$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/aa1ef16a-31d8-3a69-a070-8a6f086b417b.roa File: aa1ef16a-31d8-3a69-a070-8a6f086b417b.roa (raw, json) Hash identifier: Cl8+6J4cTDitHgIEZ6dM9O53sLXQFvKm3wSLy4ibwXE= Subject key identifier: BD:81:5F:83:E0:10:C7:8B:FA:FB:3C:8D:B7:3B:4C:EE:8D:77:B2:37 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858493C093E7C6F3BF44C0D2D1580 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/aa1ef16a-31d8-3a69-a070-8a6f086b417b.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 15204 IP address blocks: 64.33.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:3e:7c:6f:3b:f4:4c:0d:2d:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=e8a9ae65-8013-4cc5-943b-8b2df2aa6c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:10:98:8a:bb:47:1d:18:34:ef:1c:a7:1b:f4: fd:1d:da:da:3b:47:4e:0b:08:31:87:13:eb:bc:ee: 4d:d7:fb:a0:47:ee:dd:00:d7:7c:d4:17:d4:b0:d0: da:3f:f5:f3:90:a0:54:38:a1:3e:00:22:75:cd:79: 93:37:dc:96:ce:99:53:5f:de:0b:b7:86:6d:ee:a0: 16:22:b7:89:6a:a5:fe:cf:ae:15:fd:fc:35:72:93: ab:19:7f:73:04:1b:15:9d:b1:75:3e:8c:0d:70:24: 5c:d6:6c:c1:8a:9a:ad:2e:a5:3a:3a:fb:ca:34:f7: c1:e2:64:aa:01:66:60:f8:03:8f:e0:bc:78:07:88: e7:75:d5:f7:a0:31:a1:41:1d:25:ff:47:1f:38:3a: 60:0b:f1:f4:79:8a:61:cb:04:02:83:85:56:57:8b: 05:9b:5d:c7:93:7f:0e:f7:8a:7e:d2:18:ae:ec:60: 60:05:3c:bc:4b:2c:43:c7:46:45:31:61:97:de:9a: 3b:07:f9:ac:52:3c:29:44:31:3d:95:b6:2b:1c:5b: 21:be:71:2d:d3:bc:b2:69:12:9c:f3:db:00:81:6e: 81:11:71:2c:48:98:ff:16:f9:9c:11:66:57:47:4c: 8c:30:94:d3:96:cb:b8:83:ec:ff:09:b3:a6:14:81: 32:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:81:5F:83:E0:10:C7:8B:FA:FB:3C:8D:B7:3B:4C:EE:8D:77:B2:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/aa1ef16a-31d8-3a69-a070-8a6f086b417b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:51:03:6f:dd:31:87:9a:a7:a9:e0:fd:3f:91:32:6d:78:70: ef:c3:12:aa:5a:40:84:3d:e2:ba:bf:f1:ba:5a:fd:96:ee:3f: d1:5e:d1:3c:02:34:f8:57:f0:a5:b7:75:df:5d:d2:c9:3b:42: ee:06:ea:b4:25:20:6d:26:39:c2:2c:ea:f5:e7:ab:cf:3b:90: 4c:69:8a:0f:8c:e8:65:aa:39:e1:6e:e4:02:ea:21:c7:b8:b8: f9:b8:d8:c2:ea:45:7b:fa:3b:43:3a:67:aa:f0:eb:33:40:04: a1:9f:4d:d1:65:b2:aa:35:2f:f1:e2:e5:7f:36:61:f7:75:e3: 24:ec:5f:68:f9:a9:11:56:e8:20:7c:8e:74:ea:57:d8:28:8b: dc:b3:53:05:73:85:50:ae:c6:d0:3a:e3:ff:95:86:73:b5:e1: d6:3e:81:6e:54:49:cc:ff:dc:54:22:42:55:4d:59:0e:f5:db: 30:90:1d:46:a3:41:9a:d8:21:c4:e0:f6:88:54:92:b1:a5:c0: b9:a8:a9:77:56:1c:be:2d:ee:08:b9:cd:46:32:cd:45:be:e3: a7:39:00:3e:52:39:d3:5f:0c:1f:d1:bd:ad:45:70:e9:29:bd: d4:d5:c4:5c:8a:84:3d:02:1c:b8:6c:13:b8:3b:75:b6:a6:e6: 67:b7:ab:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CT58bzv0TA0tFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZThhOWFlNjUtODAxMy00Y2M1LTk0M2ItOGIyZGYyYWE2Yzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixCYirtHHRg07xynG/T9HdraO0dOCwgxhxPr vO5N1/ugR+7dANd81BfUsNDaP/XzkKBUOKE+ACJ1zXmTN9yWzplTX94Lt4Zt7qAW IreJaqX+z64V/fw1cpOrGX9zBBsVnbF1PowNcCRc1mzBipqtLqU6OvvKNPfB4mSq AWZg+AOP4Lx4B4jnddX3oDGhQR0l/0cfODpgC/H0eYphywQCg4VWV4sFm13Hk38O 94p+0hiu7GBgBTy8SyxDx0ZFMWGX3po7B/msUjwpRDE9lbYrHFshvnEt07yyaRKc 89sAgW6BEXEsSJj/FvmcEWZXR0yMMJTTlsu4g+z/CbOmFIEyPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2BX4PgEMeL+vs8jbc7TO6Nd7I3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYWExZWYxNmEtMzFkOC0z YTY5LWEwNzAtOGE2ZjA4NmI0MTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQCHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpRA2/dMYeap6ng/T+RMm14cO/DEqpaQIQ94rq/8bpa/ZbuP9Fe0TwC NPhX8KW3dd9d0sk7Qu4G6rQlIG0mOcIs6vXnq887kExpig+M6GWqOeFu5ALqIce4 uPm42MLqRXv6O0M6Z6rw6zNABKGfTdFlsqo1L/Hi5X82Yfd14yTsX2j5qRFW6CB8 jnTqV9goi9yzUwVzhVCuxtA64/+VhnO14dY+gW5UScz/3FQiQlVNWQ712zCQHUaj QZrYIcTg9ohUkrGlwLmoqXdWHL4t7gi5zUYyzUW+46c5AD5SOdNfDB/Rva1FcOkp vdTVxFyKhD0CHLhsE7g7dbam5me3q+8= -----END CERTIFICATE-----Generated at Mon Apr 28 09:18:40 2025 by rpki-client