$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a3abfaf3-64a7-328a-ad03-ba37201c413d.roa File: a3abfaf3-64a7-328a-ad03-ba37201c413d.roa (raw, json) Hash identifier: LN09eaYnqLvj2VNGuIEPDweADSE1UW8UHYtuj7tektE= Subject key identifier: 1D:31:9C:81:64:BB:D8:42:B8:47:54:F1:29:20:E4:48:D3:A0:6F:32 Certificate issuer: /CN=a062a219-9ee8-48a3-897a-8410b6da94a1 Certificate serial: 010D0C9F4328584869605AE848EA590426439E00 Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a3abfaf3-64a7-328a-ad03-ba37201c413d.roa Signing time: Thu 02 Jan 2025 14:00:52 +0000 ROA not before: Thu 02 Jan 2025 14:00:52 +0000 ROA not after: Wed 02 Apr 2025 13:00:52 +0000 asID: 803 IP address blocks: 64.110.192.0/18 maxlen: 18 64.201.192.0/19 maxlen: 19 67.225.0.0/17 maxlen: 17 68.69.192.0/19 maxlen: 19 69.11.0.0/17 maxlen: 17 71.17.0.0/16 maxlen: 16 74.113.12.0/22 maxlen: 22 2604:1e80::/32 maxlen: 32 2607:f4a8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:69:60:5a:e8:48:ea:59:04:26:43:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1 Validity Not Before: Jan 2 14:00:52 2025 GMT Not After : Apr 2 13:00:52 2025 GMT Subject: CN=75d18b57-d31c-4789-921c-625dd63d406b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:83:cc:87:30:b3:95:f6:af:eb:ec:bb:b6:cf: c7:cd:c2:85:79:82:a7:bd:dd:02:e7:ea:df:79:99: ee:16:05:87:3b:1d:d1:af:86:2e:0e:fd:95:f5:4d: cc:0b:96:c7:9e:40:61:e6:03:ed:34:77:fc:38:49: 9f:8d:23:00:cc:28:47:ac:d4:26:49:9f:d1:2e:ae: c9:c4:9e:4e:d8:1f:2a:35:8e:16:75:c3:b5:f3:47: 38:7d:bc:0a:fd:57:63:8c:d9:98:21:9e:74:8a:b6: cb:19:4b:ba:3f:dc:21:6a:c3:c7:da:37:26:f7:c0: 84:c7:bc:d1:4f:b9:29:94:39:56:34:49:b6:fd:0c: 80:72:91:b2:e8:9e:05:9f:66:bf:e2:60:68:97:30: 1b:5b:13:a3:d1:97:eb:58:c0:14:7f:9f:b3:d9:e3: 7b:9e:1a:3c:ee:99:de:30:ba:7a:ae:3d:5e:90:74: e9:c7:e9:9d:b1:2a:79:71:06:08:a6:84:58:bf:b7: 12:e1:58:55:39:4c:31:bc:bb:1d:e3:c4:15:30:b0: 81:30:9d:a9:8f:83:23:cf:46:42:e9:ac:b4:d2:4a: 13:c6:ff:57:2d:93:86:c8:88:3f:1e:23:fa:e0:8c: 9d:92:c3:2e:80:41:1f:bc:73:f0:8f:b4:d5:02:63: f2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:31:9C:81:64:BB:D8:42:B8:47:54:F1:29:20:E4:48:D3:A0:6F:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a3abfaf3-64a7-328a-ad03-ba37201c413d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl X509v3 Authority Key Identifier: keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer sbgp-ipAddrBlock: critical IPv4: 64.110.192.0/18 64.201.192.0/19 67.225.0.0/17 68.69.192.0/19 69.11.0.0/17 71.17.0.0/16 74.113.12.0/22 IPv6: 2604:1e80::/32 2607:f4a8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:45:f8:af:b1:3d:46:69:fd:54:8b:8f:69:7b:e9:1c:c9:2c: