$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/d53ef3b4-e296-3a57-9a55-cd43e8012c16.roa File: d53ef3b4-e296-3a57-9a55-cd43e8012c16.roa (raw, json) Hash identifier: qrKkHkvqtLeVn+bx3xLbVCPX2kp6AnPUKF4EEK2kK5I= Subject key identifier: FC:0D:0D:11:7D:10:F1:35:9E:07:FF:D7:2E:28:67:50:4A:F6:DC:CC Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F432858494E50BA6E2707170EAB2F6300 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/d53ef3b4-e296-3a57-9a55-cd43e8012c16.roa Signing time: Tue 25 Mar 2025 14:09:32 +0000 ROA not before: Tue 25 Mar 2025 14:09:32 +0000 ROA not after: Mon 23 Jun 2025 14:09:32 +0000 asID: 834 IP address blocks: 64.22.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:50:ba:6e:27:07:17:0e:ab:2f:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Mar 25 14:09:32 2025 GMT Not After : Jun 23 14:09:32 2025 GMT Subject: CN=d1d86cc2-d99b-4c4b-8f78-e89478559d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:55:fa:4a:e0:7c:77:d3:39:80:c7:f3:34:a3: 51:9d:2f:fe:20:36:8f:c2:38:1e:10:09:64:3c:82: d5:e0:1f:d7:63:3f:7d:a0:cd:68:b6:52:01:ca:57: 91:89:61:50:c4:38:3d:85:db:4b:fd:62:3d:fc:35: 1b:67:1b:5f:1d:83:c3:1a:1a:db:91:33:4c:9a:b6: 85:ae:e2:94:f3:55:d3:db:a7:23:f2:e3:9f:e7:a4: 38:d1:71:d3:57:4d:15:f6:16:df:78:a8:60:e8:f4: 16:ae:de:94:44:b8:55:68:0b:58:dc:d9:ec:be:d4: 7c:be:90:73:8c:79:de:d4:eb:91:32:e3:e2:59:45: 51:43:8f:2f:fc:bb:24:a4:2a:4f:53:62:13:56:10: a4:b3:fe:4b:58:40:10:27:1e:41:84:1f:86:96:d8: 39:49:93:bc:c4:72:c7:13:3a:d2:fe:78:c3:6f:32: bd:5e:75:b9:1b:fa:81:93:b3:86:54:b7:75:f7:a2: 02:82:78:c6:fe:c9:4a:d8:d0:21:c2:10:c1:fc:d6: 21:a0:a4:6d:d6:ba:d9:73:f9:c8:30:35:8c:4b:5e: 8d:c4:86:4e:43:f8:36:6f:36:8b:0c:15:5b:04:78: 75:b4:57:5d:43:60:34:c2:fc:c1:4e:f4:51:67:5c: 65:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0D:0D:11:7D:10:F1:35:9E:07:FF:D7:2E:28:67:50:4A:F6:DC:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/d53ef3b4-e296-3a57-9a55-cd43e8012c16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 64.22.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:dc:6e:cf:62:72:06:81:f1:b1:83:f4:21:79:fe:a0:5d:b1: c7:c5:c0:41:d7:a2:c5:26:72:a4:eb:35:62:07:a6:62:e6:69: 24:06:68:cc:35:43:99:b2:0b:20:8c:a1:b1:12:a5:3e:b5:77: 46:0c:05:de:f3:97:2b:80:42:5e:10:8b:6e:5e:b9:b8:6b:43: f4:bb:8b:e2:91:07:95:64:94:f2:6a:91:3e:ff:e5:61:82:5b: 4d:d8:2e:e4:bd:89:11:21:9f:7c:46:45:58:03:62:be:38:09: 34:a2:74:9e:48:bb:7e:ce:12:3d:7e:c3:14:ab:8c:fc:5f:0f: f0:61:43:57:a6:c7:1e:3c:79:14:a0:c5:a6:f8:e6:96:37:8e: 73:9d:d4:88:e1:7f:06:80:0e:f6:ec:85:bb:47:81:93:5d:b1: 5f:f7:be:ea:97:63:91:8f:b4:3e:1e:7d:fd:bf:11:8a:5a:dd: ff:9d:23:84:d1:a0:fb:7e:ec:7d:80:ed:0d:76:3f:59:fd:e8: bf:62:07:42:f6:d5:31:6b:cc:d1:b0:27:06:21:c2:37:ea:9f: e3:32:90:03:63:74:1b:07:51:7a:17:ee:0c:0f:de:90:87:08: 28:a7:6b:8e:d4:d2:ee:7c:cd:4c:28:99:a4:ee:90:ca:d5:27: 78:7a:69:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOULpuJwcXDqsvYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDMyNTE0MDkzMloXDTI1MDYyMzE0MDkzMlowLzEtMCsGA1UEAxMk ZDFkODZjYzItZDk5Yi00YzRiLThmNzgtZTg5NDc4NTU5ZDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1X6SuB8d9M5gMfzNKNRnS/+IDaPwjgeEAlk PILV4B/XYz99oM1otlIByleRiWFQxDg9hdtL/WI9/DUbZxtfHYPDGhrbkTNMmraF ruKU81XT26cj8uOf56Q40XHTV00V9hbfeKhg6PQWrt6URLhVaAtY3NnsvtR8vpBz jHne1OuRMuPiWUVRQ48v/LskpCpPU2ITVhCks/5LWEAQJx5BhB+Gltg5SZO8xHLH EzrS/njDbzK9XnW5G/qBk7OGVLd196ICgnjG/slK2NAhwhDB/NYhoKRt1rrZc/nI MDWMS16NxIZOQ/g2bzaLDBVbBHh1tFddQ2A0wvzBTvRRZ1xlDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwNDRF9EPE1ngf/1y4oZ1BK9tzMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvZDUzZWYzYjQtZTI5Ni0z YTU3LTlhNTUtY2Q0M2U4MDEyYzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBZJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrcbs9icgaB8bGD9CF5/qBdscfFwEHXosUmcqTrNWIHpmLmaSQGaMw1 Q5myCyCMobESpT61d0YMBd7zlyuAQl4Qi25eubhrQ/S7i+KRB5VklPJqkT7/5WGC W03YLuS9iREhn3xGRVgDYr44CTSidJ5Iu37OEj1+wxSrjPxfD/BhQ1emxx48eRSg xab45pY3jnOd1IjhfwaADvbshbtHgZNdsV/3vuqXY5GPtD4eff2/EYpa3f+dI4TR oPt+7H2A7Q12P1n96L9iB0L21TFrzNGwJwYhwjfqn+MykANjdBsHUXoX7gwP3pCH CCina47U0u58zUwomaTukMrVJ3h6aRc= -----END CERTIFICATE-----Generated at Sat Apr 26 12:52:53 2025 by rpki-client