$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/b276deed-b654-31aa-aead-607837be5406.roa File: b276deed-b654-31aa-aead-607837be5406.roa (raw, json) Hash identifier: Zv4g5ZaqTse4XzpULVUYc7vrbhYJO3PsWttgf35OJBo= Subject key identifier: 7B:8A:61:20:5A:86:93:CD:8B:66:E6:5F:28:51:A7:EB:53:30:5C:11 Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F43285849BF3F661D478A77590C5FE300 Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/b276deed-b654-31aa-aead-607837be5406.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 16509 IP address blocks: 64.239.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:66:1d:47:8a:77:59:0c:5f:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=672100c6-f901-415d-9621-356bf2203dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0c:4a:5f:f8:ae:65:ad:c8:f8:e7:2c:8a:0d: 83:fc:dd:b2:a9:17:f1:78:48:85:18:8d:0a:72:8b: 13:33:a4:28:20:99:74:81:67:31:dc:cd:0c:4a:1c: b4:93:7e:51:da:c0:52:fc:4e:ff:c3:26:a9:90:9f: f8:4f:5f:ca:93:08:f3:38:8f:85:4e:e9:25:1f:2d: 72:3d:49:eb:ea:47:11:01:fc:56:1f:78:b3:60:2b: 64:20:c1:ad:e3:9b:97:c6:fe:d1:8b:21:fb:61:0f: 57:da:ac:93:c6:b6:13:d2:c2:cc:c4:a3:30:7c:7e: b2:d6:ee:a0:f9:56:6a:18:1e:77:c3:7f:90:48:73: f5:5c:b1:6b:90:59:97:1a:33:74:56:10:9c:e3:b9: d9:cc:bc:3e:87:4c:6e:e7:8f:e4:2e:49:12:f5:97: ed:5c:e5:21:7c:32:14:f1:f3:14:fb:f3:26:10:f3: 4e:19:d7:23:1c:f5:6f:c7:5f:b1:6f:44:d4:27:16: 7f:d2:53:6e:c5:13:ea:ed:47:ba:1b:7a:32:56:03: 21:8a:a4:ae:8f:7e:2d:06:57:aa:b5:35:ae:b4:69: ee:e6:87:3a:f5:4f:ec:f4:b6:74:e4:19:ee:9d:74: 3e:67:ce:7a:38:ea:23:48:b4:e3:91:64:ea:17:33: 48:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:8A:61:20:5A:86:93:CD:8B:66:E6:5F:28:51:A7:EB:53:30:5C:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/b276deed-b654-31aa-aead-607837be5406.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv4: 64.239.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:7a:08:7c:d6:8f:1e:e7:a4:e1:f0:4e:2a:24:35:50:fd:18: 28:8d:47:9d:53:5e:09:80:aa:37:b8:f1:5f:2b:a6:cc:cb:81: 78:99:83:00:98:55:ec:33:85:12:fd:5b:d0:51:a0:1e:39:33: ec:75:b7:94:b4:ed:4b:e9:2e:25:54:0e:0a:a1:d5:08:8a:76: 4d:8a:5f:35:fb:a4:41:a3:4e:cb:6e:7b:ea:08:89:4c:f8:59: e6:0b:bd:c4:b3:8e:79:dd:65:48:7f:4f:c5:cf:af:a7:66:84: 5c:d0:67:ae:f1:ca:5d:aa:fc:08:ca:27:8e:1e:71:68:63:93: 68:6d:e3:96:1b:6e:28:65:0a:3c:97:9a:d1:90:bb:8f:d2:f8: c7:5a:a1:0a:4d:d4:00:53:cc:1e:ad:0b:79:b0:7c:d5:6c:49: 50:95:6d:82:02:db:a0:9a:b4:02:73:5b:a1:0a:3a:7b:61:5d: 85:0b:04:76:06:22:bf:8d:b7:1d:3a:1b:66:ce:8f:4d:1b:4e: 6b:2c:86:84:9d:1a:ec:68:5e:31:31:57:92:f2:e2:5b:3b:bd: 2c:b5:a8:02:18:1d:ce:40:02:5c:7c:32:d8:b8:5b:5d:76:b3: 2b:10:29:9f:6c:e0:55:7b:bc:c0:4d:2a:37:4c:1b:e8:cd:11: 11:2f:ca:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P2YdR4p3WQxf4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NjcyMTAwYzYtZjkwMS00MTVkLTk2MjEtMzU2YmYyMjAzZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggxKX/iuZa3I+Ocsig2D/N2yqRfxeEiFGI0K cosTM6QoIJl0gWcx3M0MShy0k35R2sBS/E7/wyapkJ/4T1/KkwjzOI+FTuklHy1y PUnr6kcRAfxWH3izYCtkIMGt45uXxv7RiyH7YQ9X2qyTxrYT0sLMxKMwfH6y1u6g +VZqGB53w3+QSHP1XLFrkFmXGjN0VhCc47nZzLw+h0xu54/kLkkS9ZftXOUhfDIU 8fMU+/MmEPNOGdcjHPVvx1+xb0TUJxZ/0lNuxRPq7Ue6G3oyVgMhiqSuj34tBleq tTWutGnu5oc69U/s9LZ05BnunXQ+Z856OOojSLTjkWTqFzNI0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHuKYSBahpPNi2bmXyhRp+tTMFwRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvYjI3NmRlZWQtYjY1NC0z MWFhLWFlYWQtNjA3ODM3YmU1NDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQO9tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANB6CHzWjx7npOHwTiokNVD9GCiNR51TXgmAqje48V8rpszLgXiZgwCY VewzhRL9W9BRoB45M+x1t5S07UvpLiVUDgqh1QiKdk2KXzX7pEGjTstue+oIiUz4 WeYLvcSzjnndZUh/T8XPr6dmhFzQZ67xyl2q/AjKJ44ecWhjk2ht45YbbihlCjyX mtGQu4/S+MdaoQpN1ABTzB6tC3mwfNVsSVCVbYIC26CatAJzW6EKOnthXYULBHYG Ir+Ntx06G2bOj00bTmsshoSdGuxoXjExV5Ly4ls7vSy1qAIYHc5AAlx8Mti4W112 sysQKZ9s4FV7vMBNKjdMG+jNEREvyuU= -----END CERTIFICATE-----Generated at Mon May 12 22:59:25 2025 by rpki-client