$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa File: 8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa (raw, json) Hash identifier: 1jqW+LrE39Sb6HXnvE+mKk2dPjFL2XWpLVmRzM+VJzk= Subject key identifier: FC:A9:FB:BB:45:07:3A:58:BD:F4:AA:9D:D7:17:75:7A:8C:B6:FF:B3 Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F43285848E0065FE7673E81C2B61EE280 Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 16509 IP address blocks: 64.29.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:5f:e7:67:3e:81:c2:b6:1e:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=aa3aaf76-8390-4f2e-8c10-f36787b5dc70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:17:55:31:96:76:ef:8e:38:9b:cb:30:a2:a5: 44:7c:97:b0:16:4d:26:cc:77:22:99:a0:b0:47:c7: cc:c2:3e:83:df:be:f7:84:b8:be:b3:d6:62:b9:bb: 85:3f:b8:16:62:05:25:a4:94:a8:79:28:10:c8:fe: 24:81:55:de:7e:99:6e:4d:15:c3:fb:63:79:ff:20: f4:b4:85:61:4d:64:85:d1:11:70:07:fd:a8:85:b4: 80:a6:7e:46:f9:1f:f3:2a:0f:ab:85:b7:92:a9:5b: 8f:71:92:36:f3:04:66:82:fa:7e:ae:c7:0f:2c:64: 34:9e:ac:f7:a5:72:e7:b0:82:7a:6d:61:b7:eb:c8: 29:84:a4:84:da:f3:d0:c6:23:3e:fb:b7:90:3c:74: f4:dd:21:9c:fd:97:a5:c2:aa:ad:d9:fe:6e:da:4b: 70:2e:d1:60:65:34:d4:3c:5a:b9:76:2c:59:db:ef: 2d:36:4f:55:e9:19:99:ad:f8:14:fd:02:f2:fd:8d: 55:45:87:6e:45:73:2e:d3:d2:ff:8a:c6:a0:b1:cb: 3a:bd:7c:f6:7c:dd:fa:f9:c5:80:bd:6c:66:5d:91: 93:aa:77:3c:49:9d:13:23:94:3a:4d:95:60:9f:eb: 7f:e2:2b:46:86:c1:40:ba:0e:da:62:ef:9e:23:8c: ef:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A9:FB:BB:45:07:3A:58:BD:F4:AA:9D:D7:17:75:7A:8C:B6:FF:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv4: 64.29.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:b9:e8:f8:36:46:30:0a:ef:b2:9a:18:1b:94:92:13:6e:20: 4b:99:76:39:db:e3:55:55:01:45:a3:b5:d7:b8:17:92:2f:a0: 7c:d8:df:16:5a:a4:fe:c7:08:1e:42:f0:aa:7b:c7:67:90:ad: b7:f3:cc:ed:8f:47:90:5e:58:d1:b4:49:81:e6:28:41:3e:a2: 53:87:65:80:73:a6:e7:2d:79:44:eb:4f:67:72:7d:d2:f7:82: 45:14:fd:48:c8:f9:0c:4d:43:a1:74:bf:c9:05:ff:80:9f:8d: a0:ce:9a:c5:c3:04:65:86:ef:a1:af:ea:c9:cb:27:e5:8a:4b: 66:23:27:9a:1f:b7:51:2b:50:0d:25:1f:0c:11:fc:0c:7a:19: d2:38:87:de:3c:57:42:46:4d:8e:6c:a3:dd:46:05:a2:ed:3e: ed:42:23:4e:70:9e:18:63:de:74:d5:9b:ff:55:71:5f:d1:3f: 1c:3c:7c:ef:c0:03:63:b7:b7:dc:3a:48:53:57:a2:1e:9e:ef: 84:8b:40:10:d5:f9:f0:f8:d7:b9:9b:88:f2:8a:ed:ae:ee:08: 8f:16:76:e0:75:20:6c:84:ce:be:50:4a:cc:dc:0a:a9:ff:c9: 1e:73:32:aa:b6:f8:40:1a:fa:c1:89:88:9e:f7:fe:cd:02:88: 29:a7:53:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBl/nZz6BwrYe4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk YWEzYWFmNzYtODM5MC00ZjJlLThjMTAtZjM2Nzg3YjVkYzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBdVMZZ27444m8swoqVEfJewFk0mzHcimaCw R8fMwj6D3773hLi+s9ZiubuFP7gWYgUlpJSoeSgQyP4kgVXefpluTRXD+2N5/yD0 tIVhTWSF0RFwB/2ohbSApn5G+R/zKg+rhbeSqVuPcZI28wRmgvp+rscPLGQ0nqz3 pXLnsIJ6bWG368gphKSE2vPQxiM++7eQPHT03SGc/Zelwqqt2f5u2ktwLtFgZTTU PFq5dixZ2+8tNk9V6RmZrfgU/QLy/Y1VRYduRXMu09L/isagscs6vXz2fN36+cWA vWxmXZGTqnc8SZ0TI5Q6TZVgn+t/4itGhsFAug7aYu+eI4zvMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyp+7tFBzpYvfSqndcXdXqMtv+zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvOGE1YjhiMzgtZDRiNy0z YjQ4LWE4YWMtZWYyOTM4YjExOTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQB0RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANy56Pg2RjAK77KaGBuUkhNuIEuZdjnb41VVAUWjtde4F5IvoHzY3xZa pP7HCB5C8Kp7x2eQrbfzzO2PR5BeWNG0SYHmKEE+olOHZYBzpucteUTrT2dyfdL3 gkUU/UjI+QxNQ6F0v8kF/4CfjaDOmsXDBGWG76Gv6snLJ+WKS2YjJ5oft1ErUA0l HwwR/Ax6GdI4h948V0JGTY5so91GBaLtPu1CI05wnhhj3nTVm/9VcV/RPxw8fO/A A2O3t9w6SFNXoh6e74SLQBDV+fD417mbiPKK7a7uCI8WduB1IGyEzr5QSszcCqn/ yR5zMqq2+EAa+sGJiJ73/s0CiCmnU0w= -----END CERTIFICATE-----Generated at Sat Apr 26 14:53:27 2025 by rpki-client