$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/42ad508a-1d9b-3416-b900-7d41869eb2b5.roa File: 42ad508a-1d9b-3416-b900-7d41869eb2b5.roa (raw, json) Hash identifier: nrmdBWkTkZhmPTs3cyrBlEQx+g1GIP0ve4aPDkNPl8E= Subject key identifier: A6:FF:13:03:5C:EA:18:72:49:93:BD:2D:5D:68:FE:3E:0A:E7:1B:67 Certificate issuer: /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Certificate serial: 010D0C9F43285849AA4F72274648B0FE9FAB69C0 Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/42ad508a-1d9b-3416-b900-7d41869eb2b5.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 14217 IP address blocks: 64.21.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:72:27:46:48:b0:fe:9f:ab:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=3c625afa-223d-4c66-bc6c-474280ff708d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8f:12:e6:98:51:b9:9a:c7:03:65:23:08:6a: 45:80:14:87:8a:55:38:ac:06:12:3d:60:e4:cf:ba: a2:ad:1b:e1:23:ca:1f:c9:1d:31:60:31:8b:14:48: 2f:f1:40:44:39:1e:31:41:ad:0b:e2:f6:30:a1:46: 6c:e5:ac:8b:dc:79:42:8c:18:63:4e:99:a9:03:1f: 46:24:9d:78:21:84:f3:3f:77:c5:58:f6:c8:14:bc: ad:61:50:0f:4e:03:2b:59:df:60:49:3d:3e:e4:37: 8f:bd:ee:40:f1:c0:5c:60:e5:66:07:f7:48:83:80: 0f:8f:93:a9:6b:c8:1a:04:d5:eb:9c:57:fb:51:ae: 37:10:d8:8c:82:66:fa:bc:48:52:0c:07:a6:d3:73: a7:90:7c:72:b9:c8:0b:45:e6:c1:b7:fc:23:55:0c: fe:7e:40:06:43:f3:ca:fd:a7:bc:1c:76:e8:bf:46: a8:d3:a7:3c:6e:2a:9b:c4:9f:21:57:c6:84:33:8f: 20:b8:aa:2d:43:4d:24:58:a9:09:ad:c1:d9:70:40: 01:70:c8:7e:ca:c3:24:fc:a2:b0:43:93:8a:c7:a1: 13:93:ac:88:39:c2:3e:78:af:d6:2f:3a:32:22:b3: 14:4d:e9:55:a8:b5:7e:d6:71:6d:7d:fa:e7:d5:28: 8a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FF:13:03:5C:EA:18:72:49:93:BD:2D:5D:68:FE:3E:0A:E7:1B:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/42ad508a-1d9b-3416-b900-7d41869eb2b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl X509v3 Authority Key Identifier: keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer sbgp-ipAddrBlock: critical IPv4: 64.21.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:50:41:11:9a:dc:14:07:84:76:91:f4:37:e6:75:cf:e3:f6: 78:53:a2:2a:a7:db:6c:27:d7:a5:da:59:65:6e:d2:8a:4f:87: c0:b8:33:44:d6:a3:ff:04:e8:f4:cb:04:dd:b1:49:ed:d3:00: 2a:eb:25:db:48:e5:49:38:0c:55:ba:2f:7f:94:c0:d9:ae:8b: 30:75:91:2f:a7:78:73:e6:fd:77:f2:c9:94:30:b0:98:89:4e: 0d:29:21:14:f6:56:46:80:ef:9b:9a:51:3b:9c:c5:0a:af:69: fb:38:ec:9a:b2:92:1f:58:ef:ea:7b:4f:d9:b5:dc:b7:17:bf: 07:30:0a:cd:cf:15:0a:af:9f:97:46:a7:da:62:00:ad:de:4f: b2:41:7b:d5:09:08:68:42:df:3b:6c:65:93:fb:b2:9f:8b:90: 3f:98:cd:7d:d2:eb:e3:e9:80:a6:49:fb:1b:b6:fc:fe:4c:59: e8:89:c8:d0:fc:e0:4a:47:7a:0b:e2:d5:c4:77:f7:ca:d4:6d: a9:be:f1:22:2d:f8:04:7f:22:46:70:db:5c:65:85:9e:a8:fc: 6d:72:1c:91:21:76:ba:71:1d:40:c5:c8:3e:c1:1b:02:b4:c1: 27:ae:d5:7a:04:bb:ce:38:48:f4:ef:82:53:b4:17:90:18:4c: 9c:a2:4d:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3InRkiw/p+racAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBjNDNiNzUtMTA2Zi00OWU3LWJmM2EtNGFlYjk0NTY2 ZTkwMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk M2M2MjVhZmEtMjIzZC00YzY2LWJjNmMtNDc0MjgwZmY3MDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY8S5phRuZrHA2UjCGpFgBSHilU4rAYSPWDk z7qirRvhI8ofyR0xYDGLFEgv8UBEOR4xQa0L4vYwoUZs5ayL3HlCjBhjTpmpAx9G JJ14IYTzP3fFWPbIFLytYVAPTgMrWd9gST0+5DePve5A8cBcYOVmB/dIg4APj5Op a8gaBNXrnFf7Ua43ENiMgmb6vEhSDAem03OnkHxyucgLRebBt/wjVQz+fkAGQ/PK /ae8HHbov0ao06c8biqbxJ8hV8aEM48guKotQ00kWKkJrcHZcEABcMh+ysMk/KKw Q5OKx6ETk6yIOcI+eK/WLzoyIrMUTelVqLV+1nFtffrn1SiKsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKb/EwNc6hhySZO9LV1o/j4K5xtnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0 M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWViOTQ1NjZlOTAvNDJhZDUwOGEtMWQ5Yi0z NDE2LWI5MDAtN2Q0MTg2OWViMmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBjNDNiNzUtMTA2Zi00OWU3LWJm M2EtNGFlYjk0NTY2ZTkwL2IwYzQzYjc1LTEwNmYtNDllNy1iZjNhLTRhZWI5NDU2 NmU5MC5jcmwwHwYDVR0jBBgwFoAUu0SUXwFyTe65Irjq0C6iB25OIzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWVi OTQ1NjZlOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBW/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5QQRGa3BQHhHaR9Dfmdc/j9nhToiqn22wn16XaWWVu0opPh8C4M0TW o/8E6PTLBN2xSe3TACrrJdtI5Uk4DFW6L3+UwNmuizB1kS+neHPm/XfyyZQwsJiJ Tg0pIRT2VkaA75uaUTucxQqvafs47Jqykh9Y7+p7T9m13LcXvwcwCs3PFQqvn5dG p9piAK3eT7JBe9UJCGhC3ztsZZP7sp+LkD+YzX3S6+PpgKZJ+xu2/P5MWeiJyND8 4EpHegvi1cR398rUbam+8SIt+AR/IkZw21xlhZ6o/G1yHJEhdrpxHUDFyD7BGwK0 wSeu1XoEu844SPTvglO0F5AYTJyiTaY= -----END CERTIFICATE-----Generated at Sat May 10 07:22:52 2025 by rpki-client