ba:ac:24:56:bc:ff:52:cd:85:f2:d7:bf:6e:be:ec:02:44:84: a7:74:4c:af:de:80:07:14:a6:a3:cc:31:8e:47:e6:9e:f1:1d: a8:86:47:f2:64:5f:f2:41:8d:4f:d8:9f:71:5a:52:78:e6:3a: 07:65:a4:cc:a5:ef:7a:f2:5e:8d:1e:cb:7d:32:e6:f5:ef:ba: c0:b9:31:33:0e:01:80:f1:4b:81:c5:8b:dc:2e:7c:4b:ff:62: 4b:46:77:44:be:91:b1:b4:1b:2a:0e:f5:97:23:6b:c2:6f:4c: 33:c6:44:48:94:9f:72:ef:5b:03:73:86:8e:3b:be:66:14:eb: aa:b6:92:37:cb:0f:93:c5:be:7e:3e:dc:49:9e:ec:af:ea:a7: a6:7f:75:f5:62:e8:5d:a9:ae:93:3c:7f:c4:18:cb:d8:96:fc: 03:86:06:3e:e1:e9:06:f8:c4:c2:d5:e0:d3:08:73:a3:b4:a5: 63:b2:3a:6d:7e:fd:ee:62:ca:47:a3:7c:12:82:ed:c9:ce:57: b9:4d:5f:bc:1d:fb:6f:f8:3d:7d:55:8e:ea:93:30:76:b4:38: 09:92:d5:44:fe:7a:3b:6c:02:19:a6:ae:74:3e:42:23:58:4e: 8c:85:22:32 -----BEGIN CERTIFICATE----- MIIGfDCCBWSgAwIBAgIUAQ0Mn0MoWEhpYFroSOpZBCZDngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA2MmEyMTktOWVlOC00OGEzLTg5N2EtODQxMGI2ZGE5 NGExMB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk NzVkMThiNTctZDMxYy00Nzg5LTkyMWMtNjI1ZGQ2M2Q0MDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4PMhzCzlfav6+y7ts/HzcKFeYKnvd0C5+rf eZnuFgWHOx3Rr4YuDv2V9U3MC5bHnkBh5gPtNHf8OEmfjSMAzChHrNQmSZ/RLq7J xJ5O2B8qNY4WdcO180c4fbwK/VdjjNmYIZ50irbLGUu6P9whasPH2jcm98CEx7zR T7kplDlWNEm2/QyAcpGy6J4Fn2a/4mBolzAbWxOj0ZfrWMAUf5+z2eN7nho87pne MLp6rj1ekHTpx+mdsSp5cQYIpoRYv7cS4VhVOUwxvLsd48QVMLCBMJ2pj4Mjz0ZC 6ay00koTxv9XLZOGyIg/HiP64IydksMugEEfvHPwj7TVAmPyywIDAQABo4IDjjCC A4owHQYDVR0OBBYEFB0xnIFku9hCuEdU8Skg5EjToG8yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYy YTIxOS05ZWU4LTQ4YTMtODk3YS04NDEwYjZkYTk0YTEvYTNhYmZhZjMtNjRhNy0z MjhhLWFkMDMtYmEzNzIwMWM0MTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTA2MmEyMTktOWVlOC00OGEzLTg5 N2EtODQxMGI2ZGE5NGExL2EwNjJhMjE5LTllZTgtNDhhMy04OTdhLTg0MTBiNmRh OTRhMS5jcmwwHwYDVR0jBBgwFoAUFCgnZgWdJKC08ogP76ns4OluhhgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYyYTIxOS05ZWU4LTQ4YTMtODk3YS04NDEw YjZkYTk0YTEuY2VyMFgGCCsGAQUFBwEHAQH/BEkwRzAvBAIAATApAwQGQG7AAwQF QMnAAwQHQ+EAAwQFREXAAwQHRQsAAwMARxEDBAJKcQwwFAQCAAIwDgMFACYEHoAD BQAmB/SoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAClF+K+xPUZp/VSLj2l76RzJLLqsJFa8/1LNhfLXv26+ 7AJEhKd0TK/egAcUpqPMMY5H5p7xHaiGR/JkX/JBjU/Yn3FaUnjmOgdlpMyl73ry Xo0ey30y5vXvusC5MTMOAYDxS4HFi9wufEv/YktGd0S+kbG0GyoO9Zcja8JvTDPG REiUn3LvWwNzho47vmYU66q2kjfLD5PFvn4+3Eme7K/qp6Z/dfVi6F2prpM8f8QY y9iW/AOGBj7h6Qb4xMLV4NMIc6O0pWOyOm1+/e5iykejfBKC7cnOV7lNX7wd+2/4 PX1VjuqTMHa0OAmS1UT+ejtsAhmmrnQ+QiNYToyFIjI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:01 2025 by rpki-client