$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf/6b13af00-2ec7-38d8-8683-f8a378edbb7e.roa File: 6b13af00-2ec7-38d8-8683-f8a378edbb7e.roa (raw, json) Hash identifier: PeL+1RhL1a65Neg1fyCuaDbWNKHShHwsXDmw6KU8kF0= Subject key identifier: C3:6A:AF:57:6B:E0:52:35:34:02:E6:36:37:BD:45:23:7E:DA:0F:8A Certificate issuer: /CN=f64099bb-9c22-4781-89a0-e4774501bccf Certificate serial: 010D0C9F432858493AA3DCB88F3027DEA4FCFF10 Authority key identifier: 9D:EA:69:49:9B:E2:E8:3D:5B:B9:A1:89:42:6A:80:55:EA:FA:D2:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf/6b13af00-2ec7-38d8-8683-f8a378edbb7e.roa Signing time: Tue 18 Mar 2025 13:00:50 +0000 ROA not before: Tue 18 Mar 2025 13:00:50 +0000 ROA not after: Mon 16 Jun 2025 13:00:50 +0000 asID: 36294 IP address blocks: 208.74.68.0/22 maxlen: 22 216.10.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf/f64099bb-9c22-4781-89a0-e4774501bccf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf/f64099bb-9c22-4781-89a0-e4774501bccf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3a:a3:dc:b8:8f:30:27:de:a4:fc:ff:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f64099bb-9c22-4781-89a0-e4774501bccf Validity Not Before: Mar 18 13:00:50 2025 GMT Not After : Jun 16 13:00:50 2025 GMT Subject: CN=1b248f8c-fb48-41e5-bc00-1b6a8e129392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:dd:3c:40:aa:e7:ff:3c:60:f8:75:d5:4f:04: 1c:50:45:94:e5:9a:f0:1f:c2:af:19:7c:7e:c6:9c: be:05:c4:6f:3a:65:31:6d:2d:0d:fa:bc:b4:f4:34: 8d:b8:71:f2:7a:f4:1f:43:6e:5f:8e:f7:5d:58:d8: ca:9c:c1:d8:5f:1e:3a:e9:00:af:5b:4a:87:c4:56: 8f:c9:86:c8:d8:cc:48:80:98:33:9b:da:53:0b:d5: 8e:fe:d1:7e:5b:ca:e8:78:0b:0d:2f:1b:be:a4:22: 87:4a:5c:09:8f:e8:c5:fa:36:6b:35:b0:01:d7:9f: 55:c3:4d:2d:06:68:b4:a4:f3:5e:37:49:f0:f5:be: 03:a5:2d:4f:a5:f6:60:c1:c8:ac:5f:51:dd:5d:14: 0b:ba:0d:62:26:da:43:c4:ef:f5:42:0a:77:8d:62: 1c:e1:ce:4c:01:38:d9:cb:66:85:8f:0e:34:ff:68: 02:78:48:1b:37:50:e6:ef:27:37:a8:77:45:ad:fc: 27:7e:e2:89:27:5e:6c:4c:6a:d6:ac:a5:d2:04:36: 4b:3c:59:2f:f5:23:97:0d:b9:cc:c8:dd:32:10:d4: 22:15:39:56:39:2a:8a:6d:28:ba:ca:94:7f:6f:ed: 53:57:2f:16:30:3b:10:29:ba:bf:d7:28:ea:f9:10: 2f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:6A:AF:57:6B:E0:52:35:34:02:E6:36:37:BD:45:23:7E:DA:0F:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf/6b13af00-2ec7-38d8-8683-f8a378edbb7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf/f64099bb-9c22-4781-89a0-e4774501bccf.crl X509v3 Authority Key Identifier: keyid:9D:EA:69:49:9B:E2:E8:3D:5B:B9:A1:89:42:6A:80:55:EA:FA:D2:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf.cer sbgp-ipAddrBlock: critical IPv4: 208.74.68.0/22 216.10.