$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/d58c2bcb-c7a8-3cb1-b785-84ff902689fa.roa File: d58c2bcb-c7a8-3cb1-b785-84ff902689fa.roa (raw, json) Hash identifier: FZsgLOXpvzG4ch6kDxqejFw5vCwxlAMdz8fFCrlrsA0= Subject key identifier: 7B:B3:E3:42:DF:1C:2F:80:29:1F:A4:57:8A:53:94:AA:A6:8F:4F:D7 Certificate issuer: /CN=564c92f5-eb04-448d-8939-379434b228b3 Certificate serial: 010D0C9F432858486695B598EAD176F3DA9BCE00 Authority key identifier: DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/d58c2bcb-c7a8-3cb1-b785-84ff902689fa.roa Signing time: Wed 01 Jan 2025 14:00:53 +0000 ROA not before: Wed 01 Jan 2025 14:00:53 +0000 ROA not after: Tue 01 Apr 2025 13:00:53 +0000 asID: 803 IP address blocks: 142.165.0.0/16 maxlen: 16 204.83.0.0/16 maxlen: 16 207.195.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:66:95:b5:98:ea:d1:76:f3:da:9b:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=564c92f5-eb04-448d-8939-379434b228b3 Validity Not Before: Jan 1 14:00:53 2025 GMT Not After : Apr 1 13:00:53 2025 GMT Subject: CN=9ab91b9c-5a26-4342-aeaf-3e7bbab80949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cd:54:eb:ae:66:73:72:a5:3a:87:28:c6:5e: e8:22:41:76:c3:f1:35:28:91:84:60:d5:4d:5b:df: 8a:50:43:e5:e7:dd:53:c1:e0:8b:30:9a:a6:c9:27: 4e:60:6c:04:90:e2:81:0a:12:35:70:fb:ed:19:d1: 3b:f5:7a:e3:7f:71:53:e4:34:03:2d:89:3e:ee:f6: c9:db:f8:f9:ea:48:51:44:cd:a0:dc:1f:69:a6:f0: 15:c9:30:f3:2b:b6:13:5d:cd:32:23:f1:76:dd:83: 00:e4:c2:cf:12:70:41:aa:ac:22:d3:0a:5b:88:94: ea:06:4c:f4:13:1e:43:a7:6b:a8:01:a0:c6:df:d5: 72:42:58:8f:94:56:03:6b:2a:84:1a:ea:85:d0:6b: 38:96:c9:91:2d:3c:52:6b:4e:93:6b:09:45:75:62: 71:3d:1a:1a:e4:ed:96:48:1f:4e:61:68:e7:b7:a2: 3a:43:b2:48:de:bc:42:c7:e6:47:2f:89:a5:5d:27: ca:16:b3:70:c6:99:f0:7a:89:a5:1b:f2:1f:12:3e: ea:2c:4e:98:8f:be:d6:36:04:17:3a:9d:51:d9:ba: a2:9b:44:8a:25:de:3c:0e:23:8f:a2:86:cd:f9:74: 79:33:43:4c:3a:8c:27:d0:29:ca:41:49:ee:3d:c5: e1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B3:E3:42:DF:1C:2F:80:29:1F:A4:57:8A:53:94:AA:A6:8F:4F:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/d58c2bcb-c7a8-3cb1-b785-84ff902689fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl X509v3 Authority Key Identifier: keyid:DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer sbgp-ipAddrBlock: critical IPv4: 142.165.0.0/16 204.83.0.0/16 207.195.