$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/3f7c7d92-236b-3540-971b-b0767cad79b1.roa File: 3f7c7d92-236b-3540-971b-b0767cad79b1.roa (raw, json) Hash identifier: 2dZzblYVsyWyhmghFwQ4hJfh+nBG3zbgF7A20IYe8JQ= Subject key identifier: 99:9E:4D:0E:04:09:89:37:99:40:E3:34:E8:7D:78:EC:7A:3F:CC:43 Certificate issuer: /CN=604a49f2-58d6-4709-bdaf-e7181b613801 Certificate serial: 010D0C9F43285849B07550D8964788B6EBB35200 Authority key identifier: 85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/3f7c7d92-236b-3540-971b-b0767cad79b1.roa Signing time: Tue 29 Apr 2025 17:52:28 +0000 ROA not before: Tue 29 Apr 2025 17:52:28 +0000 ROA not after: Mon 28 Jul 2025 17:52:28 +0000 asID: 397423 IP address blocks: 65.75.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b0:75:50:d8:96:47:88:b6:eb:b3:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604a49f2-58d6-4709-bdaf-e7181b613801 Validity Not Before: Apr 29 17:52:28 2025 GMT Not After : Jul 28 17:52:28 2025 GMT Subject: CN=a94ae7b3-782b-4669-844b-f16af6246bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:24:3e:84:e2:bd:90:11:45:cc:e6:fd:01:2f: 27:76:95:7e:35:6b:cb:e6:f5:2b:ed:c7:90:d3:89: ec:53:51:1c:bb:1e:f8:0d:a9:47:13:39:17:7b:9b: 40:4a:03:1f:66:f7:40:1d:36:68:d8:56:25:5e:5b: 28:80:cd:62:74:8c:1b:bf:3d:13:af:c9:d5:ac:b1: 27:bc:7e:0d:7d:05:3f:d9:76:95:71:4f:e7:77:51: 13:56:ce:a4:4e:5a:96:6a:83:2d:6d:af:b5:cf:af: 9a:ce:08:e6:48:f3:04:03:a5:ab:2f:a2:1e:c5:5a: d1:d1:da:15:a9:65:70:c0:f8:88:91:04:9f:2d:f1: 4e:22:b5:18:08:01:fd:4d:66:a8:15:39:ea:12:b1: 65:cf:3d:3c:0b:ad:46:b1:05:d2:d8:eb:7c:cf:c4: 99:74:49:5e:cf:17:25:fe:9b:4e:9d:61:a6:3d:49: 13:fe:5b:75:23:92:96:6a:cf:86:32:3f:29:53:3e: 13:40:84:1f:5c:64:28:00:27:4f:4a:b2:3c:d6:58: eb:f0:2d:fa:8a:19:53:fe:b4:bc:9b:be:6f:ee:e4: e7:ac:47:2b:c7:7f:fd:d7:f6:ea:7d:56:e1:97:2b: ec:8b:c0:6e:5f:03:8f:06:3d:0a:ec:04:02:5d:ef: 3b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9E:4D:0E:04:09:89:37:99:40:E3:34:E8:7D:78:EC:7A:3F:CC:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/3f7c7d92-236b-3540-971b-b0767cad79b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl X509v3 Authority Key Identifier: keyid:85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer sbgp-ipAddrBlock: critical IPv4: 65.75.