$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3cad8533-e32e-3054-ba93-3b327624a170.roa File: 3cad8533-e32e-3054-ba93-3b327624a170.roa (raw, json) Hash identifier: QbxmFHsPOLiZVzvC/jEJV+BgJ7WCW+6duwtZxhJKG68= Subject key identifier: EE:D1:EC:5A:5C:3E:00:23:C7:93:F1:89:4D:5F:EB:DD:79:9D:1E:03 Certificate issuer: /CN=3d1c553d-7b57-40d6-a02c-deff888b678d Certificate serial: 010D0C9F43285849754454CAC37DF44531A74A00 Authority key identifier: C3:50:10:57:56:61:51:2F:FA:51:AD:FB:AC:E7:E9:57:3C:D5:7D:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3cad8533-e32e-3054-ba93-3b327624a170.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 14618 IP address blocks: 64.65.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3d1c553d-7b57-40d6-a02c-deff888b678d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3d1c553d-7b57-40d6-a02c-deff888b678d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:54:ca:c3:7d:f4:45:31:a7:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d1c553d-7b57-40d6-a02c-deff888b678d Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=da96b7cb-c7b1-4d02-ab53-9c1c8bcbafcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:71:9b:3a:dd:84:24:ce:9b:99:6d:7a:f3:c3: 54:60:69:4a:63:4d:aa:5b:0f:63:b5:91:9e:1c:10: 69:f4:d2:0b:82:56:37:ae:e2:46:32:0c:81:21:c2: f0:77:d0:16:0f:f6:d8:fb:e8:8a:92:db:9b:0f:f0: 60:a5:75:bf:c1:8f:ac:cb:d7:0d:fa:6a:4a:2d:6d: 91:2f:36:56:51:8e:53:66:67:03:61:71:c1:35:19: 8f:bb:4f:d7:c6:e0:17:50:07:a8:68:9c:d1:5f:12: a7:cf:fb:12:07:26:de:1b:66:65:0d:e5:19:12:48: bd:21:df:a0:9b:0d:d6:13:11:26:84:49:12:2f:35: e0:03:11:fa:90:c8:72:f6:6c:11:3f:a6:0b:83:56: 20:3d:da:ec:57:94:84:1c:97:42:03:c4:52:c5:78: 92:4b:0f:70:af:2c:c7:10:05:85:3c:9f:9d:65:b8: a9:ac:9c:00:34:c6:f6:6a:ed:1f:ec:6e:91:25:9e: 79:7a:c2:a0:88:f1:28:cb:15:16:ae:50:d9:d1:ae: d0:06:d9:f7:dc:9e:24:42:70:21:b3:7c:33:7a:1f: 6b:70:26:79:2d:91:45:f0:7c:f3:0c:0f:89:e2:05: a5:17:3b:07:05:ed:79:55:be:79:bd:77:af:a4:8d: fd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D1:EC:5A:5C:3E:00:23:C7:93:F1:89:4D:5F:EB:DD:79:9D:1E:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3cad8533-e32e-3054-ba93-3b327624a170.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3d1c553d-7b57-40d6-a02c-deff888b678d.crl X509v3 Authority Key Identifier: keyid:C3:50:10:57:56:61:51:2F:FA:51:AD:FB:AC:E7:E9:57:3C:D5:7D:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d.cer sbgp-ipAddrBlock: critical IPv4: 64.65.