$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/70def14d-b4f6-3eef-92c8-38c6768c3263.roa File: 70def14d-b4f6-3eef-92c8-38c6768c3263.roa (raw, json) Hash identifier: mzzbh4aP4VDGfdUgHgKMWkZIdNqdAl/FGGnrLUJSZDo= Subject key identifier: 69:DD:C8:02:93:7A:42:21:0D:73:4B:90:7B:B3:03:62:EE:6E:FC:12 Certificate issuer: /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de Certificate serial: 010D0C9F432858496B7ED47D244A9CF06823D800 Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/70def14d-b4f6-3eef-92c8-38c6768c3263.roa Signing time: Sat 05 Apr 2025 01:00:47 +0000 ROA not before: Sat 05 Apr 2025 01:00:47 +0000 ROA not after: Fri 04 Jul 2025 01:00:47 +0000 asID: 53488 IP address blocks: 24.246.128.0/18 maxlen: 24 64.127.208.0/20 maxlen: 24 173.246.192.0/20 maxlen: 24 173.246.208.0/21 maxlen: 24 173.246.216.0/23 maxlen: 24 173.246.222.0/23 maxlen: 24 198.185.218.0/23 maxlen: 24 205.236.71.0/24 maxlen: 24 216.116.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6b:7e:d4:7d:24:4a:9c:f0:68:23:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de Validity Not Before: Apr 5 01:00:47 2025 GMT Not After : Jul 4 01:00:47 2025 GMT Subject: CN=eea6584d-aaef-4e7d-aad7-6de4df61ca2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1c:b5:40:d4:4e:79:bc:ae:a4:d1:b5:67:99: ab:4c:6f:ab:01:7c:52:2b:ad:d8:43:e6:e2:2e:4b: 98:d0:fa:ef:8f:29:01:a5:18:53:32:af:93:9a:1e: 82:64:3d:ab:dd:e8:d3:14:2f:08:e3:c7:8c:1d:d4: 03:64:b2:0d:08:b8:4a:8e:1b:53:e7:a6:41:44:b3: de:40:18:26:17:e4:ff:bf:c0:4b:b7:c7:d6:5f:54: 58:21:0b:46:1d:44:cc:91:ea:fa:65:0b:ef:52:1a: 98:76:06:8e:89:0c:fd:c7:fe:25:d5:fb:c1:fa:75: 03:e7:9d:38:85:63:91:dd:a7:5a:68:53:04:6b:a6: dd:b7:b7:00:6a:4a:f7:39:89:7b:7c:fe:4f:b9:30: 85:8e:66:51:ff:c4:f9:0a:4a:61:f8:01:d0:cb:44: 69:95:39:da:8b:2f:fc:ae:f0:a8:3a:dc:8f:b1:a7: 75:65:22:38:11:32:3d:80:3a:dd:c6:e9:20:1a:73: dd:e7:08:a4:06:43:18:86:5d:81:fc:44:94:53:de: 2e:91:e0:f3:61:0b:bb:cb:8b:61:90:8a:46:16:20: a8:0f:1d:1f:4d:fa:55:4b:af:81:da:bd:91:e6:9e: a4:12:1e:4e:61:e1:61:9d:0e:ee:40:05:a6:ce:07: 21:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DD:C8:02:93:7A:42:21:0D:73:4B:90:7B:B3:03:62:EE:6E:FC:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/70def14d-b4f6-3eef-92c8-38c6768c3263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl X509v3 Authority Key Identifier: keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer sbgp-ipAddrBlock: critical IPv4: 24.246.128.0/18 64.127.208.0/20 173.246.192.0-173.246.217.255 173.246.222.0/23 198.185.218.0/23 205.236.71.0/24 216.116.