$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/2cc71add-527b-33ca-bca3-3aed5a7256fb.roa File: 2cc71add-527b-33ca-bca3-3aed5a7256fb.roa (raw, json) Hash identifier: du34e32vxm2qLVfOfDqnaBkCaIqkADYEF0OAaPrKbYU= Subject key identifier: 45:FB:18:02:3E:8C:68:20:F6:80:01:81:6C:19:67:71:68:70:5C:AB Certificate issuer: /CN=e215a9e7-8c66-4e81-a077-2a73c903a0ac Certificate serial: 010D0C9F432858491AA6B047DDE8BFA49D27D3C0 Authority key identifier: BB:CC:6E:8F:71:EE:5B:79:1C:68:18:85:B1:3F:64:3F:01:D1:C8:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/2cc71add-527b-33ca-bca3-3aed5a7256fb.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 393705 IP address blocks: 169.224.192.0/19 maxlen: 24 2607:cdc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/e215a9e7-8c66-4e81-a077-2a73c903a0ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/e215a9e7-8c66-4e81-a077-2a73c903a0ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:b0:47:dd:e8:bf:a4:9d:27:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e215a9e7-8c66-4e81-a077-2a73c903a0ac Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=8b98a3df-e638-438b-9438-aa6751bbd436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b8:88:9e:5b:95:c9:b2:38:72:5a:36:51:c3: 1f:99:04:b8:0f:70:59:14:fa:40:9a:db:7f:5a:3d: 34:a6:d6:a9:18:89:a3:5b:f5:49:14:af:70:cf:e7: ef:8b:17:8c:64:88:8f:1f:ad:e8:66:b2:6e:7d:73: c0:18:d2:80:7f:24:0d:ff:a4:07:59:05:ff:d3:72: 09:89:e8:d0:6f:46:cd:bc:9d:81:e6:f3:be:ce:87: ec:4a:62:58:f2:a8:83:90:88:3f:2b:1e:a5:10:4d: 77:90:f6:52:b3:4b:74:7d:b4:84:41:5c:5f:65:08: 4c:a3:98:ed:de:8b:d2:48:a0:a1:4c:5f:8e:27:6e: 4b:c9:ed:ef:56:70:57:a3:98:f6:7a:a7:17:bd:83: af:64:13:5e:c5:ad:bf:ef:81:eb:ad:0a:57:3c:52: 64:17:a1:7a:f9:8f:b7:e0:10:51:74:c9:0d:20:f0: c5:19:ad:52:9f:ed:46:10:80:81:69:19:b6:3b:89: 93:2b:7d:87:bc:e8:6c:c3:c8:83:2a:dd:38:ed:bc: 2d:7e:98:b1:86:71:18:5a:f7:bf:20:16:b3:8e:9d: 3c:5c:79:a8:e1:98:23:73:d0:5f:e2:1f:45:83:02: ee:c1:63:9a:9f:80:c4:dc:b9:10:e6:b7:e2:93:ee: ab:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FB:18:02:3E:8C:68:20:F6:80:01:81:6C:19:67:71:68:70:5C:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/2cc71add-527b-33ca-bca3-3aed5a7256fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/e215a9e7-8c66-4e81-a077-2a73c903a0ac.crl X509v3 Authority Key Identifier: keyid:BB:CC:6E:8F:71:EE:5B:79:1C:68:18:85:B1:3F:64:3F:01:D1:C8:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac.cer sbgp-ipAddrBlock: critical IPv4: 169.224.192.0/19 IPv6: 2607:cdc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:4a:83:68:91:46:92:60:3d:8d:5f:fa:24:dd:9d:1f:56:8a: 