$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/da2805f3-2f45-37d2-81ac-675892bd2fa3.roa File: da2805f3-2f45-37d2-81ac-675892bd2fa3.roa (raw, json) Hash identifier: 79iEKHkpMDBDcPw8WK7dnajcAkNPnbaL89+qY2UG5FY= Subject key identifier: 18:BF:0E:F5:38:71:DA:9E:20:81:0D:CB:A5:C1:C4:D2:3E:0E:5B:CD Certificate issuer: /CN=82d0f472-6865-4d16-9252-e75f7b91368a Certificate serial: 010D0C9F4328584996C4B250B943BCCEB966E200 Authority key identifier: 91:F2:68:F5:92:28:40:C7:86:D1:B2:A2:58:B7:AE:F9:4D:9E:BC:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/da2805f3-2f45-37d2-81ac-675892bd2fa3.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 401382 IP address blocks: 64.190.20.0/24 maxlen: 24 2602:f7e7::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/82d0f472-6865-4d16-9252-e75f7b91368a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/82d0f472-6865-4d16-9252-e75f7b91368a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b2:50:b9:43:bc:ce:b9:66:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82d0f472-6865-4d16-9252-e75f7b91368a Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=1a904e6a-139b-4903-a6d5-32ffb9fc44bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:62:cd:c5:83:88:49:55:ba:3a:a1:c5:03:c7: a9:bf:4b:37:0c:5b:75:e6:7a:a9:2a:5c:90:2f:48: 2e:d3:09:c0:4f:f1:16:05:2f:4f:f4:d3:88:e9:43: 48:26:f7:ce:70:d6:09:3f:10:aa:a9:5e:f4:66:90: e5:cb:89:1c:c3:65:1b:66:30:09:1d:ab:b1:05:9a: 81:ef:f0:78:53:a2:95:1d:9b:7e:55:9f:4f:25:c1: 4d:4e:81:01:4d:72:7a:05:46:ce:a7:13:e8:bc:94: 77:72:40:47:cd:5b:b9:9e:85:61:6e:a4:f9:77:39: 76:c6:01:5f:20:d8:24:d1:23:e0:99:b3:52:db:db: 20:5b:af:67:08:51:ab:f5:ae:f9:95:05:85:f9:1c: 3d:d4:4d:40:0a:e4:35:fa:ca:1f:1f:eb:dd:ea:74: 81:5b:3c:61:39:3d:9e:50:68:38:94:84:08:c6:0c: 01:7a:9d:85:df:95:36:fd:5d:bb:6e:de:e1:67:0f: b4:15:3c:85:b5:0e:2e:ce:43:c5:f8:b1:60:6a:b4: 7c:06:1c:2e:8f:a4:53:06:70:99:26:7b:f6:bb:18: 45:8c:4b:73:9f:90:4a:32:f8:38:15:15:03:23:76: e8:81:9d:ff:b1:58:ca:b3:ad:da:65:d5:35:c1:d4: c3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BF:0E:F5:38:71:DA:9E:20:81:0D:CB:A5:C1:C4:D2:3E:0E:5B:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/da2805f3-2f45-37d2-81ac-675892bd2fa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/82d0f472-6865-4d16-9252-e75f7b91368a.crl X509v3 Authority Key Identifier: keyid:91:F2:68:F5:92:28:40:C7:86:D1:B2:A2:58:B7:AE:F9:4D:9E:BC:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a.cer sbgp-ipAddrBlock: critical IPv4: 64.190.20.0/24 IPv6: 2602:f7e7::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:c3:97:0d:48:99:16:95:8d:e8:f0:5f:d0:4d:7b:6a:bc:03: 