$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/996a8c3d-493a-3083-8c2a-64a52f163771.roa File: 996a8c3d-493a-3083-8c2a-64a52f163771.roa (raw, json) Hash identifier: YNylPK59t0EhnsnMkefIdhCDjij78JD5NaQ5/WCwAUs= Subject key identifier: 9A:1C:3F:D1:52:E5:35:90:AB:9A:A6:5E:4B:59:F8:CC:F2:D0:E8:A3 Certificate issuer: /CN=6e10601c-e280-4510-9d84-b6d2b02b8446 Certificate serial: 010D0C9F4328584929F893ACF006AA5D32116080 Authority key identifier: 4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/996a8c3d-493a-3083-8c2a-64a52f163771.roa Signing time: Wed 12 Mar 2025 13:42:49 +0000 ROA not before: Wed 12 Mar 2025 13:42:49 +0000 ROA not after: Tue 10 Jun 2025 13:42:49 +0000 asID: 393397 IP address blocks: 64.188.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:f8:93:ac:f0:06:aa:5d:32:11:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e10601c-e280-4510-9d84-b6d2b02b8446 Validity Not Before: Mar 12 13:42:49 2025 GMT Not After : Jun 10 13:42:49 2025 GMT Subject: CN=3487c58a-5074-486e-adef-f4e71121fdd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:90:81:b1:07:df:2e:f0:b0:1c:29:cf:cd:b6: e1:96:1d:23:20:2d:0f:e2:bc:97:f2:f1:aa:82:d2: 1e:1b:7e:6a:92:71:46:44:e1:bd:fc:fe:78:66:8c: 6c:5c:67:6c:26:a4:71:1c:71:be:9b:fb:c3:7d:5f: ce:9e:3f:89:9e:b3:0f:ab:4f:b4:ff:28:6d:67:95: 20:5a:3f:23:96:36:42:1e:2a:2e:62:e4:77:6f:3c: d3:c6:09:43:85:97:9a:fc:68:1a:a6:a1:73:37:fe: 74:31:cc:d3:09:56:c8:15:bb:bf:2d:8f:35:11:43: ce:c8:fe:ed:e9:a7:a3:7f:01:66:fc:13:b2:bb:3f: e9:00:0b:6e:8e:7a:9f:02:1b:03:8b:15:9c:44:48: a2:7b:c1:ce:3f:a4:63:9c:04:0b:d8:10:a2:03:38: 1f:56:c3:46:ba:8c:7f:1f:28:1a:46:59:1d:e4:21: cb:96:c8:be:0b:4f:4d:51:4e:76:45:45:cd:58:86: 6f:57:dc:7e:36:71:2d:c5:61:32:48:49:66:1e:cb: f7:9d:c9:00:00:56:87:da:63:09:a7:25:27:d5:3d: e0:f9:54:40:df:24:23:0b:ba:89:66:10:2a:0a:b7: 44:09:c5:9a:a7:f9:ac:14:a6:ec:af:02:71:d4:43: dd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1C:3F:D1:52:E5:35:90:AB:9A:A6:5E:4B:59:F8:CC:F2:D0:E8:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/996a8c3d-493a-3083-8c2a-64a52f163771.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl X509v3 Authority Key Identifier: keyid:4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer sbgp-ipAddrBlock: critical IPv4: 64.188.