$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/d7a5f85b-4598-32d1-b8cc-d3f40d50fed2.roa File: d7a5f85b-4598-32d1-b8cc-d3f40d50fed2.roa (raw, json) Hash identifier: 9TJEGBPya5Mo4ecs69g74omB1QG88+IS288s3+q4a9Q= Subject key identifier: 9C:1C:DF:C2:74:F4:F8:B5:91:E1:B3:97:C5:28:E3:A1:F0:A0:AE:25 Certificate issuer: /CN=20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e Certificate serial: 010D0C9F432858499294A1FD918F0CC5AD2A8380 Authority key identifier: B3:9D:C3:8F:82:1E:92:58:6B:AC:7E:60:33:85:13:34:51:93:A3:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/d7a5f85b-4598-32d1-b8cc-d3f40d50fed2.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 21790 IP address blocks: 64.190.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a1:fd:91:8f:0c:c5:ad:2a:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=aa1701f5-c554-48e3-ab93-836cdcdd66ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f5:48:64:cc:66:3d:ed:38:65:d3:07:f6:fe: ca:f5:45:bd:9e:4e:6e:5b:a4:ad:ca:41:4b:94:68: 23:c2:83:b3:b7:25:e3:e6:ea:eb:0b:88:56:74:1b: 38:99:e8:1f:72:a0:34:59:f6:8e:40:4d:36:7f:29: b7:78:23:17:0d:bc:b8:31:32:e0:fb:b0:ec:3c:fd: 0b:02:88:56:d9:43:6a:79:f2:5f:41:ca:ce:b4:54: c3:16:b7:18:6c:68:84:ef:06:6c:65:c8:cf:80:56: 84:93:f9:28:0d:e2:69:f5:a8:3d:05:08:af:9d:51: a9:3f:9d:4f:47:0c:21:75:28:bf:7d:ed:46:c3:49: ca:c3:bd:54:ba:af:b5:6b:fc:b7:33:4b:74:1c:bb: 45:14:91:63:8d:c8:70:6a:20:be:5f:17:71:c0:c1: 73:5e:13:db:1c:5e:05:82:e8:af:48:fa:c3:a1:81: 64:14:82:08:b8:5a:79:7e:fa:9d:e2:d6:b3:88:d8: 76:6d:3f:e9:8c:2e:f5:af:c0:98:39:c3:43:db:10: 59:53:18:fe:87:fe:f7:c1:94:fa:85:30:0c:44:5b: 1f:7c:86:01:38:bc:1d:98:c5:5a:96:c4:4f:68:67: dc:1e:8e:90:b0:75:5b:9d:0a:44:47:a0:77:76:9e: 7d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1C:DF:C2:74:F4:F8:B5:91:E1:B3:97:C5:28:E3:A1:F0:A0:AE:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/d7a5f85b-4598-32d1-b8cc-d3f40d50fed2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.crl X509v3 Authority Key Identifier: keyid:B3:9D:C3:8F:82:1E:92:58:6B:AC:7E:60:33:85:13:34:51:93:A3:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer sbgp-ipAddrBlock: critical IPv4: 64.190.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:0d:d5:27:04:17:df:f9:eb:5e:59:d1:a9:ed:5a:1a:99:8a: 80:be:fb:f9:2d:60:5e:ee:e4:23:98:71:ca:43:a2:8c:04:f8: 2c:05:c5:f5:8e:b6:3b:8b:23:ad:fb:a4:fa:80:38:05:b6:a6: d9:63:b8:09:84:7c:38:b6:10:d3:ce:5e:60:61:7a:9c:14:c3: 74:1e:67:dc:8e:91:1e:52:09:9c:56:0d:82:30:b4:2c:03:cb: 68:74:98:e9:4b:27:4d:2c:65:1b:a4:cd:12:a9:3f:47:b3:30: bf:8d:9a:a6:ab:25:ef:22:04:db:14:f9:66:fe:91:84:35:df: 6b:f6:c6:ef:2c:38:f1:42:04:0c:42:ab:a3:43:7f:c3:4c:b5: 1c:92:0d:f4:97:a3:05:88:ac:01:14:13:35:2d:f9:66:da:e7: 42:4b:92:b0:f5:47:8c:fd:b9:c6:7d:22:67:35:d6:a8:5c:d3: 0b:78:d6:e0:50:48:65:03:41:f7:5d:5c:ef:77:e2:c9:f8:c9: eb:2b:6c:f8:ee:18:7a:39:99:73:37:5a:e8:d7:50:d3:01:3e: 51:d3:c2:cc:b2:75:9c:2c:2d:ba:0c:69:77:36:2a:75:00:bb: 09:fe:6c:4d:5a:dd:7c:da:9b:c4:15:82:eb:cc:58:5f:9a:d6: 86:3c:db:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKH9kY8Mxa0qg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBmOGJjZTYtZTMzZS00MGU4LWJmYjMtYzRiNWIyMTU5 YTdlMB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk YWExNzAxZjUtYzU1NC00OGUzLWFiOTMtODM2Y2RjZGQ2NmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvVIZMxmPe04ZdMH9v7K9UW9nk5uW6StykFL lGgjwoOztyXj5urrC4hWdBs4megfcqA0WfaOQE02fym3eCMXDby4MTLg+7DsPP0L AohW2UNqefJfQcrOtFTDFrcYbGiE7wZsZcjPgFaEk/koDeJp9ag9BQivnVGpP51P RwwhdSi/fe1Gw0nKw71Uuq+1a/y3M0t0HLtFFJFjjchwaiC+XxdxwMFzXhPbHF4F guivSPrDoYFkFIIIuFp5fvqd4taziNh2bT/pjC71r8CYOcND2xBZUxj+h/73wZT6 hTAMRFsffIYBOLwdmMValsRPaGfcHo6QsHVbnQpER6B3dp59FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwc38J09Pi1keGzl8Uo46HwoK4lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMGY4 YmNlNi1lMzNlLTQwZTgtYmZiMy1jNGI1YjIxNTlhN2UvZDdhNWY4NWItNDU5OC0z MmQxLWI4Y2MtZDNmNDBkNTBmZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjBmOGJjZTYtZTMzZS00MGU4LWJm YjMtYzRiNWIyMTU5YTdlLzIwZjhiY2U2LWUzM2UtNDBlOC1iZmIzLWM0YjViMjE1 OWE3ZS5jcmwwHwYDVR0jBBgwFoAUs53Dj4IeklhrrH5gM4UTNFGTo1AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMGY4YmNlNi1lMzNlLTQwZTgtYmZiMy1jNGI1 YjIxNTlhN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL6MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8N1ScEF9/5615Z0antWhqZioC++/ktYF7u5COYccpDoowE+CwFxfWO tjuLI637pPqAOAW2ptljuAmEfDi2ENPOXmBhepwUw3QeZ9yOkR5SCZxWDYIwtCwD y2h0mOlLJ00sZRukzRKpP0ezML+NmqarJe8iBNsU+Wb+kYQ132v2xu8sOPFCBAxC q6NDf8NMtRySDfSXowWIrAEUEzUt+Wba50JLkrD1R4z9ucZ9Imc11qhc0wt41uBQ SGUDQfddXO934sn4yesrbPjuGHo5mXM3WujXUNMBPlHTwsyydZwsLboMaXc2KnUA uwn+bE1a3Xzam8QVguvMWF+a1oY825w= -----END CERTIFICATE-----Generated at Tue Apr 29 09:26:35 2025 by rpki-client