$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/16caa9ad-9e7c-3222-998f-9196456a0581.roa File: 16caa9ad-9e7c-3222-998f-9196456a0581.roa (raw, json) Hash identifier: ZC1KXyjve5N+6SSDNVQimb6eyRcCDQ7N6GxwmGuMvpc= Subject key identifier: 05:1C:89:2E:73:56:52:98:B5:0C:3C:D4:35:4A:96:DB:94:ED:B2:B2 Certificate issuer: /CN=ff081ee5-1af1-4a04-9fee-2540bcef95c3 Certificate serial: 010D0C9F43285848EF6130C010763BFC87126080 Authority key identifier: 5C:7A:5D:FA:65:3A:32:DA:E6:35:F9:92:DA:69:5C:AD:F6:7E:82:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/16caa9ad-9e7c-3222-998f-9196456a0581.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 21846 IP address blocks: 64.209.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/ff081ee5-1af1-4a04-9fee-2540bcef95c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/ff081ee5-1af1-4a04-9fee-2540bcef95c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:30:c0:10:76:3b:fc:87:12:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff081ee5-1af1-4a04-9fee-2540bcef95c3 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=1eef63d0-dff1-4e54-9353-424fa5af1050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0e:10:f9:96:dd:33:72:af:9f:be:0b:6c:50: 1a:c3:2b:9e:3f:df:09:45:55:09:10:6c:ab:1a:a8: 31:71:20:09:95:89:c0:81:d2:3b:dd:de:48:8f:3e: b3:cf:0e:da:e7:79:0e:12:0b:93:74:3e:14:02:14: 48:02:74:98:ea:85:9f:28:f5:eb:9f:84:b9:36:7e: bf:10:8b:df:b6:55:d2:0d:a3:aa:cf:51:a3:98:3e: 37:fd:b4:5f:ed:fa:c6:52:19:05:9c:99:96:47:53: df:d0:6e:e0:56:3f:81:ea:29:46:54:46:f1:dd:da: f9:6b:ec:1f:8f:1c:68:64:e8:60:ea:b5:47:de:99: 9e:91:34:5f:c3:d7:32:21:45:27:fa:b3:b3:24:7d: 84:57:3d:da:35:53:9f:60:a7:2c:66:47:aa:5c:54: d6:df:a8:01:62:c1:2b:dc:de:3e:60:e5:5f:1e:a9: 07:74:a8:19:a6:db:39:30:12:eb:cb:56:09:0f:78: b6:ec:4a:9b:36:6c:83:29:77:8d:9e:78:cb:54:7b: 9d:f2:1e:48:2c:31:56:5d:0b:37:a6:ea:58:d6:79: 1e:6d:23:04:45:d6:31:7a:b2:55:50:1c:cf:82:9d: 12:cf:f6:66:2e:23:64:51:67:f5:ba:a4:ac:76:6e: ca:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1C:89:2E:73:56:52:98:B5:0C:3C:D4:35:4A:96:DB:94:ED:B2:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/16caa9ad-9e7c-3222-998f-9196456a0581.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/ff081ee5-1af1-4a04-9fee-2540bcef95c3.crl X509v3 Authority Key Identifier: keyid:5C:7A:5D:FA:65:3A:32:DA:E6:35:F9:92:DA:69:5C:AD:F6:7E:82:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3.cer sbgp-ipAddrBlock: critical IPv4: 64.209.