$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/80a077c3-8efa-30e0-9b05-f66d74aa2cfc.roa File: 80a077c3-8efa-30e0-9b05-f66d74aa2cfc.roa (raw, json) Hash identifier: F//8p/ZOW02AMMDraJVy+aIIWZDMq5OIPHZOlN81sRE= Subject key identifier: 12:FD:BE:90:31:63:DF:A1:89:06:D3:AE:90:2F:4F:BB:81:8D:55:D4 Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584957F40281CE59066B764A0E40 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/80a077c3-8efa-30e0-9b05-f66d74aa2cfc.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 212384 IP address blocks: 65.110.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:02:81:ce:59:06:6b:76:4a:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=aa5f0620-f0a0-456d-a257-acd24ffb08eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5d:bf:6e:f9:96:5a:bd:15:cc:2d:df:b7:85: 39:d5:be:e8:b1:c6:cf:a1:88:4e:e1:8d:14:dc:b9: be:dc:a7:7a:e0:dc:d7:6f:41:35:9e:ca:35:92:ce: f7:f3:cb:f6:4e:8b:19:0e:8e:90:ea:b2:f7:11:47: c8:1f:30:4a:7f:e3:0a:9d:c1:f0:11:6b:a7:42:c7: e8:dd:4e:f8:9f:92:0f:60:53:a3:74:6b:45:b5:40: 62:ec:e5:ec:74:2c:74:ce:51:b8:c2:58:79:6a:e8: 61:43:4a:83:f8:0a:89:f0:80:26:10:86:11:2a:68: b9:59:26:2b:78:bf:fc:0f:a8:76:23:0b:b0:17:31: 9d:5d:15:67:ab:c1:6e:32:eb:38:06:dd:3d:c9:5a: ec:94:f7:46:06:03:f5:e4:4d:48:51:49:a6:87:6a: 03:b1:3a:e2:ca:12:f1:a8:6f:06:0b:bc:39:4c:21: a7:e7:eb:20:e3:1a:3a:67:9e:9f:a4:0a:5a:e0:81: 39:8e:29:ef:12:19:d4:d0:ac:bc:6b:1b:07:1e:5b: 10:ee:ee:93:b7:90:e3:72:e6:4e:e7:53:5b:f7:37: 43:a1:c2:4a:be:0b:a1:40:fd:44:c6:9f:56:46:25: 0f:b0:42:f5:df:99:8d:06:2e:4c:24:0e:66:36:59: 61:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FD:BE:90:31:63:DF:A1:89:06:D3:AE:90:2F:4F:BB:81:8D:55:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/80a077c3-8efa-30e0-9b05-f66d74aa2cfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 65.110.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:21:c9:f6:4f:78:ba:c3:09:3c:3b:66:e6:5b:b4:84:01:82: 35:8f:4d:83:68:bd:7a:95:a9:b7:8c:f7:87:a3:3c:76:53:11: 91:c8:b8:af:7c:19:24:37:2f:43:70:b6:23:48:c3:cc:f7:8d: 54:8a:eb:7b:5d:28:43:61:48:e3:68:4e:29:d3:e2:a5:ab:4f: d7:20:a4:fb:85:1c:dd:d9:a0:04:38:74:68:41:ec:5c:7c:8f: 44:1b:e5:d8:2b:76:24:3d:3c:12:a6:92:9f:ed:28:a5:76:e0: 2e:1c:0f:c9:09:c9:da:85:61:10:5b:14:83:fe:f3:19:ed:07: 7b:49:95:bd:f2:71:f0:d4:5c:03:f9:55:b3:37:8b:25:c7:7c: 89:4c:80:a2:2d:c0:17:bd:6f:c3:2f:29:f1:0c:b9:f4:53:65: b1:7a:b8:7b:c4:c7:2e:56:9a:92:32:8e:d4:ee:94:bb:7e:a8: 8f:52:5f:25:71:c8:16:50:cd:9a:41:d7:b7:c0:e6:8d:e9:bc: a5:d6:8a:c6:dd:c0:2d:66:7c:30:7f:82:e0:6a:c8:bb:15:ad: ba:42:98:cb:9f:07:13:05:cd:24:75:75:a9:cb:48:89:44:bd: 6b:62:78:8c:d3:6a:ee:c4:2e:56:e8:df:c0:a2:f7:ff:f2:4f: c6:c9:3a:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9AKBzlkGa3ZKDkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk YWE1ZjA2MjAtZjBhMC00NTZkLWEyNTctYWNkMjRmZmIwOGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF2/bvmWWr0VzC3ft4U51b7oscbPoYhO4Y0U 3Lm+3Kd64NzXb0E1nso1ks7388v2TosZDo6Q6rL3EUfIHzBKf+MKncHwEWunQsfo 3U74n5IPYFOjdGtFtUBi7OXsdCx0zlG4wlh5auhhQ0qD+AqJ8IAmEIYRKmi5WSYr eL/8D6h2IwuwFzGdXRVnq8FuMus4Bt09yVrslPdGBgP15E1IUUmmh2oDsTriyhLx qG8GC7w5TCGn5+sg4xo6Z56fpApa4IE5jinvEhnU0Ky8axsHHlsQ7u6Tt5DjcuZO 51Nb9zdDocJKvguhQP1Exp9WRiUPsEL135mNBi5MJA5mNllhMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBL9vpAxY9+hiQbTrpAvT7uBjVXUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvODBhMDc3YzMtOGVmYS0z MGUwLTliMDUtZjY2ZDc0YWEyY2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQW4uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGohyfZPeLrDCTw7ZuZbtIQBgjWPTYNovXqVqbeM94ejPHZTEZHIuK98 GSQ3L0NwtiNIw8z3jVSK63tdKENhSONoTinT4qWrT9cgpPuFHN3ZoAQ4dGhB7Fx8 j0Qb5dgrdiQ9PBKmkp/tKKV24C4cD8kJydqFYRBbFIP+8xntB3tJlb3ycfDUXAP5 VbM3iyXHfIlMgKItwBe9b8MvKfEMufRTZbF6uHvExy5WmpIyjtTulLt+qI9SXyVx yBZQzZpB17fA5o3pvKXWisbdwC1mfDB/guBqyLsVrbpCmMufBxMFzSR1danLSIlE vWtieIzTau7ELlbo38Ci9//yT8bJOlE= -----END CERTIFICATE-----Generated at Sat Apr 5 06:20:08 2025 by rpki-client