$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/aedbe3d8-a938-347c-a902-e7d97e409a71.roa File: aedbe3d8-a938-347c-a902-e7d97e409a71.roa (raw, json) Hash identifier: x0yxzgUxJxzyVef/AwzjHMFtc08YpjW+4xHWDbUMJJk= Subject key identifier: F9:20:60:52:75:C8:42:F8:25:52:A6:05:D5:17:D5:C9:2A:B9:FF:7B Certificate issuer: /CN=328ebe8e-32d9-4873-ad53-1a5e421126d5 Certificate serial: 010D0C9F43285849955F24B4AB9306D86CF49000 Authority key identifier: 88:80:4B:02:44:DA:7E:76:D7:64:EE:31:28:48:B6:17:EF:DD:EE:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/aedbe3d8-a938-347c-a902-e7d97e409a71.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 13631 IP address blocks: 64.22.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:24:b4:ab:93:06:d8:6c:f4:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=328ebe8e-32d9-4873-ad53-1a5e421126d5 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=f5f41f9d-9a11-434f-aca2-0877c153d459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:fc:09:29:a6:52:c9:70:7f:8d:fd:ae:15:5a: 3a:3b:7e:2f:35:54:96:68:00:be:ff:ee:84:d6:4a: db:63:01:ef:de:b9:d7:0d:2f:a6:1a:f7:93:8f:4e: 61:21:8c:88:cf:3e:b7:2d:82:71:d9:fc:4a:ea:66: ba:ec:b0:74:a4:65:98:35:db:89:d9:9c:18:42:41: c2:17:f8:04:a8:13:fc:79:c8:70:1f:03:f5:83:6d: d3:c8:bd:9e:aa:10:e4:a8:0a:30:5c:aa:66:36:22: 63:0e:7b:f4:de:9d:44:00:5f:fc:e6:d6:cd:2b:0c: b5:c7:d3:19:a9:46:a4:e6:06:48:91:be:bc:aa:f9: ab:1e:b5:2b:d2:56:82:93:87:c7:a2:32:d6:37:bd: e1:3f:42:08:b1:71:a2:a1:8e:c5:33:90:14:89:93: 71:8e:b3:a9:7d:4e:ae:a2:bf:1e:c3:0c:7f:53:f0: a7:fd:b5:82:92:34:06:38:78:07:6a:92:cb:af:c7: bb:49:b9:68:83:a8:ae:7b:5f:8a:b1:b3:71:1c:46: 79:b0:e4:5d:e0:41:22:77:65:a6:b3:3d:9b:d8:15: 9b:eb:fd:6c:a5:2a:0c:da:55:36:5c:7e:ff:9f:cf: db:27:50:eb:99:8c:81:58:46:95:a4:02:82:5a:fa: b7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:20:60:52:75:C8:42:F8:25:52:A6:05:D5:17:D5:C9:2A:B9:FF:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/aedbe3d8-a938-347c-a902-e7d97e409a71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.crl X509v3 Authority Key Identifier: keyid:88:80:4B:02:44:DA:7E:76:D7:64:EE:31:28:48:B6:17:EF:DD:EE:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer sbgp-ipAddrBlock: critical IPv4: 64.22.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:b8:d6:5d:2d:4d:b7:c1:15:c6:0f:2b:09:14:72:27:43:32: 76:fd:e2:e9:c1:67:bb:53:00:9f:a1:03:02:3e:ab:ba:6d:ee: a9:7d:e2:16:df:e3:1b:03:c9:b6:cf:e8:b1:e9:a2:79:99:81: 35:ca:dd:e3:a3:fe:1b:d1:7c:4c:3b:05:0a:9e:e8:ab:31:08: 42:fb:f2:6e:1f:c6:5a:80:2a:0d:f5:1e:11:df:d4:15:06:6e: 18:ec:87:73:08:77:35:1f:89:a2:04:c1:24:5e:fe:29:c8:21: 2e:6b:38:b6:57:8c:4e:eb:9a:e6:c5:ce:03:c4:79:34:a1:29: 1d:07:d6:76:4d:d6:9f:19:e1:77:73:cc:d6:03:b4:6c:f4:ca: 28:73:cf:e1:07:10:fe:e2:50:45:3c:05:09:61:9b:36:f6:d1: 0d:cd:3f:f5:88:e7:33:9e:0a:1b:12:58:57:26:52:b5:98:06: a6:1b:29:e8:48:0d:39:94:e2:bc:e9:d6:a6:89:76:de:cb:20: a2:65:ce:00:97:91:7f:d0:ef:0d:97:0e:e6:cb:1d:89:6c:c2: 68:98:d1:e8:a4:bc:f4:7b:f9:83:41:1f:5b:03:c1:9a:3d:5d: fa:dd:9f:01:f6:49:71:f3:f7:ea:56:b2:35:86:5d:15:0d:66: 40:fb:31:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXyS0q5MG2Gz0kAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI4ZWJlOGUtMzJkOS00ODczLWFkNTMtMWE1ZTQyMTEy NmQ1MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk ZjVmNDFmOWQtOWExMS00MzRmLWFjYTItMDg3N2MxNTNkNDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPwJKaZSyXB/jf2uFVo6O34vNVSWaAC+/+6E 1krbYwHv3rnXDS+mGveTj05hIYyIzz63LYJx2fxK6ma67LB0pGWYNduJ2ZwYQkHC F/gEqBP8echwHwP1g23TyL2eqhDkqAowXKpmNiJjDnv03p1EAF/85tbNKwy1x9MZ qUak5gZIkb68qvmrHrUr0laCk4fHojLWN73hP0IIsXGioY7FM5AUiZNxjrOpfU6u or8ewwx/U/Cn/bWCkjQGOHgHapLLr8e7Sblog6iue1+KsbNxHEZ5sORd4EEid2Wm sz2b2BWb6/1spSoM2lU2XH7/n8/bJ1DrmYyBWEaVpAKCWvq3HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkgYFJ1yEL4JVKmBdUX1ckquf97MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zMjhl YmU4ZS0zMmQ5LTQ4NzMtYWQ1My0xYTVlNDIxMTI2ZDUvYWVkYmUzZDgtYTkzOC0z NDdjLWE5MDItZTdkOTdlNDA5YTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzI4ZWJlOGUtMzJkOS00ODczLWFk NTMtMWE1ZTQyMTEyNmQ1LzMyOGViZThlLTMyZDktNDg3My1hZDUzLTFhNWU0MjEx MjZkNS5jcmwwHwYDVR0jBBgwFoAUiIBLAkTafnbXZO4xKEi2F+/d7g0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zMjhlYmU4ZS0zMmQ5LTQ4NzMtYWQ1My0xYTVl NDIxMTI2ZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQBagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEu41l0tTbfBFcYPKwkUcidDMnb94unBZ7tTAJ+hAwI+q7pt7ql94hbf 4xsDybbP6LHponmZgTXK3eOj/hvRfEw7BQqe6KsxCEL78m4fxlqAKg31HhHf1BUG bhjsh3MIdzUfiaIEwSRe/inIIS5rOLZXjE7rmubFzgPEeTShKR0H1nZN1p8Z4Xdz zNYDtGz0yihzz+EHEP7iUEU8BQlhmzb20Q3NP/WI5zOeChsSWFcmUrWYBqYbKehI DTmU4rzp1qaJdt7LIKJlzgCXkX/Q7w2XDubLHYlswmiY0eikvPR7+YNBH1sDwZo9 XfrdnwH2SXHz9+pWsjWGXRUNZkD7MfU= -----END CERTIFICATE-----Generated at Sat Apr 26 16:24:39 2025 by rpki-client