$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/89d1130b-8a24-31a7-81ed-4b0fd2a1a9dc.roa File: 89d1130b-8a24-31a7-81ed-4b0fd2a1a9dc.roa (raw, json) Hash identifier: gOzxCaYuTAvt0sV9pZEZSFrIdCyHJT7icPfan2+XXrs= Subject key identifier: B3:FE:64:20:96:F5:A2:21:DA:48:14:41:D0:49:E5:85:A3:1E:50:CC Certificate issuer: /CN=1c54e35c-a6c9-47e0-b788-866bd333d8e0 Certificate serial: 010D0C9F43285849C904DEF03AB5B5127F567400 Authority key identifier: AC:03:5B:5C:7A:BC:78:27:88:10:F2:5D:52:2A:5A:50:24:A6:B2:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/89d1130b-8a24-31a7-81ed-4b0fd2a1a9dc.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 9009 IP address blocks: 64.43.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/1c54e35c-a6c9-47e0-b788-866bd333d8e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/1c54e35c-a6c9-47e0-b788-866bd333d8e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:de:f0:3a:b5:b5:12:7f:56:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c54e35c-a6c9-47e0-b788-866bd333d8e0 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=1e130511-2797-4d99-b33d-4659a89978dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:77:a1:55:eb:3b:77:6a:2e:a8:5b:50:e6:98: 04:5e:96:53:5f:0b:b7:c5:28:06:aa:86:49:5c:f7: 22:17:95:74:73:e4:c6:8b:cc:28:68:4a:9e:38:c8: 8b:6e:4e:0d:c1:b0:3b:5d:10:28:e0:5d:0d:da:03: 03:48:eb:80:1d:58:2c:0b:cc:ae:7b:00:68:4a:f2: bc:a7:28:e5:6a:7f:b1:b1:40:e3:96:63:64:7a:2d: 86:18:f9:f1:e7:de:95:76:18:51:64:1f:27:fd:da: 4c:fb:1b:6a:e4:fc:ad:18:84:ac:b6:b9:d7:ef:19: 60:ab:61:e7:7a:e9:d4:5e:1a:9e:6f:99:29:a6:86: c2:12:b7:c3:b0:9b:20:ad:ba:03:c3:3e:36:1d:4f: c1:99:fe:8e:f0:17:7e:5f:8a:8b:ac:ee:f8:cf:c7: f0:c7:75:a5:1f:8a:49:f9:06:0e:f1:b7:1e:ef:ac: bb:cf:a5:ae:f7:2a:32:a7:75:c4:69:a0:b4:b3:16: d2:ff:f5:43:83:93:c2:0e:f3:21:1d:9f:9b:7b:6c: fb:b1:c1:cd:27:70:25:b7:8a:83:db:fc:56:98:5a: ed:b8:98:ec:ca:12:ec:45:99:30:76:03:de:95:4e: a0:fd:29:2d:ab:59:99:51:59:d2:55:6e:52:ef:ab: a6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FE:64:20:96:F5:A2:21:DA:48:14:41:D0:49:E5:85:A3:1E:50:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/89d1130b-8a24-31a7-81ed-4b0fd2a1a9dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0/1c54e35c-a6c9-47e0-b788-866bd333d8e0.crl X509v3 Authority Key Identifier: keyid:AC:03:5B:5C:7A:BC:78:27:88:10:F2:5D:52:2A:5A:50:24:A6:B2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c54e35c-a6c9-47e0-b788-866bd333d8e0.cer sbgp-ipAddrBlock: critical IPv4: 64.43.