$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/9bb59be7-0b44-33d9-a9d6-b806d4424238.roa File: 9bb59be7-0b44-33d9-a9d6-b806d4424238.roa (raw, json) Hash identifier: m9w+/3LlVcxrsYbQd1Y/EFCYd5dCBcdy5vPOdeJfvv4= Subject key identifier: 11:E5:F2:80:70:A2:17:C9:F0:A2:69:2D:CF:AA:E4:2E:64:85:A4:BD Certificate issuer: /CN=cff3cca1-6cd4-4230-92d3-20abf4db7312 Certificate serial: 010D0C9F43285848F926A2EEF049F70C90C71FF0 Authority key identifier: 77:E3:44:38:73:33:98:DD:77:A6:17:C2:DB:80:77:71:CC:E3:B5:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/9bb59be7-0b44-33d9-a9d6-b806d4424238.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 14618 IP address blocks: 65.20.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:a2:ee:f0:49:f7:0c:90:c7:1f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cff3cca1-6cd4-4230-92d3-20abf4db7312 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=0ac801e2-0991-478a-bac4-679ba2a2e051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2d:6a:b7:a8:99:e7:6d:08:58:58:a6:ac:bc: 8b:58:c2:fc:da:ab:5f:8a:ba:5e:8f:bc:c6:87:16: bc:ab:41:1a:7a:14:ad:5a:b3:d6:68:3a:1a:7d:22: c8:b4:4f:40:e9:87:bb:ce:5c:2e:ea:75:b9:45:39: c2:f6:2f:85:c0:7e:13:4e:dc:ff:da:f8:0d:05:8d: 63:6f:e2:d7:ef:82:c9:73:f3:b9:fa:1c:63:61:b0: f9:7d:ff:f6:f5:a9:91:7e:35:26:68:61:3d:4f:cf: 57:56:9c:8e:80:04:32:0e:3c:52:8a:35:3d:d3:72: c1:f6:8c:5d:f6:f8:08:21:f2:cf:35:c7:e8:0e:84: c2:69:f0:08:8c:1e:5b:f6:93:e3:b0:e3:0c:b9:31: ac:7c:47:db:14:ff:d7:ba:bb:6e:04:e1:65:aa:bd: 24:5b:1b:5a:05:1a:69:03:7b:8d:9e:23:4b:2e:2e: 2a:67:f1:ec:23:f9:3f:96:3b:8e:04:3c:e8:1d:c6: 0b:93:f0:13:5d:b5:1e:7e:40:37:be:e0:e8:e8:24: 60:5f:a2:c1:70:ce:55:88:9f:0d:48:c1:6e:90:7c: 70:51:17:81:60:37:7e:a5:e7:23:49:c4:3d:4f:62: dc:b4:56:93:15:e3:fe:17:28:de:12:73:d4:62:df: d1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E5:F2:80:70:A2:17:C9:F0:A2:69:2D:CF:AA:E4:2E:64:85:A4:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/9bb59be7-0b44-33d9-a9d6-b806d4424238.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.crl X509v3 Authority Key Identifier: keyid:77:E3:44:38:73:33:98:DD:77:A6:17:C2:DB:80:77:71:CC:E3:B5:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer sbgp-ipAddrBlock: critical IPv4: 65.20.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:23:9b:06:74:4e:32:75:d9:ed:9f:f1:c3:de:15:b5:af:e6: 76:20:b4:81:0e:62:18:35:eb:4d:35:f8:2f:b1:b4:f1:16:71: 26:9c:6c:c2:2d:5e:ed:ef:78:37:18:03:9b:6f:77:17:89:8e: 3c:ed:b1:46:e2:bf:fa:98:c4:e6:64:19:fb:d9:c7:99:c6:e6: eb:61:ad:78:2e:78:6b:26:15:3a:84:00:dd:69:d9:ea:47:e1: 1a:58:cc:ff:9d:48:ea:0b:03:8b:6c:7f:7e:87:7a:a3:dc:87: d1:c3:ac:63:b7:54:11:7f:d1:e9:eb:9a:5c:70:9c:80:57:77: 98:85:b2:8a:f0:95:97:1a:f3:ed:1a:c6:ea:95:52:65:9f:ca: b5:bf:1d:c8:09:10:dd:ad:91:6b:81:cc:32:c5:77:6e:16:20: 58:d1:cf:d6:3c:53:46:b7:62:3a:b4:54:ef:ba:be:a8:ac:58: c5:88:6e:e3:fc:37:b5:c6:ea:6f:4f:33:d7:81:3e:73:e6:31: 40:77:42:a3:c0:8e:68:e2:d6:d6:08:88:2d:79:1e:92:89:8e: f8:e1:70:69:42:0a:86:16:2c:24:e0:66:9a:9f:b0:f9:b7:e2: d0:a1:8d:ac:d2:27:27:cf:eb:ff:ee:eb:dd:75:e8:25:fe:72: a9:70:0c:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JqLu8En3DJDHH/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZmM2NjYTEtNmNkNC00MjMwLTkyZDMtMjBhYmY0ZGI3 MzEyMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MGFjODAxZTItMDk5MS00NzhhLWJhYzQtNjc5YmEyYTJlMDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC1qt6iZ520IWFimrLyLWML82qtfirpej7zG hxa8q0EaehStWrPWaDoafSLItE9A6Ye7zlwu6nW5RTnC9i+FwH4TTtz/2vgNBY1j b+LX74LJc/O5+hxjYbD5ff/29amRfjUmaGE9T89XVpyOgAQyDjxSijU903LB9oxd 9vgIIfLPNcfoDoTCafAIjB5b9pPjsOMMuTGsfEfbFP/XurtuBOFlqr0kWxtaBRpp A3uNniNLLi4qZ/HsI/k/ljuOBDzoHcYLk/ATXbUefkA3vuDo6CRgX6LBcM5ViJ8N SMFukHxwUReBYDd+pecjScQ9T2LctFaTFeP+FyjeEnPUYt/REwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHl8oBwohfJ8KJpLc+q5C5khaS9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jZmYz Y2NhMS02Y2Q0LTQyMzAtOTJkMy0yMGFiZjRkYjczMTIvOWJiNTliZTctMGI0NC0z M2Q5LWE5ZDYtYjgwNmQ0NDI0MjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2ZmM2NjYTEtNmNkNC00MjMwLTky ZDMtMjBhYmY0ZGI3MzEyL2NmZjNjY2ExLTZjZDQtNDIzMC05MmQzLTIwYWJmNGRi NzMxMi5jcmwwHwYDVR0jBBgwFoAUd+NEOHMzmN13phfC24B3cczjtZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jZmYzY2NhMS02Y2Q0LTQyMzAtOTJkMy0yMGFi ZjRkYjczMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYjmwZ0TjJ12e2f8cPeFbWv5nYgtIEOYhg16001+C+xtPEWcSacbMIt Xu3veDcYA5tvdxeJjjztsUbiv/qYxOZkGfvZx5nG5uthrXgueGsmFTqEAN1p2epH 4RpYzP+dSOoLA4tsf36HeqPch9HDrGO3VBF/0enrmlxwnIBXd5iFsorwlZca8+0a xuqVUmWfyrW/HcgJEN2tkWuBzDLFd24WIFjRz9Y8U0a3Yjq0VO+6vqisWMWIbuP8 N7XG6m9PM9eBPnPmMUB3QqPAjmji1tYIiC15HpKJjvjhcGlCCoYWLCTgZpqfsPm3 4tChjazSJyfP6//u69116CX+cqlwDCw= -----END CERTIFICATE-----Generated at Fri Apr 4 23:40:09 2025 by rpki-client