$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/c93aa5cc-9725-3304-9f64-6159a1070c5c.roa File: c93aa5cc-9725-3304-9f64-6159a1070c5c.roa (raw, json) Hash identifier: uqgN6rHDWmRiPJiP0NkFrrNwrvVHgjLMmZnKKcQrdW8= Subject key identifier: 74:DD:0C:E2:0B:3E:89:2A:EB:FD:58:C1:14:3A:21:BC:6A:1D:A4:EA Certificate issuer: /CN=64c213c7-4c1a-4187-a879-90c9062e05d4 Certificate serial: 010D0C9F43285849BDDA26961DBA594275E48800 Authority key identifier: B3:85:5A:3D:68:5C:E2:2C:82:25:29:3C:F2:08:EF:89:03:C0:8A:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/c93aa5cc-9725-3304-9f64-6159a1070c5c.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 8075 IP address blocks: 198.252.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/64c213c7-4c1a-4187-a879-90c9062e05d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/64c213c7-4c1a-4187-a879-90c9062e05d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:26:96:1d:ba:59:42:75:e4:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64c213c7-4c1a-4187-a879-90c9062e05d4 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=f73c060d-2793-4abb-9b44-04623c08249b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:02:fd:91:15:27:c2:5b:39:1a:bb:f8:5a:1b: 29:64:0f:24:34:2d:da:cc:91:73:ab:9d:67:73:e0: 0e:90:bc:64:66:4b:33:4a:3d:3a:bc:c3:f6:32:10: 60:0c:12:74:eb:7f:cc:a4:bc:b1:ee:9e:57:62:20: 6b:cc:f1:2a:4d:dc:02:eb:c4:52:b9:62:74:c3:2c: 8e:21:f0:9c:5f:0d:ca:74:e6:9d:57:11:3e:9d:52: 22:63:46:a3:04:b1:25:a9:04:46:ce:15:80:96:91: f7:1f:30:f5:46:14:bd:c8:88:bd:ed:a0:84:0e:98: 0e:69:bd:88:74:b1:43:85:f2:11:86:e8:e1:fe:ed: 40:14:01:c4:4e:45:fe:67:17:2c:9f:e0:49:9d:35: 4f:d2:c8:d8:29:5e:e3:67:57:fd:c7:8b:a6:4f:8e: 48:3a:67:48:dd:86:a1:dc:cb:07:42:42:20:02:ac: e7:25:5a:29:1f:32:84:f9:13:ec:89:55:ba:45:69: 5f:95:c5:d9:cf:f3:4a:0f:53:e4:cb:92:58:fc:0c: 88:fe:18:67:82:a7:10:68:1e:e4:b2:29:73:26:01: 06:ef:a7:a6:be:c3:dc:e3:ca:7a:b6:4d:9c:58:5c: 00:95:63:7f:82:56:12:bd:e8:a8:aa:85:a0:cf:5d: f3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:DD:0C:E2:0B:3E:89:2A:EB:FD:58:C1:14:3A:21:BC:6A:1D:A4:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/c93aa5cc-9725-3304-9f64-6159a1070c5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/64c213c7-4c1a-4187-a879-90c9062e05d4.crl X509v3 Authority Key Identifier: keyid:B3:85:5A:3D:68:5C:E2:2C:82:25:29:3C:F2:08:EF:89:03:C0:8A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4.cer sbgp-ipAddrBlock: critical IPv4: 198.252.