$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/271dc47a-ceb4-3265-83d3-2e3ee1a891e1.roa File: 271dc47a-ceb4-3265-83d3-2e3ee1a891e1.roa (raw, json) Hash identifier: aKKEbZDuo2X2t6m2zmNBjQdCKC5aTIed5l3FqU4hS3I= Subject key identifier: E7:8C:37:46:24:10:F5:EB:43:77:49:C2:6F:FB:41:1D:D8:11:E1:94 Certificate issuer: /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6 Certificate serial: 010D0C9F432858498C3C97058CF6E2D60D9E6F00 Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/271dc47a-ceb4-3265-83d3-2e3ee1a891e1.roa Signing time: Wed 16 Apr 2025 18:29:04 +0000 ROA not before: Wed 16 Apr 2025 18:29:04 +0000 ROA not after: Tue 15 Jul 2025 18:29:04 +0000 asID: 27539 IP address blocks: 64.68.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:3c:97:05:8c:f6:e2:d6:0d:9e:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6 Validity Not Before: Apr 16 18:29:04 2025 GMT Not After : Jul 15 18:29:04 2025 GMT Subject: CN=dd94cc43-0877-4f40-ba75-d487334a6d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:6e:7f:c8:5a:88:a6:55:2d:2c:37:9d:46: 64:56:27:4d:27:29:72:3a:a1:0d:89:0e:6f:91:db: 59:c0:78:9a:ec:4e:97:16:0b:54:b2:92:40:40:3b: 2f:67:c9:01:c0:7a:62:f6:91:71:52:f3:3e:6d:3b: 9b:50:31:ad:0d:d0:b3:5d:ba:57:77:53:d3:1d:42: db:5e:b1:f1:15:56:32:e6:82:5a:1f:33:75:9b:b2: 3e:19:8b:22:b2:de:3e:a3:1d:f2:4c:43:13:98:43: 1e:4d:e3:64:63:98:6f:26:b9:f1:d3:9e:ab:0c:1f: 1f:77:37:5f:06:5d:a7:8c:fe:b6:e2:d2:ab:b0:1e: 37:18:9c:c9:9e:1b:b6:0d:ea:fe:62:36:67:28:75: bd:6a:04:64:e8:e9:62:8c:b8:f1:2d:4a:f7:b7:81: 6a:c2:a8:6c:ea:1f:ce:fb:cf:e6:22:db:27:3f:d9: c2:2e:6f:03:3f:ec:fb:ef:c1:1f:c4:b3:8c:f3:79: ae:fc:a6:61:30:ba:e3:95:7e:27:ec:8c:f2:10:24: 8f:81:5a:ae:ec:e2:ca:e8:3c:0a:3b:ad:01:61:60: d7:1e:b6:20:fb:1f:8f:5e:28:30:91:5c:a5:5a:d8: df:77:74:05:6c:09:ff:a4:fc:97:9e:1b:1e:2a:1c: 9c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:8C:37:46:24:10:F5:EB:43:77:49:C2:6F:FB:41:1D:D8:11:E1:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/271dc47a-ceb4-3265-83d3-2e3ee1a891e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl X509v3 Authority Key Identifier: keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer sbgp-ipAddrBlock: critical IPv4: 64.68.