$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/ca1046b1-3c53-3a2e-8d66-721b06cf9bcd.roa File: ca1046b1-3c53-3a2e-8d66-721b06cf9bcd.roa (raw, json) Hash identifier: FdK+BlpmujgBMBnbF/jMWU8F/ABqJgckUJEY3z3+7pg= Subject key identifier: E0:76:75:58:5E:58:38:FF:B4:46:8D:37:42:B0:35:08:A6:F8:FD:BF Certificate issuer: /CN=e2135eb7-dbed-4351-942d-90483acb1b22 Certificate serial: 010D0C9F4328584910E17C6A7985739DBC807A00 Authority key identifier: 2F:4E:F1:A1:A1:22:CC:D4:F6:68:2F:88:E4:78:E3:AE:CF:1D:AB:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/ca1046b1-3c53-3a2e-8d66-721b06cf9bcd.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 174 IP address blocks: 208.64.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/e2135eb7-dbed-4351-942d-90483acb1b22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/e2135eb7-dbed-4351-942d-90483acb1b22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:7c:6a:79:85:73:9d:bc:80:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2135eb7-dbed-4351-942d-90483acb1b22 Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=5a8a380b-9f15-40ff-81b0-3e879f506d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f1:46:eb:cb:4d:9d:68:41:d1:7d:14:e2:c3: 96:f2:08:34:b2:64:1e:a4:ff:17:c3:e6:2e:a7:68: e6:31:59:28:0f:01:0b:f4:7c:f1:43:d0:21:3d:1b: 6d:e2:fe:a6:34:9a:dd:73:d2:fd:ce:d1:eb:52:47: 85:76:17:e6:4b:63:a6:41:65:e9:cd:85:87:ee:41: d2:b1:dc:86:1e:75:44:5f:79:15:9b:cd:a1:60:ec: 90:32:ea:79:b8:32:39:c9:0d:d4:e0:3b:31:5b:03: 1f:65:8e:60:94:cd:70:1c:16:19:6c:f6:04:60:31: 5e:d2:43:99:37:2b:d1:fc:30:ec:2e:df:4d:3d:78: d0:88:1f:f7:f4:be:85:f8:7e:b7:c5:af:31:36:22: b0:3c:85:c3:67:44:03:ce:0f:9a:1f:77:0f:11:a0: eb:6b:33:58:63:99:a4:02:93:7a:2c:73:27:6a:eb: 90:b0:a6:7d:91:fe:6b:39:fe:98:25:8b:16:55:93: 60:74:62:2c:fc:0b:67:ee:ef:78:f0:6f:7d:ce:09: 36:7e:28:09:41:23:73:0f:5e:2f:92:da:9a:cf:f1: 46:65:26:6e:f5:e5:bc:62:78:96:9f:d2:94:92:3e: 7a:cf:16:58:a4:58:0b:9d:75:4d:5b:4f:61:32:4f: 44:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:76:75:58:5E:58:38:FF:B4:46:8D:37:42:B0:35:08:A6:F8:FD:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/ca1046b1-3c53-3a2e-8d66-721b06cf9bcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/e2135eb7-dbed-4351-942d-90483acb1b22.crl X509v3 Authority Key Identifier: keyid:2F:4E:F1:A1:A1:22:CC:D4:F6:68:2F:88:E4:78:E3:AE:CF:1D:AB:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22.cer sbgp-ipAddrBlock: critical IPv4: 208.64.