:10:5e: 3f:69:3f:de:8e:cb:b5:0d:04:d7:22:52:94:5d:ea: a4:e6:98:da:40:d3:55:e0:a7:78:a9:40:ee:de:40: 0b:af:83:7f:ca:6b:7f:ff:3e:7f:c3:6c:3f:77:4d: a5:7b:a2:e2:fb:82:bf:d3:65:45:40:d3:b4:54:2d: 3a:61:a1:2c:20:a8:1f:53:dc:69:c0:0d:f7:60:0e: 64:a4:53:b3:7a:a0:a4:1f:20:5c:a3:0c:34:72:62: 47:ec:93:d6:fa:95:01:c5:05:a5:0c:d2:05:0b:a0: 60:1f:8a:53:b3:17:dc:e2:c8:a9:7a:67:dd:61:c4: 54:a4:ca:5c:4e:cf:d5:d8:0a:25:7d:d7:5b:90:c0: a3:f0:2b:26:23:72:66:ed:81:70:82:0f:00:48:6d: 67:30:fc:1a:95:73:60:a5:9b:e6:19:37:7e:f3:3d: cf:20:c0:d1:9e:64:45:9b:8c:1f:2c:98:e1:a7:9f: 9d:1d:f5:e0:dc:72:94:3b:43:ba:fe:39:d4:55:71: 1c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:CD:02:95:E0:FE:56:00:25:6E:AA:B2:BD:66:D3:1F:86:F7:B8:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a010b967-c3ee-39ad-90e8-efa3cbc3bb72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 64.114.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:09:2e:68:4b:d9:63:c9:bf:21:6f:62:5e:c7:44:8f:a3:0b: 9b:d7:fa:85:f9:fd:86:b5:e9:f4:b9:c9:5b:34:6e:48:34:72: f0:ee:ee:ec:d2:84:f8:b8:ed:32:dd:c2:c1:2f:d5:52:ee:d4: d8:84:a7:32:32:75:3a:ba:0d:77:52:40:5e:76:8d:2b:01:f4: 54:33:a6:11:16:e6:37:d2:a5:1e:1d:13:e9:75:3d:70:59:aa: cb:0c:77:b7:91:de:11:68:5e:09:e9:4e:9e:ce:39:5a:f6:80: 62:25:7c:dd:6d:a2:6e:77:bc:ec:3f:45:da:2c:b8:d2:e1:f7: b5:41:7c:bb:f1:7e:d8:d9:61:57:0a:37:e2:17:cd:dc:7e:a7: da:5d:ee:a4:cf:93:43:fb:7b:8f:22:c9:50:7d:d5:4c:05:d3: 66:86:96:bb:27:86:dd:82:5e:9b:72:23:07:ef:a4:19:96:fd: ff:6e:f1:f7:eb:a2:6c:c1:83:03:71:58:64:68:0a:34:c9:15: 22:b9:20:fd:db:43:10:5a:df:05:2d:2a:c1:ab:71:22:a5:3a: 57:f1:63:ae:8d:33:ec:04:d2:bc:f5:a5:69:9a:64:00:7e:74: 4a:da:fc:3c:ca:64:ee:27:0a:7b:8b:da:39:24:cf:75:92:9a: d3:b9:9d:87 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEi7u3cXYrpq4WRyc2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk NjJjYzlkNzEtN2VlNy00MjlkLTg0ZTYtYTk4ZmYyZGQ3OWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFS70zhVb7aUSKvFp9TuOXT0Is8l51hshQGi 3uIxcLkAjpm4gxaD7eRQba8DE2qEEvHOlJyQNVz9EF4/aT/ejsu1DQTXIlKUXeqk 5pjaQNNV4Kd4qUDu3kALr4N/ymt//z5/w2w/d02le6Li+4K/02VFQNO0VC06YaEs IKgfU9xpwA33YA5kpFOzeqCkHyBcoww0cmJH7JPW+pUBxQWlDNIFC6BgH4pTsxfc 4sipemfdYcRUpMpcTs/V2AolfddbkMCj8CsmI3Jm7YFwgg8ASG1nMPwalXNgpZvm GTd+8z3PIMDRnmRFm4wfLJjhp5+dHfXg3HKUO0O6/jnUVXEcCQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDDNApXg/lYAJW6qsr1m0x+G97jQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYTAxMGI5NjctYzNlZS0z OWFkLTkwZTgtZWZhM2NiYzNiYjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQHIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAKwkuaEvZY8m/IW9iXsdEj6MLm9f6hfn9hrXp9LnJWzRuSDRy8O7u7NKE +LjtMt3CwS/VUu7U2ISnMjJ1OroNd1JAXnaNKwH0VDOmERbmN9KlHh0T6XU9cFmq ywx3t5HeEWheCelOns45WvaAYiV83W2ibne87D9F2iy40uH3tUF8u/F+2NlhVwo3 4hfN3H6n2l3upM+TQ/t7jyLJUH3VTAXTZoaWuyeG3YJem3IjB++kGZb9/27x9+ui bMGDA3FYZGgKNMkVIrkg/dtDEFrfBS0qwatxIqU6V/Fjro0z7ATSvPWlaZpkAH50 Str8PMpk7icKe4vaOSTPdZKa07mdhw== -----END CERTIFICATE-----Generated at Sun Apr 6 06:00:52 2025 by rpki-client