21:65:14:6b:fc:8d:a0:ad:64:27:81:bb:8a:f5:ca:ea:0b:44: 16:c8:bf:ec:45:32:b8:b7:76:5a:b4:cc:64:36:a4:9c:cf:6f: 36:7c:64:01:b9:42:69:77:4c:02:12:98:a8:49:0d:d1:cd:7a: 8f:c3:ac:3d:c6:d9:47:1e:2b:31:cf:21:08:cc:ee:78:41:b2: 05:15:ee:76:ec:14:9a:b0:ad:71:b1:75:6d:06:7f:c6:4b:24: 00:fd:76:51:55:88:a0:bd:c0:6f:6f:b4:c1:86:5a:97:c2:af: dd:9d:01:7f:39:83:90:39:71:b7:65:4f:66:75:fb:a5:87:2c: 3a:da:31:bb:de:78:5e:e4:c1:48:e7:a4:a3:7a:dd:93:6d:9f: 5e:b8:8a:d7:d6:bc:84:cd:bb:f8:31:2b:71:63:8f:5a:72:de: 99:dd:4c:74:3e:d4:c0:e9:0c:9f:c3:fe:75:db:df:32:de:e3: 6e:65:81:cc:97:4c:eb:5c:50:05:3e:c5:8f:19:9a:90:5e:89: 8a:2f:d8:07:60:f2:2d:82:5e:dd:a7:6e:b9:3e:fa:a1:6b:6b: 54:91:07:53:b9:57:c9:04:4a:04:86:49:81:60:65:95:c8:4c: 82:b2:9d:95 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEkaprBH3ei/pJ0n08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIxNWE5ZTctOGM2Ni00ZTgxLWEwNzctMmE3M2M5MDNh MGFjMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk OGI5OGEzZGYtZTYzOC00MzhiLTk0MzgtYWE2NzUxYmJkNDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1biInluVybI4clo2UcMfmQS4D3BZFPpAmtt/ Wj00ptapGImjW/VJFK9wz+fvixeMZIiPH63oZrJufXPAGNKAfyQN/6QHWQX/03IJ iejQb0bNvJ2B5vO+zofsSmJY8qiDkIg/Kx6lEE13kPZSs0t0fbSEQVxfZQhMo5jt 3ovSSKChTF+OJ25Lye3vVnBXo5j2eqcXvYOvZBNexa2/74HrrQpXPFJkF6F6+Y+3 4BBRdMkNIPDFGa1Sn+1GEICBaRm2O4mTK32HvOhsw8iDKt047bwtfpixhnEYWve/ IBazjp08XHmo4Zgjc9Bf4h9FgwLuwWOan4DE3LkQ5rfik+6rLwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFEX7GAI+jGgg9oABgWwZZ3FocFyrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lMjE1 YTllNy04YzY2LTRlODEtYTA3Ny0yYTczYzkwM2EwYWMvMmNjNzFhZGQtNTI3Yi0z M2NhLWJjYTMtM2FlZDVhNzI1NmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTIxNWE5ZTctOGM2Ni00ZTgxLWEw NzctMmE3M2M5MDNhMGFjL2UyMTVhOWU3LThjNjYtNGU4MS1hMDc3LTJhNzNjOTAz YTBhYy5jcmwwHwYDVR0jBBgwFoAUu8xuj3HuW3kcaBiFsT9kPwHRyCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lMjE1YTllNy04YzY2LTRlODEtYTA3Ny0yYTcz YzkwM2EwYWMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFqeDAMA0E AgACMAcDBQAmB83AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAKpKg2iRRpJgPY1f+iTdnR9WiiFlFGv8jaCt ZCeBu4r1yuoLRBbIv+xFMri3dlq0zGQ2pJzPbzZ8ZAG5Qml3TAISmKhJDdHNeo/D rD3G2UceKzHPIQjM7nhBsgUV7nbsFJqwrXGxdW0Gf8ZLJAD9dlFViKC9wG9vtMGG WpfCr92dAX85g5A5cbdlT2Z1+6WHLDraMbveeF7kwUjnpKN63ZNtn164itfWvITN u/gxK3Fjj1py3pndTHQ+1MDpDJ/D/nXb3zLe425lgcyXTOtcUAU+xY8ZmpBeiYov 2Adg8i2CXt2nbrk++qFra1SRB1O5V8kESgSGSYFgZZXITIKynZU= -----END CERTIFICATE-----Generated at Fri Apr 11 23:41:35 2025 by rpki-client