$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa File: 3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa (raw, json) Hash identifier: pvaHqsWSRYrT88Pp6vnPAm9js+0A0WoyF9MwBSpTtjg= Subject key identifier: D4:85:75:62:F6:75:57:DE:35:B4:28:C3:CD:DE:98:05:3B:24:56:90 Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F4328584902EC06A866592F736219AEC0 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 14618 IP address blocks: 64.52.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:06:a8:66:59:2f:73:62:19:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=4a3e2b50-0c5d-41a0-ab0a-cacd33f8cdef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4d:74:e5:ab:38:ff:7d:98:48:8b:d6:f4:ae: 4b:61:89:22:0a:7e:88:36:2b:86:31:f5:ff:86:1e: 82:5f:26:50:63:0c:61:bb:d0:bd:af:61:76:3a:a3: ff:56:9a:7a:be:bb:3c:5b:aa:6f:1a:e3:3b:e7:59: 1e:51:b2:8b:5c:14:71:50:b8:96:51:72:3e:eb:73: a4:9b:c2:81:63:e2:3a:9d:4f:e5:f1:e2:ea:d7:05: 5a:6e:94:64:83:50:fe:10:12:56:00:66:2e:25:aa: 75:7f:78:11:1d:04:02:f3:9d:4f:82:cd:c3:cb:aa: dd:0d:4d:c6:85:6e:54:10:46:49:80:2a:28:a2:34: 76:44:70:a4:5f:41:86:32:42:d7:dd:52:83:94:74: 68:a0:6e:58:6f:9c:09:5e:bb:26:4b:5d:c3:1e:27: f3:1e:64:64:32:71:69:68:b4:cc:75:5c:13:81:65: 18:65:fa:6c:35:83:42:f0:4b:d1:d1:fb:4a:7d:96: de:5a:81:81:5e:cb:a5:5b:c2:47:e9:5e:e1:b8:c5: bd:92:61:6d:cd:5c:83:a1:02:72:95:f1:4b:d7:46: 19:8a:2a:e9:cb:e2:03:47:7c:71:54:b7:17:6e:e3: 45:63:71:a3:ac:ee:2a:32:06:a6:4c:a1:b8:8d:3c: 70:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:85:75:62:F6:75:57:DE:35:B4:28:C3:CD:DE:98:05:3B:24:56:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 64.52.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:b1:24:6c:9e:12:22:c2:fd:bc:9a:d4:de:ac:e7:8d:6d:3c: a5:fd:73:74:b0:44:cf:0f:0c:68:19:30:f4:d3:c4:58:24:4d: 3c:17:9e:ce:df:10:fb:49:33:42:fb:ca:c5:31:cf:92:54:89: 9b:ca:2e:d1:8e:dc:c1:65:34:58:3a:4e:ee:7b:ae:6e:65:18: cc:1b:ac:1b:1c:40:f8:be:70:01:88:2d:ac:91:1c:83:97:ec: 79:d5:49:5a:75:95:c0:c9:94:cd:8d:75:db:bc:c0:83:9d:02: 29:c8:03:86:86:c7:12:8d:af:e5:dc:52:0e:1c:f1:f1:98:c7: db:98:03:9b:2b:00:10:2a:e7:fd:1e:b3:6f:51:47:a8:0e:8c: 95:9d:c8:d3:73:b1:e5:16:eb:44:f7:c5:f3:db:0e:21:19:32: 5a:f8:9a:cc:b0:30:22:06:55:06:4b:05:6f:cf:67:f8:3e:e1: ee:27:f7:d6:a3:48:fd:d2:0d:36:ad:89:9f:d6:3f:13:cc:7b: b1:5c:7d:df:97:e9:61:7c:3e:26:60:fd:e1:9d:d1:f7:fc:d7: 74:e2:76:ed:98:43:cb:a6:50:3f:d2:70:0c:b6:03:4e:82:41: c6:c5:64:65:38:43:6f:32:59:25:3a:72:d6:64:32:83:0a:d3: f2:d1:fa:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7AaoZlkvc2IZrsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk NGEzZTJiNTAtMGM1ZC00MWEwLWFiMGEtY2FjZDMzZjhjZGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU105as4/32YSIvW9K5LYYkiCn6INiuGMfX/ hh6CXyZQYwxhu9C9r2F2OqP/Vpp6vrs8W6pvGuM751keUbKLXBRxULiWUXI+63Ok m8KBY+I6nU/l8eLq1wVabpRkg1D+EBJWAGYuJap1f3gRHQQC851Pgs3Dy6rdDU3G hW5UEEZJgCooojR2RHCkX0GGMkLX3VKDlHRooG5Yb5wJXrsmS13DHifzHmRkMnFp aLTMdVwTgWUYZfpsNYNC8EvR0ftKfZbeWoGBXsulW8JH6V7huMW9kmFtzVyDoQJy lfFL10YZiirpy+IDR3xxVLcXbuNFY3GjrO4qMgamTKG4jTxwwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSFdWL2dVfeNbQow83emAU7JFaQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvM2YxZDVlMDgtOWE1Ny0z YjFmLWEyZDktOWRhMDNjZDhhYWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDRvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqxJGyeEiLC/bya1N6s541tPKX9c3SwRM8PDGgZMPTTxFgkTTwXns7f EPtJM0L7ysUxz5JUiZvKLtGO3MFlNFg6Tu57rm5lGMwbrBscQPi+cAGILayRHIOX 7HnVSVp1lcDJlM2Nddu8wIOdAinIA4aGxxKNr+XcUg4c8fGYx9uYA5srABAq5/0e s29RR6gOjJWdyNNzseUW60T3xfPbDiEZMlr4msywMCIGVQZLBW/PZ/g+4e4n99aj SP3SDTatiZ/WPxPMe7Fcfd+X6WF8PiZg/eGd0ff813Tidu2YQ8umUD/ScAy2A06C QcbFZGU4Q28yWSU6ctZkMoMK0/LR+iA= -----END CERTIFICATE-----Generated at Sat Apr 26 13:15:58 2025 by rpki-client