$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/02940a4b-8f05-3cde-9acb-b94b17f34781.roa File: 02940a4b-8f05-3cde-9acb-b94b17f34781.roa (raw, json) Hash identifier: rTBqeZVTPYrjMAsEKSXheaUD9rJnLkpjpleWmDpCP5Y= Subject key identifier: 85:BE:6B:3A:CB:C2:9C:AA:50:34:74:2E:BC:A6:78:11:8D:47:91:B8 Certificate issuer: /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf Certificate serial: 010D0C9F43285849568EB7644934870879FB3780 Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/02940a4b-8f05-3cde-9acb-b94b17f34781.roa Signing time: Fri 28 Mar 2025 13:00:51 +0000 ROA not before: Fri 28 Mar 2025 13:00:51 +0000 ROA not after: Thu 26 Jun 2025 13:00:51 +0000 asID: 7922 IP address blocks: 64.84.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:56:8e:b7:64:49:34:87:08:79:fb:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf Validity Not Before: Mar 28 13:00:51 2025 GMT Not After : Jun 26 13:00:51 2025 GMT Subject: CN=16d7505c-eabf-4b14-8cad-5878d7cf3181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:72:68:bc:21:af:2c:be:2a:48:f1:2d:ce:fe: fc:6a:de:37:0b:96:6f:48:f9:0e:17:5b:d3:15:23: 0d:58:a2:f9:ef:3d:72:36:ce:c4:2d:a7:1b:0d:b8: 47:bd:57:b9:68:c2:9b:66:39:bb:fb:9b:fd:26:8c: 52:d3:bb:8e:ab:41:1e:3c:bc:d6:6a:8c:fc:5a:9b: bc:df:27:c0:9c:56:ca:ae:fa:65:04:db:b7:09:ce: e6:5e:07:7e:37:06:ba:bd:b1:f7:b7:48:41:9d:9a: 79:41:6c:49:a5:3f:92:f2:47:97:a3:c2:78:0e:b6: 98:1a:15:f0:78:bf:b9:ef:17:1c:e1:26:47:aa:a6: 6b:52:79:8d:ec:bc:85:6f:2b:a7:41:bb:a1:b2:b5: 30:46:3d:4d:ae:38:20:9c:48:60:19:1d:3f:e9:1e: 6c:f3:74:9a:d8:01:65:2e:c6:3c:e9:a6:96:f5:1b: 35:3b:19:87:8c:14:f8:25:2c:42:7b:f0:7f:e6:14: 42:ff:34:0a:73:ff:23:9c:e3:e6:7b:cb:49:2a:6d: c8:e6:77:8d:a5:8b:e2:f1:79:b0:a3:3f:96:c3:ef: 0c:85:69:9e:4b:1a:31:20:1f:7e:6e:ee:77:55:27: 81:65:b3:ed:cd:88:cb:54:26:3e:6c:df:e7:b3:c3: 60:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BE:6B:3A:CB:C2:9C:AA:50:34:74:2E:BC:A6:78:11:8D:47:91:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/02940a4b-8f05-3cde-9acb-b94b17f34781.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl X509v3 Authority Key Identifier: keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer sbgp-ipAddrBlock: critical IPv4: 64.84.