$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/3c0e2ac5-9045-3d8c-9ebc-4c1e6c2ea088.roa File: 3c0e2ac5-9045-3d8c-9ebc-4c1e6c2ea088.roa (raw, json) Hash identifier: URQuAd6iolAgIG+8CBNqfmU45CMioSW4zWLTMfv/raw= Subject key identifier: D4:49:BC:0C:49:74:04:AA:0B:97:F6:51:BD:81:10:BA:9F:EA:89:02 Certificate issuer: /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce Certificate serial: 010D0C9F43285849D42FAFA6AB764509E2C59980 Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/3c0e2ac5-9045-3d8c-9ebc-4c1e6c2ea088.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 8560 IP address blocks: 65.38.96.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:af:a6:ab:76:45:09:e2:c5:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=dcfade52-3557-49ce-bee5-2c633b3918a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3b:a5:c9:2f:59:c8:4b:fa:2a:30:a4:3b:97: e6:b9:4c:b1:38:04:cc:83:27:c0:85:d0:38:69:18: 22:9e:8a:74:77:09:8b:bd:c8:29:ae:68:b9:44:c0: 59:80:0a:8d:63:f1:02:d6:4d:de:09:a5:e8:9d:f8: e0:58:9e:47:9f:70:fb:ff:1e:4c:c4:e4:0e:2c:ab: 3c:ee:d7:07:b6:90:b9:fe:75:0e:0d:e5:6a:79:d7: a5:10:7b:61:83:d6:66:1c:8c:08:07:62:28:44:0f: 8f:f3:1e:23:81:af:13:84:34:6e:24:00:ea:8d:b8: 81:c4:42:ca:c3:b8:98:31:a0:54:78:ec:b4:1a:b9: 4c:33:63:a0:08:a7:51:ad:cb:b6:96:d8:3a:af:ac: 8d:78:bd:04:72:52:24:93:08:d4:c0:22:14:32:d5: e4:ac:d3:d8:9c:df:82:1a:88:40:f3:fd:2d:2b:77: b2:2f:51:57:4b:86:22:8e:3c:c8:e5:c5:f5:a0:8c: 4a:a1:27:ce:17:62:61:02:5b:3f:7f:3b:46:4f:49: c1:95:78:70:cf:c2:0e:6c:49:09:ed:b1:2c:e7:4f: 1b:26:e0:1d:79:15:dc:1f:05:60:c9:fc:16:ba:9f: 39:26:c0:fc:6d:ad:de:ff:53:46:5e:be:0f:14:5d: 0f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:49:BC:0C:49:74:04:AA:0B:97:F6:51:BD:81:10:BA:9F:EA:89:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/3c0e2ac5-9045-3d8c-9ebc-4c1e6c2ea088.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl X509v3 Authority Key Identifier: keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer sbgp-ipAddrBlock: critical IPv4: 65.38.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:96:00:98:c8:40:b4:e4:da:39:0e:c2:ab:78:64:a9:55:46: d2:d5:5b:03:59:83:d7:4c:4a:2c:cb:10:ec:3b:13:9e:98:13: 92:a1:67:d8:02:c6:f6:4b:53:fe:ee:d6:4f:c9:db:3e:93:40: 59:0e:06:58:c2:28:67:40:a5:9b:46:3e:1e:c9:7d:20:72:c9: a0:cd:88:68:47:0e:b4:09:8b:67:2d:7a:90:19:26:7c:b4:b2: 15:18:56:72:0e:89:fa:2d:98:0a:b3:22:8c:69:96:72:e5:c7: 68:76:b4:1d:9d:9b:01:be:34:ee:4b:8f:7b:19:0a:08:a8:3a: be:88:36:b5:60:28:c6:4c:c0:2a:c6:ef:fa:84:7a:9b:53:0f: 21:2a:20:1a:2f:70:ea:3c:3e:44:bc:2a:00:f1:ad:82:58:3a: bc:e6:3c:b3:ea:67:a9:2e:dd:0a:0c:e2:93:6d:3a:fb:06:b2: b5:f6:61:ec:64:9c:90:68:8b:1c:73:6e:a0:88:af:b4:fb:3b: 78:d0:e1:3a:9b:67:96:47:53:12:ab:48:90:71:b8:27:ee:b5: 72:ee:83:56:87:af:b7:82:4d:cd:b1:78:25:71:1e:5e:47:87: d7:ee:36:16:c9:09:b6:8f:d3:1b:d0:b2:ed:03:6b:e7:fa:70: c1:51:ab:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL6+mq3ZFCeLFmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JhNzk5ODgtODBiYy00ZmNiLThmYWYtNjI0NDAwZDVm MWNlMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZGNmYWRlNTItMzU1Ny00OWNlLWJlZTUtMmM2MzNiMzkxOGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDulyS9ZyEv6KjCkO5fmuUyxOATMgyfAhdA4 aRginop0dwmLvcgprmi5RMBZgAqNY/EC1k3eCaXonfjgWJ5Hn3D7/x5MxOQOLKs8 7tcHtpC5/nUODeVqedelEHthg9ZmHIwIB2IoRA+P8x4jga8ThDRuJADqjbiBxELK w7iYMaBUeOy0GrlMM2OgCKdRrcu2ltg6r6yNeL0EclIkkwjUwCIUMtXkrNPYnN+C GohA8/0tK3eyL1FXS4YijjzI5cX1oIxKoSfOF2JhAls/fztGT0nBlXhwz8IObEkJ 7bEs508bJuAdeRXcHwVgyfwWup85JsD8ba3e/1NGXr4PFF0P7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRJvAxJdASqC5f2Ub2BELqf6okCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3 OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0MDBkNWYxY2UvM2MwZTJhYzUtOTA0NS0z ZDhjLTllYmMtNGMxZTZjMmVhMDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2JhNzk5ODgtODBiYy00ZmNiLThm YWYtNjI0NDAwZDVmMWNlLzdiYTc5OTg4LTgwYmMtNGZjYi04ZmFmLTYyNDQwMGQ1 ZjFjZS5jcmwwHwYDVR0jBBgwFoAUNBe8v2tKYwrKo8WIvEUP5ZR5xFowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0 MDBkNWYxY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQSZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyWAJjIQLTk2jkOwqt4ZKlVRtLVWwNZg9dMSizLEOw7E56YE5KhZ9gC xvZLU/7u1k/J2z6TQFkOBljCKGdApZtGPh7JfSByyaDNiGhHDrQJi2ctepAZJny0 shUYVnIOifotmAqzIoxplnLlx2h2tB2dmwG+NO5Lj3sZCgioOr6INrVgKMZMwCrG 7/qEeptTDyEqIBovcOo8PkS8KgDxrYJYOrzmPLPqZ6ku3QoM4pNtOvsGsrX2Yexk nJBoixxzbqCIr7T7O3jQ4TqbZ5ZHUxKrSJBxuCfutXLug1aHr7eCTc2xeCVxHl5H h9fuNhbJCbaP0xvQsu0Da+f6cMFRq4E= -----END CERTIFICATE-----Generated at Wed May 14 12:30:37 2025 by rpki-client