$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/d651495b-6e08-3d81-a928-b517cd0cd4f0.roa File: d651495b-6e08-3d81-a928-b517cd0cd4f0.roa (raw, json) Hash identifier: YYUrBr2ZiOJGGaGNX8JvsVodkDxYsoPH7iioCKQB1gE= Subject key identifier: 24:E0:C9:13:FB:02:BB:B2:09:C5:8B:CB:C4:57:6E:0A:97:70:40:3F Certificate issuer: /CN=29c10060-705c-45ae-937b-544864b670d7 Certificate serial: 010D0C9F43285849C4D4B51C05D9F464A1A51B00 Authority key identifier: 7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/d651495b-6e08-3d81-a928-b517cd0cd4f0.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 27229 IP address blocks: 64.71.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:b5:1c:05:d9:f4:64:a1:a5:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29c10060-705c-45ae-937b-544864b670d7 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=8d3708fb-42ef-4e86-80ce-6aefe185b8ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:17:b1:67:87:a2:23:68:7f:bd:0f:78:57:46: 17:af:68:70:2b:6e:f6:71:06:4a:ba:f8:25:95:50: e5:b8:21:51:34:d9:eb:90:8b:90:4c:19:4e:54:8d: 3e:89:bc:15:bb:9b:50:38:ee:2b:3c:42:29:1a:2f: 82:73:e7:31:01:dc:99:72:2f:40:07:fd:b7:16:2d: 5e:48:36:12:b6:9c:7b:39:2f:0c:2c:30:13:27:af: ae:3f:ca:27:16:74:9b:28:0d:8f:96:ff:18:21:74: 17:07:a4:9c:b8:02:2b:a5:ad:da:38:93:56:85:5e: 2c:f7:d3:6e:c9:c5:f3:50:6e:ce:ed:c4:4f:f8:60: 72:6e:d9:1b:a4:1a:69:ce:8b:43:09:39:2e:3f:bb: df:16:4c:7b:92:ce:9f:78:b8:83:b7:19:2d:a6:94: 41:c9:47:6e:a0:65:cc:35:d0:91:cc:d7:95:49:d9: f5:80:d8:fd:03:4d:32:10:9e:1f:23:30:ec:91:b0: 63:ee:1e:db:88:ac:7e:2b:c7:03:3d:78:b6:ec:b7: 52:f7:e6:2d:32:8f:66:15:b5:a1:b5:d0:50:9e:92: e3:50:3b:58:7d:69:1a:39:1e:a0:1b:3a:3e:37:2e: ca:14:99:bb:7b:30:81:c5:ba:e0:76:a3:35:c6:c5: 2d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E0:C9:13:FB:02:BB:B2:09:C5:8B:CB:C4:57:6E:0A:97:70:40:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/d651495b-6e08-3d81-a928-b517cd0cd4f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.crl X509v3 Authority Key Identifier: keyid:7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer sbgp-ipAddrBlock: critical IPv4: 64.71.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:18:d4:6c:cd:a8:c3:d1:6d:5d:96:79:49:fc:7b:1c:62:13: fc:74:7e:91:9e:15:03:a4:16:dc:89:d0:28:38:92:db:54:b6: 14:a6:f5:08:20:35:96:d1:db:b8:19:dd:27:ff:91:97:ce:41: 84:5a:13:5b:d4:f5:cb:3b:13:41:fa:a2:c0:db:49:32:50:8c: 2b:a3:e5:53:c6:0a:15:b0:69:5c:c3:32:c3:86:f9:db:f7:4b: f6:66:1a:8b:ac:7a:56:65:8b:5a:69:17:da:77:9c:e2:1d:5f: 0a:90:82:a6:a3:18:6f:31:a5:d2:57:44:3a:11:d3:0b:80:3a: 40:d2:49:86:dc:67:69:e4:bd:9e:a6:ab:dd:7d:aa:ff:f3:49: 89:7d:63:47:0d:cd:6f:c3:ef:c5:f9:5f:bc:e8:bd:64:48:05: 43:51:c5:d1:9f:6c:8a:c1:f1:c9:8b:00:b2:48:1f:f2:99:ab: 45:47:c3:ec:f7:a9:5a:8b:fb:66:f2:52:44:61:e7:52:d4:33: 03:02:e3:86:ca:30:a3:ca:79:8f:45:ef:d5:5e:30:3a:2f:28: e0:13:d2:06:d5:4a:a4:6a:06:bf:65:83:ae:de:ed:2d:33:d1: 87:45:67:fa:84:88:6f:90:ea:3c:5f:d6:11:8d:96:d9:99:0c: cb:80:5f:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1LUcBdn0ZKGlGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjljMTAwNjAtNzA1Yy00NWFlLTkzN2ItNTQ0ODY0YjY3 MGQ3MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk OGQzNzA4ZmItNDJlZi00ZTg2LTgwY2UtNmFlZmUxODViOGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hexZ4eiI2h/vQ94V0YXr2hwK272cQZKuvgl lVDluCFRNNnrkIuQTBlOVI0+ibwVu5tQOO4rPEIpGi+Cc+cxAdyZci9AB/23Fi1e SDYStpx7OS8MLDATJ6+uP8onFnSbKA2Plv8YIXQXB6ScuAIrpa3aOJNWhV4s99Nu ycXzUG7O7cRP+GBybtkbpBppzotDCTkuP7vfFkx7ks6feLiDtxktppRByUduoGXM NdCRzNeVSdn1gNj9A00yEJ4fIzDskbBj7h7biKx+K8cDPXi27LdS9+YtMo9mFbWh tdBQnpLjUDtYfWkaOR6gGzo+Ny7KFJm7ezCBxbrgdqM1xsUtswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTgyRP7AruyCcWLy8RXbgqXcEA/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWMx MDA2MC03MDVjLTQ1YWUtOTM3Yi01NDQ4NjRiNjcwZDcvZDY1MTQ5NWItNmUwOC0z ZDgxLWE5MjgtYjUxN2NkMGNkNGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjljMTAwNjAtNzA1Yy00NWFlLTkz N2ItNTQ0ODY0YjY3MGQ3LzI5YzEwMDYwLTcwNWMtNDVhZS05MzdiLTU0NDg2NGI2 NzBkNy5jcmwwHwYDVR0jBBgwFoAUerujR0uJvb0x9xey3AKylKEuC8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWMxMDA2MC03MDVjLTQ1YWUtOTM3Yi01NDQ4 NjRiNjcwZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEfuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMgY1GzNqMPRbV2WeUn8exxiE/x0fpGeFQOkFtyJ0Cg4kttUthSm9Qgg NZbR27gZ3Sf/kZfOQYRaE1vU9cs7E0H6osDbSTJQjCuj5VPGChWwaVzDMsOG+dv3 S/ZmGouselZli1ppF9p3nOIdXwqQgqajGG8xpdJXRDoR0wuAOkDSSYbcZ2nkvZ6m q919qv/zSYl9Y0cNzW/D78X5X7zovWRIBUNRxdGfbIrB8cmLALJIH/KZq0VHw+z3 qVqL+2byUkRh51LUMwMC44bKMKPKeY9F79VeMDovKOAT0gbVSqRqBr9lg67e7S0z 0YdFZ/qEiG+Q6jxf1hGNltmZDMuAXws= -----END CERTIFICATE-----Generated at Mon Jun 16 03:42:34 2025 by rpki-client