$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a010b967-c3ee-39ad-90e8-efa3cbc3bb72.roa File: a010b967-c3ee-39ad-90e8-efa3cbc3bb72.roa (raw, json) Hash identifier: YzJTwXXvUqoiluih2NWEkWXwJrrGOxg5I9Ry9jS5naA= Subject key identifier: 52:DB:AE:67:14:76:97:D2:0E:D0:96:93:EE:14:8C:40:FA:C3:69:6B Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499AF4776C690FCE6936FB6900 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a010b967-c3ee-39ad-90e8-efa3cbc3bb72.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 64.114.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:77:6c:69:0f:ce:69:36:fb:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=e83636c2-5c5b-4f24-b18b-eba71ffe3455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ec:7d:34:95:8b:af:51:bb:66:23:1f:6c:98: ac:b6:c5:a0:8d:7f:78:eb:83:6a:17:c4:45:9a:01: f5:53:33:1b:ce:48:62:d1:e1:fe:39:57:2b:91:4e: f3:d5:bf:7b:b0:24:a5:c9:8a:e2:79:8c:ee:bb:2d: 4c:50:08:1e:81:88:eb:71:c0:0e:5e:68:b2:1d:53: 45:98:47:aa:24:4e:cd:e2:27:da:8f:7f:27:39:c0: ac:29:73:c1:c6:0d:b3:be:fe:09:dd:0f:ee:20:c6: 7c:94:7f:dd:0c:de:a5:9e:99:a8:25:47:67:c2:52: 2e:9a:82:58:13:2d:88:62:d6:91:b7:f8:db:b9:ef: 94:c9:5f:2f:bd:c1:17:99:57:1e:5d:39:85:35:0e: 2c:64:ea:2d:df:29:3f:83:3a:65:ca:5e:a6:75:44: 5b:71:d8:1d:77:05:77:f3:80:1c:6e:7f:7e:b5:7c: f8:59:7e:e9:49:4c:a3:73:5c:8e:70:65:07:70:03: 81:80:4d:08:0c:7e:1f:7a:73:38:33:3e:73:30:8b: a9:7b:95:90:4e:5d:25:0e:fa:49:19:4d:9d:05:36: 41:67:7b:7d:c4:b8:2d:16:cd:2f:db:47:1e:a7:3f: 0e:54:c3:c5:fe:68:5b:95:87:e7:ad:5b:fb:0e:e1: 6c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DB:AE:67:14:76:97:D2:0E:D0:96:93:EE:14:8C:40:FA:C3:69:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a010b967-c3ee-39ad-90e8-efa3cbc3bb72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 64.114.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:ac:7a:52:e5:2c:4d:52:16:ed:fd:a2:dd:35:00:e4:ca:b5: 72:f3:cf:ea:6b:14:09:d8:16:0e:02:76:e4:5f:7b:8e:91:0e: d5:c5:7b:69:f4:b1:b9:d4:fd:44:3f:f5:10:f3:04:21:9a:9b: 1b:3e:de:f0:20:82:7d:06:b5:76:59:25:28:0e:b9:5d:ee:4f: 1c:0f:42:78:e3:4c:6c:5d:e0:c4:f0:79:7a:8c:20:f2:07:b6: 2c:26:4b:9c:64:ea:61:5e:44:6a:27:fa:81:04:79:b7:f1:32: af:df:58:1c:df:eb:ee:de:e4:7b:be:12:43:b3:65:1b:b5:0a: a4:c4:13:c7:6c:d2:73:0e:4c:a6:20:2f:00:6f:7f:08:17:21: 05:f9:9c:af:66:5f:7c:af:04:b8:e5:f0:b3:c8:ca:41:a7:bc: 59:45:fc:66:de:d9:a3:28:f6:74:96:6e:4e:7c:19:4a:01:f1: d8:6f:a2:af:26:8d:79:53:4e:33:42:cd:2f:1a:df:e1:c6:66: 8d:77:ca:5f:08:87:97:aa:38:0f:de:0b:22:0a:44:eb:65:28: 41:34:c0:1c:40:27:d4:20:2d:4d:3a:52:03:45:45:bb:63:93: a0:2a:5d:61:4e:de:d3:43:90:26:d8:c0:54:89:f2:c7:33:a4: 54:1e:2a:b9 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEma9HdsaQ/OaTb7aQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZTgzNjM2YzItNWM1Yi00ZjI0LWIxOGItZWJhNzFmZmUzNDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOx9NJWLr1G7ZiMfbJistsWgjX9464NqF8RF mgH1UzMbzkhi0eH+OVcrkU7z1b97sCSlyYrieYzuuy1MUAgegYjrccAOXmiyHVNF mEeqJE7N4ifaj38nOcCsKXPBxg2zvv4J3Q/uIMZ8lH/dDN6lnpmoJUdnwlIumoJY Ey2IYtaRt/jbue+UyV8vvcEXmVceXTmFNQ4sZOot3yk/gzplyl6mdURbcdgddwV3 84Acbn9+tXz4WX7pSUyjc1yOcGUHcAOBgE0IDH4fenM4Mz5zMIupe5WQTl0lDvpJ GU2dBTZBZ3t9xLgtFs0v20cepz8OVMPF/mhblYfnrVv7DuFsuwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFLbrmcUdpfSDtCWk+4UjED6w2lrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYTAxMGI5NjctYzNlZS0z OWFkLTkwZTgtZWZhM2NiYzNiYjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQHIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAoKx6UuUsTVIW7f2i3TUA5Mq1cvPP6msUCdgWDgJ25F97jpEO1cV7afSx udT9RD/1EPMEIZqbGz7e8CCCfQa1dlklKA65Xe5PHA9CeONMbF3gxPB5eowg8ge2 LCZLnGTqYV5Eaif6gQR5t/Eyr99YHN/r7t7ke74SQ7NlG7UKpMQTx2zScw5MpiAv AG9/CBchBfmcr2ZffK8EuOXws8jKQae8WUX8Zt7Zoyj2dJZuTnwZSgHx2G+iryaN eVNOM0LNLxrf4cZmjXfKXwiHl6o4D94LIgpE62UoQTTAHEAn1CAtTTpSA0VFu2OT oCpdYU7e00OQJtjAVInyxzOkVB4quQ== -----END CERTIFICATE-----Generated at Sat Apr 26 22:10:46 2025 by rpki-client