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:0d:c9:70:0c:21:fd:92:d0:1d:14:90:93:e5:5c:2f:47:e5: 14:07:bf:64:20:b7:fa:e8:4d:d9:7f:a8:a3:25:c6:44:57:da: 24:86:ca:e1:e8:02:2b:df:b4:a3:c6:05:8f:cb:ff:9b:c0:ea: 2e:b2:c9:6e:59:bc:36:b2:47:8a:f4:31:bc:6a:2c:1f:f6:bb: 0f:87:c5:61:9b:4c:5c:46:0f:6a:0b:6d:14:1c:70:d4:10:c5: 8e:99:1d:a2:7c:8e:cf:6c:d9:52:df:db:1b:f4:19:b5:fc:e4: fe:cf:e2:87:b3:b5:f6:c1:1b:c5:b1:c4:ae:bb:19:47:be:c9: 7c:b1:c0:7d:28:df:a3:ee:4d:2f:57:02:3b:db:8b:76:13:d8: 01:fa:ce:bb:b6:d7:28:2c:40:d6:ff:80:d5:c7:46:3f:ce:50: 18:58:bf:e3:10:0e:d8:1c:6c:d7:b1:78:2b:42:c1:96:80:5f: a4:1e:90:cb:90:b8:ee:09:90:32:bb:51:32:d5:3a:d4:6b:c8: 05:a3:94:f2:38:cb:b8:0c:eb:4f:69:19:d1:18:94:3f:6e:98: a4:99:af:30:bb:32:aa:3b:0d:c4:1a:f1:88:71:c2:bc:27:a8: 0a:90:ab:d4:66:cc:bd:cc:8c:30:ac:81:5d:f9:6f:6d:b4:31: 48:05:46:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElWjrdkSTSHCHn7N4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYwZjQ2ZGItYzllNi00ZDQ3LTkxMzQtMjA5NjNlYjFk YmJmMB4XDTI1MDMyODEzMDA1MVoXDTI1MDYyNjEzMDA1MVowLzEtMCsGA1UEAxMk MTZkNzUwNWMtZWFiZi00YjE0LThjYWQtNTg3OGQ3Y2YzMTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3JovCGvLL4qSPEtzv78at43C5ZvSPkOF1vT FSMNWKL57z1yNs7ELacbDbhHvVe5aMKbZjm7+5v9JoxS07uOq0EePLzWaoz8Wpu8 3yfAnFbKrvplBNu3Cc7mXgd+Nwa6vbH3t0hBnZp5QWxJpT+S8keXo8J4DraYGhXw eL+57xcc4SZHqqZrUnmN7LyFbyunQbuhsrUwRj1NrjggnEhgGR0/6R5s83Sa2AFl LsY86aaW9Rs1OxmHjBT4JSxCe/B/5hRC/zQKc/8jnOPme8tJKm3I5neNpYvi8Xmw oz+Ww+8MhWmeSxoxIB9+bu53VSeBZbPtzYjLVCY+bN/ns8Ng9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIW+azrLwpyqUDR0LrymeBGNR5G4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZjBm NDZkYi1jOWU2LTRkNDctOTEzNC0yMDk2M2ViMWRiYmYvMDI5NDBhNGItOGYwNS0z Y2RlLTlhY2ItYjk0YjE3ZjM0NzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGYwZjQ2ZGItYzllNi00ZDQ3LTkx MzQtMjA5NjNlYjFkYmJmLzRmMGY0NmRiLWM5ZTYtNGQ0Ny05MTM0LTIwOTYzZWIx ZGJiZi5jcmwwHwYDVR0jBBgwFoAUcvOoLgEYY/Isv9tY40D3O4Z6l6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZjBmNDZkYi1jOWU2LTRkNDctOTEzNC0yMDk2 M2ViMWRiYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQFR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0NyXAMIf2S0B0UkJPlXC9H5RQHv2Qgt/roTdl/qKMlxkRX2iSGyuHo AivftKPGBY/L/5vA6i6yyW5ZvDayR4r0MbxqLB/2uw+HxWGbTFxGD2oLbRQccNQQ xY6ZHaJ8js9s2VLf2xv0GbX85P7P4oeztfbBG8WxxK67GUe+yXyxwH0o36PuTS9X Ajvbi3YT2AH6zru21ygsQNb/gNXHRj/OUBhYv+MQDtgcbNexeCtCwZaAX6QekMuQ uO4JkDK7UTLVOtRryAWjlPI4y7gM609pGdEYlD9umKSZrzC7Mqo7DcQa8Yhxwrwn qAqQq9RmzL3MjDCsgV35b220MUgFRoY= -----END CERTIFICATE-----Generated at Sat Apr 26 20:22:47 2025 by rpki-client