$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a6bfa668-d2c3-31c3-8e75-884e4fda29b4.roa File: a6bfa668-d2c3-31c3-8e75-884e4fda29b4.roa (raw, json) Hash identifier: QvPxqzUH1AEHag31apr22etDC1oLBl+yLu9yJ//gQiM= Subject key identifier: 03:7C:82:34:4D:C3:37:AB:6F:C9:B1:0A:B8:D1:1B:FD:E5:F0:F1:CE Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F43285849301592648E75D96A7EBCE380 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a6bfa668-d2c3-31c3-8e75-884e4fda29b4.roa Signing time: Fri 14 Mar 2025 18:16:05 +0000 ROA not before: Fri 14 Mar 2025 18:16:05 +0000 ROA not after: Thu 12 Jun 2025 18:16:05 +0000 asID: 32298 IP address blocks: 64.255.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:15:92:64:8e:75:d9:6a:7e:bc:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Mar 14 18:16:05 2025 GMT Not After : Jun 12 18:16:05 2025 GMT Subject: CN=4a0bdbe5-5dea-42db-95b4-623566866ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:81:f8:98:e4:1c:ee:5c:4f:36:58:92:e2:73: 7f:72:53:4a:ca:ca:4f:08:4e:35:25:a9:23:e3:5a: b5:d9:7f:28:27:4b:42:3a:fd:35:7f:3b:f3:34:ec: 1c:e6:72:78:f4:46:2f:c8:96:1b:19:f7:18:b2:36: 72:8d:8e:98:85:96:a8:1b:d7:00:89:4b:27:f2:4e: c3:77:1d:20:96:56:3d:16:6c:9b:8f:52:90:b0:a8: eb:2f:f8:1e:d1:10:d9:82:11:8e:d3:29:ac:1a:32: 41:c0:66:0c:55:06:e4:fc:54:82:b6:b0:8c:80:16: 8f:c9:13:13:90:d7:42:ff:21:b4:ac:80:d9:79:fa: 19:69:41:52:d3:1c:04:29:ed:fb:ea:0e:8c:f4:57: c8:5a:81:26:30:85:7b:57:32:07:d1:da:57:e8:9f: 9d:f6:b2:e7:6c:67:c4:b2:5e:5d:ec:61:5e:53:17: a9:ac:ef:9b:9b:d8:4b:91:94:65:5b:ae:61:64:e6: 06:6b:8a:2e:df:c3:d6:07:1a:cf:ad:c2:ef:ad:d9: 5c:3e:16:b0:40:5e:8b:e3:fa:d9:73:4b:d8:96:b8: 70:8f:55:60:76:b5:22:64:27:50:f4:be:05:c6:05: 1e:37:4c:52:e0:3d:75:17:c4:e2:bf:e7:a1:41:99: f8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7C:82:34:4D:C3:37:AB:6F:C9:B1:0A:B8:D1:1B:FD:E5:F0:F1:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a6bfa668-d2c3-31c3-8e75-884e4fda29b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 64.255.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:6e:3d:61:e7:6a:c3:f1:a0:08:b7:c3:6c:d9:a6:ff:35:ac: 29:9b:e0:b2:0a:7e:5e:e4:3d:ff:40:b6:d3:21:e2:83:a5:d6: 69:c2:65:b7:58:74:3e:0b:dc:84:16:33:43:9d:9a:32:32:4a: 50:9b:4d:e8:ae:d6:97:b9:24:9d:0d:50:ca:12:bb:d4:4c:6b: 13:8f:96:59:6f:64:1d:ad:ee:4b:53:97:b8:0d:a7:26:48:8d: da:a4:7d:7f:2a:16:b0:2c:2a:14:17:41:95:ae:49:0b:f8:39: bc:a9:e8:5c:6b:bf:ab:3a:a5:69:24:d2:2d:0a:b7:34:87:1d: a6:06:01:eb:66:a8:21:64:59:78:41:76:f6:b7:1a:aa:5b:4f: 9b:9f:12:76:01:15:35:ce:17:c3:f5:ba:81:27:41:14:c5:1e: 3d:40:27:89:09:a8:85:1b:46:b4:4a:f8:3d:72:91:03:0e:73: 1a:28:e3:a3:e4:34:d7:28:fa:b6:a8:19:3d:f3:d1:29:ba:3b: d2:55:a7:d6:f8:cc:0f:03:26:e0:2d:84:a0:e9:e0:21:32:94: 32:02:39:8e:88:eb:a4:6f:46:d0:40:6b:c7:d5:44:a2:61:05: 3f:61:4a:60:95:3b:59:1b:0c:45:9d:15:40:13:f0:43:73:ea: 31:db:e4:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkwFZJkjnXZan6844AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI1MDMxNDE4MTYwNVoXDTI1MDYxMjE4MTYwNVowLzEtMCsGA1UEAxMk NGEwYmRiZTUtNWRlYS00MmRiLTk1YjQtNjIzNTY2ODY2ZWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYH4mOQc7lxPNliS4nN/clNKyspPCE41Jakj 41q12X8oJ0tCOv01fzvzNOwc5nJ49EYvyJYbGfcYsjZyjY6YhZaoG9cAiUsn8k7D dx0gllY9Fmybj1KQsKjrL/ge0RDZghGO0ymsGjJBwGYMVQbk/FSCtrCMgBaPyRMT kNdC/yG0rIDZefoZaUFS0xwEKe376g6M9FfIWoEmMIV7VzIH0dpX6J+d9rLnbGfE sl5d7GFeUxeprO+bm9hLkZRlW65hZOYGa4ou38PWBxrPrcLvrdlcPhawQF6L4/rZ c0vYlrhwj1VgdrUiZCdQ9L4FxgUeN0xS4D11F8Tiv+ehQZn4HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAN8gjRNwzerb8mxCrjRG/3l8PHOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvYTZiZmE2NjgtZDJjMy0z MWMzLThlNzUtODg0ZTRmZGEyOWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQP/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChuPWHnasPxoAi3w2zZpv81rCmb4LIKfl7kPf9AttMh4oOl1mnCZbdY dD4L3IQWM0OdmjIySlCbTeiu1pe5JJ0NUMoSu9RMaxOPlllvZB2t7ktTl7gNpyZI jdqkfX8qFrAsKhQXQZWuSQv4Obyp6Fxrv6s6pWkk0i0KtzSHHaYGAetmqCFkWXhB dva3GqpbT5ufEnYBFTXOF8P1uoEnQRTFHj1AJ4kJqIUbRrRK+D1ykQMOcxoo46Pk NNco+raoGT3z0Sm6O9JVp9b4zA8DJuAthKDp4CEylDICOY6I66RvRtBAa8fVRKJh BT9hSmCVO1kbDEWdFUAT8ENz6jHb5Io= -----END CERTIFICATE-----Generated at Tue Apr 8 09:44:21 2025 by rpki-client