$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/c770bcc9-e1d9-39d7-8f2d-f40306e1978f.roa File: c770bcc9-e1d9-39d7-8f2d-f40306e1978f.roa (raw, json) Hash identifier: h4wBYdF1TBhWq197h56IeHn72b0FxIM5TSYYA85gjcg= Subject key identifier: 1A:A1:5C:A1:38:72:AF:B7:59:96:00:F8:77:5D:AF:88:B0:1D:B4:3E Certificate issuer: /CN=8f6663be-0957-45cd-86d6-e3d6354f6b9b Certificate serial: 010D0C9F4328584949FE8CBC834681E780065E80 Authority key identifier: 95:35:DC:88:C9:4E:85:61:93:6A:C8:A6:BD:08:11:D0:A0:AE:7E:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/c770bcc9-e1d9-39d7-8f2d-f40306e1978f.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 14618 IP address blocks: 168.100.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/8f6663be-0957-45cd-86d6-e3d6354f6b9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/8f6663be-0957-45cd-86d6-e3d6354f6b9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:8c:bc:83:46:81:e7:80:06:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f6663be-0957-45cd-86d6-e3d6354f6b9b Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=538d82c0-3853-4d2e-a41d-e1064236d411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:72:99:e2:4f:4a:a2:e4:9c:17:12:53:b6:d3: 41:a2:07:94:4d:24:ee:21:25:fc:51:a6:be:60:0e: ce:43:d3:b9:17:a3:6c:61:18:f8:9e:80:28:24:31: 28:3f:a1:dc:21:2d:78:f8:46:ea:5f:e8:67:29:fe: 6f:28:5f:d8:a2:4f:a7:a0:b2:55:0a:f0:88:e7:1f: 0f:f8:7c:52:76:4d:7d:37:70:87:46:a2:eb:2a:95: d5:dd:df:c4:7e:6e:d5:8a:08:35:b6:f5:d3:02:b5: 0b:7d:8c:0e:37:da:42:1c:d5:c3:e3:3b:0d:3c:b6: 3b:15:3c:ac:6e:1d:a9:d1:b7:cd:1b:28:3a:0e:11: 11:17:33:26:b1:ab:17:03:de:95:9c:b2:bc:e0:99: a7:7d:a7:eb:ba:e0:24:7b:5f:9e:88:26:78:f9:94: c9:72:a6:b9:b2:c7:f2:bf:c4:5f:3b:d1:8f:8a:03: 50:5b:0f:fc:c3:39:cd:8a:9d:68:4e:4a:0e:4b:66: b2:b5:d8:38:f8:1a:0b:53:37:47:b4:d8:9a:05:47: 75:c1:fc:5b:fa:5e:4a:63:52:a1:01:f7:08:c3:61: c3:b2:c9:9c:03:70:6d:6b:d4:80:7f:fc:84:31:c7: a8:bc:74:e9:62:64:ed:88:23:03:34:94:63:e3:b9: 8e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A1:5C:A1:38:72:AF:B7:59:96:00:F8:77:5D:AF:88:B0:1D:B4:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/c770bcc9-e1d9-39d7-8f2d-f40306e1978f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/8f6663be-0957-45cd-86d6-e3d6354f6b9b.crl X509v3 Authority Key Identifier: keyid:95:35:DC:88:C9:4E:85:61:93:6A:C8:A6:BD:08:11:D0:A0:AE:7E:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer sbgp-ipAddrBlock: critical IPv4: 168.100.