$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/bff72a2e-13a9-31ab-bb47-124e89b56abc.roa File: bff72a2e-13a9-31ab-bb47-124e89b56abc.roa (raw, json) Hash identifier: lKvPvMStXJ7P7T6nQM/ZjoPfKmWzyFbndFXYoKkAOjI= Subject key identifier: CC:BD:9C:AB:71:0D:B7:61:72:95:CD:26:F2:04:DC:39:07:63:A1:3C Certificate issuer: /CN=8b860252-78e2-47ac-a6f1-f1dc5a900776 Certificate serial: 010D0C9F432858494CC93B465B6BC5F00B744CC0 Authority key identifier: 7F:81:D2:90:2A:22:41:3D:B7:67:62:4A:E2:47:51:3B:D7:0F:7B:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/bff72a2e-13a9-31ab-bb47-124e89b56abc.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 20099 IP address blocks: 192.44.70.0/24 maxlen: 24 2620:89:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:3b:46:5b:6b:c5:f0:0b:74:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b860252-78e2-47ac-a6f1-f1dc5a900776 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=79b2b27f-4868-4a90-b86a-935a6b236cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:86:83:3f:41:52:a4:86:70:3c:e5:f7:bd:fd: 3d:77:05:70:c0:35:0f:f0:c1:ee:c9:79:df:29:a4: 2d:c4:d4:5a:a1:be:ae:ff:6b:18:06:5c:98:0e:d0: 1d:9c:c2:29:ff:c2:13:39:87:ad:9c:1a:64:b8:8c: 8a:46:c4:df:69:2d:90:64:9e:f7:80:9b:3d:e6:7d: 54:83:fd:5f:09:e0:11:49:c1:87:e0:d3:38:71:8e: 90:3d:31:1c:1f:9f:37:dd:5d:de:17:3e:66:85:0b: 01:0f:3d:9c:6b:1d:1e:49:ce:7c:6d:f2:cb:ed:a9: f8:42:4c:57:58:d0:53:54:12:19:b2:7d:11:38:1f: ef:a0:91:21:44:65:3b:f4:55:36:5f:7a:02:34:4e: 96:13:d1:4c:ae:b0:65:68:c5:81:95:68:7d:a1:c1: 58:38:8c:af:c1:4a:4b:48:21:e3:ed:53:ec:79:1f: df:ef:be:82:3b:1f:fc:38:2f:31:8c:3d:7a:e4:a5: b0:90:a8:9e:30:b3:e2:37:2f:6b:ba:0d:f5:00:fc: 04:17:a8:1f:23:1c:91:95:36:5c:29:89:f5:08:93: b6:a1:38:df:a5:c5:dd:01:ba:99:5d:5a:07:4d:94: 9f:02:62:eb:af:58:90:12:75:92:79:1b:4a:76:7b: 8e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BD:9C:AB:71:0D:B7:61:72:95:CD:26:F2:04:DC:39:07:63:A1:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/bff72a2e-13a9-31ab-bb47-124e89b56abc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776/8b860252-78e2-47ac-a6f1-f1dc5a900776.crl X509v3 Authority Key Identifier: keyid:7F:81:D2:90:2A:22:41:3D:B7:67:62:4A:E2:47:51:3B:D7:0F:7B:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b860252-78e2-47ac-a6f1-f1dc5a900776.cer sbgp-ipAddrBlock: critical IPv4: 192.44.70.0/24 IPv6: 2620:89:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:68:8e:97:7c:24:48:34:df:df:c4:c1:9d:94:df:7a:c1:c3: 