$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa File: 1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa (raw, json) Hash identifier: dLDLrzw6MOZ+IVTRJrpXn3GM1utIS3pGtXvtz64oLJU= Subject key identifier: D0:7C:3A:F6:AA:95:42:07:11:93:FB:86:D5:0D:38:24:AD:83:03:AF Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Certificate serial: 010D0C9F4328584902EC2E9393375A30CD227F00 Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 396998 IP address blocks: 64.68.193.0/24 maxlen: 24 2620:49:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:2e:93:93:37:5a:30:cd:22:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=7eabcc8e-0f14-4eb1-b2fc-bb608a6f5c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4a:e7:3d:f1:c3:e0:6c:0a:70:d1:2a:70:5b: ae:39:26:7d:41:99:28:70:b4:7d:09:27:f9:62:15: df:a8:07:c9:42:6c:5f:88:18:a7:31:ef:1e:b6:bd: a4:90:ad:db:d5:57:85:b7:87:7e:26:95:72:6e:c1: c2:bf:c4:8d:a4:5b:1a:5c:9c:cb:e9:de:10:a5:a9: 71:ba:fc:50:22:cf:41:07:b7:55:00:32:8d:f7:a0: f0:2b:c3:2c:18:90:b2:bb:db:54:31:a2:53:0f:3d: e3:e1:7d:02:a7:c1:1d:3c:bb:ba:f6:72:2b:99:b5: 47:1c:9c:e4:b5:fe:70:81:4b:0a:c8:b8:0a:c5:f1: 80:f2:35:1f:a2:56:15:db:5f:97:aa:bd:47:e6:7c: 02:5b:72:b1:a8:99:cd:20:8d:e5:34:55:a5:c3:66: 4c:00:9b:ad:37:4a:f3:bc:10:7c:1c:98:61:81:d5: f4:79:13:20:bb:b8:42:c1:7e:e9:83:95:74:f9:0c: 1e:b2:c6:34:3f:5f:6e:ac:ec:ae:a2:de:23:8a:a9: be:d3:9b:79:d6:df:79:8d:5c:ba:5f:db:ce:f7:d7: 82:56:c0:5b:86:46:16:79:91:e9:ad:20:85:74:80: 2a:03:f5:0e:81:c2:c7:7b:04:a3:ae:31:86:3e:f8: 5f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7C:3A:F6:AA:95:42:07:11:93:FB:86:D5:0D:38:24:AD:83:03:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl X509v3 Authority Key Identifier: keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer sbgp-ipAddrBlock: critical IPv4: 64.68.193.0/24 IPv6: 2620:49:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:34:3c:06:6a:57:58:9c:8b:14:2a:e7:ab:05:ca:15:f7:d3: 3b:b1:39:dc:fd:16:96:f8:d2:06:b4:7e:33:15:5a:dc:46:f0: f9:82:d2:ac:1c:09:d6:61:c5:46:47:c7:66:cc:aa:ed:d4:27: c5:cc:29:fd:f7:f8:67:da:a0:12:1f:5d:c5:d3:c4:26:0b:a1: a2:2d:c9:39:af:63:e4:7b:b0:09:e0:16:bd:a3:11:23:0f:64: 62:75:ee:80:39:a8:9c:e0:05:48:0a:86:27:e5:68:03:c6:c6: 0c:62:9b:f8:66:2e:18:ab:fb:c0:4a:72:a5:d8:74:f1:db:89: ca:b3:e6:2d:05:ff:9a:2c:cc:46:15:a4:35:87:73:5b:e4:a4: 6b:23:35:55:f1:d5:cd:e8:c7:b7:7e:a0:2b:4f:f2:2e:74:cc: f4:6a:04:80:a5:4c:c9:f2:d5:1f:d1:6b:9e:d2:9d:a0:8a:ec: 92:c1:d1:c8:1b:5d:f2:20:bc:ee:36:e2:4e:95:64:7c:1b:93: f0:67:0e:80:ac:1f:3a:28:0d:4f:42:f8:8b:4c:f6:fc:98:38: a4:5d:e6:d6:0f:d0:4f:d9:0b:76:5e:af:ce:f0:02:8b:a6:95: 6f:d7:f7:07:92:0c:26:f3:ba:aa:c8:4b:b8:28:8f:cc:20:d4: bb:40:ea:10 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEkC7C6TkzdaMM0ifwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwNzQ5ZWQtNzBlZi00NDdjLWIxN2MtZGE2YmU4ZDdm MzEyMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk N2VhYmNjOGUtMGYxNC00ZWIxLWIyZmMtYmI2MDhhNmY1YzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0krnPfHD4GwKcNEqcFuuOSZ9QZkocLR9CSf5 YhXfqAfJQmxfiBinMe8etr2kkK3b1VeFt4d+JpVybsHCv8SNpFsaXJzL6d4Qpalx uvxQIs9BB7dVADKN96DwK8MsGJCyu9tUMaJTDz3j4X0Cp8EdPLu69nIrmbVHHJzk tf5wgUsKyLgKxfGA8jUfolYV21+Xqr1H5nwCW3KxqJnNII3lNFWlw2ZMAJutN0rz vBB8HJhhgdX0eRMgu7hCwX7pg5V0+QwessY0P19urOyuot4jiqm+05t51t95jVy6 X9vO99eCVsBbhkYWeZHprSCFdIAqA/UOgcLHewSjrjGGPvhfrQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFNB8OvaqlUIHEZP7htUNOCStgwOvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3 NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThkN2YzMTIvMWEzNWRkMWUtMWQzNy0z ZDBhLWFiZjEtYTJmNjU1ZGVkZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDAwNzQ5ZWQtNzBlZi00NDdjLWIx N2MtZGE2YmU4ZDdmMzEyL2QwMDc0OWVkLTcwZWYtNDQ3Yy1iMTdjLWRhNmJlOGQ3 ZjMxMi5jcmwwHwYDVR0jBBgwFoAU9SAVhzNYxRJ4ZGbzsONdivR4eXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZi ZThkN2YzMTIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQETBMA8E AgACMAkDBwAmIABJAAIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASDQ8BmpXWJyLFCrnqwXKFffTO7E53P0W lvjSBrR+MxVa3Ebw+YLSrBwJ1mHFRkfHZsyq7dQnxcwp/ff4Z9qgEh9dxdPEJguh oi3JOa9j5HuwCeAWvaMRIw9kYnXugDmonOAFSAqGJ+VoA8bGDGKb+GYuGKv7wEpy pdh08duJyrPmLQX/mizMRhWkNYdzW+SkayM1VfHVzejHt36gK0/yLnTM9GoEgKVM yfLVH9FrntKdoIrsksHRyBtd8iC87jbiTpVkfBuT8GcOgKwfOigNT0L4i0z2/Jg4 pF3m1g/QT9kLdl6vzvACi6aVb9f3B5IMJvO6qshLuCiPzCDUu0DqEA== -----END CERTIFICATE-----Generated at Thu May 8 02:02:47 2025 by rpki-client