$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/dce5c758-03d9-3603-a303-530c88930fa0.roa File: dce5c758-03d9-3603-a303-530c88930fa0.roa (raw, json) Hash identifier: IA0wl+TPgefgqJ8NSTQ9n7+li53gydb3gGTWtnSutFA= Subject key identifier: 04:3B:0B:1F:2F:B9:E7:E8:91:31:1B:BB:A2:23:BF:68:58:CE:C0:44 Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3 Certificate serial: 010D0C9F432858490B4C1A7537E207BECE612480 Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/dce5c758-03d9-3603-a303-530c88930fa0.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 11300 IP address blocks: 64.49.152.0/24 maxlen: 25 207.241.180.0/24 maxlen: 25 207.241.181.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:1a:75:37:e2:07:be:ce:61:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=c5cbd36c-0058-4ab5-afc3-90472600e5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:22:00:92:db:4c:ee:76:73:d6:99:b6:29:9b: 3a:02:cf:0b:c8:56:c6:24:2f:17:c8:6f:59:58:f6: ef:69:3c:5c:01:33:3f:de:12:3d:b0:e7:a1:58:10: 57:69:d8:70:0d:4f:c7:2d:4a:e5:71:67:cb:c2:98: 0a:4b:39:97:1c:0b:2b:61:bf:0a:ba:06:c0:b3:21: 34:55:f8:df:c1:1b:da:38:a7:1c:7f:46:45:de:b1: fa:d9:b4:66:15:5a:a7:4a:f2:14:6a:e6:b5:5a:c3: 31:fb:87:e1:69:27:27:12:82:56:c4:7c:cf:47:20: 0d:be:0b:27:23:b0:24:47:b1:36:47:25:20:f3:24: c5:ae:2d:4a:78:3c:83:78:7a:36:99:30:04:cd:c2: 48:69:4d:c2:72:9f:95:fe:77:39:cf:80:d9:5b:b2: 60:51:ac:79:98:59:f3:87:27:52:7f:0e:33:60:5a: 4c:aa:e3:56:9b:e3:ab:c6:7f:3b:29:3c:95:85:81: 40:c4:ec:ec:3f:fc:60:72:cd:e7:2f:08:70:da:34: 8d:ef:55:d7:dd:bd:af:e7:5e:23:b6:4a:75:91:04: b3:e9:d5:9a:be:2c:51:7e:8e:74:26:81:c4:5f:80: ab:18:98:77:c0:ba:68:1f:e4:6d:b8:15:94:cc:44: f0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3B:0B:1F:2F:B9:E7:E8:91:31:1B:BB:A2:23:BF:68:58:CE:C0:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/dce5c758-03d9-3603-a303-530c88930fa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl X509v3 Authority Key Identifier: keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer sbgp-ipAddrBlock: critical IPv4: 64.49.152.0/24 207.241.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:70:b2:0f:73:7a:d9:0c:e4:eb:8c:c5:2e:f9:cd:56:80:9c: 61:9c:19:d0:61:2c:bc:39:1c:03:7c:ed:d7:b7:59:3d:5d:b5: 0c:fe:9f:80:82:f7:42:4c:47:fe:18:be:de:c0:6c:cd:e8:9f: 96:3c:39:0d:35:72:51:0c:71:41:a2:c6:22:a7:f7:a0:b5:bf: 1c:37:21:c0:26:00:40:06:7d:e0:71:92:58:cf:66:29:f9:d1: 4b:ab:cc:f8:91:aa:07:72:f0:f9:bb:f7:0d:0c:dc:ea:c7:d7: 76:ac:22:94:00:ff:a6:7c:b0:e2:dd:f3:45:1f:19:d9:60:3d: c5:9f:e7:a5:c5:6b:d1:df:c2:a1:97:04:e7:1c:4d:9b:0b:70: c7:ee:4d:18:99:77:da:93:f5:1b:c1:54:b0:28:73:26:90:18: d2:1d:1c:96:cc:82:f8:f5:bc:af:08:24:e8:e6:cd:a0:03:0f: cf:e9:1c:37:fa:5a:ad:0a:7d:ed:95:7a:d9:79:af:3e:65:f6: 06:2a:e8:82:0a:9c:8e:98:ea:c1:7d:9f:f9:7a:d7:fc:8c:50: e3:38:39:31:6d:86:73:f4:2a:58:99:0c:c7:e6:cd:7a:90:3a: 30:b5:88:3a:33:cf:41:f7:74:d2:df:3d:da:1c:9c:72:66:18: 8b:ea:9f:9a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkLTBp1N+IHvs5hJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx OGUzMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk YzVjYmQzNmMtMDA1OC00YWI1LWFmYzMtOTA0NzI2MDBlNWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiIAkttM7nZz1pm2KZs6As8LyFbGJC8XyG9Z WPbvaTxcATM/3hI9sOehWBBXadhwDU/HLUrlcWfLwpgKSzmXHAsrYb8KugbAsyE0 VfjfwRvaOKccf0ZF3rH62bRmFVqnSvIUaua1WsMx+4fhaScnEoJWxHzPRyANvgsn I7AkR7E2RyUg8yTFri1KeDyDeHo2mTAEzcJIaU3Ccp+V/nc5z4DZW7JgUax5mFnz hydSfw4zYFpMquNWm+Orxn87KTyVhYFAxOzsP/xgcs3nLwhw2jSN71XX3b2v514j tkp1kQSz6dWavixRfo50JoHEX4CrGJh3wLpoH+RtuBWUzETwbwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAQ7Cx8vuefokTEbu6Ijv2hYzsBEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvZGNlNWM3NTgtMDNkOS0z NjAzLWEzMDMtNTMwYzg4OTMwZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4 MzVmYzE4ZTMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQDGYAwQB z/G0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAK5wsg9zetkM5OuMxS75zVaAnGGcGdBhLLw5HAN87de3WT1d tQz+n4CC90JMR/4Yvt7AbM3on5Y8OQ01clEMcUGixiKn96C1vxw3IcAmAEAGfeBx kljPZin50UurzPiRqgdy8Pm79w0M3OrH13asIpQA/6Z8sOLd80UfGdlgPcWf56XF a9HfwqGXBOccTZsLcMfuTRiZd9qT9RvBVLAocyaQGNIdHJbMgvj1vK8IJOjmzaAD D8/pHDf6Wq0Kfe2Vetl5rz5l9gYq6IIKnI6Y6sF9n/l61/yMUOM4OTFthnP0KliZ DMfmzXqQOjC1iDozz0H3dNLfPdocnHJmGIvqn5o= -----END CERTIFICATE-----Generated at Fri Mar 14 11:05:35 2025 by rpki-client