$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/0ec50588-0bd7-30b6-a0b6-9e7a8f3e386d.roa File: 0ec50588-0bd7-30b6-a0b6-9e7a8f3e386d.roa (raw, json) Hash identifier: 9bShtOv+2hHXpZ/5kNE8JAs4yYYDmgR/arqw7mSlXHw= Subject key identifier: 82:86:55:C2:2A:A7:C3:56:CA:A4:A7:FF:D4:DD:35:D4:B5:E4:9A:6C Certificate issuer: /CN=604a49f2-58d6-4709-bdaf-e7181b613801 Certificate serial: 010D0C9F43285849B57EA8356D70712E01E3A980 Authority key identifier: 85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/0ec50588-0bd7-30b6-a0b6-9e7a8f3e386d.roa Signing time: Thu 01 May 2025 13:10:20 +0000 ROA not before: Thu 01 May 2025 13:10:20 +0000 ROA not after: Wed 30 Jul 2025 13:10:20 +0000 asID: 199959 IP address blocks: 65.75.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7e:a8:35:6d:70:71:2e:01:e3:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604a49f2-58d6-4709-bdaf-e7181b613801 Validity Not Before: May 1 13:10:20 2025 GMT Not After : Jul 30 13:10:20 2025 GMT Subject: CN=050a7e3e-d0ec-4aff-8159-b944eb62fb67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ce:53:07:4a:26:6a:d0:0c:da:6e:6b:c5:64: 4d:90:a2:57:fd:f4:4d:fa:6c:aa:11:4c:62:b1:e3: 7a:0e:2b:7b:20:1a:80:90:1e:8f:aa:59:f1:fc:b0: 38:c3:c4:32:c2:31:51:20:ea:af:25:8d:31:ab:0e: 7f:b9:83:25:c0:79:a8:b7:a4:55:c5:82:a9:c2:b3: 00:1f:56:21:1f:eb:1a:9c:24:c4:b1:ad:8c:7f:a3: 97:b4:9c:44:bd:2f:ad:23:8a:f6:13:c0:51:11:fb: f5:b3:b8:06:c0:21:cd:45:d7:54:1d:70:1b:0c:d0: 90:07:fa:8f:25:f9:07:d5:e1:4b:86:1a:3d:1d:c1: df:68:3b:3b:39:e9:62:9d:6c:dc:38:7f:c0:50:e1: 8c:65:79:e3:b1:74:1c:04:2d:07:b0:d1:3b:1b:73: 4b:6d:c9:8a:82:27:35:68:de:cd:76:15:76:a9:a9: 1d:83:c6:2a:4d:5b:a0:a4:6e:c1:89:3e:d3:1b:a9: f6:bf:71:9b:dd:87:80:66:7e:b2:8a:5b:e6:5c:c8: f9:04:52:32:e2:22:e8:84:96:8e:6c:00:9e:b0:63: 58:b4:35:a9:9f:41:2f:07:c2:ae:84:55:24:86:59: d3:60:6f:4b:93:47:8d:6c:a9:27:94:40:65:b0:2d: 5b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:86:55:C2:2A:A7:C3:56:CA:A4:A7:FF:D4:DD:35:D4:B5:E4:9A:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/0ec50588-0bd7-30b6-a0b6-9e7a8f3e386d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl X509v3 Authority Key Identifier: keyid:85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer sbgp-ipAddrBlock: critical IPv4: 65.75.