$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/619111b6-8667-36e8-9ebf-84bf1240b9a2.roa File: 619111b6-8667-36e8-9ebf-84bf1240b9a2.roa (raw, json) Hash identifier: 2Uep6nmwPtgHx0F2s9UHwN3wfjpZiyVBvPvxHylGHOc= Subject key identifier: 6B:1F:6D:13:0F:A6:4C:05:C8:FD:BC:48:D2:82:78:7D:BF:02:47:57 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F43285849806F28404B22895FD2961640 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/619111b6-8667-36e8-9ebf-84bf1240b9a2.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 13536 IP address blocks: 64.140.210.0/24 maxlen: 24 64.140.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:28:40:4b:22:89:5f:d2:96:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=453df736-4b38-481e-8976-2f7ac9d5557d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:83:44:71:ca:53:77:4f:8f:4b:6b:ca:2a:f8: 2c:4b:3f:79:ec:4f:77:35:98:84:d8:9b:ee:f9:36: 52:00:4b:70:53:76:55:3f:24:0a:2c:33:a3:e4:8c: 4d:20:3d:86:c1:92:6c:07:0b:58:d7:c0:84:38:d0: bc:8e:a3:f6:cf:29:f7:d7:96:c6:b0:a4:be:eb:0a: c4:53:c4:a7:e3:25:a7:92:b1:ca:0c:24:fc:dd:8f: 21:79:7d:ae:3c:dd:76:4e:41:2f:6d:1d:b9:aa:f7: 1f:0f:31:7a:c0:df:9e:0d:9a:52:54:8c:37:86:5a: e8:ab:f9:01:88:87:1a:9a:32:01:bb:7e:6c:77:5b: cc:71:7d:87:f8:32:f8:a6:ef:7d:de:07:b7:b3:a8: 67:57:01:72:5c:a9:15:7e:e5:25:41:93:8f:0d:c6: f7:ea:76:c8:26:27:fa:02:c3:c5:80:1d:f6:5f:e8: 76:ef:2a:2e:1f:a7:57:16:37:5b:b7:1a:64:8f:f0: 8e:2a:39:37:89:60:bf:b1:36:8c:05:c0:11:49:72: 15:42:65:10:db:86:7f:4b:5c:1f:f4:01:b9:85:47: 93:19:f2:bc:3b:ef:9c:4a:44:85:60:ee:7b:9e:c1: b5:48:00:cf:43:13:0f:17:f8:98:b9:ae:ca:12:06: 0c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1F:6D:13:0F:A6:4C:05:C8:FD:BC:48:D2:82:78:7D:BF:02:47:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/619111b6-8667-36e8-9ebf-84bf1240b9a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 64.140.210.0/24 64.140.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:6c:1f:ed:2f:9c:bd:d7:20:1a:53:43:73:ba:14:f6:8c:92: c0:45:0f:36:d9:93:69:7f:dd:ab:60:61:f2:72:00:e9:01:c8: fc:d2:e2:92:76:6b:83:64:da:c0:60:be:25:49:8e:f8:21:75: 1a:ab:72:9d:bb:33:0d:d6:20:05:b6:57:db:ef:25:42:f9:c3: 82:87:85:56:53:7a:03:a8:77:a3:42:42:99:bb:1d:b1:06:30: 79:88:1e:17:9d:fa:83:1d:c1:6f:e6:77:8b:96:39:5f:d3:d7: 35:65:59:b8:cb:e5:62:f8:d7:89:81:e6:b9:81:82:96:2a:fa: a9:a2:82:d3:e0:2a:e5:61:4b:4c:6c:11:d6:f4:21:f5:c2:f5: 0d:9f:3d:92:93:cc:d9:2e:29:ab:76:f6:d6:97:b4:b3:14:35: 61:09:2b:17:3d:a5:0e:cb:a6:65:46:e3:55:a9:82:36:03:60: e8:62:b8:aa:7c:1f:9c:12:ce:92:17:ee:5b:aa:60:9c:bd:9e: 7e:72:18:03:5a:7b:a0:8a:47:41:74:09:d0:9a:09:2b:07:09: 01:60:fb:12:01:1e:3f:02:39:44:b3:c9:b4:79:8a:50:49:ac: 39:a9:b6:68:21:27:67:51:6b:42:24:5b:a2:b9:de:cf:fc:ae: 2b:4b:2d:8b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmAbyhASyKJX9KWFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk NDUzZGY3MzYtNGIzOC00ODFlLTg5NzYtMmY3YWM5ZDU1NTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoNEccpTd0+PS2vKKvgsSz957E93NZiE2Jvu +TZSAEtwU3ZVPyQKLDOj5IxNID2GwZJsBwtY18CEONC8jqP2zyn315bGsKS+6wrE U8Sn4yWnkrHKDCT83Y8heX2uPN12TkEvbR25qvcfDzF6wN+eDZpSVIw3hlroq/kB iIcamjIBu35sd1vMcX2H+DL4pu993ge3s6hnVwFyXKkVfuUlQZOPDcb36nbIJif6 AsPFgB32X+h27youH6dXFjdbtxpkj/COKjk3iWC/sTaMBcARSXIVQmUQ24Z/S1wf 9AG5hUeTGfK8O++cSkSFYO57nsG1SADPQxMPF/iYua7KEgYMxwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGsfbRMPpkwFyP28SNKCeH2/AkdXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNjE5MTExYjYtODY2Ny0z NmU4LTllYmYtODRiZjEyNDBiOWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQIzSAwQA QIz0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAL1sH+0vnL3XIBpTQ3O6FPaMksBFDzbZk2l/3atgYfJyAOkB yPzS4pJ2a4Nk2sBgviVJjvghdRqrcp27Mw3WIAW2V9vvJUL5w4KHhVZTegOod6NC Qpm7HbEGMHmIHhed+oMdwW/md4uWOV/T1zVlWbjL5WL414mB5rmBgpYq+qmigtPg KuVhS0xsEdb0IfXC9Q2fPZKTzNkuKat29taXtLMUNWEJKxc9pQ7LpmVG41WpgjYD YOhiuKp8H5wSzpIX7luqYJy9nn5yGANae6CKR0F0CdCaCSsHCQFg+xIBHj8COUSz ybR5ilBJrDmptmghJ2dRa0IkW6K53s/8ritLLYs= -----END CERTIFICATE-----Generated at Sat May 10 07:41:36 2025 by rpki-client