0b:d9:a5:63:0a:e8:45:01:8c:cd:80:cd:78:15:0b:70:ae:28: d5:bd:b2:d3:44:1a:84:3e:1f:4c:4d:17:32:40:b8:65:d6:d1: a5:15:d1:5c:75:a1:81:f0:39:1b:22:7b:86:78:ae:4e:ad:01: 75:b0:41:db:e6:3d:41:71:f6:de:68:44:3e:48:ee:a2:a7:9f: 0a:f3:92:06:65:c8:7d:a2:e5:07:61:0f:b1:77:06:83:f9:43: 89:92:c7:de:7d:a0:09:99:96:7c:96:ea:e6:29:1a:e6:50:48: e5:95:ee:07:3b:df:e5:de:53:b8:aa:46:a2:b3:23:ac:8e:92: 3c:82:6f:38:5b:24:6b:af:b6:c3:69:13:26:8d:5f:5c:29:a2: 3a:0e:07:79:c5:47:a0:b7:93:c5:bd:4f:5d:8a:f6:ef:a5:e0: be:2d:db:b7:f5:20:7f:e6:fe:0f:28:a3:a0:b6:e6:85:b7:2b: ea:7e:a5:eb:76:09:14:86:bd:85:e1:d1:1b:66:87:72:00:5e: 54:dc:fb:55:83:99:31:d9:11:87:b6:c1:fa:9e:47:48:51:7c: a7:51:e4:c6:90:30:ff:1e:8e:c8:45:b4:eb:15:ed:33:20:c4: 93:21:20:44 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWElMyTtGW2vF8At0TMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI4NjAyNTItNzhlMi00N2FjLWE2ZjEtZjFkYzVhOTAw Nzc2MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk NzliMmIyN2YtNDg2OC00YTkwLWI4NmEtOTM1YTZiMjM2Y2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4aDP0FSpIZwPOX3vf09dwVwwDUP8MHuyXnf KaQtxNRaob6u/2sYBlyYDtAdnMIp/8ITOYetnBpkuIyKRsTfaS2QZJ73gJs95n1U g/1fCeARScGH4NM4cY6QPTEcH5833V3eFz5mhQsBDz2cax0eSc58bfLL7an4QkxX WNBTVBIZsn0ROB/voJEhRGU79FU2X3oCNE6WE9FMrrBlaMWBlWh9ocFYOIyvwUpL SCHj7VPseR/f776COx/8OC8xjD165KWwkKieMLPiNy9rug31APwEF6gfIxyRlTZc KYn1CJO2oTjfpcXdAbqZXVoHTZSfAmLrr1iQEnWSeRtKdnuOHwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFMy9nKtxDbdhcpXNJvIE3DkHY6E8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84Yjg2 MDI1Mi03OGUyLTQ3YWMtYTZmMS1mMWRjNWE5MDA3NzYvYmZmNzJhMmUtMTNhOS0z MWFiLWJiNDctMTI0ZTg5YjU2YWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGI4NjAyNTItNzhlMi00N2FjLWE2 ZjEtZjFkYzVhOTAwNzc2LzhiODYwMjUyLTc4ZTItNDdhYy1hNmYxLWYxZGM1YTkw MDc3Ni5jcmwwHwYDVR0jBBgwFoAUf4HSkCoiQT23Z2JK4kdRO9cPe3cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84Yjg2MDI1Mi03OGUyLTQ3YWMtYTZmMS1mMWRj NWE5MDA3NzYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwCxGMA8E AgACMAkDBwAmIACJwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAk2iOl3wkSDTf38TBnZTfesHDC9mlYwro RQGMzYDNeBULcK4o1b2y00QahD4fTE0XMkC4ZdbRpRXRXHWhgfA5GyJ7hniuTq0B dbBB2+Y9QXH23mhEPkjuoqefCvOSBmXIfaLlB2EPsXcGg/lDiZLH3n2gCZmWfJbq 5ika5lBI5ZXuBzvf5d5TuKpGorMjrI6SPIJvOFska6+2w2kTJo1fXCmiOg4HecVH oLeTxb1PXYr276Xgvi3bt/Ugf+b+DyijoLbmhbcr6n6l63YJFIa9heHRG2aHcgBe VNz7VYOZMdkRh7bB+p5HSFF8p1HkxpAw/x6OyEW06xXtMyDEkyEgRA== -----END CERTIFICATE-----Generated at Sat Apr 5 09:50:10 2025 by rpki-client