$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/f1720a0c-c98d-3792-aa2b-8302522f6935.roa File: f1720a0c-c98d-3792-aa2b-8302522f6935.roa (raw, json) Hash identifier: uRIgmMwPyMHO4nyg6vqGnTzaevhbuXGtwZ5yUqIYeMw= Subject key identifier: FB:2F:26:44:69:1B:57:5D:81:72:88:22:4E:C0:94:18:BB:C1:FE:8F Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F43285849A61F45692CD62872A4A4C680 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/f1720a0c-c98d-3792-aa2b-8302522f6935.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 13213 IP address blocks: 64.64.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:45:69:2c:d6:28:72:a4:a4:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=a01273f2-be46-4d90-95fb-b0dc080865bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5f:83:5b:5c:88:2d:17:1c:fb:b1:b0:f1:67: cc:1b:55:29:e7:0c:5f:9f:15:87:05:5f:7f:58:af: de:a5:5a:58:b3:9e:f1:53:73:c6:fb:4a:9f:6f:b5: 98:e1:b1:f2:89:28:4b:85:f3:23:7d:8a:a2:2a:32: 2e:04:75:4c:41:2a:70:1b:47:8e:6a:68:1c:42:cf: 23:7a:54:4e:2e:55:16:dc:5d:f9:57:c3:c1:64:c1: 5b:16:45:49:25:6a:df:70:c7:0d:00:3b:7a:a7:39: e8:51:08:01:29:ad:43:a4:ed:97:2d:ea:91:4b:d6: 6c:53:3f:54:4f:ec:b1:6a:81:5e:c0:56:dd:e3:7f: 0c:4d:c2:4e:ec:f0:ed:6a:b0:a7:37:74:9e:e8:94: f2:ef:08:91:69:ea:cb:5f:83:c0:b5:1e:67:8b:df: cc:d6:f2:f0:ef:11:66:64:01:0d:18:08:46:f3:70: b6:1d:e0:c1:94:94:eb:13:13:b6:43:d8:bc:ca:69: 30:59:75:bc:be:47:70:a4:09:4c:41:d2:f9:0a:66: d3:28:10:56:95:b5:ea:b8:ce:43:80:76:e3:59:3d: ee:f1:69:63:7c:ba:cd:e2:05:de:5d:20:32:6c:91: 06:2f:8f:9e:3e:d3:2c:35:aa:50:de:d2:06:de:8f: b2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2F:26:44:69:1B:57:5D:81:72:88:22:4E:C0:94:18:BB:C1:FE:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/f1720a0c-c98d-3792-aa2b-8302522f6935.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 64.64.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ea:19:48:d3:de:ea:ed:1e:6e:51:7c:a1:fb:ac:f7:e9:72: 42:08:7a:d6:14:7b:87:74:e4:7f:a2:94:24:20:b7:5c:87:7d: d1:88:44:22:ee:bd:e7:1e:ed:e7:50:74:fa:aa:94:d3:4f:56: 40:ad:da:d4:09:65:f2:13:f3:f5:2b:dc:6a:03:a9:c3:dc:1f: db:9e:aa:46:c3:b9:84:d6:67:32:e6:86:d8:72:26:54:ed:a9: f4:12:54:97:2d:86:98:65:ed:f2:19:e3:de:35:9c:8c:b6:85: eb:0e:5e:8d:36:2a:2e:d3:92:72:fb:3b:23:af:47:e0:db:f4: 5a:27:86:97:fe:31:c0:0c:c0:37:63:38:da:4c:0f:03:02:e8: 32:e0:52:fe:47:74:0a:9f:5d:2e:bf:88:d1:13:43:30:6c:5b: ca:7d:cb:31:98:68:6c:93:d2:6a:ee:0e:4e:fa:ca:ed:78:fa: cf:9b:d1:0a:51:4f:9e:99:d8:1e:b4:08:2c:08:a7:45:3d:06: ff:65:9e:9c:fc:6d:8b:20:ae:d2:63:a4:82:42:c4:07:63:f7: 8f:b2:a1:ff:5f:eb:e5:c0:6a:b0:9d:e7:de:fa:32:c9:f4:cc: 5b:d2:e1:08:b7:42:5c:cd:91:a6:d2:e3:e8:e2:95:d7:e4:67: a6:72:5c:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmH0VpLNYocqSkxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk YTAxMjczZjItYmU0Ni00ZDkwLTk1ZmItYjBkYzA4MDg2NWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1+DW1yILRcc+7Gw8WfMG1Up5wxfnxWHBV9/ WK/epVpYs57xU3PG+0qfb7WY4bHyiShLhfMjfYqiKjIuBHVMQSpwG0eOamgcQs8j elROLlUW3F35V8PBZMFbFkVJJWrfcMcNADt6pznoUQgBKa1DpO2XLeqRS9ZsUz9U T+yxaoFewFbd438MTcJO7PDtarCnN3Se6JTy7wiRaerLX4PAtR5ni9/M1vLw7xFm ZAENGAhG83C2HeDBlJTrExO2Q9i8ymkwWXW8vkdwpAlMQdL5CmbTKBBWlbXquM5D gHbjWT3u8WljfLrN4gXeXSAybJEGL4+ePtMsNapQ3tIG3o+yLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsvJkRpG1ddgXKIIk7AlBi7wf6PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvZjE3MjBhMGMtYzk4ZC0z NzkyLWFhMmItODMwMjUyMmY2OTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEB7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDqGUjT3urtHm5RfKH7rPfpckIIetYUe4d05H+ilCQgt1yHfdGIRCLu vece7edQdPqqlNNPVkCt2tQJZfIT8/Ur3GoDqcPcH9ueqkbDuYTWZzLmhthyJlTt qfQSVJcthphl7fIZ4941nIy2hesOXo02Ki7TknL7OyOvR+Db9Fonhpf+McAMwDdj ONpMDwMC6DLgUv5HdAqfXS6/iNETQzBsW8p9yzGYaGyT0mruDk76yu14+s+b0QpR T56Z2B60CCwIp0U9Bv9lnpz8bYsgrtJjpIJCxAdj94+yof9f6+XAarCd5976Msn0 zFvS4Qi3QlzNkabS4+jildfkZ6ZyXAc= -----END CERTIFICATE-----Generated at Sun May 11 04:07:12 2025 by rpki-client