$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/bb041189-fc4a-373b-8858-10cef827368d.roa File: bb041189-fc4a-373b-8858-10cef827368d.roa (raw, json) Hash identifier: YsQh6DVUcAcKjy1AOMu2LWGkU/VaI12uYChAIvQe+zc= Subject key identifier: 50:7C:81:81:BC:B2:7C:8C:72:E5:CE:EC:95:3E:A2:8D:0D:61:94:47 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584923D1CF7D71B85D2BAE59FC00 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/bb041189-fc4a-373b-8858-10cef827368d.roa Signing time: Mon 10 Mar 2025 08:49:52 +0000 ROA not before: Mon 10 Mar 2025 08:49:52 +0000 ROA not after: Sun 08 Jun 2025 08:49:52 +0000 asID: 26042 IP address blocks: 64.22.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:23:d1:cf:7d:71:b8:5d:2b:ae:59:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Mar 10 08:49:52 2025 GMT Not After : Jun 8 08:49:52 2025 GMT Subject: CN=f78bf1cc-c3c4-43f6-a160-a261a6b6f52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:47:58:36:23:21:2a:25:df:ad:42:05:1b:c5: d3:cf:1f:96:dd:25:49:2f:f9:98:1f:99:98:e2:47: 8a:6b:85:09:21:35:3c:a9:a2:9d:99:5a:f9:6a:71: 45:6d:86:35:3c:8d:06:ec:54:63:53:d0:10:3b:75: a8:60:0a:56:ce:84:d5:c3:cb:92:35:65:98:a9:31: 57:7d:dd:68:23:d7:f9:13:ad:71:89:da:62:b0:5a: f6:ca:c5:20:07:27:ed:7b:fb:97:ee:f0:36:10:6d: 65:b9:69:1a:81:d8:64:cc:33:24:8f:c7:8a:c1:9b: db:14:97:46:49:53:81:44:53:3f:e4:98:15:49:ea: 18:d7:09:88:29:2e:08:af:cb:6d:4c:74:b4:cb:f9: a4:26:e7:59:4f:de:c8:47:cd:be:b8:28:f8:00:9f: 43:f8:46:44:83:db:bc:b6:33:77:40:52:39:d5:af: 89:c7:6c:74:48:78:1d:f0:1c:f2:9a:08:fb:0a:31: 92:40:70:67:a8:c3:1c:c8:8d:c7:fd:a4:49:82:f2: bd:7b:57:d9:0a:12:fe:94:38:cd:6d:8e:6d:3a:16: 5d:bb:e3:d1:34:b8:c0:53:36:ad:98:b9:1f:32:57: ad:2f:d2:5d:ce:f1:97:68:39:6a:df:55:be:ea:82: ab:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:7C:81:81:BC:B2:7C:8C:72:E5:CE:EC:95:3E:A2:8D:0D:61:94:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/bb041189-fc4a-373b-8858-10cef827368d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 64.22.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:c2:90:f1:73:67:d4:4b:57:8a:66:9d:65:57:56:9a:3c:70: a4:3f:5a:f0:12:d7:3a:e6:6a:1c:65:00:6d:25:ac:e6:7a:04: 87:de:00:44:d6:5e:d8:26:46:04:9b:4d:32:07:41:58:99:60: 41:0a:14:fd:cb:30:b8:a9:5b:b6:56:07:d4:e4:de:90:ad:91: ff:5a:8d:4c:6a:be:ba:86:ab:ad:ec:08:4e:d2:c1:7e:c3:88: 45:41:a9:ac:a0:71:6c:ab:69:1b:b0:81:45:37:fe:19:37:b9: 6b:25:ff:34:8d:fd:c4:9b:08:7f:96:95:6d:ab:27:4c:9c:76: 36:5a:2f:48:91:94:45:14:3a:bc:8c:9a:e7:9d:75:c3:c0:e9: a2:5d:1c:5b:db:c2:94:66:24:14:30:cc:85:56:f3:7c:96:f6: 81:1f:80:4a:98:5f:8f:6b:de:1c:c5:54:de:5a:9e:88:f3:10: cb:a9:3c:eb:2c:7a:79:50:79:44:0d:41:d4:0d:95:71:0c:57: d3:59:2f:4d:81:c6:eb:f7:2f:38:31:38:ee:6f:a1:dc:8c:25: 16:9e:7f:2e:bd:c8:71:16:a7:a4:2a:aa:b1:f7:c8:0a:cc:c2: 3b:4a:17:c8:e2:f4:7d:8d:dc:71:0a:f3:ba:c8:5b:59:c7:b6: 92:f3:11:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkj0c99cbhdK65Z/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDMxMDA4NDk1MloXDTI1MDYwODA4NDk1MlowLzEtMCsGA1UEAxMk Zjc4YmYxY2MtYzNjNC00M2Y2LWExNjAtYTI2MWE2YjZmNTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0dYNiMhKiXfrUIFG8XTzx+W3SVJL/mYH5mY 4keKa4UJITU8qaKdmVr5anFFbYY1PI0G7FRjU9AQO3WoYApWzoTVw8uSNWWYqTFX fd1oI9f5E61xidpisFr2ysUgByfte/uX7vA2EG1luWkagdhkzDMkj8eKwZvbFJdG SVOBRFM/5JgVSeoY1wmIKS4Ir8ttTHS0y/mkJudZT97IR82+uCj4AJ9D+EZEg9u8 tjN3QFI51a+Jx2x0SHgd8Bzymgj7CjGSQHBnqMMcyI3H/aRJgvK9e1fZChL+lDjN bY5tOhZdu+PRNLjAUzatmLkfMletL9JdzvGXaDlq31W+6oKrnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFB8gYG8snyMcuXO7JU+oo0NYZRHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvYmIwNDExODktZmM0YS0z NzNiLTg4NTgtMTBjZWY4MjczNjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBZhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfCkPFzZ9RLV4pmnWVXVpo8cKQ/WvAS1zrmahxlAG0lrOZ6BIfeAETW XtgmRgSbTTIHQViZYEEKFP3LMLipW7ZWB9Tk3pCtkf9ajUxqvrqGq63sCE7SwX7D iEVBqaygcWyraRuwgUU3/hk3uWsl/zSN/cSbCH+WlW2rJ0ycdjZaL0iRlEUUOryM mueddcPA6aJdHFvbwpRmJBQwzIVW83yW9oEfgEqYX49r3hzFVN5anojzEMupPOss enlQeUQNQdQNlXEMV9NZL02Bxuv3LzgxOO5vodyMJRaefy69yHEWp6QqqrH3yArM wjtKF8ji9H2N3HEK87rIW1nHtpLzEck= -----END CERTIFICATE-----Generated at Sat Apr 5 12:33:27 2025 by rpki-client