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:2c:bf:26:32:0f:7b:d5:11:56:d5:d9:49:aa:ef:bd:10:f1: c0:bb:f5:2a:7f:12:59:fd:e5:2b:ed:3f:02:92:84:4c:79:db: b1:09:9f:c9:15:99:f2:22:e4:b9:4a:01:6c:20:ee:fe:0a:cc: 94:48:a9:ff:65:49:20:c1:52:48:69:53:66:db:46:b7:c7:33: 0b:4e:e9:7c:27:87:3e:9f:30:1d:ef:4a:bc:7e:46:01:3e:5d: 3d:5d:f9:a7:06:38:02:d0:07:5b:fb:87:71:4e:6e:27:45:54: 4f:86:46:eb:9f:13:ce:c2:05:99:0e:29:9b:74:bc:20:8e:15: 17:47:33:6a:3c:45:30:32:6e:09:49:a9:50:5e:7d:55:09:d1: d1:3f:63:68:e9:c0:c7:25:5e:b6:21:1d:05:45:0d:71:a8:43: bb:42:8e:c6:19:a3:91:07:52:bf:a7:c5:da:5b:50:e0:08:25: ab:8d:67:97:dc:01:4e:f8:de:53:be:4a:84:9e:e0:73:3e:3b: 10:f6:3b:64:85:53:18:28:fd:51:a4:9e:3a:7f:2d:41:73:0b: 5e:bc:14:b2:b8:70:36:1c:78:0c:9e:ff:39:84:4a:92:b2:81: a9:7c:34:96:8b:1b:20:6f:2a:a3:93:75:86:52:96:dd:00:93: a3:bf:43:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/oy8g0aB54AGXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY2NjYzYmUtMDk1Ny00NWNkLTg2ZDYtZTNkNjM1NGY2 YjliMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk NTM4ZDgyYzAtMzg1My00ZDJlLWE0MWQtZTEwNjQyMzZkNDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3KZ4k9KouScFxJTttNBogeUTSTuISX8Uaa+ YA7OQ9O5F6NsYRj4noAoJDEoP6HcIS14+EbqX+hnKf5vKF/Yok+noLJVCvCI5x8P +HxSdk19N3CHRqLrKpXV3d/Efm7Vigg1tvXTArULfYwON9pCHNXD4zsNPLY7FTys bh2p0bfNGyg6DhERFzMmsasXA96VnLK84JmnfafruuAke1+eiCZ4+ZTJcqa5ssfy v8RfO9GPigNQWw/8wznNip1oTkoOS2aytdg4+BoLUzdHtNiaBUd1wfxb+l5KY1Kh AfcIw2HDssmcA3Bta9SAf/yEMceovHTpYmTtiCMDNJRj47mOkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqhXKE4cq+3WZYA+Hddr4iwHbQ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84ZjY2 NjNiZS0wOTU3LTQ1Y2QtODZkNi1lM2Q2MzU0ZjZiOWIvYzc3MGJjYzktZTFkOS0z OWQ3LThmMmQtZjQwMzA2ZTE5NzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGY2NjYzYmUtMDk1Ny00NWNkLTg2 ZDYtZTNkNjM1NGY2YjliLzhmNjY2M2JlLTA5NTctNDVjZC04NmQ2LWUzZDYzNTRm NmI5Yi5jcmwwHwYDVR0jBBgwFoAUlTXciMlOhWGTasimvQgR0KCufsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84ZjY2NjNiZS0wOTU3LTQ1Y2QtODZkNi1lM2Q2 MzU0ZjZiOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGQbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0svyYyD3vVEVbV2Umq770Q8cC79Sp/Eln95SvtPwKShEx527EJn8kV mfIi5LlKAWwg7v4KzJRIqf9lSSDBUkhpU2bbRrfHMwtO6Xwnhz6fMB3vSrx+RgE+ XT1d+acGOALQB1v7h3FObidFVE+GRuufE87CBZkOKZt0vCCOFRdHM2o8RTAybglJ qVBefVUJ0dE/Y2jpwMclXrYhHQVFDXGoQ7tCjsYZo5EHUr+nxdpbUOAIJauNZ5fc AU743lO+SoSe4HM+OxD2O2SFUxgo/VGknjp/LUFzC168FLK4cDYceAye/zmESpKy gal8NJaLGyBvKqOTdYZSlt0Ak6O/Q+c= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:10 2025 by rpki-client