$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a68e1a05-d679-31bd-9d80-40bf4242e14e.roa File: a68e1a05-d679-31bd-9d80-40bf4242e14e.roa (raw, json) Hash identifier: 1QavXqAMNKqXPanpF6WIguTQkOiyuWwBjrY1rCR8lM8= Subject key identifier: E6:9A:DB:AA:F7:09:0F:FB:D6:49:FD:99:38:D8:64:BA:51:ED:DF:74 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F43285848C84BE6CA62C83BF897B25080 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a68e1a05-d679-31bd-9d80-40bf4242e14e.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 36492 IP address blocks: 64.9.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:e6:ca:62:c8:3b:f8:97:b2:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=5b2189f1-e261-46d8-bcf6-6e5d0a14eb75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:09:91:f4:46:e0:cd:7d:24:f2:c7:0a:17:de: a5:c8:11:e9:4e:bc:f8:30:13:18:03:6c:87:36:60: e4:ab:e1:7c:43:d4:e2:25:66:f8:9b:41:19:f5:cb: e5:2c:a9:5b:78:38:6a:a3:2a:da:ea:f7:1a:00:25: fc:b7:3a:76:5a:1b:28:5e:d6:31:19:73:bd:b4:06: 13:43:96:7f:0c:62:1f:ca:27:ec:22:d0:8a:a7:2b: ec:64:d6:54:a4:c3:fc:7a:11:d5:a1:03:50:5e:9e: dc:cc:81:1b:c4:f8:de:b3:c7:da:d3:69:06:d9:b2: 3e:50:9c:ce:4b:9b:04:33:3e:c9:91:b5:2a:c5:c4: b7:06:3e:76:8a:25:dc:72:c4:28:35:68:1c:12:6f: 4d:14:17:a6:da:c6:3a:ef:7f:ca:41:76:73:e3:4a: 19:f7:fc:23:ee:5d:07:5f:f7:0e:e8:ac:d9:ac:e8: a9:39:5e:34:d0:01:df:f9:bb:3b:44:87:95:d0:e6: 17:1b:27:c3:c1:83:cf:95:f3:26:af:0b:f0:57:8c: 4e:44:38:31:a8:ef:1a:df:d6:65:b9:72:bb:09:a4: 72:2e:e7:6a:2c:14:3a:20:c2:f9:32:cc:87:13:0f: e8:c7:29:7b:3b:39:39:3e:39:ab:fd:36:34:44:67: 82:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:9A:DB:AA:F7:09:0F:FB:D6:49:FD:99:38:D8:64:BA:51:ED:DF:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a68e1a05-d679-31bd-9d80-40bf4242e14e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 64.9.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:75:9f:55:9f:81:fe:50:bf:8f:86:30:b5:be:7b:77:b0:f3: 0f:cb:8f:b6:5f:47:83:df:dc:f8:38:4f:a2:42:c1:2f:90:58: e5:23:7c:fc:3f:1d:d2:fa:67:b9:37:b5:79:ac:31:69:e1:06: ca:5b:8f:53:0a:0c:6c:56:32:98:8e:a3:35:ee:2a:bd:4a:c6: 9f:92:7f:91:c6:c1:47:65:e0:9b:6d:98:f2:b2:f2:35:c0:25: db:b1:9e:32:e7:ea:0b:6f:70:e8:c7:ac:9d:cd:88:85:8e:cc: 26:7e:5a:2e:59:a2:c8:79:26:1b:9e:ee:8e:c8:90:6b:54:9d: 62:40:07:f5:03:c8:4f:df:2c:48:40:65:e9:85:4d:2b:f3:31: b0:4a:ac:18:4e:be:97:c7:96:cc:60:4b:8f:ef:2e:e7:26:7e: 14:37:a4:e5:85:ac:7d:ae:fa:b8:12:84:ab:5e:01:0f:50:f6: aa:11:2d:45:f2:76:ea:33:f4:56:32:50:8a:5e:6a:85:bf:c8: 4d:22:08:cd:f3:3b:2e:e2:81:09:4a:1a:a1:e4:1d:b2:c8:e1: 0b:57:c3:2d:86:66:38:70:c7:45:15:95:32:52:a0:69:4b:f5: 27:03:a1:11:30:52:72:42:24:b1:94:4e:8b:a5:f8:f8:2d:57: ea:64:db:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+bKYsg7+JeyUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NWIyMTg5ZjEtZTI2MS00NmQ4LWJjZjYtNmU1ZDBhMTRlYjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQmR9EbgzX0k8scKF96lyBHpTrz4MBMYA2yH NmDkq+F8Q9TiJWb4m0EZ9cvlLKlbeDhqoyra6vcaACX8tzp2WhsoXtYxGXO9tAYT Q5Z/DGIfyifsItCKpyvsZNZUpMP8ehHVoQNQXp7czIEbxPjes8fa02kG2bI+UJzO S5sEMz7JkbUqxcS3Bj52iiXccsQoNWgcEm9NFBem2sY673/KQXZz40oZ9/wj7l0H X/cO6KzZrOipOV400AHf+bs7RIeV0OYXGyfDwYPPlfMmrwvwV4xORDgxqO8a39Zl uXK7CaRyLudqLBQ6IML5MsyHEw/oxyl7Ozk5Pjmr/TY0RGeC/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOaa26r3CQ/71kn9mTjYZLpR7d90MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYTY4ZTFhMDUtZDY3OS0z MWJkLTlkODAtNDBiZjQyNDJlMTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQAn2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHx1n1Wfgf5Qv4+GMLW+e3ew8w/Lj7ZfR4Pf3Pg4T6JCwS+QWOUjfPw/ HdL6Z7k3tXmsMWnhBspbj1MKDGxWMpiOozXuKr1Kxp+Sf5HGwUdl4JttmPKy8jXA JduxnjLn6gtvcOjHrJ3NiIWOzCZ+Wi5Zosh5Jhue7o7IkGtUnWJAB/UDyE/fLEhA ZemFTSvzMbBKrBhOvpfHlsxgS4/vLucmfhQ3pOWFrH2u+rgShKteAQ9Q9qoRLUXy duoz9FYyUIpeaoW/yE0iCM3zOy7igQlKGqHkHbLI4QtXwy2GZjhwx0UVlTJSoGlL 9ScDoREwUnJCJLGUToul+PgtV+pk21g= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:53 2025 by rpki-client