$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/01f4502c-f53d-3ffb-bc77-3756051a7dc2.roa File: 01f4502c-f53d-3ffb-bc77-3756051a7dc2.roa (raw, json) Hash identifier: 3W3LvgTtZzHkvMcJgpA2lHrbnPYJ/CrZP4UrVlhAn24= Subject key identifier: 02:44:76:5B:CD:BE:AB:16:D0:75:44:E0:F4:4A:01:8D:DA:0B:DD:47 Certificate issuer: /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Certificate serial: 010D0C9F43285848A565F244AB9A9354A8119240 Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/01f4502c-f53d-3ffb-bc77-3756051a7dc2.roa Signing time: Fri 24 Jan 2025 02:00:39 +0000 ROA not before: Fri 24 Jan 2025 02:00:39 +0000 ROA not after: Thu 24 Apr 2025 01:00:39 +0000 asID: 63902 IP address blocks: 65.181.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a5:65:f2:44:ab:9a:93:54:a8:11:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Validity Not Before: Jan 24 02:00:39 2025 GMT Not After : Apr 24 01:00:39 2025 GMT Subject: CN=196d2c55-c28e-458d-a608-1f54eb6f50d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d2:84:d1:d2:a8:4f:7b:7e:8c:37:4b:b1:27: 02:44:33:6b:dc:6b:d0:41:d7:c6:10:ec:26:64:a4: 68:39:42:5d:81:e4:d7:87:d2:6d:06:65:86:74:5d: 6b:93:b0:dd:69:37:d6:97:d4:2d:18:bb:de:0c:d3: 76:04:0d:79:c5:74:d8:fb:d5:4d:7a:08:9e:d2:b0: ce:6e:39:47:66:8d:bb:a1:38:27:83:e9:a9:c8:a0: 2e:35:45:3d:a9:69:3a:90:b1:98:8b:54:4c:18:4f: 6a:21:a5:4d:cb:d6:0e:d1:16:33:f5:c2:fa:72:ec: ec:22:cf:56:96:30:dd:be:5a:05:4f:40:24:30:2b: 71:6d:84:60:15:ff:98:3c:55:0b:bb:95:fc:04:d5: 1d:23:e8:a6:c9:d5:53:ed:4e:39:62:64:b2:3e:e4: 40:1c:18:4e:ad:24:de:96:25:2c:4d:26:df:6b:f8: b9:45:46:05:09:a4:76:20:55:09:19:2e:7c:c5:90: da:c8:1a:fa:7a:12:8b:de:7a:48:79:36:b4:57:b4: 38:18:0c:74:53:4b:49:28:a9:3c:f4:3f:6f:e5:0f: 71:20:19:c9:02:8c:57:b9:f8:e0:2b:1e:dc:ad:45: f6:59:5c:b4:a8:87:8d:78:75:23:68:26:57:e3:ef: cf:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:44:76:5B:CD:BE:AB:16:D0:75:44:E0:F4:4A:01:8D:DA:0B:DD:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/01f4502c-f53d-3ffb-bc77-3756051a7dc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl X509v3 Authority Key Identifier: keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer sbgp-ipAddrBlock: critical IPv4: 65.181.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:97:0c:eb:e4:8b:94:8b:38:9f:2b:e2:ec:c8:3e:1e:f8:38: 27:96:f1:56:55:af:b5:46:e2:46:47:ee:f2:26:45:59:1e:b6: e4:cf:3c:30:62:a6:f2:81:a4:13:d4:1d:76:86:04:c4:f3:f9: b8:0a:ba:0f:5e:a9:8f:7b:33:79:80:a7:81:ae:1f:00:f5:ad: 15:65:1e:a7:18:cc:8a:66:13:42:be:7d:c0:da:a1:f3:02:3c: 78:58:ec:b0:4d:56:dc:bd:7f:cf:f7:a5:ff:83:0d:6a:00:8c: ed:31:f0:67:04:e4:54:9c:95:99:e9:bf:f4:09:2b:95:c3:cd: c3:82:55:65:71:36:3b:3e:fb:95:98:2e:38:93:d5:08:5d:99: f3:40:b1:2a:ef:6f:4a:7b:8f:a3:6b:d1:37:c4:6a:ae:92:57: 20:c7:32:5b:92:c2:d1:4c:1a:26:20:93:9c:dd:a7:58:77:aa: 35:01:cc:33:c9:d6:03:e8:a0:37:cc:0c:8c:2d:40:38:b0:b9: 20:09:ec:22:7a:ea:bd:7a:17:53:3c:b3:f9:74:87:cb:70:d9: ff:07:4c:6b:b7:70:de:b1:e1:52:a3:e3:ec:e5:49:5a:6c:76: e0:85:09:5a:99:ff:a7:5a:a6:85:b0:ae:4a:e9:93:3d:3e:6d: 74:97:1c:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEilZfJEq5qTVKgRkkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBkNmZkNTAtYjU0My00ZTk3LWE3ZjMtMGQ2YTU5MDhj YTM4MB4XDTI1MDEyNDAyMDAzOVoXDTI1MDQyNDAxMDAzOVowLzEtMCsGA1UEAxMk MTk2ZDJjNTUtYzI4ZS00NThkLWE2MDgtMWY1NGViNmY1MGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtKE0dKoT3t+jDdLsScCRDNr3GvQQdfGEOwm ZKRoOUJdgeTXh9JtBmWGdF1rk7DdaTfWl9QtGLveDNN2BA15xXTY+9VNegie0rDO bjlHZo27oTgng+mpyKAuNUU9qWk6kLGYi1RMGE9qIaVNy9YO0RYz9cL6cuzsIs9W ljDdvloFT0AkMCtxbYRgFf+YPFULu5X8BNUdI+imydVT7U45YmSyPuRAHBhOrSTe liUsTSbfa/i5RUYFCaR2IFUJGS58xZDayBr6ehKL3npIeTa0V7Q4GAx0U0tJKKk8 9D9v5Q9xIBnJAoxXufjgKx7crUX2WVy0qIeNeHUjaCZX4+/PYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJEdlvNvqsW0HVE4PRKAY3aC91HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2 ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZhNTkwOGNhMzgvMDFmNDUwMmMtZjUzZC0z ZmZiLWJjNzctMzc1NjA1MWE3ZGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBkNmZkNTAtYjU0My00ZTk3LWE3 ZjMtMGQ2YTU5MDhjYTM4L2IwZDZmZDUwLWI1NDMtNGU5Ny1hN2YzLTBkNmE1OTA4 Y2EzOC5jcmwwHwYDVR0jBBgwFoAUuC1zjktame0lVFVY79EzURVo9P8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZh NTkwOGNhMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQbW0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaXDOvki5SLOJ8r4uzIPh74OCeW8VZVr7VG4kZH7vImRVketuTPPDBi pvKBpBPUHXaGBMTz+bgKug9eqY97M3mAp4GuHwD1rRVlHqcYzIpmE0K+fcDaofMC PHhY7LBNVty9f8/3pf+DDWoAjO0x8GcE5FSclZnpv/QJK5XDzcOCVWVxNjs++5WY LjiT1QhdmfNAsSrvb0p7j6Nr0TfEaq6SVyDHMluSwtFMGiYgk5zdp1h3qjUBzDPJ 1gPooDfMDIwtQDiwuSAJ7CJ66r16F1M8s/l0h8tw2f8HTGu3cN6x4VKj4+zlSVps duCFCVqZ/6dapoWwrkrpkz0+bXSXHN8= -----END CERTIFICATE-----Generated at Sat Apr 5 22:28:39 2025 by rpki-client