$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/ceeaa841-ed82-33d1-843a-3a411e6fee58.roa File: ceeaa841-ed82-33d1-843a-3a411e6fee58.roa (raw, json) Hash identifier: zTCsJTRYV8JBFA031HXhmFvUCyt+yU4wcEa/uVZK2GQ= Subject key identifier: 80:BF:6C:86:7A:D9:B8:0C:7B:C1:A4:E3:B5:F0:EF:C9:F6:A4:B3:4E Certificate issuer: /CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c Certificate serial: 010D0C9F43285848A830B555A5B9C3FFEFEB56D9 Authority key identifier: 45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/ceeaa841-ed82-33d1-843a-3a411e6fee58.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 394195 IP address blocks: 68.64.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:b5:55:a5:b9:c3:ff:ef:eb:56:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=c579167d-e3f7-4359-ab52-2c69b439f43f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:18:c3:b5:d4:e8:fb:d1:49:96:78:6d:67:ae: d0:d3:30:ed:e3:24:b1:1f:16:e4:64:c6:c7:fc:8c: fb:ed:f8:f2:79:28:65:67:9d:15:82:6c:ba:d7:30: 11:41:80:78:1f:6e:9c:bc:5e:c9:9e:0e:02:a3:a9: 2d:c1:85:37:84:02:d0:95:75:01:61:b4:f8:2f:6e: aa:23:7b:01:a8:86:7f:c3:e0:c9:0a:14:d5:9d:08: 51:54:07:2c:7f:11:d1:a6:f4:9e:86:46:76:f6:f8: 5e:c3:99:cc:b8:cc:d0:1e:50:eb:8e:5d:68:96:ba: 69:fd:70:39:4e:5e:60:4a:90:97:f0:7a:2c:35:0f: 85:4f:dd:de:8b:a7:e9:a8:9a:40:4b:2f:3f:fa:06: fb:70:2d:f5:a5:74:15:a0:4f:c1:a2:47:0b:ca:0b: e4:90:58:38:a7:ca:d8:57:46:2c:5f:9a:ea:3a:1b: 31:09:43:10:20:ad:30:f2:11:f6:ac:86:0a:37:1f: 71:e4:95:c9:2f:a3:2e:71:3b:41:e1:de:cf:d9:02: 3f:09:b0:bb:65:f7:c4:af:d9:23:cc:fb:2f:b8:98: ad:ca:cd:dd:d6:b1:51:86:a6:c5:e6:49:b7:2e:67: 57:f1:10:76:d3:da:e4:c6:09:a6:32:bd:72:3d:cf: dd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BF:6C:86:7A:D9:B8:0C:7B:C1:A4:E3:B5:F0:EF:C9:F6:A4:B3:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/ceeaa841-ed82-33d1-843a-3a411e6fee58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl X509v3 Authority Key Identifier: keyid:45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer sbgp-ipAddrBlock: critical IPv4: 68.64.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:fa:00:02:a2:be:eb:2f:82:7f:e8:77:56:9a:67:cd:9d:c3: 8b:9f:58:55:12:5f:98:2f:94:e0:26:b4:8b:ed:1e:06:9a:97: 95:eb:ae:80:7e:72:5d:a4:f6:73:fe:cf:05:9f:96:79:df:34: 2e:ae:99:c8:64:0c:e6:7b:e3:d1:c5:90:24:85:fe:97:d9:32: 2e:c4:f5:8f:1d:59:de:d6:ab:4e:c3:25:59:1a:5a:0d:25:cd: 08:7a:fc:9b:a8:d6:3f:96:da:04:ba:ee:a1:0a:6a:d3:6f:ca: ee:e4:0e:a2:72:00:d0:43:24:c1:65:e9:da:37:5f:5c:83:6f: 1c:69:2e:16:99:c8:16:54:b7:b7:71:d2:02:dc:30:8e:f0:3b: 14:94:db:fc:ed:3b:a9:07:c6:c0:cd:09:97:49:c7:f2:34:f8: c9:72:1f:a5:a1:b6:ee:96:da:29:8a:57:5d:9a:38:98:72:dc: ce:eb:6d:de:64:65:2f:c5:60:56:ca:cc:5f:2b:a0:68:bd:13: 2d:a9:2d:8d:05:10:f3:a1:f8:01:dd:ad:e8:b4:a8:85:12:ab: de:8d:18:5f:c9:60:d1:4a:68:02:76:bc:fc:24:d8:12:38:f4: b7:93:75:2b:51:2e:15:ac:c8:b8:dd:fc:26:75:73:a6:b4:37: 2b:cb:a3:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMLVVpbnD/+/rVtkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFjY2ZjOGUtOTY4MC00MDgwLWEzZjQtZWYxYTllMGRj MzZjMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk YzU3OTE2N2QtZTNmNy00MzU5LWFiNTItMmM2OWI0MzlmNDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hjDtdTo+9FJlnhtZ67Q0zDt4ySxHxbkZMbH /Iz77fjyeShlZ50Vgmy61zARQYB4H26cvF7Jng4Co6ktwYU3hALQlXUBYbT4L26q I3sBqIZ/w+DJChTVnQhRVAcsfxHRpvSehkZ29vhew5nMuMzQHlDrjl1olrpp/XA5 Tl5gSpCX8HosNQ+FT93ei6fpqJpASy8/+gb7cC31pXQVoE/BokcLygvkkFg4p8rY V0YsX5rqOhsxCUMQIK0w8hH2rIYKNx9x5JXJL6MucTtB4d7P2QI/CbC7ZffEr9kj zPsvuJitys3d1rFRhqbF5km3LmdX8RB209rkxgmmMr1yPc/dpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIC/bIZ62bgMe8Gk47Xw78n2pLNOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMWNj ZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFhOWUwZGMzNmMvY2VlYWE4NDEtZWQ4Mi0z M2QxLTg0M2EtM2E0MTFlNmZlZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTFjY2ZjOGUtOTY4MC00MDgwLWEz ZjQtZWYxYTllMGRjMzZjL2ExY2NmYzhlLTk2ODAtNDA4MC1hM2Y0LWVmMWE5ZTBk YzM2Yy5jcmwwHwYDVR0jBBgwFoAURcVOV0j2ImhwS/VuMNIMT3qkLGMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMWNjZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFh OWUwZGMzNmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREDeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACP6AAKivusvgn/od1aaZ82dw4ufWFUSX5gvlOAmtIvtHgaal5XrroB+ cl2k9nP+zwWflnnfNC6umchkDOZ749HFkCSF/pfZMi7E9Y8dWd7Wq07DJVkaWg0l zQh6/Juo1j+W2gS67qEKatNvyu7kDqJyANBDJMFl6do3X1yDbxxpLhaZyBZUt7dx 0gLcMI7wOxSU2/ztO6kHxsDNCZdJx/I0+MlyH6Whtu6W2imKV12aOJhy3M7rbd5k ZS/FYFbKzF8roGi9Ey2pLY0FEPOh+AHdrei0qIUSq96NGF/JYNFKaAJ2vPwk2BI4 9LeTdStRLhWsyLjd/CZ1c6a0NyvLo78= -----END CERTIFICATE-----Generated at Tue Apr 8 14:42:38 2025 by rpki-client