$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c1af7f83-54d1-3637-b23a-1fac1823fd70.roa File: c1af7f83-54d1-3637-b23a-1fac1823fd70.roa (raw, json) Hash identifier: U9ShqPDhLUua1fcTBvQP2h3DYDVzARMqinH+8NDMZsQ= Subject key identifier: 71:EF:07:CC:92:B2:B1:6E:19:77:84:6D:C9:F6:53:92:4D:78:B7:E3 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F432858498769A587E4F72DC66BC82280 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c1af7f83-54d1-3637-b23a-1fac1823fd70.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 21949 IP address blocks: 65.97.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:a5:87:e4:f7:2d:c6:6b:c8:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=e1c8e243-e2bc-4f82-9388-a980ba52aae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:19:23:91:66:eb:ec:b7:d4:1d:77:7c:ce:5f: 00:4b:d5:46:2e:57:e5:5e:51:ad:f0:b7:f3:54:20: 2a:eb:87:7d:55:8b:c0:1a:9a:0c:5a:62:a6:17:2e: e8:9b:6d:b9:47:c2:eb:f6:b5:5e:43:98:27:a0:0b: bb:38:bb:4d:05:22:dc:17:bd:85:45:e9:c3:8b:c3: 7b:3e:f2:e5:59:2b:22:82:a4:00:36:97:55:a7:ad: 22:d3:28:9b:01:cd:19:5a:02:ed:9c:7d:de:ba:90: 66:f2:00:9c:39:eb:a0:c2:bd:78:58:3f:6e:2a:4a: ff:aa:bc:1c:6e:9c:ec:b4:47:ae:a3:ac:ec:aa:9d: 3c:0a:cc:4f:52:f0:8f:f5:e5:97:5c:40:68:af:8c: c8:b2:9a:93:c7:17:07:98:71:f7:41:52:ef:6d:c7: 5c:82:11:d9:8d:e1:4c:67:5f:ef:a2:31:d9:45:4f: 69:fb:4f:b3:a3:71:59:15:a3:09:99:89:88:5e:f1: e9:e9:5d:a7:2e:fd:8e:d2:20:90:34:92:18:08:2f: cc:3b:39:60:a9:21:70:08:44:92:b1:53:ba:32:e0: 07:7a:ac:66:14:af:87:eb:b1:7b:7d:8d:6e:99:01: 23:f0:18:8a:ff:87:34:3d:6d:6e:99:c8:f8:47:2e: 0f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:EF:07:CC:92:B2:B1:6E:19:77:84:6D:C9:F6:53:92:4D:78:B7:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c1af7f83-54d1-3637-b23a-1fac1823fd70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 65.97.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:7c:78:23:97:1a:ce:e5:a4:ae:f7:da:44:03:ec:5a:14:8a: 99:92:1a:0a:e5:60:1d:b1:31:d0:83:1b:3e:8f:43:d4:b9:13: 0f:c4:ea:b3:a4:44:76:bc:58:5a:69:38:5a:a3:2e:dd:99:d9: 71:66:1c:ea:8b:45:5a:c4:5a:14:be:2e:e7:b0:91:bc:33:1d: 60:e1:d8:be:24:5f:6f:86:74:84:92:fb:55:69:4a:30:13:9c: 5c:f6:0c:d0:c9:0b:4d:b3:86:3b:c7:6b:b6:53:8b:59:8f:78: 56:71:ac:c8:14:24:ea:b3:68:e6:56:1d:70:c2:ff:78:db:fe: 65:1a:9b:c0:f5:1c:bf:86:8c:61:84:01:fd:85:c3:1d:8a:72: 44:3e:e4:87:7f:42:b9:86:ff:63:4e:31:24:ef:b7:5c:12:a2: 56:32:e9:94:7d:aa:92:c2:23:9c:80:59:65:e5:95:12:e7:e5: b0:62:78:06:68:57:c9:ab:43:a2:a7:1b:bb:79:c2:fd:7c:a5: 0d:c4:ba:6b:70:d6:51:1d:62:b0:95:c6:0a:00:77:09:d4:ec: 8b:b7:94:5d:90:bc:8d:c4:59:bc:c8:e6:a4:92:c6:b9:d8:46: c1:dc:c6:20:54:fc:9a:cc:84:c0:5b:66:94:59:19:06:33:10: 67:d5:d2:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHaaWH5PctxmvIIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk ZTFjOGUyNDMtZTJiYy00ZjgyLTkzODgtYTk4MGJhNTJhYWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihkjkWbr7LfUHXd8zl8AS9VGLlflXlGt8Lfz VCAq64d9VYvAGpoMWmKmFy7om225R8Lr9rVeQ5gnoAu7OLtNBSLcF72FRenDi8N7 PvLlWSsigqQANpdVp60i0yibAc0ZWgLtnH3eupBm8gCcOeugwr14WD9uKkr/qrwc bpzstEeuo6zsqp08CsxPUvCP9eWXXEBor4zIspqTxxcHmHH3QVLvbcdcghHZjeFM Z1/vojHZRU9p+0+zo3FZFaMJmYmIXvHp6V2nLv2O0iCQNJIYCC/MOzlgqSFwCESS sVO6MuAHeqxmFK+H67F7fY1umQEj8BiK/4c0PW1umcj4Ry4PJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHvB8ySsrFuGXeEbcn2U5JNeLfjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYzFhZjdmODMtNTRkMS0z NjM3LWIyM2EtMWZhYzE4MjNmZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQWEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAp8eCOXGs7lpK732kQD7FoUipmSGgrlYB2xMdCDGz6PQ9S5Ew/E6rOk RHa8WFppOFqjLt2Z2XFmHOqLRVrEWhS+LuewkbwzHWDh2L4kX2+GdISS+1VpSjAT nFz2DNDJC02zhjvHa7ZTi1mPeFZxrMgUJOqzaOZWHXDC/3jb/mUam8D1HL+GjGGE Af2Fwx2KckQ+5Id/QrmG/2NOMSTvt1wSolYy6ZR9qpLCI5yAWWXllRLn5bBieAZo V8mrQ6KnG7t5wv18pQ3Eumtw1lEdYrCVxgoAdwnU7Iu3lF2QvI3EWbzI5qSSxrnY RsHcxiBU/JrMhMBbZpRZGQYzEGfV0kg= -----END CERTIFICATE-----Generated at Mon Apr 28 03:50:51 2025 by rpki-client