$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/dfef9103-b23c-342c-83da-159fd5780ea7.roa File: dfef9103-b23c-342c-83da-159fd5780ea7.roa (raw, json) Hash identifier: O6iL5n5bPDU+9udtHSnwvnk+xCQnEVe/oO2GJ833xt8= Subject key identifier: 52:6E:76:77:DE:F4:49:84:E8:B4:C7:EA:AB:09:80:16:DD:0B:B6:0F Certificate issuer: /CN=1246a6a7-1908-49e7-9777-16290e028fb7 Certificate serial: 010D0C9F43285849CE9A64D9CFC5A9B99C25E000 Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/dfef9103-b23c-342c-83da-159fd5780ea7.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 13638 IP address blocks: 65.254.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:64:d9:cf:c5:a9:b9:9c:25:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=ec2f3ec1-c614-404a-8a5d-1281f3ded957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:45:20:76:09:7f:17:63:d2:9d:79:99:15:77: 3f:10:ed:5b:50:23:b1:ef:f3:06:38:62:1e:b1:6f: 36:29:c6:67:d2:b1:c0:e9:94:2a:45:2f:4d:7a:59: 7e:a4:e2:c8:68:4a:e3:9b:3a:f4:27:2c:cc:ba:df: 15:21:73:19:1d:60:ef:d9:ab:ad:57:36:c8:77:52: a3:89:02:c3:01:75:e0:fc:75:e0:c7:a9:ab:a8:5c: 02:06:41:46:0a:8e:c6:bc:7c:52:ec:1e:a0:9c:a3: 3d:54:6b:9b:b2:aa:8b:b3:44:fc:b7:c5:66:83:60: fc:b0:3c:8e:54:4f:85:19:3f:de:23:70:06:46:7e: 02:47:60:ef:1c:43:a2:16:d2:63:67:44:7d:1d:48: 1f:4c:e4:61:2e:f7:05:c6:90:7a:3b:ca:ca:a7:60: d4:56:3d:a4:91:21:2c:ce:e2:2a:6e:35:f0:08:30: ee:25:e1:69:87:3b:8c:1c:18:d8:7d:a5:2e:12:c7: 58:2b:01:cb:de:ca:bc:76:cb:81:6e:03:68:64:08: 1c:35:f9:9b:3f:14:a3:e3:b2:fe:9e:5d:d7:16:d2: 57:5f:8b:d0:b7:d2:a1:cf:74:53:4c:5e:aa:e4:48: f5:15:fa:59:5f:69:5a:38:ac:29:d1:6d:6c:65:37: 33:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6E:76:77:DE:F4:49:84:E8:B4:C7:EA:AB:09:80:16:DD:0B:B6:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/dfef9103-b23c-342c-83da-159fd5780ea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl X509v3 Authority Key Identifier: keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer sbgp-ipAddrBlock: critical IPv4: 65.254.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:de:2b:de:76:ee:02:06:a7:13:85:b3:70:ed:38:f5:64:60: 3e:d8:1c:cc:27:d3:22:41:7f:c8:9d:0d:9c:40:11:df:77:a7: 3d:c2:c4:f8:cf:66:7c:79:12:86:6e:21:9d:5d:50:09:b1:ea: 44:a9:1a:34:c2:dc:a1:f9:ae:4a:1d:93:e6:34:46:a7:86:98: f4:f9:a4:60:b9:b8:77:1a:c7:e8:e2:fc:bb:ee:f9:f6:0b:39: 2b:f1:96:e2:b5:92:00:83:61:38:b6:ca:6f:19:da:c3:2a:98: 1f:8c:e6:07:b0:0d:5c:2a:a2:c2:b0:c4:a8:4b:c1:dc:ae:2a: d5:0e:20:3d:c0:2f:12:cd:75:12:3a:b5:bf:e2:ef:c6:dd:cd: 37:45:a0:40:ec:e2:93:56:72:95:50:bd:c4:1f:7b:8b:81:48: c1:25:fb:ba:4b:53:60:ec:6f:f6:5f:8b:70:a6:09:29:47:de: 61:82:7c:26:3c:13:ea:c2:a0:70:29:ff:fc:1a:a7:6e:eb:7d: 20:c9:17:b6:2a:b8:29:fe:48:3f:52:dc:72:55:67:0a:97:8b: 5e:65:d8:a1:2c:e6:16:82:98:a0:6b:e9:52:31:b3:f7:bb:f8: 64:d3:90:a2:5a:b9:93:d0:4d:fe:2d:d5:35:58:b0:93:2b:6c: 51:ee:6d:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmTZz8WpuZwl4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0NmE2YTctMTkwOC00OWU3LTk3NzctMTYyOTBlMDI4 ZmI3MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZWMyZjNlYzEtYzYxNC00MDRhLThhNWQtMTI4MWYzZGVkOTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0Ugdgl/F2PSnXmZFXc/EO1bUCOx7/MGOGIe sW82KcZn0rHA6ZQqRS9Nell+pOLIaErjmzr0JyzMut8VIXMZHWDv2autVzbId1Kj iQLDAXXg/HXgx6mrqFwCBkFGCo7GvHxS7B6gnKM9VGubsqqLs0T8t8Vmg2D8sDyO VE+FGT/eI3AGRn4CR2DvHEOiFtJjZ0R9HUgfTORhLvcFxpB6O8rKp2DUVj2kkSEs zuIqbjXwCDDuJeFphzuMHBjYfaUuEsdYKwHL3sq8dsuBbgNoZAgcNfmbPxSj47L+ nl3XFtJXX4vQt9Khz3RTTF6q5Ej1FfpZX2laOKwp0W1sZTczDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJudnfe9EmE6LTH6qsJgBbdC7YPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2 YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5MGUwMjhmYjcvZGZlZjkxMDMtYjIzYy0z NDJjLTgzZGEtMTU5ZmQ1NzgwZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI0NmE2YTctMTkwOC00OWU3LTk3 NzctMTYyOTBlMDI4ZmI3LzEyNDZhNmE3LTE5MDgtNDllNy05Nzc3LTE2MjkwZTAy OGZiNy5jcmwwHwYDVR0jBBgwFoAUiHR7NSkK+xF7li5+uh5bOX3olmowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5 MGUwMjhmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQf6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIneK9527gIGpxOFs3DtOPVkYD7YHMwn0yJBf8idDZxAEd93pz3CxPjP Znx5EoZuIZ1dUAmx6kSpGjTC3KH5rkodk+Y0RqeGmPT5pGC5uHcax+ji/Lvu+fYL OSvxluK1kgCDYTi2ym8Z2sMqmB+M5gewDVwqosKwxKhLwdyuKtUOID3ALxLNdRI6 tb/i78bdzTdFoEDs4pNWcpVQvcQfe4uBSMEl+7pLU2Dsb/Zfi3CmCSlH3mGCfCY8 E+rCoHAp//wap27rfSDJF7YquCn+SD9S3HJVZwqXi15l2KEs5haCmKBr6VIxs/e7 +GTTkKJauZPQTf4t1TVYsJMrbFHubQs= -----END CERTIFICATE-----Generated at Mon May 12 05:27:16 2025 by rpki-client