$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/f7b88c4b-0481-3bcf-b1d3-e24cc2ffd9c3.roa File: f7b88c4b-0481-3bcf-b1d3-e24cc2ffd9c3.roa (raw, json) Hash identifier: BzqtacYag4yAAP09ved0J6wHa6c72BZbN89VjR8XIzQ= Subject key identifier: 32:FF:6C:E0:5B:5E:1F:32:C8:97:79:D4:5D:62:F5:25:FE:FA:6C:A1 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F432858494F93EB9D91D518DE25558500 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/f7b88c4b-0481-3bcf-b1d3-e24cc2ffd9c3.roa Signing time: Wed 26 Mar 2025 01:00:40 +0000 ROA not before: Wed 26 Mar 2025 01:00:40 +0000 ROA not after: Tue 24 Jun 2025 01:00:40 +0000 asID: 852 IP address blocks: 64.22.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4f:93:eb:9d:91:d5:18:de:25:55:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Mar 26 01:00:40 2025 GMT Not After : Jun 24 01:00:40 2025 GMT Subject: CN=48e063c6-3560-45fb-a630-243119843fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:98:6a:45:bc:17:b9:b5:80:2f:99:ed:ea:c1: ff:27:5b:40:dd:1e:ff:25:22:c1:ae:47:a7:5c:87: 36:0c:c9:82:ec:aa:cd:bd:f9:e4:a0:ea:e5:e1:39: ea:d5:bb:8a:51:b6:41:1f:a9:b9:23:22:0e:a1:3f: 05:d2:14:96:ad:7f:ff:4a:10:d2:6a:9b:f2:e6:75: 8f:a9:a5:d9:44:21:fd:ab:40:9c:89:df:c1:45:e8: 05:de:37:c6:96:3e:83:85:8f:9a:47:33:07:d3:07: c0:61:57:e2:eb:a0:74:af:0a:a3:ad:04:b7:2c:16: bc:cc:49:79:34:72:c0:cd:39:e2:58:ce:9f:03:49: 30:b7:50:36:d2:43:4d:de:bc:74:c0:5e:58:d2:0e: 46:c4:ab:3e:ca:bb:67:21:30:9b:bb:29:65:b2:e4: 66:ca:2b:23:55:1d:05:14:41:6e:60:02:6c:bc:f5: d5:9d:ac:23:9d:5c:90:23:36:96:db:82:8a:f6:d0: a1:d0:5e:10:55:47:f1:7b:b5:4b:5b:0f:85:2c:e8: 43:e9:15:e8:60:51:58:8e:bb:7b:c6:a8:bd:97:d9: 05:81:14:2e:1b:7e:bc:02:54:f1:53:d7:6f:e9:43: 48:64:d4:1f:7e:50:3c:8a:11:d3:c9:9a:31:34:f4: ee:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FF:6C:E0:5B:5E:1F:32:C8:97:79:D4:5D:62:F5:25:FE:FA:6C:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/f7b88c4b-0481-3bcf-b1d3-e24cc2ffd9c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 64.22.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:13:8f:2b:a0:23:0f:2d:f4:d8:56:7f:e9:4c:96:aa:a9:51: be:37:de:b3:0e:6a:71:48:2b:06:d0:5a:e1:34:57:15:f4:3c: f5:ef:4b:0a:6e:64:e2:22:8b:24:20:11:37:aa:13:ff:a9:54: fb:0d:69:26:75:b0:aa:04:16:92:36:5f:91:d3:6c:b6:99:d3: d3:77:e5:d0:c5:c0:0d:4c:29:b7:2a:3e:4d:81:6b:f2:6a:d1: 5c:8b:a5:2b:21:2f:23:6b:48:fd:85:c6:63:79:f6:21:7c:1e: ba:8e:f4:7f:14:54:df:a5:9c:44:e2:23:6f:03:79:d5:25:45: 54:a7:6e:b6:a8:c1:76:03:c1:38:f7:39:96:45:e0:8d:c7:dc: 06:81:82:06:0b:24:e9:d2:d6:ec:c9:3b:d3:29:46:f0:e8:d5: 20:5d:77:f9:fe:63:0a:5e:2d:15:84:51:0a:ba:4f:03:05:47: c3:83:4c:f5:e1:4c:a4:40:c0:52:dc:8f:f4:a7:af:7c:e4:6f: ae:2e:a2:1e:da:9d:18:54:bd:32:95:6e:e7:76:15:4b:b4:6c: 4b:04:b2:8b:b8:de:03:f6:ec:2c:b2:a8:de:60:ee:8b:9a:96: f0:a3:88:9a:23:28:c9:18:a2:5b:83:a0:64:24:cf:fc:fa:7f: 1f:28:86:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElPk+udkdUY3iVVhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDMyNjAxMDA0MFoXDTI1MDYyNDAxMDA0MFowLzEtMCsGA1UEAxMk NDhlMDYzYzYtMzU2MC00NWZiLWE2MzAtMjQzMTE5ODQzZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtphqRbwXubWAL5nt6sH/J1tA3R7/JSLBrken XIc2DMmC7KrNvfnkoOrl4Tnq1buKUbZBH6m5IyIOoT8F0hSWrX//ShDSapvy5nWP qaXZRCH9q0Ccid/BRegF3jfGlj6DhY+aRzMH0wfAYVfi66B0rwqjrQS3LBa8zEl5 NHLAzTniWM6fA0kwt1A20kNN3rx0wF5Y0g5GxKs+yrtnITCbuyllsuRmyisjVR0F FEFuYAJsvPXVnawjnVyQIzaW24KK9tCh0F4QVUfxe7VLWw+FLOhD6RXoYFFYjrt7 xqi9l9kFgRQuG368AlTxU9dv6UNIZNQfflA8ihHTyZoxNPTuZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDL/bOBbXh8yyJd51F1i9SX++myhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvZjdiODhjNGItMDQ4MS0z YmNmLWIxZDMtZTI0Y2MyZmZkOWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQBZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0TjyugIw8t9NhWf+lMlqqpUb433rMOanFIKwbQWuE0VxX0PPXvSwpu ZOIiiyQgETeqE/+pVPsNaSZ1sKoEFpI2X5HTbLaZ09N35dDFwA1MKbcqPk2Ba/Jq 0VyLpSshLyNrSP2FxmN59iF8HrqO9H8UVN+lnETiI28DedUlRVSnbraowXYDwTj3 OZZF4I3H3AaBggYLJOnS1uzJO9MpRvDo1SBdd/n+YwpeLRWEUQq6TwMFR8ODTPXh TKRAwFLcj/Snr3zkb64uoh7anRhUvTKVbud2FUu0bEsEsou43gP27CyyqN5g7oua lvCjiJojKMkYoluDoGQkz/z6fx8ohi4= -----END CERTIFICATE-----Generated at Sun Apr 27 12:14:13 2025 by rpki-client