$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/589e3e61-8fae-384e-99a0-011c39c08dbb.roa File: 589e3e61-8fae-384e-99a0-011c39c08dbb.roa (raw, json) Hash identifier: y8wRZsBjk5+C3d3UxBbfdNQpEyygxxUxzVxMb+GbGyw= Subject key identifier: 74:58:3E:93:69:59:D9:7B:F7:CA:D0:D5:C6:C5:6B:AE:31:58:5E:15 Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F43285848AF2B781C724859B756EAC0B0 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/589e3e61-8fae-384e-99a0-011c39c08dbb.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 64.52.111.0/24 maxlen: 24 192.153.76.0/24 maxlen: 24 199.201.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:78:1c:72:48:59:b7:56:ea:c0:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=af9cf41a-6393-4bd6-acc5-eebddd1506e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ab:46:b0:4b:62:f6:e1:d4:f7:50:b0:8a:3e: f5:84:0d:4f:38:56:37:27:32:91:bf:e2:68:5e:cb: 33:b2:7d:39:d2:37:fd:c8:db:b3:ff:68:da:ee:a3: bf:cd:a3:03:4b:4f:a1:e9:b0:b3:a5:5f:8c:71:f1: 58:2b:fc:2d:2c:24:1d:69:7f:38:40:57:83:47:7d: 85:71:48:36:36:67:af:c2:7f:67:65:ca:7f:39:b7: 6d:1c:41:35:3e:c1:64:82:3c:30:ef:e7:a8:94:31: dd:60:6e:fa:62:0d:4d:b8:9c:86:c3:31:d0:86:98: ed:14:69:69:48:93:38:a3:48:c8:9a:0b:2a:ba:3b: 9a:22:63:b8:b9:e1:d0:ac:d1:0f:f7:ef:00:81:47: b4:11:da:9e:35:12:2b:d1:7c:5b:91:c5:41:ed:e9: b3:1a:1a:10:0f:c4:0c:0b:01:c8:7a:86:65:f9:04: 6e:44:fe:37:0a:7b:f0:95:b8:78:20:fa:92:7e:41: a2:b3:8d:9d:96:60:81:01:e8:fc:4e:fa:17:4c:d5: e2:fa:79:e9:cd:c9:ab:88:c4:4c:2d:33:db:de:bc: fc:91:38:ec:f1:ca:27:3d:ab:b8:7e:90:96:73:ea: 6a:ad:98:58:06:65:04:19:8c:39:51:f2:ce:f0:d5: fb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:58:3E:93:69:59:D9:7B:F7:CA:D0:D5:C6:C5:6B:AE:31:58:5E:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/589e3e61-8fae-384e-99a0-011c39c08dbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 64.52.111.0/24 192.153.76.0/24 199.201.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b7:56:14:7e:99:6a:1a:87:fb:1b:e6:13:bb:a2:33:76:2f: f1:8d:41:50:3c:ee:bb:36:80:f9:00:ad:30:c8:14:18:06:34: 6a:f1:b4:53:cd:af:0f:bf:fe:90:cc:ac:60:47:37:29:6d:8d: 38:48:dc:0d:0a:e0:6d:1d:85:d8:18:f5:49:86:cf:3e:19:01: 98:fc:71:8b:3f:f7:a6:32:ab:24:d4:ac:0d:f9:32:7f:39:39: 08:da:9a:f7:9c:05:57:0e:10:96:2c:cc:06:ab:67:0c:10:c9: c6:ed:fd:4a:af:04:b8:50:07:4c:75:98:88:d5:50:47:2d:8b: 8a:17:1d:ec:4a:6c:e7:e2:4e:d7:e7:8c:49:d4:c6:c0:04:df: 5f:6c:bd:41:6a:d0:5d:b3:de:b3:67:5b:fc:75:fe:08:c2:65: 55:d1:6e:64:16:86:59:b5:4d:35:42:eb:33:9a:b5:cb:8d:eb: d5:1f:40:5e:48:43:05:57:bd:92:ac:9d:c8:6b:88:1a:a5:ef: 70:4a:a0:93:31:9b:d5:d4:eb:36:62:23:5b:06:df:28:7a:d9: 39:83:46:3b:5c:2e:14:a8:f9:5e:7d:a0:72:84:9e:de:f6:69: 47:34:04:2b:87:5c:1d:40:fc:d7:c6:0e:f0:0c:de:43:9d:92: b6:1b:16:47 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEivK3gcckhZt1bqwLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk YWY5Y2Y0MWEtNjM5My00YmQ2LWFjYzUtZWViZGRkMTUwNmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqatGsEti9uHU91Cwij71hA1POFY3JzKRv+Jo Xsszsn050jf9yNuz/2ja7qO/zaMDS0+h6bCzpV+McfFYK/wtLCQdaX84QFeDR32F cUg2Nmevwn9nZcp/ObdtHEE1PsFkgjww7+eolDHdYG76Yg1NuJyGwzHQhpjtFGlp SJM4o0jImgsqujuaImO4ueHQrNEP9+8AgUe0EdqeNRIr0XxbkcVB7emzGhoQD8QM CwHIeoZl+QRuRP43Cnvwlbh4IPqSfkGis42dlmCBAej8TvoXTNXi+nnpzcmriMRM LTPb3rz8kTjs8conPau4fpCWc+pqrZhYBmUEGYw5UfLO8NX7yQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFHRYPpNpWdl798rQ1cbFa64xWF4VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvNTg5ZTNlNjEtOGZhZS0z ODRlLTk5YTAtMDExYzM5YzA4ZGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAQDRvAwQA wJlMAwQAx8l/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHC3VhR+mWoah/sb5hO7ojN2L/GNQVA87rs2gPkA rTDIFBgGNGrxtFPNrw+//pDMrGBHNyltjThI3A0K4G0dhdgY9UmGzz4ZAZj8cYs/ 96YyqyTUrA35Mn85OQjamvecBVcOEJYszAarZwwQycbt/UqvBLhQB0x1mIjVUEct i4oXHexKbOfiTtfnjEnUxsAE319svUFq0F2z3rNnW/x1/gjCZVXRbmQWhlm1TTVC 6zOatcuN69UfQF5IQwVXvZKsnchriBql73BKoJMxm9XU6zZiI1sG3yh62TmDRjtc LhSo+V59oHKEnt72aUc0BCuHXB1A/NfGDvAM3kOdkrYbFkc= -----END CERTIFICATE-----Generated at Fri Mar 14 10:39:35 2025 by rpki-client