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:bd:5c:3e:50:79:0f:54:34:6a:3f:9c:99:c0:fc:34:fe:96: e5:1b:a6:5b:31:c8:81:01:14:b5:c5:cc:50:64:0f:f0:2c:85: 14:14:aa:d7:4a:94:0d:ba:ec:44:2e:42:90:8c:5e:a5:9d:b8: 40:eb:4a:69:4c:6e:05:8e:dc:2d:12:da:e4:ca:3e:98:1b:62: ab:5d:9c:c9:8a:6b:73:87:5b:41:31:6a:2b:20:2f:2f:b2:9a: c9:10:4d:06:05:66:17:13:cb:75:8b:a9:ca:ef:1e:fd:6a:6a: 63:cc:a0:f1:10:cb:cb:5f:57:e4:11:dc:39:c1:99:cb:b8:5c: b7:40:fa:50:76:4d:cf:e5:c0:87:eb:d6:1c:4e:cc:b4:15:a0: 9f:05:b2:42:41:c4:83:36:bf:c1:ac:da:b2:31:05:36:83:8b: f3:23:7a:ee:57:6b:02:30:df:9a:6c:b8:c0:c9:cd:8b:00:99: e3:49:a4:ce:69:8d:08:39:65:69:49:8a:bb:70:91:6e:99:10: 92:b9:52:13:1a:53:25:f5:a4:ee:34:f8:5d:c0:d7:54:65:7d: 7d:4e:b3:45:2f:5d:d6:52:40:3a:33:a9:f5:34:c4:85:a8:ec: af:34:92:20:7b:a5:9a:f7:63:a4:c3:b1:59:74:2f:0c:65:38: fe:91:1b:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBN7wOrW1En9WdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1NGUzNWMtYTZjOS00N2UwLWI3ODgtODY2YmQzMzNk OGUwMB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk MWUxMzA1MTEtMjc5Ny00ZDk5LWIzM2QtNDY1OWE4OTk3OGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HehVes7d2ouqFtQ5pgEXpZTXwu3xSgGqoZJ XPciF5V0c+TGi8woaEqeOMiLbk4NwbA7XRAo4F0N2gMDSOuAHVgsC8yuewBoSvK8 pyjlan+xsUDjlmNkei2GGPnx596VdhhRZB8n/dpM+xtq5PytGISstrnX7xlgq2Hn eunUXhqeb5kppobCErfDsJsgrboDwz42HU/Bmf6O8Bd+X4qLrO74z8fwx3WlH4pJ +QYO8bce76y7z6Wu9yoyp3XEaaC0sxbS//VDg5PCDvMhHZ+be2z7scHNJ3Alt4qD 2/xWmFrtuJjsyhLsRZkwdgPelU6g/Sktq1mZUVnSVW5S76umXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLP+ZCCW9aIh2kgUQdBJ5YWjHlDMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYzU0 ZTM1Yy1hNmM5LTQ3ZTAtYjc4OC04NjZiZDMzM2Q4ZTAvODlkMTEzMGItOGEyNC0z MWE3LTgxZWQtNGIwZmQyYTFhOWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWM1NGUzNWMtYTZjOS00N2UwLWI3 ODgtODY2YmQzMzNkOGUwLzFjNTRlMzVjLWE2YzktNDdlMC1iNzg4LTg2NmJkMzMz ZDhlMC5jcmwwHwYDVR0jBBgwFoAUrANbXHq8eCeIEPJdUipaUCSmsqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYzU0ZTM1Yy1hNmM5LTQ3ZTAtYjc4OC04NjZi ZDMzM2Q4ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQCvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGm9XD5QeQ9UNGo/nJnA/DT+luUbplsxyIEBFLXFzFBkD/AshRQUqtdK lA267EQuQpCMXqWduEDrSmlMbgWO3C0S2uTKPpgbYqtdnMmKa3OHW0ExaisgLy+y mskQTQYFZhcTy3WLqcrvHv1qamPMoPEQy8tfV+QR3DnBmcu4XLdA+lB2Tc/lwIfr 1hxOzLQVoJ8FskJBxIM2v8Gs2rIxBTaDi/Mjeu5XawIw35psuMDJzYsAmeNJpM5p jQg5ZWlJirtwkW6ZEJK5UhMaUyX1pO40+F3A11RlfX1Os0UvXdZSQDozqfU0xIWo 7K80kiB7pZr3Y6TDsVl0LwxlOP6RG5U= -----END CERTIFICATE-----Generated at Tue Jun 3 10:11:42 2025 by rpki-client