$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7b830ed5-b3d6-3990-beeb-54615389aaea.roa File: 7b830ed5-b3d6-3990-beeb-54615389aaea.roa (raw, json) Hash identifier: DO1XVs5HmTwmqT7vrM+gmeBGZDtu/0FOpLGxzHZ+KKA= Subject key identifier: 22:9F:4C:6D:62:79:7D:2C:61:76:F0:C4:FA:7B:E7:4E:6A:8D:D2:B4 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B642375C3EB88495AFA9E80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7b830ed5-b3d6-3990-beeb-54615389aaea.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 64.187.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:23:75:c3:eb:88:49:5a:fa:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=75981117-12ee-4911-8a95-57e83d88a920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:14:ce:b7:4d:79:b8:69:a3:3f:9c:27:84:71: 09:c5:ad:fb:98:d5:03:20:47:1e:70:ee:ad:32:8e: 4e:8c:53:d9:06:e3:8e:1b:06:c0:04:1d:08:d2:d4: 92:ab:bf:13:9d:65:23:45:04:82:7c:a5:97:1b:03: 51:09:4c:46:de:d8:ff:12:60:48:9e:ff:59:94:a5: a3:9b:30:7c:7b:17:9c:da:a7:c4:0c:fc:a4:db:e9: 25:9a:d7:0f:de:1a:b1:ef:0d:46:56:f4:74:b0:eb: 72:8e:8a:f9:3e:81:ce:5d:7d:43:c0:52:f5:f6:96: f7:4d:74:8f:67:dc:15:ac:48:fb:33:71:1a:71:25: 96:69:8b:e5:06:20:30:ef:e6:ea:24:9a:63:ef:0d: a1:a3:4f:71:93:bc:86:80:0b:3b:5b:5b:54:d0:d9: 52:0a:8b:75:d9:bb:24:1f:c4:10:c7:ca:65:e7:75: 1a:f9:99:5c:fd:d4:b7:39:7d:1b:62:1d:a9:0b:aa: 73:04:13:71:39:ea:00:bd:5f:2b:83:a5:81:df:7b: 45:21:9a:b7:56:17:4c:55:ba:fa:cd:5d:e4:6d:11: 1e:11:e8:e3:56:62:1e:c4:61:db:c6:c0:37:f2:e8: 3c:2c:13:5b:83:cc:3e:1e:36:38:9a:65:e9:11:65: b3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9F:4C:6D:62:79:7D:2C:61:76:F0:C4:FA:7B:E7:4E:6A:8D:D2:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7b830ed5-b3d6-3990-beeb-54615389aaea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 64.187.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:86:1f:94:03:5d:2a:98:a4:a1:8a:c2:1f:1d:12:a8:47:4c: 29:12:02:da:40:60:77:f0:76:cb:2d:59:1a:81:f1:89:24:36: c5:ba:d0:b8:15:ad:00:54:95:77:c3:e9:d0:ef:f7:c8:03:a5: ab:6b:11:0e:d1:e8:23:7c:60:f9:a2:ee:97:21:26:dc:31:24: e0:fa:9a:49:64:18:db:98:81:4e:a5:d4:07:2b:dd:57:55:6f: 63:5c:b4:99:d5:95:85:e5:a9:c3:51:02:7a:65:e0:29:cc:b6: 8b:4c:c3:6e:75:cd:3c:2e:fe:01:43:c3:ee:ac:3e:a2:db:b9: b0:e0:f6:b8:7a:7a:45:e4:a6:7a:3b:ed:88:7c:e1:fd:2a:ac: f8:3b:d3:ca:78:87:35:b6:3a:3d:ed:f4:92:e1:db:31:72:b0: a2:52:bf:53:ea:54:8c:39:db:70:36:b1:4e:e7:c8:3f:7a:b9: ab:81:93:29:c8:ba:6f:28:dc:20:52:71:7d:48:26:8d:ef:53: 28:9f:12:5b:44:09:b1:17:de:2c:13:b3:db:a2:3d:84:03:e9: 49:b4:75:08:d9:25:1a:04:db:ba:4e:97:e0:1e:5a:c8:2f:d0: a8:2f:89:c6:d3:5c:97:37:71:4c:26:1f:00:be:57:fd:da:32: c8:22:88:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCN1w+uISVr6noAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk NzU5ODExMTctMTJlZS00OTExLThhOTUtNTdlODNkODhhOTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRTOt015uGmjP5wnhHEJxa37mNUDIEcecO6t Mo5OjFPZBuOOGwbABB0I0tSSq78TnWUjRQSCfKWXGwNRCUxG3tj/EmBInv9ZlKWj mzB8exec2qfEDPyk2+klmtcP3hqx7w1GVvR0sOtyjor5PoHOXX1DwFL19pb3TXSP Z9wVrEj7M3EacSWWaYvlBiAw7+bqJJpj7w2ho09xk7yGgAs7W1tU0NlSCot12bsk H8QQx8pl53Ua+Zlc/dS3OX0bYh2pC6pzBBNxOeoAvV8rg6WB33tFIZq3VhdMVbr6 zV3kbREeEejjVmIexGHbxsA38ug8LBNbg8w+HjY4mmXpEWWzpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKfTG1ieX0sYXbwxPp7505qjdK0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvN2I4MzBlZDUtYjNkNi0z OTkwLWJlZWItNTQ2MTUzODlhYWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQLugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqGH5QDXSqYpKGKwh8dEqhHTCkSAtpAYHfwdsstWRqB8YkkNsW60LgV rQBUlXfD6dDv98gDpatrEQ7R6CN8YPmi7pchJtwxJOD6mklkGNuYgU6l1Acr3VdV b2NctJnVlYXlqcNRAnpl4CnMtotMw251zTwu/gFDw+6sPqLbubDg9rh6ekXkpno7 7Yh84f0qrPg708p4hzW2Oj3t9JLh2zFysKJSv1PqVIw523A2sU7nyD96uauBkynI um8o3CBScX1IJo3vUyifEltECbEX3iwTs9uiPYQD6Um0dQjZJRoE27pOl+AeWsgv 0KgvicbTXJc3cUwmHwC+V/3aMsgiiLs= -----END CERTIFICATE-----Generated at Sat Apr 12 12:56:36 2025 by rpki-client