$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa File: a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa (raw, json) Hash identifier: JkJiXtTMeZh0AY8zZ786O5SbHf2MY80ZmElmX2azKOM= Subject key identifier: 9F:3A:17:2D:7A:45:3E:3D:B2:21:DD:09:D9:5B:E9:47:F6:D2:B2:DF Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F43285849C20A2447D4017264111EB5C0 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 46687 IP address blocks: 64.82.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:24:47:d4:01:72:64:11:1e:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=1bfc1a56-1e5a-4b3c-a115-98531e0ad5de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b2:9d:93:31:0d:e2:76:46:07:8e:c9:0a:87: 29:75:26:f5:df:7b:87:be:27:30:7b:60:6d:4b:70: 1b:4b:3d:06:d9:7c:cd:d2:91:5c:3b:4b:17:5f:21: af:c2:fe:d0:9c:dc:55:04:22:ff:b8:d4:ce:c6:2d: f8:59:bc:5f:bf:c3:df:ed:8d:fa:cd:9d:34:ff:fa: c5:a4:ad:42:d3:7a:5b:c1:d8:cf:84:68:87:80:36: c1:97:42:f1:ee:c5:50:09:fd:9c:ce:51:77:b6:58: c0:af:14:e7:7b:ec:da:fc:b8:af:25:4f:0a:cf:b8: 78:3e:d7:c9:c2:54:6d:72:a8:42:91:9d:7c:a4:ac: d7:50:b6:f8:0e:4b:68:ff:09:52:0d:2f:e2:b1:64: df:32:0f:54:bb:58:93:05:6c:20:ac:e7:3b:05:9a: 7b:5f:f6:68:ca:cf:de:2f:99:d2:79:db:c8:86:14: 7d:f1:f4:c1:d2:4d:f5:58:44:72:26:4f:6f:0b:95: c6:20:4e:4c:91:5b:81:6c:cd:13:78:31:07:da:2b: e4:07:2b:a9:fc:c5:78:33:4b:3c:e3:33:57:c7:aa: cb:54:76:69:84:b2:8f:7c:f9:58:07:5c:d3:ba:84: 6d:76:e9:0f:83:cc:d3:c9:1c:9b:b1:52:cf:36:48: 9b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3A:17:2D:7A:45:3E:3D:B2:21:DD:09:D9:5B:E9:47:F6:D2:B2:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 64.82.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:c1:8a:b6:f0:8e:e7:28:d7:c6:46:5c:14:69:97:b9:ea:8c: e7:52:c8:a1:67:08:35:f8:a5:43:79:b5:12:52:b6:cb:a4:6d: f7:51:53:70:83:0c:c5:38:4b:db:7b:56:13:14:a2:28:92:99: f9:ae:41:7f:6e:cc:2c:c6:01:5c:68:57:7a:94:6f:ad:6e:d5: 57:08:0f:38:91:d0:06:e6:2d:82:e6:6a:e8:f8:6c:ed:70:44: aa:51:1d:4f:d7:36:02:3c:7d:49:e3:8b:61:c2:51:23:8b:eb: 53:8d:01:92:18:72:4d:27:96:90:b6:aa:ee:1a:16:c2:c9:7e: 96:4b:69:8f:54:1f:91:38:fe:49:ca:63:6a:b4:25:2a:58:eb: b8:d3:e5:5b:ba:46:2f:01:71:51:71:cb:cf:fd:08:bf:a9:ce: a3:2f:3a:00:3d:3f:f9:00:12:d2:ed:a1:ee:01:6b:00:16:d1: 1d:00:96:22:ca:33:29:38:dd:8e:5f:99:99:69:50:50:f9:51: 0f:f1:fc:0d:50:b9:4c:39:57:e6:29:d0:96:5c:81:02:2d:b2: 37:d7:62:3f:af:a7:4a:b5:c3:92:b1:eb:52:e6:76:d4:31:df: 7b:1a:25:9f:9f:b0:f5:f4:07:6b:d1:17:d1:41:d8:55:bb:63: 49:53:43:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCiRH1AFyZBEetcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk MWJmYzFhNTYtMWU1YS00YjNjLWExMTUtOTg1MzFlMGFkNWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7KdkzEN4nZGB47JCocpdSb133uHvicwe2Bt S3AbSz0G2XzN0pFcO0sXXyGvwv7QnNxVBCL/uNTOxi34Wbxfv8Pf7Y36zZ00//rF pK1C03pbwdjPhGiHgDbBl0Lx7sVQCf2czlF3tljArxTne+za/LivJU8Kz7h4PtfJ wlRtcqhCkZ18pKzXULb4Dkto/wlSDS/isWTfMg9Uu1iTBWwgrOc7BZp7X/Zoys/e L5nSedvIhhR98fTB0k31WERyJk9vC5XGIE5MkVuBbM0TeDEH2ivkByup/MV4M0s8 4zNXx6rLVHZphLKPfPlYB1zTuoRtdukPg8zTyRybsVLPNkibyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ86Fy16RT49siHdCdlb6Uf20rLfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvYTY0YmJmYWEtYTE0Ny0z OWY5LWJmMWYtZGJhZTk5NzFkOTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQFKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrBirbwjuco18ZGXBRpl7nqjOdSyKFnCDX4pUN5tRJStsukbfdRU3CD DMU4S9t7VhMUoiiSmfmuQX9uzCzGAVxoV3qUb61u1VcIDziR0AbmLYLmauj4bO1w RKpRHU/XNgI8fUnji2HCUSOL61ONAZIYck0nlpC2qu4aFsLJfpZLaY9UH5E4/knK Y2q0JSpY67jT5Vu6Ri8BcVFxy8/9CL+pzqMvOgA9P/kAEtLtoe4BawAW0R0AliLK Myk43Y5fmZlpUFD5UQ/x/A1QuUw5V+Yp0JZcgQItsjfXYj+vp0q1w5Kx61LmdtQx 33saJZ+fsPX0B2vRF9FB2FW7Y0lTQ7M= -----END CERTIFICATE-----Generated at Mon May 12 02:12:01 2025 by rpki-client