$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/589e3e61-8fae-384e-99a0-011c39c08dbb.roa File: 589e3e61-8fae-384e-99a0-011c39c08dbb.roa (raw, json) Hash identifier: gTxS5SKTRik98sGboYEGVPOZUTraYb8xSSLPkDYvpCs= Subject key identifier: 30:71:AF:FD:DA:08:26:DE:2D:79:11:06:88:45:46:CC:74:5C:11:00 Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F432858498E647BD3C1F6F3E9F0544A00 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/589e3e61-8fae-384e-99a0-011c39c08dbb.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 16509 IP address blocks: 64.52.111.0/24 maxlen: 24 192.153.76.0/24 maxlen: 24 199.201.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:7b:d3:c1:f6:f3:e9:f0:54:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=3a8f58e5-5df1-4fc6-9034-c7a314d0cc4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1d:74:4e:49:ed:fb:96:10:b6:4b:18:ef:e6: 68:41:2b:65:97:ac:18:bd:35:1b:75:c8:2e:f0:2b: fb:ea:47:72:0d:fe:20:1d:9a:bb:ec:f1:c9:a4:35: 82:0b:5f:21:ec:2b:45:cc:20:f9:4e:9c:86:c4:20: 5d:cb:0a:58:06:8a:49:ef:b2:eb:55:81:e0:bf:5d: 1a:a9:7f:f3:d8:48:35:36:4d:6c:2a:3f:7d:d6:26: 7e:70:c2:ef:d3:73:35:bc:1f:b5:0d:67:59:ad:46: be:fd:ad:c3:86:78:62:1c:34:a6:69:c9:8e:9a:57: 5b:cf:86:28:6d:e2:59:ce:07:a0:d3:4e:07:e4:2a: 55:e3:0d:4c:05:2c:44:ac:4e:49:d3:01:d5:20:7a: ab:3f:d1:93:d1:c4:5e:29:a4:d5:fe:22:37:a9:9b: db:05:63:94:4f:8d:d2:a2:50:c6:fb:31:b1:80:8c: 08:26:ae:34:bd:2d:ca:02:46:54:88:29:b6:15:9b: b7:fd:7a:fa:ea:2c:15:06:29:1f:7e:c9:e6:81:fa: 70:52:c3:6a:0a:53:7d:40:1b:3f:28:5d:78:8c:ba: 6f:28:9a:6b:ce:cb:1f:ca:15:43:e5:a2:25:51:5a: ff:32:4d:0e:01:a5:12:d3:25:4b:26:00:c8:24:87: 47:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:71:AF:FD:DA:08:26:DE:2D:79:11:06:88:45:46:CC:74:5C:11:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/589e3e61-8fae-384e-99a0-011c39c08dbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 64.52.111.0/24 192.153.76.0/24 199.201.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:ff:11:86:7f:b6:33:ed:26:b7:3d:18:75:f7:e6:3d:ec:a8: 9d:76:b7:68:45:85:7a:ea:4b:4d:17:57:e5:84:9e:87:88:52: 91:87:de:fd:41:d5:0e:9d:69:29:5f:c9:a3:e1:2f:50:06:ef: 1b:e5:0b:39:ff:31:77:7b:fa:d0:28:68:53:20:ad:34:92:eb: 9d:ec:f4:d4:04:60:74:72:2f:23:20:df:0a:ca:7f:cb:d7:2e: d8:2d:31:f1:1d:b4:b4:b1:a6:e8:0f:f6:f8:61:23:2f:03:66: e1:e7:d5:3a:e8:b7:4b:20:7f:5f:86:8c:95:d0:9c:17:8d:09: cf:1f:a0:1c:1d:d4:92:12:02:da:30:77:57:cf:d0:c9:87:75: 69:50:f6:80:97:0e:45:79:40:54:b5:37:53:60:5b:ed:91:3f: f6:ca:2c:36:f0:09:7d:33:65:98:69:1f:df:24:55:4a:91:b0: 63:59:60:84:fa:b7:48:76:ad:29:da:57:0a:27:1f:53:6c:55: bc:c7:6a:2a:39:90:f5:d0:c4:76:c2:7c:f9:7d:40:1a:36:aa: ea:2d:e0:54:7a:bc:62:55:b2:d4:83:e5:e3:f4:b4:28:35:85: a2:3b:23:57:e0:49:98:ea:0d:ee:70:7f:15:45:d6:d2:31:89: f9:25:c8:d5 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEmOZHvTwfbz6fBUSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk M2E4ZjU4ZTUtNWRmMS00ZmM2LTkwMzQtYzdhMzE0ZDBjYzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4h10Tknt+5YQtksY7+ZoQStll6wYvTUbdcgu 8Cv76kdyDf4gHZq77PHJpDWCC18h7CtFzCD5TpyGxCBdywpYBopJ77LrVYHgv10a qX/z2Eg1Nk1sKj991iZ+cMLv03M1vB+1DWdZrUa+/a3DhnhiHDSmacmOmldbz4Yo beJZzgeg004H5CpV4w1MBSxErE5J0wHVIHqrP9GT0cReKaTV/iI3qZvbBWOUT43S olDG+zGxgIwIJq40vS3KAkZUiCm2FZu3/Xr66iwVBikffsnmgfpwUsNqClN9QBs/ KF14jLpvKJprzssfyhVD5aIlUVr/Mk0OAaUS0yVLJgDIJIdH2QIDAQABo4IDYTCC A10wHQYDVR0OBBYEFDBxr/3aCCbeLXkRBohFRsx0XBEAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvNTg5ZTNlNjEtOGZhZS0z ODRlLTk5YTAtMDExYzM5YzA4ZGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAQDRvAwQA wJlMAwQAx8l/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFT/EYZ/tjPtJrc9GHX35j3sqJ12t2hFhXrqS00X V+WEnoeIUpGH3v1B1Q6daSlfyaPhL1AG7xvlCzn/MXd7+tAoaFMgrTSS653s9NQE YHRyLyMg3wrKf8vXLtgtMfEdtLSxpugP9vhhIy8DZuHn1Trot0sgf1+GjJXQnBeN Cc8foBwd1JISAtowd1fP0MmHdWlQ9oCXDkV5QFS1N1NgW+2RP/bKLDbwCX0zZZhp H98kVUqRsGNZYIT6t0h2rSnaVwonH1NsVbzHaio5kPXQxHbCfPl9QBo2quot4FR6 vGJVstSD5eP0tCg1haI7I1fgSZjqDe5wfxVF1tIxifklyNU= -----END CERTIFICATE-----Generated at Sun Apr 27 09:18:38 2025 by rpki-client