$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/bc07da42-b25f-3b39-8188-196620d13c0f.roa File: bc07da42-b25f-3b39-8188-196620d13c0f.roa (raw, json) Hash identifier: kcOyhYJsfFbl6fd2eTOCQXZWQHeWCe68Vkym2ltUwok= Subject key identifier: FF:62:60:75:48:8A:3C:A6:3D:33:48:48:7A:65:BB:95:3A:E1:0A:1E Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858494B64006631C687B9A7170E40 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/bc07da42-b25f-3b39-8188-196620d13c0f.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 13576 IP address blocks: 64.33.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:00:66:31:c6:87:b9:a7:17:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=48929563-abbc-4ab3-ad94-f2f5992d1434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c7:24:05:f0:05:76:cb:9a:1b:8e:c1:d0:c5: 53:48:16:d8:46:40:a3:ed:b1:b3:13:dd:97:0a:c8: cf:57:20:60:d7:04:2b:39:6a:a7:5e:37:01:6e:cd: 58:93:99:20:6e:46:17:98:82:80:57:11:bf:69:9c: af:6a:d4:f4:09:2a:6b:e2:b5:de:35:09:3b:56:4f: b5:72:e9:95:68:f3:aa:9b:44:ad:b4:e8:53:64:5f: 61:f7:28:00:a6:28:04:0c:01:03:42:37:33:82:7a: 92:69:a8:c4:58:75:85:ad:5c:c5:a0:6b:f3:b3:6d: fe:09:bc:12:dc:4e:79:8f:41:f2:66:41:13:06:8d: f6:f6:f8:b1:5f:23:77:60:8c:41:eb:09:f5:38:ea: 9c:2f:1b:ce:c0:3e:a9:82:e8:0c:08:b6:0c:09:62: c3:07:fc:bd:c6:91:2b:50:5b:d2:c0:5b:0e:bd:2d: ac:c1:ee:bc:10:07:39:8f:54:6e:a2:30:54:94:72: 1f:68:9d:db:f4:02:82:69:f9:47:cb:bc:a0:14:3d: f3:c1:8e:b1:d1:a6:39:27:a8:81:f5:ed:3e:e0:1f: fa:c4:43:a6:cf:08:22:90:90:e1:1c:af:31:f0:ac: ee:07:c6:32:11:7a:c4:e4:f8:5f:dc:74:39:5c:20: 86:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:62:60:75:48:8A:3C:A6:3D:33:48:48:7A:65:BB:95:3A:E1:0A:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/bc07da42-b25f-3b39-8188-196620d13c0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:18:3c:ba:65:17:a9:c5:ef:3c:d6:89:ba:2e:43:c4:db:ac: 49:3a:a5:1b:42:b3:5e:e9:35:da:aa:23:e8:77:51:31:23:b2: cf:90:17:8d:d9:81:bc:e2:79:43:a2:5e:d6:8c:7e:13:0c:fc: ef:d6:b4:1c:5b:e5:c8:a2:08:6e:f7:80:3c:0e:9b:0b:4d:37: ae:56:68:e6:57:d7:f7:b5:c6:ff:a0:20:3c:2f:b1:82:71:17: af:3f:c9:d3:07:67:c5:93:10:0e:48:35:5d:26:4a:45:2a:40: d6:a8:e4:6f:32:d9:b5:1a:24:9b:d7:90:16:93:4c:cf:d5:09: 06:e1:ed:10:be:c4:15:19:77:70:c0:51:43:83:25:2d:a1:de: 22:0e:03:53:77:e2:10:fb:30:0f:b3:9b:5b:64:c2:fc:d8:79: 18:d2:21:1c:7f:10:2e:8b:e9:e2:ff:1c:f3:c5:71:c4:d1:09: 89:49:d1:eb:a3:4e:6e:39:17:73:1b:3d:e4:4a:8e:2f:77:40: fb:71:7b:1b:1d:25:77:bf:85:86:c3:55:2a:d7:67:2c:36:50: 80:83:51:29:61:e8:2c:9f:35:9e:5b:02:f9:10:95:47:0b:38: 0f:bf:3f:d3:08:f9:93:f7:30:26:10:99:c4:8b:5d:4b:c4:0b: 0f:49:52:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZABmMcaHuacXDkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk NDg5Mjk1NjMtYWJiYy00YWIzLWFkOTQtZjJmNTk5MmQxNDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcckBfAFdsuaG47B0MVTSBbYRkCj7bGzE92X CsjPVyBg1wQrOWqnXjcBbs1Yk5kgbkYXmIKAVxG/aZyvatT0CSpr4rXeNQk7Vk+1 cumVaPOqm0SttOhTZF9h9ygApigEDAEDQjczgnqSaajEWHWFrVzFoGvzs23+CbwS 3E55j0HyZkETBo329vixXyN3YIxB6wn1OOqcLxvOwD6pgugMCLYMCWLDB/y9xpEr UFvSwFsOvS2swe68EAc5j1RuojBUlHIfaJ3b9AKCaflHy7ygFD3zwY6x0aY5J6iB 9e0+4B/6xEOmzwgikJDhHK8x8KzuB8YyEXrE5Phf3HQ5XCCGhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9iYHVIijymPTNISHplu5U64QoeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYmMwN2RhNDItYjI1Zi0z YjM5LTgxODgtMTk2NjIwZDEzYzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQCHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUYPLplF6nF7zzWibouQ8TbrEk6pRtCs17pNdqqI+h3UTEjss+QF43Z gbzieUOiXtaMfhMM/O/WtBxb5ciiCG73gDwOmwtNN65WaOZX1/e1xv+gIDwvsYJx F68/ydMHZ8WTEA5INV0mSkUqQNao5G8y2bUaJJvXkBaTTM/VCQbh7RC+xBUZd3DA UUODJS2h3iIOA1N34hD7MA+zm1tkwvzYeRjSIRx/EC6L6eL/HPPFccTRCYlJ0euj Tm45F3MbPeRKji93QPtxexsdJXe/hYbDVSrXZyw2UICDUSlh6CyfNZ5bAvkQlUcL OA+/P9MI+ZP3MCYQmcSLXUvECw9JUkE= -----END CERTIFICATE-----Generated at Thu Apr 17 23:24:34 2025 by rpki-client