$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/5b0fbef2-da6f-35f0-9bad-9c65ba6966f3.roa File: 5b0fbef2-da6f-35f0-9bad-9c65ba6966f3.roa (raw, json) Hash identifier: qWI01aqJcYHoYEM5zXhjriLJhX/sjL6Czw6u+wrWmOM= Subject key identifier: 6F:BA:7E:C4:4F:81:9C:DE:E2:E3:5B:4B:EB:3E:50:B0:6E:EB:12:47 Certificate issuer: /CN=b8a0e292-3e8f-447b-81c6-cedef4747341 Certificate serial: 010D0C9F43285849218407D920562741B008F200 Authority key identifier: 83:A3:6C:9B:30:E5:DE:80:EC:B3:A4:FC:42:E5:52:72:23:88:DA:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/5b0fbef2-da6f-35f0-9bad-9c65ba6966f3.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 397058 IP address blocks: 64.202.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/b8a0e292-3e8f-447b-81c6-cedef4747341.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/b8a0e292-3e8f-447b-81c6-cedef4747341.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:07:d9:20:56:27:41:b0:08:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8a0e292-3e8f-447b-81c6-cedef4747341 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=c5b36962-de5f-42db-a035-5fcadbfbc9e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e9:91:03:e7:06:c8:35:67:5e:d6:63:c3:f7: 8b:3b:6a:02:38:dd:06:5e:33:c0:3b:b0:16:43:79: 74:1f:41:41:95:9b:ba:b4:61:2d:ee:20:b5:85:00: 44:0f:91:d5:8f:7f:6d:0b:be:0d:87:04:ba:3b:1a: 14:8a:17:7c:3b:92:26:de:ed:a0:8f:34:ee:f5:48: 2c:c0:5b:48:db:4b:67:37:8a:52:d6:bd:c5:6b:6b: 5f:7d:36:61:e5:d8:08:4b:8b:a2:10:df:67:8f:6c: e2:e0:70:19:0d:8c:68:6b:be:d0:43:ff:68:62:c8: c9:3c:f2:fe:c4:7e:9b:bc:74:33:44:63:00:e9:1b: 47:af:9b:70:1e:07:66:0f:01:52:d8:7c:21:b6:99: eb:1f:71:31:47:f9:ce:4b:10:66:ad:d7:9f:63:14: ce:ae:2f:d8:ca:a0:cb:5d:04:44:0e:d5:aa:ee:f4: 53:49:d4:8b:db:e4:f2:65:99:3e:9e:80:64:b2:53: 4a:39:3f:48:2d:76:29:b6:00:bb:18:d7:ed:99:00: ec:0c:69:d2:c0:7d:c0:67:7a:69:c3:45:77:59:43: 43:67:83:90:bf:4c:09:8e:86:49:cb:8e:f6:1c:97: ec:b7:11:4e:7b:97:3a:89:a2:b5:43:e2:d0:36:62: 45:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:BA:7E:C4:4F:81:9C:DE:E2:E3:5B:4B:EB:3E:50:B0:6E:EB:12:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/5b0fbef2-da6f-35f0-9bad-9c65ba6966f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/b8a0e292-3e8f-447b-81c6-cedef4747341.crl X509v3 Authority Key Identifier: keyid:83:A3:6C:9B:30:E5:DE:80:EC:B3:A4:FC:42:E5:52:72:23:88:DA:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer sbgp-ipAddrBlock: critical IPv4: 64.202.