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:0e:aa:c4:a1:c3:aa:c0:1d:df:43:4b:0f:49:5a:0f:f4:49: f4:0c:4a:b5:3d:aa:76:14:d2:98:b5:e1:33:f8:e8:9a:9b:2c: 5c:7c:b1:2f:ae:b1:1e:0c:ed:db:d0:43:e7:be:51:ca:a4:60: 77:91:11:32:04:d8:10:b0:98:8a:75:b8:9c:73:00:21:a1:f8: 3b:83:f2:a6:01:5b:b8:f9:a6:d2:41:97:30:c8:a1:b9:24:2b: af:90:29:5e:66:50:28:40:8d:97:f3:06:37:60:87:5c:8d:27: 9e:e6:2a:7c:5b:07:54:80:df:80:d6:65:f4:09:8d:b2:cc:45: 21:1d:44:ab:3b:1b:9f:9c:dc:f1:79:ca:06:a5:7f:67:51:c7: f6:c4:7f:0f:3e:96:ea:02:a9:ea:0a:08:32:da:6f:37:7d:05: a5:19:dd:c3:f5:60:19:4f:da:96:80:bb:53:2d:fd:cd:04:25: ab:0f:52:73:03:e5:ce:74:7d:b4:2e:3a:68:fd:cb:86:44:0a: 9b:b2:18:18:d8:ca:a8:d9:a6:fb:33:d5:75:39:58:7b:d9:fb: 0b:c2:40:72:41:4b:16:4a:22:e4:9c:38:b2:40:cf:25:90:66: de:a9:4f:93:26:04:e3:a5:ba:26:95:dc:dc:37:d2:7b:88:ac: ce:75:65:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYTDAEHY7/IcSYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYwODFlZTUtMWFmMS00YTA0LTlmZWUtMjU0MGJjZWY5 NWMzMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk MWVlZjYzZDAtZGZmMS00ZTU0LTkzNTMtNDI0ZmE1YWYxMDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ4Q+ZbdM3Kvn74LbFAawyueP98JRVUJEGyr GqgxcSAJlYnAgdI73d5Ijz6zzw7a53kOEguTdD4UAhRIAnSY6oWfKPXrn4S5Nn6/ EIvftlXSDaOqz1GjmD43/bRf7frGUhkFnJmWR1Pf0G7gVj+B6ilGVEbx3dr5a+wf jxxoZOhg6rVH3pmekTRfw9cyIUUn+rOzJH2EVz3aNVOfYKcsZkeqXFTW36gBYsEr 3N4+YOVfHqkHdKgZpts5MBLry1YJD3i27EqbNmyDKXeNnnjLVHud8h5ILDFWXQs3 pupY1nkebSMERdYxerJVUBzPgp0Sz/ZmLiNkUWf1uqSsdm7KwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUciS5zVlKYtQw81DVKltuU7bKyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZjA4 MWVlNS0xYWYxLTRhMDQtOWZlZS0yNTQwYmNlZjk1YzMvMTZjYWE5YWQtOWU3Yy0z MjIyLTk5OGYtOTE5NjQ1NmEwNTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmYwODFlZTUtMWFmMS00YTA0LTlm ZWUtMjU0MGJjZWY5NWMzL2ZmMDgxZWU1LTFhZjEtNGEwNC05ZmVlLTI1NDBiY2Vm OTVjMy5jcmwwHwYDVR0jBBgwFoAUXHpd+mU6MtrmNfmS2mlcrfZ+gsUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZjA4MWVlNS0xYWYxLTRhMDQtOWZlZS0yNTQw YmNlZjk1YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQNGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkOqsShw6rAHd9DSw9JWg/0SfQMSrU9qnYU0pi14TP46JqbLFx8sS+u sR4M7dvQQ+e+UcqkYHeRETIE2BCwmIp1uJxzACGh+DuD8qYBW7j5ptJBlzDIobkk K6+QKV5mUChAjZfzBjdgh1yNJ57mKnxbB1SA34DWZfQJjbLMRSEdRKs7G5+c3PF5 ygalf2dRx/bEfw8+luoCqeoKCDLabzd9BaUZ3cP1YBlP2paAu1Mt/c0EJasPUnMD 5c50fbQuOmj9y4ZECpuyGBjYyqjZpvsz1XU5WHvZ+wvCQHJBSxZKIuScOLJAzyWQ Zt6pT5MmBOOluiaV3Nw30nuIrM51ZSc= -----END CERTIFICATE-----Generated at Fri Mar 14 08:37:59 2025 by rpki-client