97:3d:09:3f:8e:a7:40:10:df:75:c3:61:94:8b:3a:16:c9:5c: d4:7e:f5:b0:b6:0f:a3:4b:91:e3:19:04:f4:34:56:0f:32:1a: c7:0c:e1:98:43:ff:24:65:27:f1:3e:8b:da:94:75:5c:5a:db: 2a:a9:ed:0a:bb:2f:75:28:bd:50:e6:6f:71:8c:98:7a:03:de: e3:8a:51:0d:24:10:1c:b4:23:e8:33:84:92:d8:87:e2:43:3b: 57:03:3d:c2:49:c1:10:da:0d:71:2e:e7:58:de:56:aa:6f:8a: a9:da:3c:a7:d5:e8:57:a6:07:9e:fd:48:c8:84:81:37:43:a7: 8a:00:e3:2f:50:0e:e4:90:d5:51:5d:b3:26:db:a2:b8:b0:22: b1:2b:cc:2f:d4:d0:75:3e:84:be:e9:82:78:99:e2:af:f1:d5: fb:92:0f:06:10:20:d9:70:2b:4a:ab:42:6a:d7:76:82:77:45: a5:83:58:1b:92:a7:41:6d:ea:ed:51:c6:6f:9c:bf:0c:71:82: 29:27:7f:5f:f4:8b:2e:92:5d:ed:ec:36:4c:b5:b8:95:3b:b7: 53:05:21:93:3b:5c:5d:84:aa:26:c0:4d:31:5c:3a:b0:68:9e: 09:88:ae:4d -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEmWxLJQuUO8zrlm4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODJkMGY0NzItNjg2NS00ZDE2LTkyNTItZTc1ZjdiOTEz NjhhMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk MWE5MDRlNmEtMTM5Yi00OTAzLWE2ZDUtMzJmZmI5ZmM0NGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWLNxYOISVW6OqHFA8epv0s3DFt15nqpKlyQ L0gu0wnAT/EWBS9P9NOI6UNIJvfOcNYJPxCqqV70ZpDly4kcw2UbZjAJHauxBZqB 7/B4U6KVHZt+VZ9PJcFNToEBTXJ6BUbOpxPovJR3ckBHzVu5noVhbqT5dzl2xgFf INgk0SPgmbNS29sgW69nCFGr9a75lQWF+Rw91E1ACuQ1+sofH+vd6nSBWzxhOT2e UGg4lIQIxgwBep2F35U2/V27bt7hZw+0FTyFtQ4uzkPF+LFgarR8Bhwuj6RTBnCZ Jnv2uxhFjEtzn5BKMvg4FRUDI3bogZ3/sVjKs63aZdU1wdTDJQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBi/DvU4cdqeIIENy6XBxNI+DlvNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MmQw ZjQ3Mi02ODY1LTRkMTYtOTI1Mi1lNzVmN2I5MTM2OGEvZGEyODA1ZjMtMmY0NS0z N2QyLTgxYWMtNjc1ODkyYmQyZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODJkMGY0NzItNjg2NS00ZDE2LTky NTItZTc1ZjdiOTEzNjhhLzgyZDBmNDcyLTY4NjUtNGQxNi05MjUyLWU3NWY3Yjkx MzY4YS5jcmwwHwYDVR0jBBgwFoAUkfJo9ZIoQMeG0bKiWLeu+U2evCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MmQwZjQ3Mi02ODY1LTRkMTYtOTI1Mi1lNzVm N2I5MTM2OGEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAQL4UMA4E AgACMAgDBgAmAvfnADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBLw5cNSJkWlY3o8F/QTXtqvAOXPQk/jqdA EN91w2GUizoWyVzUfvWwtg+jS5HjGQT0NFYPMhrHDOGYQ/8kZSfxPovalHVcWtsq qe0Kuy91KL1Q5m9xjJh6A97jilENJBActCPoM4SS2IfiQztXAz3CScEQ2g1xLudY 3laqb4qp2jyn1ehXpgee/UjIhIE3Q6eKAOMvUA7kkNVRXbMm26K4sCKxK8wv1NB1 PoS+6YJ4meKv8dX7kg8GECDZcCtKq0Jq13aCd0Wlg1gbkqdBbertUcZvnL8McYIp J39f9Isukl3t7DZMtbiVO7dTBSGTO1xdhKomwE0xXDqwaJ4JiK5N -----END CERTIFICATE-----Generated at Mon May 12 22:51:28 2025 by rpki-client