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:39:fe:04:d5:58:de:c5:66:6c:6a:7c:c9:ce:2d:92:c1:66: cd:1c:0d:e7:01:6c:7b:af:08:d9:f1:dc:12:26:9f:91:bc:6c: 64:75:c5:9a:b8:c2:ce:ac:52:68:0c:54:90:0d:88:29:cd:bd: 68:bc:78:f9:0c:8b:cc:e6:14:f3:be:f3:bc:72:fe:79:36:ee: 12:18:be:0d:0b:f4:71:21:4b:d7:80:9c:29:d5:af:2f:d5:7d: 87:c4:35:21:b0:3a:bf:df:76:b0:d3:3a:11:77:da:ac:c6:b0: 8b:b7:f7:08:b9:58:1e:28:13:a4:ca:ac:bc:58:a0:4c:e5:73: ed:79:17:f1:48:59:1f:4c:b5:f2:dd:7d:93:07:fa:e7:5d:d2: d6:68:b6:bb:42:3a:4b:57:02:5f:42:7c:ab:35:70:34:27:fb: 7c:ba:d5:91:f9:76:63:b7:72:85:21:2e:ec:c2:0e:3c:25:90: 23:e0:34:9f:cc:e2:db:a9:d4:00:7d:00:d1:84:1b:23:9e:6c: db:75:71:38:69:0f:5d:a6:b5:7c:2a:69:f7:39:eb:09:a9:9f: db:30:d6:ae:11:77:84:8f:4e:30:2b:e3:de:d1:7c:9b:6b:10: 74:40:0f:ab:d8:82:f4:18:94:2b:a3:ad:7c:9a:07:78:20:f5: 66:6f:17:25 -----BEGIN CERTIFICATE----- MIIGbzCCBVegAwIBAgIUAQ0Mn0MoWElrftR9JEqc8Ggj2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU0NTliZTEtZjJjNy00NGEyLWFjNjktMDFkMjM4ZjFi MGRlMB4XDTI1MDQwNTAxMDA0N1oXDTI1MDcwNDAxMDA0N1owLzEtMCsGA1UEAxMk ZWVhNjU4NGQtYWFlZi00ZTdkLWFhZDctNmRlNGRmNjFjYTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhy1QNROebyupNG1Z5mrTG+rAXxSK63YQ+bi LkuY0PrvjykBpRhTMq+Tmh6CZD2r3ejTFC8I48eMHdQDZLINCLhKjhtT56ZBRLPe QBgmF+T/v8BLt8fWX1RYIQtGHUTMker6ZQvvUhqYdgaOiQz9x/4l1fvB+nUD5504 hWOR3adaaFMEa6bdt7cAakr3OYl7fP5PuTCFjmZR/8T5Ckph+AHQy0RplTnaiy/8 rvCoOtyPsad1ZSI4ETI9gDrdxukgGnPd5wikBkMYhl2B/ESUU94ukeDzYQu7y4th kIpGFiCoDx0fTfpVS6+B2r2R5p6kEh5OYeFhnQ7uQAWmzgchCQIDAQABo4IDgTCC A30wHQYDVR0OBBYEFGndyAKTekIhDXNLkHuzA2LubvwSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xNTQ1 OWJlMS1mMmM3LTQ0YTItYWM2OS0wMWQyMzhmMWIwZGUvNzBkZWYxNGQtYjRmNi0z ZWVmLTkyYzgtMzhjNjc2OGMzMjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTU0NTliZTEtZjJjNy00NGEyLWFj NjktMDFkMjM4ZjFiMGRlLzE1NDU5YmUxLWYyYzctNDRhMi1hYzY5LTAxZDIzOGYx YjBkZS5jcmwwHwYDVR0jBBgwFoAUBXpuInCyuuyxWzzTdkAFIVAzxRUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xNTQ1OWJlMS1mMmM3LTQ0YTItYWM2OS0wMWQy MzhmMWIwZGUuY2VyMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQGGPaAAwQE QH/QMAwDBAat9sADBAGt9tgDBAGt9t4DBAHGudoDBADN7EcDBAXYdOAwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAazn+BNVY3sVmbGp8yc4tksFmzRwN5wFse68I2fHcEiafkbxsZHXFmrjCzqxS aAxUkA2IKc29aLx4+QyLzOYU877zvHL+eTbuEhi+DQv0cSFL14CcKdWvL9V9h8Q1 IbA6v992sNM6EXfarMawi7f3CLlYHigTpMqsvFigTOVz7XkX8UhZH0y18t19kwf6 513S1mi2u0I6S1cCX0J8qzVwNCf7fLrVkfl2Y7dyhSEu7MIOPCWQI+A0n8zi26nU AH0A0YQbI55s23VxOGkPXaa1fCpp9znrCamf2zDWrhF3hI9OMCvj3tF8m2sQdEAP q9iC9BiUK6OtfJoHeCD1Zm8XJQ== -----END CERTIFICATE-----Generated at Mon Apr 28 12:32:23 2025 by rpki-client