$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ecedc2b1-c38b-3bcd-84aa-8b22e0aaafec.roa File: ecedc2b1-c38b-3bcd-84aa-8b22e0aaafec.roa (raw, json) Hash identifier: wXdrCmy5EwqJEQbTf/UvdRS4xA/Eagx9Qpq+AC3N1l8= Subject key identifier: CC:4A:6A:51:2F:5A:CB:C4:85:F6:FB:5D:C5:7D:0A:DD:BC:A6:9F:92 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B642FFC49B4DAD7306F4B00 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ecedc2b1-c38b-3bcd-84aa-8b22e0aaafec.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 64.85.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:2f:fc:49:b4:da:d7:30:6f:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=7de5939b-91ee-4df8-8759-57b86760adf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:90:9f:e9:99:f5:88:01:e0:9b:43:e0:b2:2c: b2:7b:10:e4:a3:01:81:29:f8:68:58:18:41:f4:da: 4e:0e:99:2b:ba:53:84:7f:f4:39:8a:65:d0:55:8e: 31:8e:4e:ae:53:0c:7c:6c:af:78:67:62:75:ef:09: 5f:78:79:87:1b:38:aa:5a:7f:45:da:43:2d:4e:55: e3:71:00:09:4b:9a:54:7b:1c:81:11:3d:c6:39:b6: c7:4e:a5:8f:d5:43:d2:2f:8c:0a:cc:c7:54:10:79: 94:1b:19:1f:99:80:d3:9c:11:77:f4:8f:15:2f:2c: 21:64:05:71:79:1a:6b:dd:a6:b2:78:6b:cf:5d:79: 85:8b:ee:9e:fb:b3:67:88:93:e8:3e:2e:58:25:a1: e7:51:f1:45:91:92:ab:a8:aa:b0:7a:a7:6a:7f:f0: 30:bb:f4:e4:cf:ad:76:a0:8b:ca:cc:f0:95:64:98: e0:c6:75:70:cc:6e:dd:78:1a:f5:78:82:bd:80:3c: 87:e6:ca:f3:c8:83:8c:e2:1f:f7:a2:57:9e:c0:ab: e2:c7:2b:5e:b9:a5:00:98:de:b2:06:ca:7c:af:7a: 2d:3b:28:67:ac:9a:5d:5c:77:cd:f9:68:4c:0c:f7: 8c:1a:78:13:1a:9d:e8:a0:52:a5:03:7e:db:84:25: c6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4A:6A:51:2F:5A:CB:C4:85:F6:FB:5D:C5:7D:0A:DD:BC:A6:9F:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ecedc2b1-c38b-3bcd-84aa-8b22e0aaafec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 64.85.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:ac:32:2d:c2:0b:97:50:f8:b1:4f:26:6c:c2:81:0d:5b:d5: b0:5f:43:77:11:9b:ca:ec:ea:02:c5:b5:0e:40:fb:f6:74:78: 8d:fa:2b:f3:48:b0:af:37:94:84:23:b7:b3:76:af:54:f0:47: 27:88:3a:d4:74:e2:6e:e3:12:27:02:88:ad:86:86:ab:14:94: 15:6d:cd:00:a8:73:e4:8f:cd:cc:a6:24:81:b9:bd:12:fb:f4: cf:7c:e2:b9:f6:b7:09:91:0a:1a:b8:33:bc:96:45:5a:5b:b8: 27:5b:67:81:3d:3c:d5:71:2f:dc:98:58:63:36:f4:8d:e6:53: 8c:d8:4f:ce:62:69:a4:4e:6d:c2:ec:20:c6:69:32:28:99:49: 93:ae:14:ae:36:6a:13:9f:f2:db:99:10:7a:11:24:0a:86:58: b6:39:88:67:3d:b1:21:22:b6:ef:72:ec:c9:85:56:20:8e:d2: a8:93:9e:55:b5:8a:6a:04:9e:ce:e6:b2:37:46:c4:4a:f7:2b: 19:1a:c0:4e:a3:c7:2c:f3:ee:f1:19:ab:87:e6:1a:ee:c8:44: 93:95:d6:d2:d3:ba:ab:8f:1e:fe:42:26:c3:29:14:10:f3:28: 18:ca:a1:d4:4a:4a:13:a3:36:51:ea:bd:64:39:08:ed:02:4f: 58:3c:0c:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZC/8SbTa1zBvSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk N2RlNTkzOWItOTFlZS00ZGY4LTg3NTktNTdiODY3NjBhZGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJCf6Zn1iAHgm0PgsiyyexDkowGBKfhoWBhB 9NpODpkrulOEf/Q5imXQVY4xjk6uUwx8bK94Z2J17wlfeHmHGziqWn9F2kMtTlXj cQAJS5pUexyBET3GObbHTqWP1UPSL4wKzMdUEHmUGxkfmYDTnBF39I8VLywhZAVx eRpr3aayeGvPXXmFi+6e+7NniJPoPi5YJaHnUfFFkZKrqKqweqdqf/Awu/Tkz612 oIvKzPCVZJjgxnVwzG7deBr1eIK9gDyH5srzyIOM4h/3oleewKvixyteuaUAmN6y Bsp8r3otOyhnrJpdXHfN+WhMDPeMGngTGp3ooFKlA37bhCXG5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxKalEvWsvEhfb7XcV9Ct28pp+SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZWNlZGMyYjEtYzM4Yi0z YmNkLTg0YWEtOGIyMmUwYWFhZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQFXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHusMi3CC5dQ+LFPJmzCgQ1b1bBfQ3cRm8rs6gLFtQ5A+/Z0eI36K/NI sK83lIQjt7N2r1TwRyeIOtR04m7jEicCiK2GhqsUlBVtzQCoc+SPzcymJIG5vRL7 9M984rn2twmRChq4M7yWRVpbuCdbZ4E9PNVxL9yYWGM29I3mU4zYT85iaaRObcLs IMZpMiiZSZOuFK42ahOf8tuZEHoRJAqGWLY5iGc9sSEitu9y7MmFViCO0qiTnlW1 imoEns7msjdGxEr3KxkawE6jxyzz7vEZq4fmGu7IRJOV1tLTuquPHv5CJsMpFBDz KBjKodRKShOjNlHqvWQ5CO0CT1g8DG8= -----END CERTIFICATE-----Generated at Sun Apr 13 02:46:35 2025 by rpki-client