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:70:77:27:66:39:c7:ff:1a:83:bc:17:08:dd:3d:61:1b:7f: c1:5c:e0:e7:98:11:f3:76:5f:0a:0d:dc:8a:4d:af:a1:2b:cd: 8e:39:22:83:06:68:5f:b4:5e:b8:31:98:66:4c:a7:f3:cf:64: b8:7d:2e:e2:6a:65:79:b8:94:4a:98:59:58:3b:82:6d:88:b2: 11:3a:70:1a:fb:16:a6:f9:46:8b:18:6a:43:6f:6f:fa:3c:e8: a4:43:1e:d8:2f:9b:8a:c8:c8:96:b4:f9:ec:79:82:81:7d:c1: 96:30:d4:fd:d7:8f:4f:61:f6:e3:b6:eb:de:48:56:53:ab:1c: 41:d1:9b:5f:c9:c5:52:b1:bd:17:df:36:04:b7:31:06:a1:ae: 60:90:44:e0:1c:84:9d:08:a0:a5:7f:e8:b3:13:e9:11:80:6f: 16:98:b8:03:9d:55:5c:f2:c6:af:91:5d:2a:07:6b:87:45:32: d6:77:73:3c:4a:01:7f:67:a1:77:6e:91:a4:01:f3:25:0d:68: 51:0a:89:e5:d1:13:bb:59:8b:36:ef:e1:9d:cf:3b:9f:50:66: f0:07:db:8d:eb:d2:05:03:12:ed:53:c3:60:0c:ee:45:f2:62: f3:5a:19:a2:06:7e:68:35:4e:0c:83:5b:48:97:cb:5b:7a:1b: 37:62:67:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkp+JOs8AaqXTIRYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmUxMDYwMWMtZTI4MC00NTEwLTlkODQtYjZkMmIwMmI4 NDQ2MB4XDTI1MDMxMjEzNDI0OVoXDTI1MDYxMDEzNDI0OVowLzEtMCsGA1UEAxMk MzQ4N2M1OGEtNTA3NC00ODZlLWFkZWYtZjRlNzExMjFmZGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJCBsQffLvCwHCnPzbbhlh0jIC0P4ryX8vGq gtIeG35qknFGROG9/P54ZoxsXGdsJqRxHHG+m/vDfV/Onj+JnrMPq0+0/yhtZ5Ug Wj8jljZCHiouYuR3bzzTxglDhZea/GgapqFzN/50MczTCVbIFbu/LY81EUPOyP7t 6aejfwFm/BOyuz/pAAtujnqfAhsDixWcREiie8HOP6RjnAQL2BCiAzgfVsNGuox/ HygaRlkd5CHLlsi+C09NUU52RUXNWIZvV9x+NnEtxWEySElmHsv3nckAAFaH2mMJ pyUn1T3g+VRA3yQjC7qJZhAqCrdECcWap/msFKbsrwJx1EPdrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJocP9FS5TWQq5qmXktZ+Mzy0OijMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82ZTEw NjAxYy1lMjgwLTQ1MTAtOWQ4NC1iNmQyYjAyYjg0NDYvOTk2YThjM2QtNDkzYS0z MDgzLThjMmEtNjRhNTJmMTYzNzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmUxMDYwMWMtZTI4MC00NTEwLTlk ODQtYjZkMmIwMmI4NDQ2LzZlMTA2MDFjLWUyODAtNDUxMC05ZDg0LWI2ZDJiMDJi ODQ0Ni5jcmwwHwYDVR0jBBgwFoAUTu1El1iaHDmaM7ilgAeW14M6ikQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82ZTEwNjAxYy1lMjgwLTQ1MTAtOWQ4NC1iNmQy YjAyYjg0NDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQLwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVwdydmOcf/GoO8FwjdPWEbf8Fc4OeYEfN2XwoN3IpNr6ErzY45IoMG aF+0XrgxmGZMp/PPZLh9LuJqZXm4lEqYWVg7gm2IshE6cBr7Fqb5RosYakNvb/o8 6KRDHtgvm4rIyJa0+ex5goF9wZYw1P3Xj09h9uO2695IVlOrHEHRm1/JxVKxvRff NgS3MQahrmCQROAchJ0IoKV/6LMT6RGAbxaYuAOdVVzyxq+RXSoHa4dFMtZ3czxK AX9noXdukaQB8yUNaFEKieXRE7tZizbv4Z3PO59QZvAH243r0gUDEu1Tw2AM7kXy YvNaGaIGfmg1TgyDW0iXy1t6GzdiZyY= -----END CERTIFICATE-----Generated at Thu Apr 17 22:49:43 2025 by rpki-client