$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/cadfb715-8e26-3e18-83e8-8fb22e97789c.roa File: cadfb715-8e26-3e18-83e8-8fb22e97789c.roa (raw, json) Hash identifier: R5bXwQM3VarbwXNSBLJmdTmquzkgN6ZwZwey6sSkm/g= Subject key identifier: BA:E1:5B:D7:37:A0:55:C3:AD:F9:7F:F7:33:BB:48:22:B6:F1:F7:69 Certificate issuer: /CN=a920645f-6928-416c-87e9-a0135e5720e4 Certificate serial: 010D0C9F432858492CAE807822C28EA444B2A900 Authority key identifier: 0E:7A:36:95:23:AE:89:31:10:84:05:B7:7D:52:6F:5F:91:94:48:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/cadfb715-8e26-3e18-83e8-8fb22e97789c.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 13657 IP address blocks: 67.215.192.0/20 maxlen: 24 104.242.0.0/17 maxlen: 24 216.235.0.0/20 maxlen: 24 2001:4900::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/a920645f-6928-416c-87e9-a0135e5720e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/a920645f-6928-416c-87e9-a0135e5720e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:80:78:22:c2:8e:a4:44:b2:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a920645f-6928-416c-87e9-a0135e5720e4 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=4d1d9b28-b71c-45d6-8a44-4d63a1443d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b1:fa:35:1d:b7:f6:df:93:48:14:a8:71:2a: b8:41:44:2d:bc:07:c3:5b:5b:d0:d8:4f:d2:7c:7a: 4d:cc:de:ba:f6:e8:03:4f:30:60:fc:92:c1:2c:0b: c9:0f:e1:6e:04:2b:21:fc:55:ba:eb:f1:6e:3d:92: 8f:1c:6c:ad:da:63:d3:9c:e5:1d:06:dc:e8:b2:a1: 72:dd:c5:0e:d2:69:ae:b7:24:42:34:1b:29:f1:6e: af:df:23:3a:73:31:1b:fe:c6:b4:86:ee:8e:6c:c4: 82:d3:6a:64:e8:6f:4a:eb:aa:6b:10:41:81:71:11: 1f:53:bb:6a:d5:18:4e:7e:9a:10:b5:af:34:fe:16: 30:fa:d1:1b:bf:80:56:41:eb:66:8a:14:39:ca:8c: 17:28:e4:6e:6f:ce:80:58:12:49:06:46:60:50:2a: 94:ce:91:2c:d4:ef:55:e4:b2:4a:45:c2:28:55:87: 1e:53:4c:45:4a:c8:ef:e1:d2:67:1b:16:96:f9:5d: 55:71:56:3d:7a:38:57:29:49:90:41:ca:fa:2c:7d: 5c:75:6d:82:65:8b:56:88:b7:19:54:37:54:f0:1e: a9:f5:46:ce:b9:3f:ca:20:6b:c3:2c:25:bb:3e:60: c0:8a:5c:83:53:a0:8b:b0:15:18:81:39:d4:84:26: 0b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E1:5B:D7:37:A0:55:C3:AD:F9:7F:F7:33:BB:48:22:B6:F1:F7:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/cadfb715-8e26-3e18-83e8-8fb22e97789c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/a920645f-6928-416c-87e9-a0135e5720e4.crl X509v3 Authority Key Identifier: keyid:0E:7A:36:95:23:AE:89:31:10:84:05:B7:7D:52:6F:5F:91:94:48:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer sbgp-ipAddrBlock: critical IPv4: 67.215.192.0/20 104.242.0.0/17 216.235.0.0/20 IPv6: 