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:08:04:d3:76:e3:3d:63:fc:ab:57:0e:4c:05:b1:e0:e0:7e: a5:88:44:14:43:41:f3:b4:14:4c:02:9c:25:32:09:7e:1a:9f: fb:43:33:07:4e:a0:3d:3f:8a:f3:98:59:b3:35:f6:c2:f4:b6: 45:24:50:3f:f7:6d:3f:63:e8:40:6a:94:e7:9e:d0:84:87:bf: 2c:f6:ca:4d:5a:c3:35:45:b4:d4:8e:ee:1e:92:83:43:a6:ec: e0:0b:ea:85:41:df:0d:0e:49:e4:98:a0:39:be:26:ad:7e:e5: 98:83:b9:69:b1:87:2e:4b:31:54:ef:b5:64:86:d0:22:21:3d: 11:7d:93:ad:d3:0a:cb:4d:85:34:4c:1f:28:e8:60:d3:04:3d: 41:f0:bb:ac:f0:90:51:b8:f1:55:3c:b8:ff:e5:59:b2:33:15: 32:e0:2d:b3:8a:60:b3:e9:c8:ec:8b:3b:5c:ea:e3:b3:a6:af: 42:6a:96:15:4a:d3:82:27:d6:1c:8f:a9:9d:cd:da:61:46:6e: 94:f5:c6:53:23:91:8a:ec:b6:cb:51:fc:07:aa:3d:b3:9a:74: 9d:a4:83:70:1c:70:71:14:84:40:a9:d7:f8:4a:9d:35:4c:eb: 13:76:81:47:15:67:5d:83:98:d3:17:ce:d2:0d:08:9c:97:03: c7:bf:2f:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92iaWHbpZQnXkiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRjMjEzYzctNGMxYS00MTg3LWE4NzktOTBjOTA2MmUw NWQ0MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ZjczYzA2MGQtMjc5My00YWJiLTliNDQtMDQ2MjNjMDgyNDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQL9kRUnwls5Grv4WhspZA8kNC3azJFzq51n c+AOkLxkZkszSj06vMP2MhBgDBJ063/MpLyx7p5XYiBrzPEqTdwC68RSuWJ0wyyO IfCcXw3KdOadVxE+nVIiY0ajBLElqQRGzhWAlpH3HzD1RhS9yIi97aCEDpgOab2I dLFDhfIRhujh/u1AFAHETkX+Zxcsn+BJnTVP0sjYKV7jZ1f9x4umT45IOmdI3Yah 3MsHQkIgAqznJVopHzKE+RPsiVW6RWlflcXZz/NKD1Pky5JY/AyI/hhngqcQaB7k silzJgEG76emvsPc48p6tk2cWFwAlWN/glYSveioqoWgz13zbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTdDOILPokq6/1YwRQ6IbxqHaTqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NGMy MTNjNy00YzFhLTQxODctYTg3OS05MGM5MDYyZTA1ZDQvYzkzYWE1Y2MtOTcyNS0z MzA0LTlmNjQtNjE1OWExMDcwYzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjRjMjEzYzctNGMxYS00MTg3LWE4 NzktOTBjOTA2MmUwNWQ0LzY0YzIxM2M3LTRjMWEtNDE4Ny1hODc5LTkwYzkwNjJl MDVkNC5jcmwwHwYDVR0jBBgwFoAUs4VaPWhc4iyCJSk88gjviQPAip0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NGMyMTNjNy00YzFhLTQxODctYTg3OS05MGM5 MDYyZTA1ZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvzTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwIBNN24z1j/KtXDkwFseDgfqWIRBRDQfO0FEwCnCUyCX4an/tDMwdO oD0/ivOYWbM19sL0tkUkUD/3bT9j6EBqlOee0ISHvyz2yk1awzVFtNSO7h6Sg0Om 7OAL6oVB3w0OSeSYoDm+Jq1+5ZiDuWmxhy5LMVTvtWSG0CIhPRF9k63TCstNhTRM HyjoYNMEPUHwu6zwkFG48VU8uP/lWbIzFTLgLbOKYLPpyOyLO1zq47Omr0JqlhVK 04In1hyPqZ3N2mFGbpT1xlMjkYrststR/AeqPbOadJ2kg3AccHEUhECp1/hKnTVM 6xN2gUcVZ12DmNMXztINCJyXA8e/L9k= -----END CERTIFICATE-----Generated at Mon May 5 12:57:31 2025 by rpki-client