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:42:17:51:fa:c5:fd:e4:21:97:3c:be:a7:d7:42:5b:c4:86: 04:30:8e:e7:d6:31:14:d4:5f:35:8a:7c:eb:2c:50:17:fa:0d: 10:e2:df:b1:a6:71:3f:a7:e0:4a:b5:07:c3:99:99:48:92:06: cf:23:25:e9:70:0b:1e:be:6a:e3:eb:27:e3:52:01:c0:18:85: 4d:bf:10:b4:95:e4:5e:d9:12:48:2a:bd:80:41:6f:a8:09:6c: 96:21:a8:66:9a:b9:63:92:22:d0:00:85:ee:5c:d5:c4:7c:bc: e2:e6:0d:3d:59:03:9c:57:15:7d:0c:17:cb:05:a3:55:62:5c: 1b:71:62:57:58:7b:dd:48:b8:61:98:79:35:98:24:e0:79:8e: a9:1d:51:ab:4b:b6:fb:4c:e3:32:97:c7:d7:78:41:f7:93:1f: 64:df:7d:5c:79:11:bc:71:3b:54:c2:67:40:c5:5d:6c:7d:94: 8a:77:50:30:ff:1c:0e:89:d9:bc:5b:0d:3c:a6:2c:e4:a0:22: 7e:ad:b9:a5:f4:38:6c:e6:ec:aa:7f:be:89:1e:40:7a:d1:1a: d1:1e:a2:c9:45:da:84:7c:63:cf:9f:f7:db:ac:33:fa:43:5b: e8:6b:56:3c:71:7b:85:37:df:1f:90:8e:aa:9e:18:00:48:80: 34:1c:7e:e3 -----BEGIN CERTIFICATE----- MIIGTTCCBTWgAwIBAgIUAQ0Mn0MoWEhmlbWY6tF289qbzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTY0YzkyZjUtZWIwNC00NDhkLTg5MzktMzc5NDM0YjIy OGIzMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk OWFiOTFiOWMtNWEyNi00MzQyLWFlYWYtM2U3YmJhYjgwOTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl81U665mc3KlOocoxl7oIkF2w/E1KJGEYNVN W9+KUEPl591TweCLMJqmySdOYGwEkOKBChI1cPvtGdE79Xrjf3FT5DQDLYk+7vbJ 2/j56khRRM2g3B9ppvAVyTDzK7YTXc0yI/F23YMA5MLPEnBBqqwi0wpbiJTqBkz0 Ex5Dp2uoAaDG39VyQliPlFYDayqEGuqF0Gs4lsmRLTxSa06TawlFdWJxPRoa5O2W SB9OYWjnt6I6Q7JI3rxCx+ZHL4mlXSfKFrNwxpnweomlG/IfEj7qLE6Yj77WNgQX Op1R2bqim0SKJd48DiOPoobN+XR5M0NMOown0CnKQUnuPcXhRQIDAQABo4IDXzCC A1swHQYDVR0OBBYEFHuz40LfHC+AKR+kV4pTlKqmj0/XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NjRj OTJmNS1lYjA0LTQ0OGQtODkzOS0zNzk0MzRiMjI4YjMvZDU4YzJiY2ItYzdhOC0z Y2IxLWI3ODUtODRmZjkwMjY4OWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTY0YzkyZjUtZWIwNC00NDhkLTg5 MzktMzc5NDM0YjIyOGIzLzU2NGM5MmY1LWViMDQtNDQ4ZC04OTM5LTM3OTQzNGIy MjhiMy5jcmwwHwYDVR0jBBgwFoAU3XZv4maXpZNiEaRYPOTVyeFZ1IAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NjRjOTJmNS1lYjA0LTQ0OGQtODkzOS0zNzk0 MzRiMjI4YjMuY2VyMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAATAQAwMAjqUDAwDM UwMEB8/DADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQCoQhdR+sX95CGXPL6n10JbxIYEMI7n1jEU1F81inzr LFAX+g0Q4t+xpnE/p+BKtQfDmZlIkgbPIyXpcAsevmrj6yfjUgHAGIVNvxC0leRe 2RJIKr2AQW+oCWyWIahmmrljkiLQAIXuXNXEfLzi5g09WQOcVxV9DBfLBaNVYlwb cWJXWHvdSLhhmHk1mCTgeY6pHVGrS7b7TOMyl8fXeEH3kx9k331ceRG8cTtUwmdA xV1sfZSKd1Aw/xwOidm8Ww08pizkoCJ+rbml9Dhs5uyqf76JHkB60RrRHqLJRdqE fGPPn/fbrDP6Q1voa1Y8cXuFN98fkI6qnhgASIA0HH7j -----END CERTIFICATE-----Generated at Fri Mar 14 11:12:19 2025 by rpki-client