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:ff:cd:ee:3e:71:e3:a5:90:72:f9:7f:c6:38:e9:6a:86:8e: 07:cb:34:08:d9:69:e2:a0:39:ad:7a:6b:f1:0c:22:24:81:92: b5:0f:91:30:1a:b6:c5:bb:87:ee:8d:31:72:3e:24:c7:fe:1e: 97:a6:17:9f:16:27:3b:92:ac:7f:b7:fb:2d:f3:f6:df:5d:de: 12:7f:e7:17:f5:6d:da:b6:ef:cf:b0:6e:28:f7:40:08:90:1e: 43:f7:81:5f:cb:56:77:fc:ab:2d:15:1a:e9:bd:65:f5:57:a1: 5d:e9:85:13:f9:52:b4:63:5d:96:a8:69:69:56:af:e1:1c:10: ed:12:a7:00:21:13:82:5a:3c:26:2e:7d:81:b6:90:91:c6:74: 25:5f:9f:c5:0c:8f:01:0f:06:e2:02:a8:57:73:93:cf:2b:9f: ac:65:a2:d7:4c:57:f7:d5:c4:03:25:61:c4:48:e3:1a:7e:4e: 1d:07:75:1e:b7:26:54:88:80:4e:11:80:da:35:f3:69:5c:2e: ce:0c:01:da:90:d9:a8:d7:74:e6:5b:4a:c9:d1:43:8f:bf:d5: 83:88:7b:54:89:8d:b0:0f:5e:d0:9c:c6:d7:ba:ce:05:ab:81: 0a:dd:0b:3f:0a:e3:4a:31:fb:4e:7d:59:19:5b:31:f1:69:29: ad:ee:52:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhAfZIFYnQbAI8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhhMGUyOTItM2U4Zi00NDdiLTgxYzYtY2VkZWY0NzQ3 MzQxMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk YzViMzY5NjItZGU1Zi00MmRiLWEwMzUtNWZjYWRiZmJjOWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkemRA+cGyDVnXtZjw/eLO2oCON0GXjPAO7AW Q3l0H0FBlZu6tGEt7iC1hQBED5HVj39tC74NhwS6OxoUihd8O5Im3u2gjzTu9Ugs wFtI20tnN4pS1r3Fa2tffTZh5dgIS4uiEN9nj2zi4HAZDYxoa77QQ/9oYsjJPPL+ xH6bvHQzRGMA6RtHr5twHgdmDwFS2HwhtpnrH3ExR/nOSxBmrdefYxTOri/YyqDL XQREDtWq7vRTSdSL2+TyZZk+noBkslNKOT9ILXYptgC7GNftmQDsDGnSwH3AZ3pp w0V3WUNDZ4OQv0wJjoZJy472HJfstxFOe5c6iaK1Q+LQNmJFswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+6fsRPgZze4uNbS+s+ULBu6xJHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iOGEw ZTI5Mi0zZThmLTQ0N2ItODFjNi1jZWRlZjQ3NDczNDEvNWIwZmJlZjItZGE2Zi0z NWYwLTliYWQtOWM2NWJhNjk2NmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjhhMGUyOTItM2U4Zi00NDdiLTgx YzYtY2VkZWY0NzQ3MzQxL2I4YTBlMjkyLTNlOGYtNDQ3Yi04MWM2LWNlZGVmNDc0 NzM0MS5jcmwwHwYDVR0jBBgwFoAUg6NsmzDl3oDss6T8QuVSciOI2g8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iOGEwZTI5Mi0zZThmLTQ0N2ItODFjNi1jZWRl ZjQ3NDczNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMraMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAz/ze4+ceOlkHL5f8Y46WqGjgfLNAjZaeKgOa16a/EMIiSBkrUPkTAa tsW7h+6NMXI+JMf+HpemF58WJzuSrH+3+y3z9t9d3hJ/5xf1bdq278+wbij3QAiQ HkP3gV/LVnf8qy0VGum9ZfVXoV3phRP5UrRjXZaoaWlWr+EcEO0SpwAhE4JaPCYu fYG2kJHGdCVfn8UMjwEPBuICqFdzk88rn6xlotdMV/fVxAMlYcRI4xp+Th0HdR63 JlSIgE4RgNo182lcLs4MAdqQ2ajXdOZbSsnRQ4+/1YOIe1SJjbAPXtCcxte6zgWr gQrdCz8K40ox+059WRlbMfFpKa3uUls= -----END CERTIFICATE-----Generated at Fri Apr 4 16:10:25 2025 by rpki-client