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:da:41:7d:f6:ac:97:7a:81:53:ed:4e:ee:35:b5:08:aa:9f: 8b:26:6f:ee:d5:c1:a2:59:e0:87:fd:e0:e9:13:e9:7e:51:d5: 0b:a6:45:6b:bc:8c:14:b3:87:8a:2a:53:1a:ee:22:7d:3c:a4: a0:21:3d:09:01:f6:d8:35:c2:af:e1:6c:a1:0b:77:cc:c0:e6: 82:a2:2a:6e:17:2b:5d:2d:d8:17:a2:ef:c0:8d:69:68:81:2b: ac:e4:07:04:00:90:76:93:8c:31:a2:4b:85:35:03:ce:50:92: 10:0f:aa:ff:e5:16:c4:05:8d:8e:93:a2:ab:a9:d1:87:97:08: 14:54:e5:50:06:aa:b9:f3:fe:a4:c8:fd:18:ae:55:00:47:97: 6e:b1:29:1b:28:0a:ac:78:50:b0:a6:69:35:d1:6f:d3:7d:d8: bb:71:b3:5a:c8:9f:a2:6b:a0:8d:84:23:f8:87:0a:8d:de:61: c3:a8:42:91:ea:bb:e4:70:07:a3:4e:1e:9c:6a:94:d0:96:68: 81:dd:5c:b3:e0:01:4f:75:dd:19:a9:52:47:b6:78:ce:27:de: 9b:d8:8e:56:bd:21:ad:58:b0:fe:2d:08:60:7b:26:3a:6e:c2: 8b:1b:f1:96:d9:4b:fc:2c:54:6f:bb:78:22:76:03:01:6f:85: 3f:fc:70:ee -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEk6o9y4jzAn3qT8/xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY0MDk5YmItOWMyMi00NzgxLTg5YTAtZTQ3NzQ1MDFi Y2NmMB4XDTI1MDMxODEzMDA1MFoXDTI1MDYxNjEzMDA1MFowLzEtMCsGA1UEAxMk MWIyNDhmOGMtZmI0OC00MWU1LWJjMDAtMWI2YThlMTI5MzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd08QKrn/zxg+HXVTwQcUEWU5ZrwH8KvGXx+ xpy+BcRvOmUxbS0N+ry09DSNuHHyevQfQ25fjvddWNjKnMHYXx466QCvW0qHxFaP yYbI2MxIgJgzm9pTC9WO/tF+W8roeAsNLxu+pCKHSlwJj+jF+jZrNbAB159Vw00t Bmi0pPNeN0nw9b4DpS1PpfZgwcisX1HdXRQLug1iJtpDxO/1Qgp3jWIc4c5MATjZ y2aFjw40/2gCeEgbN1Dm7yc3qHdFrfwnfuKJJ15sTGrWrKXSBDZLPFkv9SOXDbnM yN0yENQiFTlWOSqKbSi6ypR/b+1TVy8WMDsQKbq/1yjq+RAvVwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMNqr1dr4FI1NALmNje9RSN+2g+KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjQw OTliYi05YzIyLTQ3ODEtODlhMC1lNDc3NDUwMWJjY2YvNmIxM2FmMDAtMmVjNy0z OGQ4LTg2ODMtZjhhMzc4ZWRiYjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjY0MDk5YmItOWMyMi00NzgxLTg5 YTAtZTQ3NzQ1MDFiY2NmL2Y2NDA5OWJiLTljMjItNDc4MS04OWEwLWU0Nzc0NTAx YmNjZi5jcmwwHwYDVR0jBBgwFoAUneppSZvi6D1buaGJQmqAVer60lQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mNjQwOTliYi05YzIyLTQ3ODEtODlhMC1lNDc3 NDUwMWJjY2YuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC0EpEAwQC 2ApAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACjaQX32rJd6gVPtTu41tQiqn4smb+7VwaJZ4If94OkT6X5R 1QumRWu8jBSzh4oqUxruIn08pKAhPQkB9tg1wq/hbKELd8zA5oKiKm4XK10t2Bei 78CNaWiBK6zkBwQAkHaTjDGiS4U1A85QkhAPqv/lFsQFjY6Toqup0YeXCBRU5VAG qrnz/qTI/RiuVQBHl26xKRsoCqx4ULCmaTXRb9N92Ltxs1rIn6JroI2EI/iHCo3e YcOoQpHqu+RwB6NOHpxqlNCWaIHdXLPgAU913RmpUke2eM4n3pvYjla9Ia1YsP4t CGB7Jjpuwosb8ZbZS/wsVG+7eCJ2AwFvhT/8cO4= -----END CERTIFICATE-----Generated at Sat Apr 12 12:31:27 2025 by rpki-client