$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0ab997a0-9032-3aab-a0c8-de89d4870675.roa File: 0ab997a0-9032-3aab-a0c8-de89d4870675.roa (raw, json) Hash identifier: 8k8IpNzR2QaGO2z6kf0DhhRF2+uxf4CjFUrUDbhZoFs= Subject key identifier: B9:35:93:14:C0:18:74:4A:BE:46:90:12:E3:8C:4B:96:67:60:E2:FB Certificate issuer: /CN=487abf98-3073-43c6-b10e-a615e64ccc65 Certificate serial: 010D0C9F43285848FD56A1305590EF9E444FCE80 Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0ab997a0-9032-3aab-a0c8-de89d4870675.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 18726 IP address blocks: 206.55.100.0/22 maxlen: 24 208.89.40.0/21 maxlen: 24 2620:133:c000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:a1:30:55:90:ef:9e:44:4f:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=0c8045c9-2729-4394-8b89-448ebec669de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ae:d2:21:aa:2c:5e:3a:6e:5a:19:ea:b9:5a: 13:1f:a8:f0:30:84:72:a2:37:b5:42:2e:ea:53:dc: db:10:d5:be:cf:54:ab:77:90:a4:af:da:fd:74:4b: f4:27:82:f3:3e:c0:b9:26:e5:09:40:54:5d:cb:e0: 08:7d:88:e6:5b:85:2e:ff:20:e9:01:6e:3a:6e:d2: 88:4d:4a:53:96:09:a8:6e:8b:c6:17:16:38:84:f9: c9:79:82:15:93:d4:5b:c6:17:dc:db:0e:21:81:33: 3c:73:c0:4b:c6:05:fb:a5:f6:16:ef:da:a9:14:8e: aa:13:56:fe:fb:5c:d7:4e:89:6e:6f:4d:c3:88:e7: db:ef:6d:af:ab:04:41:dc:d9:07:fe:9b:34:1f:2c: 2a:f0:0b:4b:cb:c3:33:cd:47:1d:a5:7e:65:9a:5b: f3:2e:e3:65:48:a5:56:b0:1a:61:05:0d:fc:6a:82: e5:0c:33:d3:29:bd:e2:09:83:d2:87:47:9a:a8:82: ee:12:4c:7f:fe:ff:dc:b0:e4:66:e7:db:36:bb:27: 55:64:bc:5e:84:e6:60:94:f5:b1:3b:1c:8f:9a:82: d6:c6:7b:c3:93:5b:01:e7:7b:c6:4e:a1:4a:16:50: 81:64:22:1c:be:aa:6d:a2:e2:84:aa:22:ef:d0:42: 05:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:35:93:14:C0:18:74:4A:BE:46:90:12:E3:8C:4B:96:67:60:E2:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0ab997a0-9032-3aab-a0c8-de89d4870675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl X509v3 Authority Key Identifier: keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer sbgp-ipAddrBlock: critical IPv4: 206.55.100.0/22 208.89.40.0/21 IPv6: 2620:133:c000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:01:30:d9:a1:a7:15:cd:b5:5c:ae:c3:ca:ea:fa:ef:55:77: 2f:94:08:ca:64:31:87:80:20:9c:3e:b0:5e:02:6d:1c:d1:67: 71:38:d9:58:8b:06:70:87:78:5f:31:01:37:00:03:b8:8b:dd: d3:b9:8f:19:93:9b:3b:b4:11:a1:09:d3:29:47:e5:f3:1c:8d: 21:c7:ca:4b:b8:d5:0d:c9:a4:f6:84:46:0a:e8:78:27:47:9b: c9:19:5a:31:6d:90:7b:f9:63:44:a4:6b:c2:e8:41:cc:78:26: 04:85:0f:61:4d:b4:b9:83:51:ee:87:de:2d:35:a6:62:13:fa: 45:a4:99:98:0a:52:63:a0:7c:25:09:14:96:98:4b:ca:4a:73: 87:f7:9e:ff:03:ad:5a:0b:79:3f:d3:c5:c7:66:8c:e4:b0:80: ce:f4:86:d5:7a:72:ea:e2:46:8e:7d:da:d7:2e:af:d1:00:c4: d5:f6:c7:df:f1:54:42:fc:15:35:2d:1c:b1:fe:a4:bc:48:b5: f0:48:24:10:cd:5c:91:f6:2a:95:1f:3a:98:10:ee:f6:9f:7c: 77:31:3f:06:19:b0:ab:90:d9:fb:67:4b:0a:74:30:b5:12:b7: 54:21:94:8c:31:8b:e0:d0:be:a3:40:fc:04:21:1c:f2:d8:0d: cd:20:8a:80 -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEj9VqEwVZDvnkRPzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg3YWJmOTgtMzA3My00M2M2LWIxMGUtYTYxNWU2NGNj YzY1MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk MGM4MDQ1YzktMjcyOS00Mzk0LThiODktNDQ4ZWJlYzY2OWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj67SIaosXjpuWhnquVoTH6jwMIRyoje1Qi7q U9zbENW+z1Srd5Ckr9r9dEv0J4LzPsC5JuUJQFRdy+AIfYjmW4Uu/yDpAW46btKI TUpTlgmobovGFxY4hPnJeYIVk9Rbxhfc2w4hgTM8c8BLxgX7pfYW79qpFI6qE1b+ +1zXTolub03DiOfb722vqwRB3NkH/ps0Hywq8AtLy8MzzUcdpX5lmlvzLuNlSKVW sBphBQ38aoLlDDPTKb3iCYPSh0eaqILuEkx//v/csORm59s2uydVZLxehOZglPWx OxyPmoLWxnvDk1sB53vGTqFKFlCBZCIcvqptouKEqiLv0EIF0QIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFLk1kxTAGHRKvkaQEuOMS5ZnYOL7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdh YmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1ZTY0Y2NjNjUvMGFiOTk3YTAtOTAzMi0z YWFiLWEwYzgtZGU4OWQ0ODcwNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDg3YWJmOTgtMzA3My00M2M2LWIx MGUtYTYxNWU2NGNjYzY1LzQ4N2FiZjk4LTMwNzMtNDNjNi1iMTBlLWE2MTVlNjRj Y2M2NS5jcmwwHwYDVR0jBBgwFoAUUHrkAjzYg+et9qTUFubnFT8KBQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdhYmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1 ZTY0Y2NjNjUuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCzjdkAwQD 0FkoMA8EAgACMAkDBwQmIAEzwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfQEw2aGnFc21XK7Dyur671V3 L5QIymQxh4AgnD6wXgJtHNFncTjZWIsGcId4XzEBNwADuIvd07mPGZObO7QRoQnT KUfl8xyNIcfKS7jVDcmk9oRGCuh4J0ebyRlaMW2Qe/ljRKRrwuhBzHgmBIUPYU20 uYNR7ofeLTWmYhP6RaSZmApSY6B8JQkUlphLykpzh/ee/wOtWgt5P9PFx2aM5LCA zvSG1Xpy6uJGjn3a1y6v0QDE1fbH3/FUQvwVNS0csf6kvEi18EgkEM1ckfYqlR86 mBDu9p98dzE/Bhmwq5DZ+2dLCnQwtRK3VCGUjDGL4NC+o0D8BCEc8tgNzSCKgA== -----END CERTIFICATE-----Generated at Fri Mar 14 11:04:14 2025 by rpki-client