2001:4900::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:44:29:dd:44:f5:0a:20:81:6f:a6:76:ab:b9:f6:d1:0c:0c: 01:1e:8f:bb:3c:52:e7:5f:4e:4c:49:bc:01:e4:c7:e0:ce:43: 61:f8:97:ab:04:a5:eb:0c:0e:59:d7:b0:b3:35:eb:d1:c9:ab: 7b:75:4a:d3:1f:b3:58:99:0a:28:4b:e0:df:12:d0:65:fe:74: 75:61:fd:91:6f:d2:c9:42:d5:5d:2a:ee:67:29:2d:82:bd:76: 6d:ea:92:a0:fa:7b:c4:9c:ca:58:d3:6f:8b:f1:6b:f5:a0:ae: 64:db:45:0f:33:b3:41:c3:41:98:fa:7b:e0:f7:ff:78:56:7c: dc:9c:1a:67:96:96:8b:6b:48:f9:c3:3a:5a:fb:59:26:65:ce: 6e:e9:d9:d2:c2:c2:ae:9b:cc:34:58:b9:5f:be:a4:8c:36:ac: c2:33:1f:6b:66:72:2a:09:35:f4:85:a9:07:9b:da:c5:ee:e2: 2b:c4:e9:ca:a6:0f:22:7f:51:60:58:05:d8:d6:00:d9:06:6f: 9b:16:81:aa:56:19:2e:4d:db:b2:fb:1d:75:b9:b5:14:c5:50: 7a:c0:f5:89:ff:26:58:55:99:60:2b:2b:80:76:af:c8:2c:80: 30:c5:26:47:2c:10:b6:b2:60:44:7b:f4:66:64:d6:f1:13:55: 5e:2b:91:24 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEksroB4IsKOpESyqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkyMDY0NWYtNjkyOC00MTZjLTg3ZTktYTAxMzVlNTcy MGU0MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NGQxZDliMjgtYjcxYy00NWQ2LThhNDQtNGQ2M2ExNDQzZDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbH6NR239t+TSBSocSq4QUQtvAfDW1vQ2E/S fHpNzN669ugDTzBg/JLBLAvJD+FuBCsh/FW66/FuPZKPHGyt2mPTnOUdBtzosqFy 3cUO0mmutyRCNBsp8W6v3yM6czEb/sa0hu6ObMSC02pk6G9K66prEEGBcREfU7tq 1RhOfpoQta80/hYw+tEbv4BWQetmihQ5yowXKORub86AWBJJBkZgUCqUzpEs1O9V 5LJKRcIoVYceU0xFSsjv4dJnGxaW+V1VcVY9ejhXKUmQQcr6LH1cdW2CZYtWiLcZ VDdU8B6p9UbOuT/KIGvDLCW7PmDAilyDU6CLsBUYgTnUhCYLzwIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFLrhW9c3oFXDrfl/9zO7SCK28fdpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hOTIw NjQ1Zi02OTI4LTQxNmMtODdlOS1hMDEzNWU1NzIwZTQvY2FkZmI3MTUtOGUyNi0z ZTE4LTgzZTgtOGZiMjJlOTc3ODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTkyMDY0NWYtNjkyOC00MTZjLTg3 ZTktYTAxMzVlNTcyMGU0L2E5MjA2NDVmLTY5MjgtNDE2Yy04N2U5LWEwMTM1ZTU3 MjBlNC5jcmwwHwYDVR0jBBgwFoAUDno2lSOuiTEQhAW3fVJvX5GUSCkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hOTIwNjQ1Zi02OTI4LTQxNmMtODdlOS1hMDEz NWU1NzIwZTQuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEQ9fAAwQH aPIAAwQE2OsAMA0EAgACMAcDBQAgAUkAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIZEKd1E9QoggW+mdqu5 9tEMDAEej7s8UudfTkxJvAHkx+DOQ2H4l6sEpesMDlnXsLM169HJq3t1StMfs1iZ CihL4N8S0GX+dHVh/ZFv0slC1V0q7mcpLYK9dm3qkqD6e8ScyljTb4vxa/WgrmTb RQ8zs0HDQZj6e+D3/3hWfNycGmeWlotrSPnDOlr7WSZlzm7p2dLCwq6bzDRYuV++ pIw2rMIzH2tmcioJNfSFqQeb2sXu4ivE6cqmDyJ/UWBYBdjWANkGb5sWgapWGS5N 27L7HXW5tRTFUHrA9Yn/JlhVmWArK4B2r8gsgDDFJkcsELayYER79GZk1vETVV4r kSQ= -----END CERTIFICATE-----Generated at Wed Apr 30 21:17:10 2025 by rpki-client