$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/37677602-0a43-34e8-9622-a4ac56d7d1e8.roa File: 37677602-0a43-34e8-9622-a4ac56d7d1e8.roa (raw, json) Hash identifier: vv9n1CgHjrk2J0EChzWJzWV8HQSwhKT06SFQAgYkqf4= Subject key identifier: 6B:9D:52:4A:A5:8B:5F:F5:00:C5:B6:4E:BE:8D:5D:D1:F1:3D:4D:98 Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F432858498E647B93C932B0418102BF40 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/37677602-0a43-34e8-9622-a4ac56d7d1e8.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 14618 IP address blocks: 64.52.111.0/24 maxlen: 24 192.153.76.0/24 maxlen: 24 199.201.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:7b:93:c9:32:b0:41:81:02:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=337d3b56-c564-434a-8c98-e7b9ecece37c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6c:7f:e0:43:f5:1c:5c:70:3c:b6:38:8d:a2: f8:e0:b1:01:61:d3:31:af:99:5f:f4:af:24:e1:07: cf:ca:92:f6:d1:6f:2e:12:15:64:8d:2e:98:8f:b6: 13:cb:5b:28:7e:48:8d:85:29:51:94:4a:0c:31:81: 2d:97:5a:bf:d5:50:fe:ea:0a:5a:2b:56:36:6f:84: dc:fe:0f:2e:42:15:62:ca:07:83:00:2c:b2:3a:b7: 1f:14:29:ca:b4:3b:90:3b:65:66:a2:82:47:25:37: 6c:89:65:d8:6f:24:a3:99:ff:5e:31:89:77:c9:64: 3b:7a:2e:74:f4:11:b9:b4:e8:2a:2b:81:d6:47:e6: 13:1c:2c:76:26:a1:f7:d9:df:45:b7:cc:2f:84:45: df:a4:c7:79:16:f7:52:be:4e:f4:76:bc:ff:2f:85: 47:81:4b:69:ca:17:8b:1b:52:e9:c8:67:52:9c:21: 7a:10:96:9c:15:f8:da:e9:7d:cc:32:32:d6:39:b2: 74:25:d8:0d:dd:a5:c2:50:85:3c:28:25:66:e9:ae: f7:e6:3e:ff:33:f9:80:0c:75:f1:04:c4:4e:11:61: 9b:dc:f6:5a:73:a6:11:0d:5f:0a:97:c0:ab:ad:86: 55:f6:19:f5:a5:92:30:ba:1d:13:3e:69:04:7d:da: f1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9D:52:4A:A5:8B:5F:F5:00:C5:B6:4E:BE:8D:5D:D1:F1:3D:4D:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/37677602-0a43-34e8-9622-a4ac56d7d1e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 64.52.111.0/24 192.153.76.0/24 199.201.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:c4:2a:e3:79:5d:f2:da:46:08:69:2b:fe:1d:5f:a5:b2:f6: ef:c2:88:8e:0a:47:a9:54:f6:96:90:19:7f:f0:de:6d:1c:3e: 75:e6:31:0b:4a:cd:4c:d2:e7:58:d9:b4:40:6a:93:96:2c:96: 19:0e:bf:50:2e:af:7c:8a:e3:7a:fb:fd:3a:50:ea:49:a8:ed: 43:6e:e1:01:b1:b9:b0:ad:77:b5:32:13:86:dc:55:dc:3c:ef: 9e:06:5a:be:6d:9d:90:70:e7:fc:b6:b8:8c:40:15:65:49:0c: be:ea:bf:24:85:30:7d:fe:7e:8f:03:51:c7:90:b6:e2:c9:3a: e6:a7:ca:d0:60:3f:f6:10:0c:20:ef:1f:46:32:24:de:68:f5: ab:e5:e2:ef:ec:40:be:3d:d9:27:db:f7:d5:2b:eb:29:b0:a0: 2b:f2:31:0e:68:82:dd:5e:21:d2:61:a3:6d:ea:50:d7:45:c3: 75:34:71:ea:6c:9b:f3:89:54:a7:33:46:b6:26:b6:86:ac:f0: 9c:c5:64:d5:52:ac:ed:8b:39:f6:0b:fa:ba:88:5c:4b:98:bd: e5:c8:b3:20:de:91:db:4b:62:41:fa:f3:6c:60:a9:36:2e:ec: 7d:41:cc:ae:8d:88:e4:37:0c:2e:ec:8d:a6:51:37:ae:af:04: cf:b7:80:fd -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEmOZHuTyTKwQYECv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk MzM3ZDNiNTYtYzU2NC00MzRhLThjOTgtZTdiOWVjZWNlMzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWx/4EP1HFxwPLY4jaL44LEBYdMxr5lf9K8k 4QfPypL20W8uEhVkjS6Yj7YTy1sofkiNhSlRlEoMMYEtl1q/1VD+6gpaK1Y2b4Tc /g8uQhViygeDACyyOrcfFCnKtDuQO2VmooJHJTdsiWXYbySjmf9eMYl3yWQ7ei50 9BG5tOgqK4HWR+YTHCx2JqH32d9Ft8wvhEXfpMd5FvdSvk70drz/L4VHgUtpyheL G1LpyGdSnCF6EJacFfja6X3MMjLWObJ0JdgN3aXCUIU8KCVm6a735j7/M/mADHXx BMROEWGb3PZac6YRDV8Kl8CrrYZV9hn1pZIwuh0TPmkEfdrxlwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFGudUkqli1/1AMW2Tr6NXdHxPU2YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvMzc2Nzc2MDItMGE0My0z NGU4LTk2MjItYTRhYzU2ZDdkMWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAQDRvAwQA wJlMAwQAx8l/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADnEKuN5XfLaRghpK/4dX6Wy9u/CiI4KR6lU9paQ GX/w3m0cPnXmMQtKzUzS51jZtEBqk5YslhkOv1Aur3yK43r7/TpQ6kmo7UNu4QGx ubCtd7UyE4bcVdw8754GWr5tnZBw5/y2uIxAFWVJDL7qvySFMH3+fo8DUceQtuLJ OuanytBgP/YQDCDvH0YyJN5o9avl4u/sQL492Sfb99Ur6ymwoCvyMQ5ogt1eIdJh o23qUNdFw3U0cepsm/OJVKczRrYmtoas8JzFZNVSrO2LOfYL+rqIXEuYveXIsyDe kdtLYkH682xgqTYu7H1BzK6NiOQ3DC7sjaZRN66vBM+3gP0= -----END CERTIFICATE-----Generated at Sat Apr 26 13:17:54 2025 by rpki-client