$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/b533aff3-439d-33b5-bcd9-30c7b5833b92.roa File: b533aff3-439d-33b5-bcd9-30c7b5833b92.roa (raw, json) Hash identifier: 0GaStIuGL7OTm3RdnH8TArISmpYOwU09TWkMfi0DdTo= Subject key identifier: 6F:BF:C0:81:81:9A:02:D0:BA:4D:96:0B:F5:17:A4:D1:60:D9:EC:5A Certificate issuer: /CN=35a113bf-2a5d-4e97-9a3c-313662f5a58c Certificate serial: 010D0C9F43285849446944DF90A622AEED673C40 Authority key identifier: 73:F2:64:9A:96:0E:44:EE:41:93:E8:8B:FE:4C:39:EA:48:DE:D8:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/b533aff3-439d-33b5-bcd9-30c7b5833b92.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 3402 IP address blocks: 64.239.32.0/22 maxlen: 24 64.239.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/35a113bf-2a5d-4e97-9a3c-313662f5a58c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/35a113bf-2a5d-4e97-9a3c-313662f5a58c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:44:df:90:a6:22:ae:ed:67:3c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35a113bf-2a5d-4e97-9a3c-313662f5a58c Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=a4516482-4336-4715-a324-9bbb3b4f02d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2b:45:fb:f1:fe:ef:41:20:11:04:d8:ed:9f: 54:33:b5:e6:f2:71:1e:2f:07:83:fe:2e:03:5a:d5: c1:5a:b8:d5:0e:eb:4f:a0:8e:f4:b7:af:08:9b:75: 2f:47:78:a7:b7:1e:4a:0e:f6:64:2a:e5:1f:a9:15: ba:c8:97:34:12:38:66:a5:cd:ef:7c:06:78:87:c7: 59:b7:a8:3f:81:54:d3:3d:b5:55:54:fe:93:a4:b4: d4:42:a0:5c:84:24:05:82:49:55:76:ca:6d:c1:d1: dc:e1:d0:19:ca:fe:d5:66:d0:f8:35:41:32:2a:14: 49:36:35:26:35:01:55:24:b5:77:0f:25:20:5a:e0: ac:57:1c:96:f0:2f:5a:b9:99:10:b5:ec:69:b5:76: 49:d5:0b:e0:55:97:e8:8b:57:f7:ea:e0:9d:78:c9: 4f:89:e8:d8:72:f0:6e:21:1b:94:c3:98:04:86:53: 53:a8:b5:91:68:8f:4d:26:5d:cc:fe:d2:b9:b0:4c: 7b:f0:ea:c0:da:0f:6f:27:8e:59:8d:d6:ad:f0:38: 6d:73:f2:d6:7a:6a:95:0a:f9:c9:33:36:7d:42:0e: c7:ef:93:a6:83:9a:14:ef:f1:81:a6:c9:9b:5a:5e: ee:71:81:d1:00:26:bd:03:58:07:fd:28:68:45:06: 8b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:BF:C0:81:81:9A:02:D0:BA:4D:96:0B:F5:17:A4:D1:60:D9:EC:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/b533aff3-439d-33b5-bcd9-30c7b5833b92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/35a113bf-2a5d-4e97-9a3c-313662f5a58c.crl X509v3 Authority Key Identifier: keyid:73:F2:64:9A:96:0E:44:EE:41:93:E8:8B:FE:4C:39:EA:48:DE:D8:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c.cer sbgp-ipAddrBlock: critical IPv4: 64.239.32.0/22 64.239.