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:09:51:02:b6:ad:1d:67:ca:14:8d:1e:a8:fd:d2:7b:89:a3: d2:d5:bc:f8:3a:39:c0:48:15:45:c6:d2:a2:c9:ce:51:a0:a5: cf:01:25:1a:c3:5b:47:70:f3:4c:29:21:c8:68:fe:97:0e:43: 21:8d:7e:54:2c:f3:03:12:18:05:04:7b:74:4a:8a:24:be:10: e5:1e:5c:d0:98:e9:93:f0:ef:36:f5:1c:0c:4b:9c:0d:54:e8: 2c:16:6e:78:cd:a1:a7:47:bc:0d:9e:2b:75:76:87:59:85:4b: 4e:05:66:57:a3:7d:a7:89:f5:8f:05:b5:b4:a5:62:ac:85:1f: 0c:90:96:99:d5:96:27:85:e4:9b:11:58:8a:83:e0:0b:26:74: c2:24:fe:30:a0:22:2a:44:2d:cf:38:e7:0a:f3:6a:54:09:2a: c1:b3:ef:bf:e5:1a:06:1d:1d:9a:70:e3:6c:3a:b5:2a:37:b0: da:f1:3c:3c:0a:67:c9:63:7f:f0:29:2c:66:50:66:f5:4c:76: 37:89:1d:67:31:1e:d7:f9:67:e0:5d:0e:8b:a1:35:89:cf:a4: 3a:65:04:c2:bd:f8:81:90:20:dc:6f:9f:18:2a:21:02:67:f8: b4:e4:e5:f2:53:db:0a:88:e1:07:12:9c:1e:21:da:70:dd:2f: 5a:2b:fb:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmMPJcFjPbi1g2ebwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY0YTUzMDQtOTc0ZC00Yzg2LTk4MjktMmY0ZDhkYzli OWI2MB4XDTI1MDQxNjE4MjkwNFoXDTI1MDcxNTE4MjkwNFowLzEtMCsGA1UEAxMk ZGQ5NGNjNDMtMDg3Ny00ZjQwLWJhNzUtZDQ4NzMzNGE2ZDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfluf8haiKZVLSw3nUZkVidNJylyOqENiQ5v kdtZwHia7E6XFgtUspJAQDsvZ8kBwHpi9pFxUvM+bTubUDGtDdCzXbpXd1PTHULb XrHxFVYy5oJaHzN1m7I+GYsist4+ox3yTEMTmEMeTeNkY5hvJrnx056rDB8fdzdf Bl2njP624tKrsB43GJzJnhu2Der+YjZnKHW9agRk6OlijLjxLUr3t4Fqwqhs6h/O +8/mItsnP9nCLm8DP+z778EfxLOM83mu/KZhMLrjlX4n7IzyECSPgVqu7OLK6DwK O60BYWDXHrYg+x+PXigwkVylWtjfd3QFbAn/pPyXnhseKhyc4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeMN0YkEPXrQ3dJwm/7QR3YEeGUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80NjRh NTMwNC05NzRkLTRjODYtOTgyOS0yZjRkOGRjOWI5YjYvMjcxZGM0N2EtY2ViNC0z MjY1LTgzZDMtMmUzZWUxYTg5MWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDY0YTUzMDQtOTc0ZC00Yzg2LTk4 MjktMmY0ZDhkYzliOWI2LzQ2NGE1MzA0LTk3NGQtNGM4Ni05ODI5LTJmNGQ4ZGM5 YjliNi5jcmwwHwYDVR0jBBgwFoAUcgemEPwzJXUhFkgvpE9t1tV3MNUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80NjRhNTMwNC05NzRkLTRjODYtOTgyOS0yZjRk OGRjOWI5YjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQEQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0JUQK2rR1nyhSNHqj90nuJo9LVvPg6OcBIFUXG0qLJzlGgpc8BJRrD W0dw80wpIcho/pcOQyGNflQs8wMSGAUEe3RKiiS+EOUeXNCY6ZPw7zb1HAxLnA1U 6CwWbnjNoadHvA2eK3V2h1mFS04FZlejfaeJ9Y8FtbSlYqyFHwyQlpnVlieF5JsR WIqD4AsmdMIk/jCgIipELc845wrzalQJKsGz77/lGgYdHZpw42w6tSo3sNrxPDwK Z8ljf/ApLGZQZvVMdjeJHWcxHtf5Z+BdDouhNYnPpDplBMK9+IGQINxvnxgqIQJn +LTk5fJT2wqI4QcSnB4h2nDdL1or+xE= -----END CERTIFICATE-----Generated at Mon Apr 28 10:03:25 2025 by rpki-client