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:03:09:21:c9:f5:70:57:f7:b4:4e:e0:26:d7:15:96:bb:0a: 01:79:23:66:08:77:94:a1:a7:a1:36:e5:9a:dd:db:72:a3:f6: 80:57:f4:3d:55:9e:ef:d6:5b:84:83:9a:4f:94:bb:8b:11:ff: 82:21:ea:da:a2:e9:aa:df:df:60:cb:1f:a9:39:71:2e:dc:32: 96:4b:5e:ed:9e:ec:c2:90:f6:8a:bb:6e:8a:aa:7d:9e:fc:4d: 7d:dc:4e:c8:54:0d:00:b2:37:2d:0b:b0:bd:ee:06:2a:32:67: 56:3a:af:4e:a5:52:7b:ff:60:2b:82:09:f0:63:fd:0d:16:3b: c2:7e:43:7e:c0:85:7e:80:b0:e4:b0:17:a8:df:70:5f:0a:d7: e6:3c:1b:c9:88:34:d4:0f:66:18:67:e1:52:6e:c3:ed:28:5b: 44:b6:01:54:1f:4d:79:f4:a6:18:8f:52:d1:86:59:6d:db:4a: 3d:43:4a:d6:79:87:83:03:70:2e:19:b0:60:2e:f0:8f:0a:de: 9d:e4:ff:55:d0:57:01:b6:c4:e1:56:09:fb:3d:fe:5d:42:80: fc:20:a9:b0:1e:35:cf:5d:ab:c1:fc:b7:72:ab:c6:01:54:03: 13:3d:d8:31:b1:6c:e4:24:11:ce:19:b2:6e:9a:b0:57:a5:b1: 76:7d:6b:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmwdVDYlkeItuuzUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA0YTQ5ZjItNThkNi00NzA5LWJkYWYtZTcxODFiNjEz ODAxMB4XDTI1MDQyOTE3NTIyOFoXDTI1MDcyODE3NTIyOFowLzEtMCsGA1UEAxMk YTk0YWU3YjMtNzgyYi00NjY5LTg0NGItZjE2YWY2MjQ2YmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCQ+hOK9kBFFzOb9AS8ndpV+NWvL5vUr7ceQ 04nsU1Ecux74DalHEzkXe5tASgMfZvdAHTZo2FYlXlsogM1idIwbvz0Tr8nVrLEn vH4NfQU/2XaVcU/nd1ETVs6kTlqWaoMtba+1z6+azgjmSPMEA6WrL6IexVrR0doV qWVwwPiIkQSfLfFOIrUYCAH9TWaoFTnqErFlzz08C61GsQXS2Ot8z8SZdElezxcl /ptOnWGmPUkT/lt1I5KWas+GMj8pUz4TQIQfXGQoACdPSrI81ljr8C36ihlT/rS8 m75v7uTnrEcrx3/91/bqfVbhlyvsi8BuXwOPBj0K7AQCXe87NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmeTQ4ECYk3mUDjNOh9eOx6P8xDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDRh NDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4MWI2MTM4MDEvM2Y3YzdkOTItMjM2Yi0z NTQwLTk3MWItYjA3NjdjYWQ3OWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA0YTQ5ZjItNThkNi00NzA5LWJk YWYtZTcxODFiNjEzODAxLzYwNGE0OWYyLTU4ZDYtNDcwOS1iZGFmLWU3MTgxYjYx MzgwMS5jcmwwHwYDVR0jBBgwFoAUhXgilXZb/+aBIDuDsD+ssXR0R3wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDRhNDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4 MWI2MTM4MDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQUvPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkDCSHJ9XBX97RO4CbXFZa7CgF5I2YId5Shp6E25Zrd23Kj9oBX9D1V nu/WW4SDmk+Uu4sR/4Ih6tqi6arf32DLH6k5cS7cMpZLXu2e7MKQ9oq7boqqfZ78 TX3cTshUDQCyNy0LsL3uBioyZ1Y6r06lUnv/YCuCCfBj/Q0WO8J+Q37AhX6AsOSw F6jfcF8K1+Y8G8mINNQPZhhn4VJuw+0oW0S2AVQfTXn0phiPUtGGWW3bSj1DStZ5 h4MDcC4ZsGAu8I8K3p3k/1XQVwG2xOFWCfs9/l1CgPwgqbAeNc9dq8H8t3KrxgFU AxM92DGxbOQkEc4Zsm6asFelsXZ9a4Y= -----END CERTIFICATE-----Generated at Thu May 1 01:50:23 2025 by rpki-client