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:28:fd:e7:22:d1:b2:cf:47:95:de:ae:8c:71:8a:c1:56:8f: a9:70:e5:8c:b0:19:52:3a:52:36:8b:fb:bc:7b:e0:55:0e:d9: 75:c2:31:f3:a6:8f:a3:bd:e8:6f:03:1e:e4:52:89:1d:f9:3c: 4c:35:c8:6b:e7:0b:e9:3e:39:4b:1a:6d:30:93:04:af:01:36: 2a:2a:1b:40:63:92:98:ed:f3:a2:d1:a0:78:5e:dd:92:b4:82: 5a:f5:9a:78:e7:34:f6:ba:52:17:61:b9:28:ea:21:7a:85:fc: 4c:5d:67:c1:78:00:49:68:34:0c:07:f2:51:0a:2e:b9:4b:1f: 34:ad:10:28:0f:79:17:7a:a7:6d:fb:ec:d3:37:2a:d7:53:93: 03:c9:69:8a:77:7c:33:f7:5f:a1:f8:c2:6a:48:4b:ad:83:a6: 4d:ac:4a:d3:04:48:e5:83:19:22:11:83:7f:79:25:85:5d:52: 5e:8b:d4:92:0b:96:96:ff:20:8f:7a:36:5d:d5:f2:09:88:cc: 64:1b:0f:92:06:74:25:5b:b6:8d:84:3f:c3:8f:11:2d:dc:35: 10:76:b7:e6:ad:00:c4:3e:79:9a:16:e7:c6:5c:0d:b8:53:85: dd:18:f5:b0:50:3a:3d:af:1c:2f:95:b3:b1:59:67:22:58:33: 87:2a:69:32 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElEaUTfkKYiru1nPEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVhMTEzYmYtMmE1ZC00ZTk3LTlhM2MtMzEzNjYyZjVh NThjMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk YTQ1MTY0ODItNDMzNi00NzE1LWEzMjQtOWJiYjNiNGYwMmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuitF+/H+70EgEQTY7Z9UM7Xm8nEeLweD/i4D WtXBWrjVDutPoI70t68Im3UvR3intx5KDvZkKuUfqRW6yJc0Ejhmpc3vfAZ4h8dZ t6g/gVTTPbVVVP6TpLTUQqBchCQFgklVdsptwdHc4dAZyv7VZtD4NUEyKhRJNjUm NQFVJLV3DyUgWuCsVxyW8C9auZkQtexptXZJ1QvgVZfoi1f36uCdeMlPiejYcvBu IRuUw5gEhlNTqLWRaI9NJl3M/tK5sEx78OrA2g9vJ45Zjdat8Dhtc/LWemqVCvnJ MzZ9Qg7H75Omg5oU7/GBpsmbWl7ucYHRACa9A1gH/ShoRQaL2wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFG+/wIGBmgLQuk2WC/UXpNFg2exaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNWEx MTNiZi0yYTVkLTRlOTctOWEzYy0zMTM2NjJmNWE1OGMvYjUzM2FmZjMtNDM5ZC0z M2I1LWJjZDktMzBjN2I1ODMzYjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzVhMTEzYmYtMmE1ZC00ZTk3LTlh M2MtMzEzNjYyZjVhNThjLzM1YTExM2JmLTJhNWQtNGU5Ny05YTNjLTMxMzY2MmY1 YTU4Yy5jcmwwHwYDVR0jBBgwFoAUc/JkmpYORO5Bk+iL/kw56kje2NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNWExMTNiZi0yYTVkLTRlOTctOWEzYy0zMTM2 NjJmNWE1OGMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCQO8gAwQC QO90MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADMo/eci0bLPR5XeroxxisFWj6lw5YywGVI6UjaL+7x74FUO 2XXCMfOmj6O96G8DHuRSiR35PEw1yGvnC+k+OUsabTCTBK8BNioqG0Bjkpjt86LR oHhe3ZK0glr1mnjnNPa6UhdhuSjqIXqF/ExdZ8F4AEloNAwH8lEKLrlLHzStECgP eRd6p2377NM3KtdTkwPJaYp3fDP3X6H4wmpIS62Dpk2sStMESOWDGSIRg395JYVd Ul6L1JILlpb/II96Nl3V8gmIzGQbD5IGdCVbto2EP8OPES3cNRB2t+atAMQ+eZoW 58ZcDbhThd0Y9bBQOj2vHC+Vs7FZZyJYM4cqaTI= -----END CERTIFICATE-----Generated at Sat Apr 12 12:59:14 2025 by rpki-client