$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/55a426b4-06e3-3036-92d0-19fcf1711f1e.roa File: 55a426b4-06e3-3036-92d0-19fcf1711f1e.roa (raw, json) Hash identifier: k0KC/cz1MBKeaRxs7hHSr2hyyBA2OjIfMKMZVlsqixE= Subject key identifier: A8:D5:68:F1:E1:60:46:18:CB:B2:EF:C8:52:00:E1:11:78:4F:46:61 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584981D45CCE49DAE1CE55084400 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/55a426b4-06e3-3036-92d0-19fcf1711f1e.roa Signing time: Sun 13 Apr 2025 01:00:44 +0000 ROA not before: Sun 13 Apr 2025 01:00:44 +0000 ROA not after: Sat 12 Jul 2025 01:00:44 +0000 asID: 13768 IP address blocks: 65.39.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:d4:5c:ce:49:da:e1:ce:55:08:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Apr 13 01:00:44 2025 GMT Not After : Jul 12 01:00:44 2025 GMT Subject: CN=db2390ca-eca3-404d-9fea-d8689949ed24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:16:99:8b:00:45:f8:94:ff:91:f4:0f:d6:84: 81:d7:ab:4e:f9:f3:17:07:c5:1d:ea:fb:38:41:43: 2f:2b:15:b6:d6:8e:86:6c:63:70:cc:91:6f:22:fd: bd:dd:aa:67:d5:c1:8c:38:e9:4d:9b:06:ee:b3:2a: 86:41:65:8a:b8:3b:f7:24:eb:05:42:ce:09:39:b9: f9:b9:ea:cb:04:8d:dd:7d:40:2e:8a:18:c9:97:1d: 57:09:48:e7:82:8f:81:ab:4b:bf:95:d2:f7:7c:58: ee:f4:85:22:95:86:d8:99:9c:b7:84:0f:40:1e:1b: 72:b3:95:be:8a:79:06:d6:85:92:1d:06:bf:7f:82: 2c:12:78:0c:a5:8c:8f:76:3b:74:de:6c:3d:32:37: 9e:26:db:f5:ce:09:39:57:99:c9:6c:0d:1a:de:4d: c3:ed:2e:4d:48:45:67:2b:63:ac:c5:b4:96:23:bb: 54:40:4b:93:1d:fe:1e:05:0b:cb:8d:02:de:a6:6d: c4:4b:b2:16:63:0b:62:bd:b9:45:ab:a1:ff:2c:8f: f8:a3:96:db:ae:3a:cb:40:ee:5a:f8:cd:3f:1b:66: ba:4c:3d:12:0f:74:e2:ee:a1:47:a3:9f:2f:68:d8: 55:0f:ef:18:77:46:9a:22:b4:e6:18:86:e8:d9:c9: 30:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D5:68:F1:E1:60:46:18:CB:B2:EF:C8:52:00:E1:11:78:4F:46:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/55a426b4-06e3-3036-92d0-19fcf1711f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 65.39.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:89:37:c6:98:be:e5:08:27:22:d4:8b:1b:a3:ac:2f:ee:9a: 1d:0d:c6:f5:98:2e:c8:2a:27:19:53:2c:e6:c9:35:f6:a7:32: 16:75:2c:2a:51:44:4c:c4:f5:3d:e2:a0:2b:61:b2:c1:d2:7a: 1f:7d:bc:19:09:02:93:d8:3c:f9:e5:4e:83:2b:a5:4a:59:ed: 28:1e:bd:e3:1e:06:26:2c:38:ad:2e:db:f4:26:c6:fe:b5:bc: 98:71:a4:ae:3e:89:46:94:c6:1e:9e:66:97:d8:76:7e:f0:e7: 0e:bd:8b:4a:2a:ca:d3:7c:15:99:15:76:b0:18:d3:23:f6:4b: 18:93:92:c1:78:38:9f:71:d1:e8:db:04:88:12:b5:df:9b:6a: e2:bc:da:68:70:21:ba:58:ee:d8:6d:f8:8a:dd:a7:6c:32:a7: 35:16:59:17:e8:da:5a:2b:1d:56:68:80:0a:6c:e9:cf:c7:82: 6f:1c:c3:0d:5f:5a:c2:21:51:b2:29:c7:b6:83:6f:52:bb:d0: 26:8c:62:0b:8c:61:ae:de:99:e9:0c:38:76:eb:ca:8d:ac:45: 2d:a1:ca:06:ab:fa:a2:20:1f:4e:b9:ee:c7:7e:c1:1f:6f:a2: 34:25:fc:76:2e:bc:33:76:70:ff:cd:3d:39:36:cf:43:00:d8: 29:db:a6:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmB1FzOSdrhzlUIRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk ZGIyMzkwY2EtZWNhMy00MDRkLTlmZWEtZDg2ODk5NDllZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBaZiwBF+JT/kfQP1oSB16tO+fMXB8Ud6vs4 QUMvKxW21o6GbGNwzJFvIv293apn1cGMOOlNmwbusyqGQWWKuDv3JOsFQs4JObn5 uerLBI3dfUAuihjJlx1XCUjngo+Bq0u/ldL3fFju9IUilYbYmZy3hA9AHhtys5W+ inkG1oWSHQa/f4IsEngMpYyPdjt03mw9MjeeJtv1zgk5V5nJbA0a3k3D7S5NSEVn K2OsxbSWI7tUQEuTHf4eBQvLjQLepm3ES7IWYwtivblFq6H/LI/4o5bbrjrLQO5a +M0/G2a6TD0SD3Ti7qFHo58vaNhVD+8Yd0aaIrTmGIbo2ckwoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjVaPHhYEYYy7LvyFIA4RF4T0ZhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvNTVhNDI2YjQtMDZlMy0z MDM2LTkyZDAtMTlmY2YxNzExZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQSfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKJN8aYvuUIJyLUixujrC/umh0NxvWYLsgqJxlTLObJNfanMhZ1LCpR REzE9T3ioCthssHSeh99vBkJApPYPPnlToMrpUpZ7SgeveMeBiYsOK0u2/Qmxv61 vJhxpK4+iUaUxh6eZpfYdn7w5w69i0oqytN8FZkVdrAY0yP2SxiTksF4OJ9x0ejb BIgStd+bauK82mhwIbpY7tht+Irdp2wypzUWWRfo2lorHVZogAps6c/Hgm8cww1f WsIhUbIpx7aDb1K70CaMYguMYa7emekMOHbryo2sRS2hygar+qIgH0657sd+wR9v ojQl/HYuvDN2cP/NPTk2z0MA2Cnbpro= -----END CERTIFICATE-----Generated at Sun Apr 27 05:48:56 2025 by rpki-client