$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/34af55c9-2b58-3f1a-9296-3ed31b7e8d01.roa File: 34af55c9-2b58-3f1a-9296-3ed31b7e8d01.roa (raw, json) Hash identifier: +bIOHgr+GwFb0eZp9pxSPOVV4ms4JVNfM8likPPWVj8= Subject key identifier: 53:8D:8A:DB:18:89:BC:18:30:A4:E2:79:F7:69:65:D1:0C:E5:50:45 Certificate issuer: /CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2 Certificate serial: 010D0C9F4328584919417C3BFECDC42FEB628D00 Authority key identifier: D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/34af55c9-2b58-3f1a-9296-3ed31b7e8d01.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 20205 IP address blocks: 64.246.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:7c:3b:fe:cd:c4:2f:eb:62:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=c15f0cb5-75f1-4136-85f1-76c9dbedc001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:07:7f:53:be:77:d6:1b:d3:d5:90:0c:9a:0b: d4:a5:00:25:b1:bd:41:4e:e9:f5:dd:24:8a:a8:3a: 77:fe:d2:9f:52:5c:4d:9f:5c:65:e6:cd:52:75:2b: 1c:9e:2c:a7:80:07:0c:b4:61:13:f9:95:24:5a:a6: 64:ce:27:ca:83:95:f2:c2:29:9b:e8:21:5d:b3:e5: 75:af:4a:40:b5:4e:29:b7:8e:77:23:88:58:86:0b: 1c:ba:1c:6d:ae:11:54:fb:c0:12:0d:11:59:06:b5: 45:aa:7d:f2:3f:c2:d3:8b:20:15:c8:3d:85:f6:05: 66:68:d8:b9:e6:d9:98:d9:c3:a4:c7:1d:ef:25:2f: cb:cf:8e:44:b5:4a:8f:7b:4a:83:86:c1:1e:cc:ea: b6:06:32:7c:5c:05:cc:5f:f3:95:60:e6:1c:d1:fe: ba:75:f4:0c:37:c6:d7:6a:d7:47:0b:a7:df:c5:f6: 55:93:7b:ff:82:f6:03:88:24:e5:04:1e:9b:7a:49: 8d:46:1e:e1:bc:fc:be:72:52:3a:0c:f2:3b:28:f1: 64:25:1e:c8:34:db:02:35:81:da:07:a1:24:8b:41: 1e:4c:75:e2:36:b0:a7:87:89:7a:f0:60:eb:60:19: ed:53:7c:15:a6:c2:94:2c:35:ba:b9:48:d1:18:31: bb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:8D:8A:DB:18:89:BC:18:30:A4:E2:79:F7:69:65:D1:0C:E5:50:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/34af55c9-2b58-3f1a-9296-3ed31b7e8d01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl X509v3 Authority Key Identifier: keyid:D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer sbgp-ipAddrBlock: critical IPv4: 64.246.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:07:f3:26:24:13:09:43:d0:f3:37:df:0c:8b:05:40:21:3e: 6b:03:c1:65:9d:91:75:92:60:00:fd:76:ff:84:fb:3c:b8:5d: ce:a0:1d:33:f8:7e:bf:6f:42:e6:63:60:38:14:ab:63:fb:d3: 86:d1:5a:1c:4a:e5:4b:45:ef:17:a3:1d:44:8b:7b:ec:f1:10: 4d:2c:4d:19:d6:d6:81:f4:e0:58:bd:b3:f7:f5:cf:41:20:51: ec:bf:2a:38:29:a6:f1:cc:41:59:59:cf:87:cc:be:1e:a0:22: 20:41:dc:45:87:b6:db:ec:0b:37:93:2d:af:d4:b1:c5:28:d2: 9b:ac:37:29:91:90:95:70:49:34:3c:76:79:15:08:4e:de:ec: b9:17:86:6f:42:fd:78:60:a3:3b:68:62:85:5a:50:40:40:e6: 8d:db:9c:46:a0:fb:43:a0:d6:7f:8d:0e:12:66:0a:5a:50:d3: 9f:d6:e3:df:30:73:a5:09:5d:b8:65:10:90:a7:80:35:c7:c7: 91:64:30:bb:66:76:58:e4:ab:c8:78:b5:26:08:7d:30:8f:b7: 2e:47:b3:b7:19:e4:8b:4a:da:70:52:46:14:4f:e5:ff:70:d3: 60:7c:22:b7:75:65:fd:d3:3a:7f:b2:92:ac:de:f1:2f:30:05: 7b:f4:cf:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQXw7/s3EL+tijQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWVkNDVlOTctOTBjMi00ODNkLWE2OGItMmRkMmM4MzI2 NmEyMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk YzE1ZjBjYjUtNzVmMS00MTM2LTg1ZjEtNzZjOWRiZWRjMDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgd/U7531hvT1ZAMmgvUpQAlsb1BTun13SSK qDp3/tKfUlxNn1xl5s1SdSscniyngAcMtGET+ZUkWqZkzifKg5Xywimb6CFds+V1 r0pAtU4pt453I4hYhgscuhxtrhFU+8ASDRFZBrVFqn3yP8LTiyAVyD2F9gVmaNi5 5tmY2cOkxx3vJS/Lz45EtUqPe0qDhsEezOq2BjJ8XAXMX/OVYOYc0f66dfQMN8bX atdHC6ffxfZVk3v/gvYDiCTlBB6bekmNRh7hvPy+clI6DPI7KPFkJR7INNsCNYHa B6Eki0EeTHXiNrCnh4l68GDrYBntU3wVpsKULDW6uUjRGDG7pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFONitsYibwYMKTiefdpZdEM5VBFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZWQ0 NWU5Ny05MGMyLTQ4M2QtYTY4Yi0yZGQyYzgzMjY2YTIvMzRhZjU1YzktMmI1OC0z ZjFhLTkyOTYtM2VkMzFiN2U4ZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWVkNDVlOTctOTBjMi00ODNkLWE2 OGItMmRkMmM4MzI2NmEyLzllZDQ1ZTk3LTkwYzItNDgzZC1hNjhiLTJkZDJjODMy NjZhMi5jcmwwHwYDVR0jBBgwFoAU2Na/N7W2TtQdeVXNk36mXgCJn/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZWQ0NWU5Ny05MGMyLTQ4M2QtYTY4Yi0yZGQy YzgzMjY2YTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQPZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIH8yYkEwlD0PM33wyLBUAhPmsDwWWdkXWSYAD9dv+E+zy4Xc6gHTP4 fr9vQuZjYDgUq2P704bRWhxK5UtF7xejHUSLe+zxEE0sTRnW1oH04Fi9s/f1z0Eg Uey/KjgppvHMQVlZz4fMvh6gIiBB3EWHttvsCzeTLa/UscUo0pusNymRkJVwSTQ8 dnkVCE7e7LkXhm9C/XhgoztoYoVaUEBA5o3bnEag+0Og1n+NDhJmClpQ05/W498w c6UJXbhlEJCngDXHx5FkMLtmdljkq8h4tSYIfTCPty5Hs7cZ5ItK2nBSRhRP5f9w 02B8Ird1Zf3TOn+ykqze8S8wBXv0z9k= -----END CERTIFICATE-----Generated at Mon Apr 28 09:26:46 2025 by rpki-client