$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/cb7308f9-7051-33bc-ad9f-9ff79b88b811.roa File: cb7308f9-7051-33bc-ad9f-9ff79b88b811.roa (raw, json) Hash identifier: 4bVm4bPCQGqfomOStYwUBzxFt7t7slQp3F/AH0Md5eg= Subject key identifier: 47:99:C0:89:5A:38:3E:08:35:2A:29:E8:C0:8A:00:F9:A3:92:7F:B7 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F43285849ABB4A00BD39DC2F918C0F3C0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/cb7308f9-7051-33bc-ad9f-9ff79b88b811.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 11090 IP address blocks: 64.4.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:a0:0b:d3:9d:c2:f9:18:c0:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=c46f5a89-4d4a-4d97-9011-f1f2c62d6028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:06:89:74:dc:09:20:22:69:b0:27:ff:22:64: d3:2e:2a:8d:88:fe:3e:5e:a7:ec:db:c6:70:e1:c8: fa:35:19:ce:2a:c8:36:1a:82:a3:c7:e7:5b:c6:5b: 2a:9a:7c:56:b9:69:f2:47:05:0a:47:4e:a7:f3:28: 47:bb:e1:c8:ac:85:f1:8d:41:ff:12:d9:b7:c0:00: b8:bd:a3:fb:01:31:16:c6:50:98:65:3d:70:36:de: 0c:05:1d:35:2d:b9:7e:63:9c:fb:85:36:39:5a:70: ca:a1:c9:ea:f6:40:91:ca:b5:ff:d2:8d:70:90:0f: 4a:e0:23:57:98:d8:cf:55:15:1d:f9:a8:e1:e0:4c: a3:c0:50:b4:98:99:ce:ce:fd:eb:26:ce:da:c7:73: 65:02:5c:e1:29:d0:e6:a4:af:3f:ff:42:31:86:69: 38:3c:97:ff:61:6e:91:79:6c:5a:6b:68:b8:16:a3: 01:30:90:1d:7d:cb:b8:a4:63:ff:10:c3:c5:5e:9e: 78:7a:6d:7d:88:88:8e:a6:88:00:9e:bd:1f:a3:38: 21:20:3a:3b:d6:b4:36:95:37:80:cb:8b:1b:27:37: c3:e9:9a:e8:8d:18:f7:99:3b:c1:8c:33:da:67:76: fc:5f:df:ab:bf:13:70:2d:28:ce:5f:ff:e3:34:4c: 23:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:99:C0:89:5A:38:3E:08:35:2A:29:E8:C0:8A:00:F9:A3:92:7F:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/cb7308f9-7051-33bc-ad9f-9ff79b88b811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:bf:19:d3:42:4c:6e:73:e7:2d:a6:9b:95:e9:11:63:24:7a: 42:0a:66:85:57:52:7c:e1:41:ab:ce:5c:68:08:cf:07:30:5a: 00:3d:88:1d:3a:0a:1e:ad:c7:03:a0:8f:e3:eb:65:4a:c1:4a: 0c:a6:6a:b1:63:d8:7c:0f:a0:c0:99:e6:32:26:51:ed:9c:24: 1a:80:1e:d9:16:71:e2:d4:48:bf:53:26:3f:2b:3b:52:fd:bb: 0b:d1:40:71:2e:ed:9c:78:1c:e5:db:7d:5c:42:9b:11:58:58: e3:c6:51:c5:30:6a:06:be:01:26:83:8c:ad:82:4d:99:a7:33: c2:2f:0e:65:68:a1:d7:9b:6a:e0:ef:8d:4b:80:9e:d6:5f:51: 08:ac:2d:88:0f:09:df:1f:67:57:e3:94:2d:ca:8a:ab:6c:1a: fc:3b:dd:40:81:0e:b2:12:99:27:e0:87:0e:ee:9c:b1:50:f8: 50:3f:2f:ba:ca:4b:d5:89:51:19:80:35:86:5e:1e:79:12:6e: 9c:13:b5:d8:e9:df:02:62:0d:76:7f:5c:d9:d5:8f:c1:cb:82: 84:36:ed:50:b1:77:5b:3c:16:44:de:ff:1c:d3:d4:14:b7:0c: cc:19:e5:1b:50:6a:52:94:02:8d:28:0d:c7:5c:0d:f5:c6:07: 30:93:09:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKAL053C+RjA88AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk YzQ2ZjVhODktNGQ0YS00ZDk3LTkwMTEtZjFmMmM2MmQ2MDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQaJdNwJICJpsCf/ImTTLiqNiP4+Xqfs28Zw 4cj6NRnOKsg2GoKjx+dbxlsqmnxWuWnyRwUKR06n8yhHu+HIrIXxjUH/Etm3wAC4 vaP7ATEWxlCYZT1wNt4MBR01Lbl+Y5z7hTY5WnDKocnq9kCRyrX/0o1wkA9K4CNX mNjPVRUd+ajh4EyjwFC0mJnOzv3rJs7ax3NlAlzhKdDmpK8//0Ixhmk4PJf/YW6R eWxaa2i4FqMBMJAdfcu4pGP/EMPFXp54em19iIiOpogAnr0fozghIDo71rQ2lTeA y4sbJzfD6ZrojRj3mTvBjDPaZ3b8X9+rvxNwLSjOX//jNEwjLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeZwIlaOD4INSop6MCKAPmjkn+3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvY2I3MzA4ZjktNzA1MS0z M2JjLWFkOWYtOWZmNzliODhiODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQATsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJu/GdNCTG5z5y2mm5XpEWMkekIKZoVXUnzhQavOXGgIzwcwWgA9iB06 Ch6txwOgj+PrZUrBSgymarFj2HwPoMCZ5jImUe2cJBqAHtkWceLUSL9TJj8rO1L9 uwvRQHEu7Zx4HOXbfVxCmxFYWOPGUcUwaga+ASaDjK2CTZmnM8IvDmVoodebauDv jUuAntZfUQisLYgPCd8fZ1fjlC3KiqtsGvw73UCBDrISmSfghw7unLFQ+FA/L7rK S9WJURmANYZeHnkSbpwTtdjp3wJiDXZ/XNnVj8HLgoQ27VCxd1s8FkTe/xzT1BS3 DMwZ5RtQalKUAo0oDcdcDfXGBzCTCV4= -----END CERTIFICATE-----Generated at Mon May 5 09:14:15 2025 by rpki-client