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:f6:11:df:da:b6:4e:c6:d4:1e:88:2b:36:fe:00:e1:f5:9f: a6:26:da:ee:30:24:b1:c6:cb:67:2c:19:62:ff:de:2d:c0:7b: 2c:7b:07:ba:fb:0d:d9:fd:20:0d:8b:7b:f8:40:cf:47:d8:d5: 55:41:99:83:de:4b:24:6e:ca:a8:02:90:93:f6:0d:84:45:c7: 03:d0:29:89:00:11:ec:28:0d:31:71:61:40:f0:5b:26:2f:91: ba:74:fd:9c:26:b6:d5:25:a6:34:4a:04:a8:75:c1:18:ac:79: d9:6e:3b:35:80:55:91:e8:42:1a:27:8a:35:dd:d2:6c:11:d8: 36:17:d3:6d:6f:b8:a0:1f:e1:cf:21:19:68:f3:42:d4:dd:e1: fc:7e:d2:80:77:80:35:d6:7e:db:44:5a:f1:0a:5f:b9:29:00: 88:6f:f8:89:6a:50:07:24:da:47:72:8f:d0:e6:59:53:b1:40: 70:3d:89:34:e9:58:a0:e5:0a:c6:32:63:4f:54:af:9d:35:ae: a8:f6:d7:ef:fc:53:90:6a:17:8d:38:09:02:6a:ca:5a:57:f1: 74:7a:47:57:32:36:13:17:d5:30:a3:d1:da:e5:bf:97:35:43: ab:0f:55:18:69:5a:25:3e:ee:93:17:d0:e8:e4:0b:55:03:19: 50:a9:25:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1RFTKw330RTGnSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QxYzU1M2QtN2I1Ny00MGQ2LWEwMmMtZGVmZjg4OGI2 NzhkMB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk ZGE5NmI3Y2ItYzdiMS00ZDAyLWFiNTMtOWMxYzhiY2JhZmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33GbOt2EJM6bmW1688NUYGlKY02qWw9jtZGe HBBp9NILglY3ruJGMgyBIcLwd9AWD/bY++iKktubD/BgpXW/wY+sy9cN+mpKLW2R LzZWUY5TZmcDYXHBNRmPu0/XxuAXUAeoaJzRXxKnz/sSBybeG2ZlDeUZEki9Id+g mw3WExEmhEkSLzXgAxH6kMhy9mwRP6YLg1YgPdrsV5SEHJdCA8RSxXiSSw9wryzH EAWFPJ+dZbiprJwANMb2au0f7G6RJZ55esKgiPEoyxUWrlDZ0a7QBtn33J4kQnAh s3wzeh9rcCZ5LZFF8HzzDA+J4gWlFzsHBe15Vb55vXevpI39/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7R7FpcPgAjx5PxiU1f6915nR4DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zZDFj NTUzZC03YjU3LTQwZDYtYTAyYy1kZWZmODg4YjY3OGQvM2NhZDg1MzMtZTMyZS0z MDU0LWJhOTMtM2IzMjc2MjRhMTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2QxYzU1M2QtN2I1Ny00MGQ2LWEw MmMtZGVmZjg4OGI2NzhkLzNkMWM1NTNkLTdiNTctNDBkNi1hMDJjLWRlZmY4ODhi Njc4ZC5jcmwwHwYDVR0jBBgwFoAUw1AQV1ZhUS/6Ua37rOfpVzzVfZ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zZDFjNTUzZC03YjU3LTQwZDYtYTAyYy1kZWZm ODg4YjY3OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEE9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFP2Ed/atk7G1B6IKzb+AOH1n6Ym2u4wJLHGy2csGWL/3i3Aeyx7B7r7 Ddn9IA2Le/hAz0fY1VVBmYPeSyRuyqgCkJP2DYRFxwPQKYkAEewoDTFxYUDwWyYv kbp0/ZwmttUlpjRKBKh1wRisedluOzWAVZHoQhonijXd0mwR2DYX021vuKAf4c8h GWjzQtTd4fx+0oB3gDXWfttEWvEKX7kpAIhv+IlqUAck2kdyj9DmWVOxQHA9iTTp WKDlCsYyY09Ur501rqj21+/8U5BqF404CQJqylpX8XR6R1cyNhMX1TCj0drlv5c1 Q6sPVRhpWiU+7pMX0OjkC1UDGVCpJew= -----END CERTIFICATE-----Generated at Sat Apr 26 13:34:02 2025 by rpki-client