$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/250c85a0-cf56-385d-8e3b-9175af7edb61.roa File: 250c85a0-cf56-385d-8e3b-9175af7edb61.roa (raw, json) Hash identifier: l6ASqqNxdXwwaGo0WVtMG0liGCJPQPdu1z9SrGSm16g= Subject key identifier: 4D:47:99:B8:98:92:B8:D0:20:4E:AB:79:85:2A:E5:86:EA:22:12:DC Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F43285849A8E9DBB144EAB27C2D3D2380 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/250c85a0-cf56-385d-8e3b-9175af7edb61.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 25645 IP address blocks: 64.92.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:db:b1:44:ea:b2:7c:2d:3d:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=78a0ebd3-a144-4f89-97b6-8d09c9f3dc3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:da:08:4b:ae:16:7a:5a:a1:0b:1c:f1:e9:d0: db:fd:38:63:7d:f0:24:dd:4e:9d:15:8c:5c:08:bd: 8d:b8:5f:a5:6a:a9:5b:0d:f5:51:e0:32:d3:82:c8: 71:f4:1f:17:2e:df:89:16:fa:1c:42:02:ce:13:e3: eb:51:da:f5:b2:61:4b:ae:64:2f:a1:42:3f:7f:5d: 15:36:d2:1c:98:3a:60:04:f9:18:31:e3:3d:b9:01: 98:a4:ea:d1:06:40:0a:31:32:2e:65:b7:13:cb:41: e3:ed:31:5a:59:7c:93:11:ae:b1:90:97:6c:46:26: 77:34:4e:e6:b8:df:f6:b1:70:d5:21:61:f5:c8:83: 16:2e:22:68:f5:a6:96:53:3f:56:e4:c8:2e:3e:7e: 41:59:a0:28:8e:85:ec:2b:dd:a9:54:b3:ef:78:c8: ce:cb:88:c3:2d:a9:39:b2:49:0e:36:78:25:c6:80: b7:72:d0:3b:da:0e:c1:af:30:01:e7:ae:41:3d:22: fe:bb:ab:4a:01:82:62:07:06:8c:f2:bd:1d:93:32: 1c:61:47:e1:5c:e4:ef:04:8e:e5:a9:64:87:ea:ee: 3e:8e:bc:b0:d9:79:a9:f1:1a:10:77:6e:3b:b8:b3: 32:b6:b5:22:52:4d:89:a4:18:62:61:46:34:a2:42: 27:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:47:99:B8:98:92:B8:D0:20:4E:AB:79:85:2A:E5:86:EA:22:12:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/250c85a0-cf56-385d-8e3b-9175af7edb61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 64.92.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:9e:d0:a1:7c:f6:f1:21:1a:fd:fa:03:f8:b2:5b:15:0d:71: b2:69:32:9d:f1:81:94:56:a3:50:db:44:38:e9:bc:ac:6d:19: 0c:17:9c:b2:06:58:42:22:8d:63:f2:a9:70:5c:b7:27:19:c4: 6e:70:b8:18:d0:05:05:7b:f2:85:b6:13:df:1b:de:3d:38:2e: 12:4d:b4:4a:34:e4:34:20:3b:1d:d4:18:74:6d:17:97:e4:99: 09:a2:4b:f1:a1:c3:73:9a:45:be:fe:53:76:ac:a3:83:be:32: 07:1c:64:a3:ba:02:1b:df:14:38:c2:e2:a5:db:7f:91:e1:90: 13:eb:8d:7b:84:36:25:9b:df:2a:38:33:15:76:60:cf:fa:12: 41:f9:bb:c5:4d:72:b0:09:d0:ff:33:3c:a4:65:7d:d7:97:b9: 12:52:37:d4:2b:65:b0:6e:91:cf:e4:08:3e:54:0d:68:27:9d: 05:5a:8d:6d:c1:0b:23:97:bc:7b:4f:f5:1b:79:21:cd:90:6a: e7:1b:ee:ef:2c:5f:1c:00:a1:27:0f:76:dd:73:c5:b0:34:58: 63:b7:89:f2:89:0b:24:ba:de:f4:19:fb:d2:1b:1a:fa:32:b0: 4c:64:41:1e:74:b8:82:09:9d:2b:ef:5d:f8:8a:7c:0a:d6:e9: db:10:1f:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6duxROqyfC09I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk NzhhMGViZDMtYTE0NC00Zjg5LTk3YjYtOGQwOWM5ZjNkYzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNoIS64WelqhCxzx6dDb/ThjffAk3U6dFYxc CL2NuF+laqlbDfVR4DLTgshx9B8XLt+JFvocQgLOE+PrUdr1smFLrmQvoUI/f10V NtIcmDpgBPkYMeM9uQGYpOrRBkAKMTIuZbcTy0Hj7TFaWXyTEa6xkJdsRiZ3NE7m uN/2sXDVIWH1yIMWLiJo9aaWUz9W5MguPn5BWaAojoXsK92pVLPveMjOy4jDLak5 skkONnglxoC3ctA72g7BrzAB565BPSL+u6tKAYJiBwaM8r0dkzIcYUfhXOTvBI7l qWSH6u4+jryw2Xmp8RoQd247uLMytrUiUk2JpBhiYUY0okIn0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1HmbiYkrjQIE6reYUq5YbqIhLcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvMjUwYzg1YTAtY2Y1Ni0z ODVkLThlM2ItOTE3NWFmN2VkYjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFxHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2e0KF89vEhGv36A/iyWxUNcbJpMp3xgZRWo1DbRDjpvKxtGQwXnLIG WEIijWPyqXBctycZxG5wuBjQBQV78oW2E98b3j04LhJNtEo05DQgOx3UGHRtF5fk mQmiS/Ghw3OaRb7+U3aso4O+MgccZKO6AhvfFDjC4qXbf5HhkBPrjXuENiWb3yo4 MxV2YM/6EkH5u8VNcrAJ0P8zPKRlfdeXuRJSN9QrZbBukc/kCD5UDWgnnQVajW3B CyOXvHtP9Rt5Ic2Qaucb7u8sXxwAoScPdt1zxbA0WGO3ifKJCyS63vQZ+9IbGvoy sExkQR50uIIJnSvvXfiKfArW6dsQH5Y= -----END CERTIFICATE-----Generated at Mon May 12 05:27:16 2025 by rpki-client