$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/0ec3c190-7291-33e9-8f47-1a99ff2be2a5.roa File: 0ec3c190-7291-33e9-8f47-1a99ff2be2a5.roa (raw, json) Hash identifier: tTdGSmBvxXo3+wnL7VftMuvzT8y+n1UgZwvUgg+2NEs= Subject key identifier: AF:E3:80:DB:95:A9:8C:34:AA:BF:5D:9E:36:C5:73:06:97:AD:13:19 Certificate issuer: /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73 Certificate serial: 010D0C9F4328584908815E3B38345D4620586600 Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/0ec3c190-7291-33e9-8f47-1a99ff2be2a5.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 399819 IP address blocks: 64.29.129.0/24 maxlen: 24 2607:f3a0:a001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:5e:3b:38:34:5d:46:20:58:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=0c7328ab-84f7-49d5-86bd-fd38b8ab49ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1b:0b:fd:28:64:b9:18:a7:6f:e3:6d:86:45: db:ba:52:8d:3b:c0:44:d8:b0:96:b2:29:26:e1:cd: bf:92:67:50:ed:b7:04:aa:74:ed:1b:05:bd:17:0b: eb:e7:c2:d5:99:57:72:de:18:f6:5c:cc:96:14:07: d2:14:41:f1:2a:c4:e4:31:89:cd:6a:d1:6b:e5:35: 24:4a:28:fe:16:c4:b1:c2:62:3a:1b:a8:38:33:c2: 8c:1e:ec:9e:84:22:b5:f6:f8:da:91:a0:26:d7:a6: 8c:f7:25:1d:af:ce:9d:6a:83:c3:2b:70:b1:8f:fc: ad:df:15:e0:13:8c:f1:75:4a:b8:a2:c9:86:71:86: b3:08:4c:f2:68:24:a8:93:b4:e4:7e:f1:a8:6b:9e: 85:dd:d2:b3:fa:c6:38:be:89:78:e6:56:e8:dd:2a: f2:24:82:b5:ba:71:e6:35:76:09:8e:c4:59:05:54: de:cb:9a:a6:6a:56:bd:5c:88:d5:b3:9a:8f:59:13: f0:de:95:06:ce:f8:1c:87:39:0a:64:31:25:40:ba: fd:77:f8:d5:3c:c6:31:eb:18:00:32:f3:bf:1c:1e: ca:77:5e:61:7b:c1:c4:86:b4:a4:c8:ad:48:2b:b7: 97:d3:c7:a2:42:81:3d:13:14:01:aa:1f:2b:b0:58: 43:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E3:80:DB:95:A9:8C:34:AA:BF:5D:9E:36:C5:73:06:97:AD:13:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/0ec3c190-7291-33e9-8f47-1a99ff2be2a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl X509v3 Authority Key Identifier: keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer sbgp-ipAddrBlock: critical IPv4: 64.29.129.0/24 IPv6: 2607:f3a0:a001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:31:38:d7:ad:5c:5b:59:f9:5a:68:a3:a2:50:a4:77:09:a1: 51:f8:dc:51:4f:9d:74:59:69:a7:d3:d1:13:76:18:19:bc:8e: 31:1c:d7:42:31:f1:29:ad:c2:7e:cb:00:06:06:7c:e9:36:99: a9:fe:e2:27:26:a5:26:ce:6c:02:93:05:6e:8d:90:ad:dd:0d: 0e:0b:aa:71:7e:9d:5b:bf:7a:13:ff:a6:16:d8:db:bc:ef:fc: b4:67:18:e9:0f:62:14:44:90:f2:84:f3:f3:74:8d:74:b3:7e: 61:13:81:ea:b4:9a:fb:63:18:2c:0c:6a:bd:f4:66:11:61:d9: ab:ae:2b:24:8e:28:a8:b3:80:19:e0:c6:b8:5e:00:d7:24:11: 57:53:b9:29:33:07:73:b2:06:e2:d8:6c:55:66:9e:a7:d8:22: b4:14:a2:44:c0:f5:14:71:ce:d0:d5:f8:16:55:2c:40:50:d4: e2:90:dc:aa:9d:38:22:07:2b:1d:e3:cb:2d:3f:d2:32:8f:d8: 1c:f3:93:1b:64:90:1b:ab:b5:56:fc:ac:53:a9:d5:04:18:6f: c9:56:cf:c9:6a:7a:e9:fe:5e:ca:3b:b5:f7:ed:c5:b6:63:a8: ac:02:d5:a8:b7:a7:40:12:b8:70:da:15:ea:64:2c:0f:13:90: cf:d9:31:1c -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEkIgV47ODRdRiBYZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVmNzM1YjYtMGFlMi00YzJhLTgyNmItN2U4YjEyNmE0 YjczMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MGM3MzI4YWItODRmNy00OWQ1LTg2YmQtZmQzOGI4YWI0OWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBsL/ShkuRinb+NthkXbulKNO8BE2LCWsikm 4c2/kmdQ7bcEqnTtGwW9Fwvr58LVmVdy3hj2XMyWFAfSFEHxKsTkMYnNatFr5TUk Sij+FsSxwmI6G6g4M8KMHuyehCK19vjakaAm16aM9yUdr86daoPDK3Cxj/yt3xXg E4zxdUq4osmGcYazCEzyaCSok7TkfvGoa56F3dKz+sY4vol45lbo3SryJIK1unHm NXYJjsRZBVTey5qmala9XIjVs5qPWRPw3pUGzvgchzkKZDElQLr9d/jVPMYx6xgA MvO/HB7Kd15he8HEhrSkyK1IK7eX08eiQoE9ExQBqh8rsFhD6wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFK/jgNuVqYw0qr9dnjbFcwaXrRMZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NWY3 MzViNi0wYWUyLTRjMmEtODI2Yi03ZThiMTI2YTRiNzMvMGVjM2MxOTAtNzI5MS0z M2U5LThmNDctMWE5OWZmMmJlMmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODVmNzM1YjYtMGFlMi00YzJhLTgy NmItN2U4YjEyNmE0YjczLzg1ZjczNWI2LTBhZTItNGMyYS04MjZiLTdlOGIxMjZh NGI3My5jcmwwHwYDVR0jBBgwFoAUg5odAfvJBkOReL6k09QXpHyUm9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NWY3MzViNi0wYWUyLTRjMmEtODI2Yi03ZThi MTI2YTRiNzMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQB2BMA8E AgACMAkDBwAmB/OgoAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARzE4161cW1n5WmijolCkdwmhUfjcUU+d dFlpp9PRE3YYGbyOMRzXQjHxKa3CfssABgZ86TaZqf7iJyalJs5sApMFbo2Qrd0N DguqcX6dW796E/+mFtjbvO/8tGcY6Q9iFESQ8oTz83SNdLN+YROB6rSa+2MYLAxq vfRmEWHZq64rJI4oqLOAGeDGuF4A1yQRV1O5KTMHc7IG4thsVWaep9gitBSiRMD1 FHHO0NX4FlUsQFDU4pDcqp04IgcrHePLLT/SMo/YHPOTG2SQG6u1VvysU6nVBBhv yVbPyWp66f5eyju19+3FtmOorALVqLenQBK4cNoV6mQsDxOQz9kxHA== -----END CERTIFICATE-----Generated at Mon Apr 28 08:26:39 2025 by rpki-client