$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/1dafa895-ce97-3c2b-9067-e9ff7279b148.roa File: 1dafa895-ce97-3c2b-9067-e9ff7279b148.roa (raw, json) Hash identifier: qTJJ4zwpLmpH9Ue3ajnkdscOZIWFeoq8XmXS0vshc1c= Subject key identifier: 50:85:D1:BF:6E:40:2E:B3:21:DB:0C:87:24:1E:36:BF:C4:98:1A:FA Certificate issuer: /CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Certificate serial: 010D0C9F43285848E86660D23F24E2760E7D0630 Authority key identifier: D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/1dafa895-ce97-3c2b-9067-e9ff7279b148.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 46672 IP address blocks: 199.30.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:60:d2:3f:24:e2:76:0e:7d:06:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=bf03fff8-3df1-4087-bb8d-3c7e8d7dc36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8c:e9:ab:d8:71:4e:2e:f3:bd:1b:2c:52:c6: f5:b1:08:09:bb:92:84:78:95:28:ac:1f:98:bd:df: 45:f1:d3:b9:36:bf:d0:9c:ac:b5:6f:85:2c:b4:06: 50:89:27:7a:c7:a5:d9:26:01:02:43:78:f9:fc:d4: 55:01:a2:56:63:4a:43:cd:a4:15:ce:fd:f3:d1:93: 49:6e:e8:de:5e:79:e0:0b:ae:d8:ae:70:66:54:5a: 96:2d:4b:be:1f:8e:a0:d7:f5:a0:1c:ea:38:48:cb: 2b:02:d3:7b:e4:14:5e:32:41:16:ab:92:ce:cd:bb: 93:b9:6f:2f:37:2a:df:ce:fa:ec:0c:46:6d:b5:f0: 12:09:ab:d7:e3:0d:7e:f4:51:37:b9:f5:b9:97:d8: c8:c0:f3:9d:ba:b1:e9:3c:8e:d7:ff:d3:54:66:fc: cc:85:51:3f:7c:4e:e0:f5:46:40:9d:ec:b8:86:52: 14:21:69:ce:b2:be:e8:58:46:0d:92:73:94:e1:6a: 0d:92:c1:fc:23:84:7f:d1:e9:f3:17:9f:55:50:7e: db:1a:ab:8a:af:f2:fa:8c:02:ab:ab:31:91:54:17: 60:68:20:43:c1:f0:9b:75:90:a3:67:f5:fb:3e:57: bb:96:9f:3e:53:d9:27:7b:b7:e4:33:36:89:d3:19: f5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:85:D1:BF:6E:40:2E:B3:21:DB:0C:87:24:1E:36:BF:C4:98:1A:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/1dafa895-ce97-3c2b-9067-e9ff7279b148.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl X509v3 Authority Key Identifier: keyid:D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer sbgp-ipAddrBlock: critical IPv4: 199.30.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d1:e2:91:81:d3:53:19:96:fb:71:d5:1a:98:9d:e9:3c:13: ce:26:6f:62:3f:3e:4c:3e:27:9d:4b:5c:3f:ce:f2:ad:30:ea: 74:15:0f:45:78:d6:bc:f1:ca:79:04:46:5f:55:6e:89:68:cd: 3e:d4:20:78:fd:cc:6c:ca:e5:ed:d8:18:a4:49:7f:fb:1d:62: f9:3f:da:28:40:81:e5:96:47:cc:7c:f9:fb:77:58:04:42:2e: 3a:6e:96:f1:ba:78:0c:ec:ff:25:d8:66:50:d7:06:39:72:8b: 01:6e:f4:6d:fc:f9:1a:2c:91:b8:7c:25:aa:4a:39:cd:25:f1: b6:e6:8d:f4:11:81:c8:c3:28:fa:60:d4:9a:89:44:88:f7:58: be:60:fa:42:ed:c9:e1:76:f4:f3:ec:9f:56:69:41:e1:e3:93: c0:83:1a:57:06:29:7a:a3:27:b1:ca:9d:39:27:25:4e:8f:1b: 43:71:e2:4a:9a:f0:61:96:a9:b6:80:7d:60:9d:d2:21:48:48: 33:77:85:87:1a:25:1a:ad:bc:fe:e3:8e:b0:a6:cd:84:ee:fe: 03:8e:ff:dc:50:a7:81:0a:f7:02:41:2e:40:23:6a:46:e8:93: 62:2e:e4:5e:45:a0:cc:5f:d4:53:2f:8d:0d:d2:58:18:63:dd: 68:0c:b7:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZmDSPyTidg59BjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY0YjFjYjctNWZiMi00YTM5LWI0MzEtYzEzOTdmNjNh ODE4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk YmYwM2ZmZjgtM2RmMS00MDg3LWJiOGQtM2M3ZThkN2RjMzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIzpq9hxTi7zvRssUsb1sQgJu5KEeJUorB+Y vd9F8dO5Nr/QnKy1b4UstAZQiSd6x6XZJgECQ3j5/NRVAaJWY0pDzaQVzv3z0ZNJ bujeXnngC67YrnBmVFqWLUu+H46g1/WgHOo4SMsrAtN75BReMkEWq5LOzbuTuW8v NyrfzvrsDEZttfASCavX4w1+9FE3ufW5l9jIwPOdurHpPI7X/9NUZvzMhVE/fE7g 9UZAney4hlIUIWnOsr7oWEYNknOU4WoNksH8I4R/0enzF59VUH7bGquKr/L6jAKr qzGRVBdgaCBDwfCbdZCjZ/X7Ple7lp8+U9kne7fkMzaJ0xn1eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCF0b9uQC6zIdsMhyQeNr/EmBr6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRi MWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5N2Y2M2E4MTgvMWRhZmE4OTUtY2U5Ny0z YzJiLTkwNjctZTlmZjcyNzliMTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDY0YjFjYjctNWZiMi00YTM5LWI0 MzEtYzEzOTdmNjNhODE4LzA2NGIxY2I3LTVmYjItNGEzOS1iNDMxLWMxMzk3ZjYz YTgxOC5jcmwwHwYDVR0jBBgwFoAU1T4vELW7cKEguZWHWaSc6pjU1OswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRiMWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5 N2Y2M2E4MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxx6CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnR4pGB01MZlvtx1RqYnek8E84mb2I/Pkw+J51LXD/O8q0w6nQVD0V4 1rzxynkERl9VbolozT7UIHj9zGzK5e3YGKRJf/sdYvk/2ihAgeWWR8x8+ft3WARC LjpulvG6eAzs/yXYZlDXBjlyiwFu9G38+Roskbh8JapKOc0l8bbmjfQRgcjDKPpg 1JqJRIj3WL5g+kLtyeF29PPsn1ZpQeHjk8CDGlcGKXqjJ7HKnTknJU6PG0Nx4kqa 8GGWqbaAfWCd0iFISDN3hYcaJRqtvP7jjrCmzYTu/gOO/9xQp4EK9wJBLkAjakbo k2Iu5F5FoMxf1FMvjQ3SWBhj3WgMt6w= -----END CERTIFICATE-----Generated at Sat Apr 5 07:34:07 2025 by rpki-client