$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa File: bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa (raw, json) Hash identifier: h0hx5RLZfuw4k8j3PpK+Q/E7BFsd2Sy2WQ8ExOntkPc= Subject key identifier: 40:18:8D:04:38:69:56:7F:CE:A0:21:5B:DB:08:0C:CB:E1:C5:72:53 Certificate issuer: /CN=6ce95cb2-398f-4574-bae0-522b74e03f71 Certificate serial: 010D0C9F43285848F22C5F4678B12F65B79691C0 Authority key identifier: CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 1299 IP address blocks: 204.15.220.0/22 maxlen: 24 208.86.120.0/21 maxlen: 24 2606:3840::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:5f:46:78:b1:2f:65:b7:96:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce95cb2-398f-4574-bae0-522b74e03f71 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=7bb82416-51f6-467e-a832-6f970223b382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b4:80:3b:80:9f:e7:87:09:e6:c9:f2:23:d3: 89:dc:52:d9:d7:6d:b3:4d:8b:cf:ec:e2:e8:02:84: 7b:52:3a:74:e1:51:e2:74:47:d1:c7:d8:2c:05:37: fc:03:25:f1:0b:94:21:7d:bb:31:ec:78:05:40:33: 70:7b:51:bc:f0:eb:db:35:27:f2:bf:bc:49:37:05: e1:1e:06:1f:5c:d6:ca:9c:66:f1:5a:d5:fe:7b:60: cc:a7:92:63:6e:a2:c8:62:0d:ef:8f:fa:e2:a3:a9: 4c:50:49:24:1d:44:86:eb:e0:fa:22:87:57:39:d5: 91:de:a3:4a:2a:6c:a6:1d:67:7d:f5:69:e8:43:ff: 1a:40:68:b6:ba:64:7d:bb:4b:f5:c8:10:1d:d6:f0: 16:93:94:1e:6d:7e:e5:79:50:84:3f:fa:fe:ef:54: 30:f2:c2:4d:83:6e:b0:9d:3a:ef:08:02:9b:35:3f: 2c:a2:47:48:0a:65:72:95:f6:da:12:bb:3d:ab:00: 87:a2:60:15:e1:8a:bd:ef:dd:15:df:20:f2:30:7a: 2e:3c:5d:d8:0c:4a:0b:39:e8:ce:0b:49:19:cb:22: 7f:20:e5:c8:e3:80:ee:0e:a4:59:4b:15:ae:3b:ee: e2:61:7e:49:da:4f:93:11:e8:0e:35:92:01:c1:21: 7c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:18:8D:04:38:69:56:7F:CE:A0:21:5B:DB:08:0C:CB:E1:C5:72:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl X509v3 Authority Key Identifier: keyid:CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer sbgp-ipAddrBlock: critical IPv4: 204.15.220.0/22 208.86.120.0/21 IPv6: 2606:3840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:a4:38:36:b7:07:90:93:a8:fc:7a:bc:cb:ec:42:52:39:28: c3:10:c5:10:d1:d9:8d:1a:ae:60:bb:7a:87:15:94:b5:a3:1b: de:18:f4:98:b3:f2:f2:e0:51:81:3a:54:9f:ca:73:d0:7d:be: 23:1c:07:1d:65:51:bc:19:af:63:49:a1:3d:b9:f7:8a:f1:7a: f9:f1:d6:51:9f:56:79:eb:eb:5d:50:04:d9:7f:14:8d:be:3b: f1:70:96:d0:a0:b0:04:2c:8a:fa:32:c5:39:b4:14:93:52:0e: e6:67:59:74:9d:eb:1a:32:ce:c5:be:2f:9d:c3:11:8f:f4:31: 3b:4f:c2:2b:bd:65:f7:0a:b3:69:c1:bb:bc:37:38:72:7d:6c: d8:bb:e1:d8:d5:3a:82:35:a9:e9:3e:c4:fd:70:dd:7a:4c:54: 90:cb:0c:95:36:97:d7:8e:fd:20:70:08:5f:3c:a1:61:e0:d5: c4:c1:55:c1:f3:da:22:88:34:17:91:14:6b:ea:f3:0f:21:a9: 8b:fb:62:1f:a4:ad:f2:ae:08:26:60:43:2d:6b:89:7c:81:ec: e4:39:4b:24:9e:46:f9:9e:a0:a0:d7:85:ba:ad:c2:38:77:ef: 57:df:6c:25:1f:1d:aa:a8:01:4d:05:b1:a3:2e:89:c7:9b:19: 6b:e0:7c:27 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEjyLF9GeLEvZbeWkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmNlOTVjYjItMzk4Zi00NTc0LWJhZTAtNTIyYjc0ZTAz ZjcxMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk N2JiODI0MTYtNTFmNi00NjdlLWE4MzItNmY5NzAyMjNiMzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7SAO4Cf54cJ5snyI9OJ3FLZ122zTYvP7OLo AoR7Ujp04VHidEfRx9gsBTf8AyXxC5Qhfbsx7HgFQDNwe1G88OvbNSfyv7xJNwXh HgYfXNbKnGbxWtX+e2DMp5JjbqLIYg3vj/rio6lMUEkkHUSG6+D6IodXOdWR3qNK KmymHWd99WnoQ/8aQGi2umR9u0v1yBAd1vAWk5QebX7leVCEP/r+71Qw8sJNg26w nTrvCAKbNT8sokdICmVylfbaErs9qwCHomAV4Yq9790V3yDyMHouPF3YDEoLOejO C0kZyyJ/IOXI44DuDqRZSxWuO+7iYX5J2k+TEegONZIBwSF8hwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFEAYjQQ4aVZ/zqAhW9sIDMvhxXJTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5 NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJiNzRlMDNmNzEvYmQ4OWRhOGItYmQzMi0z M2EyLTgwOTMtMWI1ZjQ0YmM3YmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmNlOTVjYjItMzk4Zi00NTc0LWJh ZTAtNTIyYjc0ZTAzZjcxLzZjZTk1Y2IyLTM5OGYtNDU3NC1iYWUwLTUyMmI3NGUw M2Y3MS5jcmwwHwYDVR0jBBgwFoAUzKkX+OZFOjFthwb20W42PmyEf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJi NzRlMDNmNzEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCzA/cAwQD 0FZ4MA0EAgACMAcDBQAmBjhAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACGkODa3B5CTqPx6vMvsQlI5KMMQ xRDR2Y0armC7eocVlLWjG94Y9Jiz8vLgUYE6VJ/Kc9B9viMcBx1lUbwZr2NJoT25 94rxevnx1lGfVnnr611QBNl/FI2+O/FwltCgsAQsivoyxTm0FJNSDuZnWXSd6xoy zsW+L53DEY/0MTtPwiu9ZfcKs2nBu7w3OHJ9bNi74djVOoI1qek+xP1w3XpMVJDL DJU2l9eO/SBwCF88oWHg1cTBVcHz2iKINBeRFGvq8w8hqYv7Yh+krfKuCCZgQy1r iXyB7OQ5SySeRvmeoKDXhbqtwjh371ffbCUfHaqoAU0FsaMuicebGWvgfCc= -----END CERTIFICATE-----Generated at Sat Apr 26 17:48:27 2025 by rpki-client