$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/88c7f6db-ff78-33c2-9a65-7ca3502e82be.roa File: 88c7f6db-ff78-33c2-9a65-7ca3502e82be.roa (raw, json) Hash identifier: FjDCabsciMMf6dwtAgScwj9pxXvlmpGtIsCdWvqOTz0= Subject key identifier: 6E:68:60:CB:69:66:74:A2:13:57:70:6A:00:42:D1:4B:A8:F7:AB:7A Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F43285849AA4F6E81C7BC559C61978600 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/88c7f6db-ff78-33c2-9a65-7ca3502e82be.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 13536 IP address blocks: 64.140.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:6e:81:c7:bc:55:9c:61:97:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=37fe96b4-8283-4855-8973-ec621ff09b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cb:5f:97:b8:73:94:84:dc:ff:b8:9c:8f:15: 97:53:22:34:06:85:a2:d4:fe:52:14:34:ec:fc:47: f0:17:b0:a1:a5:19:b9:b0:7f:bb:da:e9:cc:9b:7b: 24:bd:84:06:35:c3:f8:0e:a4:bb:cc:6c:1c:bf:72: 2b:9e:80:2a:de:03:1b:b4:07:d7:61:1d:a9:a7:04: 37:f6:32:af:de:70:c5:5e:56:dd:18:3f:2c:d5:d0: 38:67:88:0d:ed:c6:a4:34:76:b7:4e:eb:ce:71:48: 68:e4:56:67:f0:d3:51:f8:b8:1c:6a:a1:b5:ee:9a: 38:e4:f3:65:8e:1a:82:b2:40:5a:54:73:ea:a6:c4: 43:d7:17:4d:30:8f:21:3d:1c:47:97:44:76:28:99: 38:86:cf:f9:35:13:7d:35:4f:3f:e1:67:bf:63:85: 26:37:1a:2e:f2:2a:77:34:e0:12:79:58:e7:93:2a: cf:ba:81:eb:df:9a:9c:dd:ff:00:bc:91:49:fd:98: c0:7a:8f:ae:99:af:aa:22:5e:e4:ca:97:39:5d:4a: 99:76:41:12:6e:1e:67:5d:1c:d6:62:a1:e2:ca:66: 22:53:2f:36:97:36:0e:85:fa:ff:39:1b:3c:c4:46: 27:48:a3:2a:8f:32:8b:91:6d:ec:97:2b:ae:4c:b8: 65:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:68:60:CB:69:66:74:A2:13:57:70:6A:00:42:D1:4B:A8:F7:AB:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/88c7f6db-ff78-33c2-9a65-7ca3502e82be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 64.140.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:30:a4:68:ff:72:a8:29:79:b6:56:1f:30:e1:11:bb:61:ab: a9:57:24:d0:91:bd:81:35:f0:d1:51:2e:e6:23:a4:1d:d3:40: 1e:70:c8:82:e0:9b:54:9a:08:33:27:2f:03:9c:ba:62:99:31: b4:bf:09:f9:98:5f:d0:ab:76:89:eb:41:84:88:2b:cf:00:5d: ae:3a:fb:d9:bb:09:23:37:bb:9d:e2:e2:8c:c8:2a:87:79:41: 26:90:68:ea:ed:2a:30:7d:7b:87:89:d8:bb:f7:7b:53:4d:29: 0a:da:e6:26:32:ae:61:b9:91:31:b9:25:84:0d:83:77:c7:14: e8:9e:e1:f0:c4:e5:21:b0:cd:eb:28:b3:60:65:e1:be:42:b3: 0f:25:e1:10:e8:e7:2b:11:9c:85:e8:a6:6f:b8:5e:b7:7c:4a: 08:42:1a:56:33:a8:69:c8:00:76:84:f4:63:ea:4a:41:c7:3b: 93:7b:78:b2:6e:b8:13:8e:09:d4:86:76:75:99:b9:fb:c8:3d: 4a:f9:34:61:54:1c:42:e2:7b:cf:12:37:1f:e3:64:9c:1c:df: 6a:31:2b:f4:51:19:e0:19:8b:dd:c2:d4:0a:bb:61:21:d9:04: f8:cf:81:0a:e1:3c:a3:17:d2:d9:44:36:0b:30:80:a3:6a:f7: 3b:3f:8b:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT26Bx7xVnGGXhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk MzdmZTk2YjQtODI4My00ODU1LTg5NzMtZWM2MjFmZjA5YjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMtfl7hzlITc/7icjxWXUyI0BoWi1P5SFDTs /EfwF7ChpRm5sH+72unMm3skvYQGNcP4DqS7zGwcv3IrnoAq3gMbtAfXYR2ppwQ3 9jKv3nDFXlbdGD8s1dA4Z4gN7cakNHa3TuvOcUho5FZn8NNR+LgcaqG17po45PNl jhqCskBaVHPqpsRD1xdNMI8hPRxHl0R2KJk4hs/5NRN9NU8/4We/Y4UmNxou8ip3 NOASeVjnkyrPuoHr35qc3f8AvJFJ/ZjAeo+uma+qIl7kypc5XUqZdkESbh5nXRzW YqHiymYiUy82lzYOhfr/ORs8xEYnSKMqjzKLkW3slyuuTLhlNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5oYMtpZnSiE1dwagBC0Uuo96t6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvODhjN2Y2ZGItZmY3OC0z M2MyLTlhNjUtN2NhMzUwMmU4MmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQIzlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYwpGj/cqgpebZWHzDhEbthq6lXJNCRvYE18NFRLuYjpB3TQB5wyILg m1SaCDMnLwOcumKZMbS/CfmYX9CrdonrQYSIK88AXa46+9m7CSM3u53i4ozIKod5 QSaQaOrtKjB9e4eJ2Lv3e1NNKQra5iYyrmG5kTG5JYQNg3fHFOie4fDE5SGwzeso s2Bl4b5Csw8l4RDo5ysRnIXopm+4Xrd8SghCGlYzqGnIAHaE9GPqSkHHO5N7eLJu uBOOCdSGdnWZufvIPUr5NGFUHELie88SNx/jZJwc32oxK/RRGeAZi93C1Aq7YSHZ BPjPgQrhPKMX0tlENgswgKNq9zs/izI= -----END CERTIFICATE-----Generated at Tue Apr 29 09:24:00 2025 by rpki-client