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:61:ac:87:8e:5b:db:a8:72:6d:59:d4:af:51:e2:d8:6b:81: 47:da:f0:fe:5a:30:d3:b5:82:f2:a6:6b:17:4f:29:81:a4:d3: a7:7a:0d:a7:1c:4a:49:df:86:c5:b8:c2:dd:7e:4d:a2:9a:27: 67:a7:62:1f:3c:8a:57:db:04:1b:9b:b7:ba:49:6d:80:e3:d7: 21:a2:c9:ed:a4:18:91:61:40:04:2b:40:d6:73:6a:fc:18:cd: 0e:0c:b5:69:6c:1d:5c:22:c1:36:02:2c:18:7d:a6:7c:04:ab: 1b:ec:ea:01:ad:e2:21:1c:d5:f4:45:cf:bf:37:df:2f:ec:ee: c7:04:45:b8:3f:31:b0:c8:e6:98:f1:6b:68:19:74:0f:12:8e: e1:d9:1e:89:0f:dd:82:d2:58:92:6b:7d:47:04:5b:8c:42:d2: 7c:08:34:db:ca:63:e3:74:a8:33:65:30:c1:e5:0c:84:87:8d: d5:6e:03:f8:6c:bf:56:86:e3:59:44:26:16:9e:69:e1:b0:79: 3e:5b:08:36:30:b3:e3:15:e4:39:89:2f:ae:d6:3f:bc:09:93: 97:1b:22:33:a2:ee:b6:33:98:34:13:62:6d:6a:6e:36:a6:53: ce:3c:ca:41:b0:7c:10:5f:ef:b2:51:e7:5a:26:d2:63:f7:0b: b2:83:6e:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1fqg1bXBxLgHjqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA0YTQ5ZjItNThkNi00NzA5LWJkYWYtZTcxODFiNjEz ODAxMB4XDTI1MDUwMTEzMTAyMFoXDTI1MDczMDEzMTAyMFowLzEtMCsGA1UEAxMk MDUwYTdlM2UtZDBlYy00YWZmLTgxNTktYjk0NGViNjJmYjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs5TB0omatAM2m5rxWRNkKJX/fRN+myqEUxi seN6Dit7IBqAkB6Pqlnx/LA4w8QywjFRIOqvJY0xqw5/uYMlwHmot6RVxYKpwrMA H1YhH+sanCTEsa2Mf6OXtJxEvS+tI4r2E8BREfv1s7gGwCHNRddUHXAbDNCQB/qP JfkH1eFLhho9HcHfaDs7OelinWzcOH/AUOGMZXnjsXQcBC0HsNE7G3NLbcmKgic1 aN7NdhV2qakdg8YqTVugpG7BiT7TG6n2v3Gb3YeAZn6yilvmXMj5BFIy4iLohJaO bACesGNYtDWpn0EvB8KuhFUkhlnTYG9Lk0eNbKknlEBlsC1bCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKGVcIqp8NWyqSn/9TdNdS15JpsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDRh NDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4MWI2MTM4MDEvMGVjNTA1ODgtMGJkNy0z MGI2LWEwYjYtOWU3YThmM2UzODZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA0YTQ5ZjItNThkNi00NzA5LWJk YWYtZTcxODFiNjEzODAxLzYwNGE0OWYyLTU4ZDYtNDcwOS1iZGFmLWU3MTgxYjYx MzgwMS5jcmwwHwYDVR0jBBgwFoAUhXgilXZb/+aBIDuDsD+ssXR0R3wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDRhNDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4 MWI2MTM4MDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQUvPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRhrIeOW9uocm1Z1K9R4thrgUfa8P5aMNO1gvKmaxdPKYGk06d6Dacc SknfhsW4wt1+TaKaJ2enYh88ilfbBBubt7pJbYDj1yGiye2kGJFhQAQrQNZzavwY zQ4MtWlsHVwiwTYCLBh9pnwEqxvs6gGt4iEc1fRFz7833y/s7scERbg/MbDI5pjx a2gZdA8SjuHZHokP3YLSWJJrfUcEW4xC0nwINNvKY+N0qDNlMMHlDISHjdVuA/hs v1aG41lEJhaeaeGweT5bCDYws+MV5DmJL67WP7wJk5cbIjOi7rYzmDQTYm1qbjam U848ykGwfBBf77JR51om0mP3C7KDbsg= -----END CERTIFICATE-----Generated at Fri May 2 15:01:48 2025 by rpki-client