$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/92124259-4c1a-3848-bcbb-1526f88a979a.roa File: 92124259-4c1a-3848-bcbb-1526f88a979a.roa (raw, json) Hash identifier: 9UwdilT6iwcjs9CZx4/nVqlCFAK14d5umvsCcnEsCzA= Subject key identifier: 84:AA:78:54:39:FF:0D:7D:BD:56:01:39:68:83:18:6F:96:2C:E0:E8 Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Certificate serial: 010D0C9F4328584961B9A3A7FFC52316010C8200 Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/92124259-4c1a-3848-bcbb-1526f88a979a.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 174 IP address blocks: 64.40.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:a3:a7:ff:c5:23:16:01:0c:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=8c8b1838-be85-4c1a-9776-c08510b7f7bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:64:a9:93:9d:7f:78:3e:87:51:59:79:2a:4f: 8e:cc:a1:43:85:1b:18:3f:d5:bd:0d:63:a9:af:b2: 96:58:5e:f9:ce:f3:f0:b0:43:5f:40:d0:1e:41:ad: ba:6f:b1:76:d0:4e:0f:7f:fc:e8:fb:1e:42:bb:68: b1:84:33:8a:7e:2a:ce:8b:fd:38:c7:53:79:20:15: f8:14:b4:c9:10:ea:18:c0:92:37:16:4b:b9:5f:08: bd:29:f6:e8:4c:0e:a2:ad:5b:f0:2f:ae:11:8d:ab: 77:50:b8:17:e5:42:a4:2a:c0:53:42:3d:eb:17:2f: 85:bf:8b:9c:0a:5d:c5:96:00:62:fa:13:c8:c7:a6: 73:67:30:24:6a:02:96:cc:75:0d:b4:10:f2:a8:93: 95:88:dc:d6:fc:88:14:60:6a:16:ff:72:d4:84:0e: 06:e5:34:f5:5b:c3:c3:ef:ec:81:7e:cc:c3:0a:88: 4c:5b:61:d5:36:da:72:7f:6c:71:32:3f:c6:03:e2: 0b:f4:c3:0b:85:bc:33:a0:91:50:a2:e6:3f:d2:a2: 04:6f:63:e2:b1:47:41:3e:c0:ff:87:5a:00:63:12: 46:8d:00:78:36:47:f2:0b:db:aa:1c:4d:b9:d1:84: 04:2f:46:08:cf:25:7d:d8:02:11:cc:c0:78:8e:a8: 25:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AA:78:54:39:FF:0D:7D:BD:56:01:39:68:83:18:6F:96:2C:E0:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/92124259-4c1a-3848-bcbb-1526f88a979a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl X509v3 Authority Key Identifier: keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer sbgp-ipAddrBlock: critical IPv4: 64.40.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:f5:dc:fb:9e:c6:4d:e2:b3:e6:93:d9:71:25:00:23:48:3e: f6:f5:6a:25:c7:d7:65:15:d8:28:e4:7e:73:83:84:0c:dc:db: 1e:40:b7:62:1a:78:e3:dc:1b:42:57:38:41:6f:40:8a:06:4f: ae:5c:ac:2d:90:ca:6a:fe:d3:24:51:5b:8a:26:0f:6b:1a:7d: 23:f2:65:f0:a2:77:b8:f2:55:57:0f:38:cb:de:f1:a2:c5:6f: b2:e0:8c:6a:6b:aa:a1:83:74:b0:d5:61:eb:8b:56:2d:c1:d2: 41:4d:28:30:4a:bc:6f:f3:7e:da:0d:2f:d1:1c:1e:5c:69:60: 9f:cc:18:04:16:38:30:e6:b8:d1:fb:9a:42:9f:da:dd:1d:fc: 48:ab:0b:bb:d6:f2:36:e5:ac:8a:a2:99:2a:f5:ab:e8:9d:9c: da:4c:59:63:60:4b:25:16:f6:76:6c:55:30:bd:dc:5b:0f:ff: 5b:d3:e4:00:92:24:6f:6e:21:0c:50:3e:07:0a:bb:1d:4f:77: 79:1d:c7:28:f3:f6:32:a2:2d:23:9b:31:18:57:21:b4:d6:af: f8:fb:29:be:a1:7d:29:3e:c2:63:fd:dc:f7:90:86:e1:93:3e: 29:fe:ec:5c:0e:7d:01:63:b9:71:d1:b1:8b:c5:1f:0c:d4:6f: 58:25:0e:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuaOn/8UjFgEMggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk NWVlMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk OGM4YjE4MzgtYmU4NS00YzFhLTk3NzYtYzA4NTEwYjdmN2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomSpk51/eD6HUVl5Kk+OzKFDhRsYP9W9DWOp r7KWWF75zvPwsENfQNAeQa26b7F20E4Pf/zo+x5Cu2ixhDOKfirOi/04x1N5IBX4 FLTJEOoYwJI3Fku5Xwi9KfboTA6irVvwL64Rjat3ULgX5UKkKsBTQj3rFy+Fv4uc Cl3FlgBi+hPIx6ZzZzAkagKWzHUNtBDyqJOViNzW/IgUYGoW/3LUhA4G5TT1W8PD 7+yBfszDCohMW2HVNtpyf2xxMj/GA+IL9MMLhbwzoJFQouY/0qIEb2PisUdBPsD/ h1oAYxJGjQB4NkfyC9uqHE250YQEL0YIzyV92AIRzMB4jqglJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISqeFQ5/w19vVYBOWiDGG+WLODoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5 MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvOTIxMjQyNTktNGMxYS0z ODQ4LWJjYmItMTUyNmY4OGE5NzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4 Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1 YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCiYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACn13Puexk3is+aT2XElACNIPvb1aiXH12UV2CjkfnODhAzc2x5At2Ia eOPcG0JXOEFvQIoGT65crC2Qymr+0yRRW4omD2safSPyZfCid7jyVVcPOMve8aLF b7LgjGprqqGDdLDVYeuLVi3B0kFNKDBKvG/zftoNL9EcHlxpYJ/MGAQWODDmuNH7 mkKf2t0d/EirC7vW8jblrIqimSr1q+idnNpMWWNgSyUW9nZsVTC93FsP/1vT5ACS JG9uIQxQPgcKux1Pd3kdxyjz9jKiLSObMRhXIbTWr/j7Kb6hfSk+wmP93PeQhuGT Pin+7FwOfQFjuXHRsYvFHwzUb1glDmM= -----END CERTIFICATE-----Generated at Sat Apr 5 16:16:04 2025 by rpki-client