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:49:58:4a:8f:9f:5d:c8:ea:cc:11:e1:f8:c0:38:5e:87:99: de:1b:8b:79:9f:1f:7b:c2:54:3e:9c:6c:3a:3b:d1:f7:c1:b8: af:97:0f:22:aa:a9:ba:b1:f0:c4:a4:32:5d:c3:04:7b:4e:a4: 22:a6:c5:3e:6e:bf:4c:0b:04:34:6e:7f:0b:69:47:55:dd:ca: 71:74:a6:fd:2d:8c:11:dc:e0:61:8a:b3:15:99:8c:26:64:4c: 1e:02:5b:1f:41:18:65:fe:ff:48:0c:7c:f4:62:39:55:73:97: 0f:93:66:80:2d:05:99:e3:cb:da:47:6e:61:76:55:d8:50:b4: 0a:6c:fd:f4:f3:85:f3:5b:a2:45:63:37:0b:3c:3e:e8:44:5c: a3:be:c4:1f:b9:4b:08:56:7b:ee:ec:96:45:f7:ad:83:1d:9b: e2:8c:c6:67:4a:2e:48:36:70:69:40:81:40:07:1b:cb:f4:d9: a7:ea:58:5b:0e:9e:32:05:79:93:4d:b7:23:64:ac:b5:f6:52: 46:83:16:a5:1c:8a:d7:85:34:50:bb:1d:d7:6f:62:5f:56:3e: bc:18:66:ff:1d:41:0f:5b:5a:73:d8:bf:a4:87:eb:d6:4d:5d: ea:d5:92:e3:8f:6a:e7:2b:03:1b:6a:91:7a:18:f0:13:6a:fb: 29:cc:d0:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4XxqeYVznbyAegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIxMzVlYjctZGJlZC00MzUxLTk0MmQtOTA0ODNhY2Ix YjIyMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk NWE4YTM4MGItOWYxNS00MGZmLTgxYjAtM2U4NzlmNTA2ZDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfFG68tNnWhB0X0U4sOW8gg0smQepP8Xw+Yu p2jmMVkoDwEL9HzxQ9AhPRtt4v6mNJrdc9L9ztHrUkeFdhfmS2OmQWXpzYWH7kHS sdyGHnVEX3kVm82hYOyQMup5uDI5yQ3U4DsxWwMfZY5glM1wHBYZbPYEYDFe0kOZ NyvR/DDsLt9NPXjQiB/39L6F+H63xa8xNiKwPIXDZ0QDzg+aH3cPEaDrazNYY5mk ApN6LHMnauuQsKZ9kf5rOf6YJYsWVZNgdGIs/Atn7u948G99zgk2figJQSNzD14v ktqaz/FGZSZu9eW8YniWn9KUkj56zxZYpFgLnXVNW09hMk9ERQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOB2dVheWDj/tEaNN0KwNQim+P2/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lMjEz NWViNy1kYmVkLTQzNTEtOTQyZC05MDQ4M2FjYjFiMjIvY2ExMDQ2YjEtM2M1My0z YTJlLThkNjYtNzIxYjA2Y2Y5YmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTIxMzVlYjctZGJlZC00MzUxLTk0 MmQtOTA0ODNhY2IxYjIyL2UyMTM1ZWI3LWRiZWQtNDM1MS05NDJkLTkwNDgzYWNi MWIyMi5jcmwwHwYDVR0jBBgwFoAUL07xoaEizNT2aC+I5Hjjrs8dq4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lMjEzNWViNy1kYmVkLTQzNTEtOTQyZC05MDQ4 M2FjYjFiMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EDcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNJWEqPn13I6swR4fjAOF6Hmd4bi3mfH3vCVD6cbDo70ffBuK+XDyKq qbqx8MSkMl3DBHtOpCKmxT5uv0wLBDRufwtpR1XdynF0pv0tjBHc4GGKsxWZjCZk TB4CWx9BGGX+/0gMfPRiOVVzlw+TZoAtBZnjy9pHbmF2VdhQtAps/fTzhfNbokVj Nws8PuhEXKO+xB+5SwhWe+7slkX3rYMdm+KMxmdKLkg2cGlAgUAHG8v02afqWFsO njIFeZNNtyNkrLX2UkaDFqUciteFNFC7HddvYl9WPrwYZv8dQQ9bWnPYv6SH69ZN XerVkuOPaucrAxtqkXoY8BNq+ynM0KY= -----END CERTIFICATE-----Generated at Sat Apr 5 22:40:53 2025 by rpki-client