$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/6baaed6b-21f4-38e4-95c2-2a54b155b28c.roa File: 6baaed6b-21f4-38e4-95c2-2a54b155b28c.roa (raw, json) Hash identifier: u1yd45QB/nHTlw8treMmn1tTZk3EgihUZd6v2al/U4s= Subject key identifier: 9F:AE:AD:73:2D:D3:F7:AF:E1:78:7A:93:3B:B3:55:22:5D:B2:D7:34 Certificate issuer: /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73 Certificate serial: 010D0C9F4328584908815E50E74C227295A0CD80 Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/6baaed6b-21f4-38e4-95c2-2a54b155b28c.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 399808 IP address blocks: 64.29.128.0/24 maxlen: 24 2607:f3a0:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:5e:50:e7:4c:22:72:95:a0:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=b82a2549-af24-4449-8aca-ffada2b629b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:77:18:8b:da:c1:fd:a3:43:8e:2d:0c:02:be: bb:6b:f3:c0:49:2b:2a:bb:d5:c1:48:bb:65:cc:02: 37:32:57:53:91:08:97:25:06:77:82:49:4f:5c:de: 41:78:36:b9:16:9f:c1:1d:d4:c6:6d:22:96:28:90: 77:fa:6e:b4:00:79:b9:45:c8:3e:76:db:5e:99:e3: 2c:a3:dd:87:44:2d:df:fc:55:a1:d1:36:3e:44:7c: 24:8f:b1:74:32:6c:d8:0e:dc:7d:ef:2d:76:5c:2b: 99:88:bb:85:3b:47:c3:74:8f:88:7d:04:ec:a6:f0: 3e:0f:e7:05:6f:a4:48:f9:81:f2:93:66:ab:94:3f: fd:91:00:0a:0a:28:46:67:5c:8b:cb:2b:29:6d:b1: 8c:d3:c1:ea:f6:8d:80:29:8e:7f:92:de:34:84:65: db:97:5f:fe:e6:9b:08:f5:ad:9e:40:5d:e6:ad:53: 06:ae:bd:7a:ec:93:fe:4e:d2:61:d6:9c:3e:30:de: ad:c2:38:d4:15:f5:f4:2c:bf:55:e9:83:53:91:af: 88:75:35:58:71:35:35:6e:ce:0b:b4:ee:02:fa:1c: d0:1c:e1:2c:b8:40:3e:62:6a:ee:ae:89:64:c7:75: fd:a8:e4:fc:b1:00:45:46:e1:3a:de:5a:93:1f:4b: cb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:AE:AD:73:2D:D3:F7:AF:E1:78:7A:93:3B:B3:55:22:5D:B2:D7:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/6baaed6b-21f4-38e4-95c2-2a54b155b28c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl X509v3 Authority Key Identifier: keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer sbgp-ipAddrBlock: critical IPv4: 64.29.128.0/24 IPv6: 2607:f3a0:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ba:f5:83:22:27:00:e8:b7:73:9d:34:75:2f:56:c0:ba:d4: 17:f5:9e:e5:3a:2f:6f:22:77:60:62:4e:83:be:3d:25:88:7b: 75:d9:94:b7:57:18:4d:71:b3:ad:02:27:f5:a6:7d:64:44:8f: fc:0e:16:d4:d2:b0:4c:3b:06:39:87:de:b9:f9:7a:78:3d:8e: 7e:fe:25:70:15:b6:c7:13:11:88:43:ed:40:ad:a8:cb:d1:bf: f0:13:a5:36:ce:fa:23:a0:c5:01:b7:d5:fd:3d:24:ea:21:7b: de:8e:ce:a5:b4:18:20:3d:c2:98:42:9e:d3:2d:d0:54:ae:16: 2b:93:07:d8:6b:38:26:8c:5c:b7:a3:47:e9:ab:85:11:40:9e: da:09:82:69:db:2b:e2:2f:4c:0c:42:0a:5f:49:aa:f6:27:54: 7d:72:56:80:06:d2:91:6f:60:b9:9d:88:14:c3:a4:9a:65:b5: e3:f5:3e:ab:43:b5:cc:bc:82:a1:9c:b0:86:52:ba:7e:76:ee: 6a:b2:f0:ee:36:c5:1d:21:ae:13:14:f0:ef:13:ec:05:74:6d: ab:e8:a6:7f:ee:8f:31:42:1f:44:3f:92:66:34:3b:8c:1a:f8: 27:33:3e:e2:72:2d:05:ce:90:48:02:5f:49:19:8c:30:08:34: d3:13:8c:bc -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEkIgV5Q50wicpWgzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVmNzM1YjYtMGFlMi00YzJhLTgyNmItN2U4YjEyNmE0 YjczMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk YjgyYTI1NDktYWYyNC00NDQ5LThhY2EtZmZhZGEyYjYyOWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHcYi9rB/aNDji0MAr67a/PASSsqu9XBSLtl zAI3MldTkQiXJQZ3gklPXN5BeDa5Fp/BHdTGbSKWKJB3+m60AHm5Rcg+dttemeMs o92HRC3f/FWh0TY+RHwkj7F0MmzYDtx97y12XCuZiLuFO0fDdI+IfQTspvA+D+cF b6RI+YHyk2arlD/9kQAKCihGZ1yLyyspbbGM08Hq9o2AKY5/kt40hGXbl1/+5psI 9a2eQF3mrVMGrr167JP+TtJh1pw+MN6twjjUFfX0LL9V6YNTka+IdTVYcTU1bs4L tO4C+hzQHOEsuEA+Ymrurolkx3X9qOT8sQBFRuE63lqTH0vLqwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFJ+urXMt0/ev4Xh6kzuzVSJdstc0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NWY3 MzViNi0wYWUyLTRjMmEtODI2Yi03ZThiMTI2YTRiNzMvNmJhYWVkNmItMjFmNC0z OGU0LTk1YzItMmE1NGIxNTViMjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODVmNzM1YjYtMGFlMi00YzJhLTgy NmItN2U4YjEyNmE0YjczLzg1ZjczNWI2LTBhZTItNGMyYS04MjZiLTdlOGIxMjZh NGI3My5jcmwwHwYDVR0jBBgwFoAUg5odAfvJBkOReL6k09QXpHyUm9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NWY3MzViNi0wYWUyLTRjMmEtODI2Yi03ZThi MTI2YTRiNzMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQB2AMA8E AgACMAkDBwAmB/OgoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGrr1gyInAOi3c500dS9WwLrUF/We5Tov byJ3YGJOg749JYh7ddmUt1cYTXGzrQIn9aZ9ZESP/A4W1NKwTDsGOYfeufl6eD2O fv4lcBW2xxMRiEPtQK2oy9G/8BOlNs76I6DFAbfV/T0k6iF73o7OpbQYID3CmEKe 0y3QVK4WK5MH2Gs4Joxct6NH6auFEUCe2gmCadsr4i9MDEIKX0mq9idUfXJWgAbS kW9guZ2IFMOkmmW14/U+q0O1zLyCoZywhlK6fnbuarLw7jbFHSGuExTw7xPsBXRt q+imf+6PMUIfRD+SZjQ7jBr4JzM+4nItBc6QSAJfSRmMMAg00xOMvA== -----END CERTIFICATE-----Generated at Fri Mar 14 13:21:39 2025 by rpki-client