$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/e157e3cd-7b83-3aa8-9c11-51a53aa79d08.roa File: e157e3cd-7b83-3aa8-9c11-51a53aa79d08.roa (raw, json) Hash identifier: uMI8VOfd7Ya03jX7wAVv0Yt5RGhqBWd8TB3pGtalYtc= Subject key identifier: D5:05:E8:00:67:5D:1E:99:26:FC:B3:21:3D:3A:57:0A:9E:98:99:D9 Certificate issuer: /CN=3d1c553d-7b57-40d6-a02c-deff888b678d Certificate serial: 010D0C9F43285848960B556D7D47746823D88C80 Authority key identifier: C3:50:10:57:56:61:51:2F:FA:51:AD:FB:AC:E7:E9:57:3C:D5:7D:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/e157e3cd-7b83-3aa8-9c11-51a53aa79d08.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 64.65.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3d1c553d-7b57-40d6-a02c-deff888b678d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3d1c553d-7b57-40d6-a02c-deff888b678d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:55:6d:7d:47:74:68:23:d8:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d1c553d-7b57-40d6-a02c-deff888b678d Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=1133f68a-f500-4613-949a-1ae860974d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:98:eb:fe:fe:d6:e1:ad:c2:4b:7f:57:64:e8: 3e:73:a8:be:95:00:58:41:20:4c:07:1c:cc:49:9e: 13:ff:c0:53:48:f1:14:8d:03:e4:b0:e5:c7:3a:ab: 44:ff:41:a8:1b:46:cc:13:3b:e1:8c:23:1e:1f:ec: 46:c6:af:e5:47:5f:d7:55:88:aa:39:fa:b0:7c:61: 84:14:56:e1:84:85:f7:40:5b:e4:2e:f1:d9:28:a6: 33:de:4f:f9:5e:82:55:eb:af:69:4b:9b:48:5b:6f: 65:1b:54:a0:90:a3:a1:b0:ea:b3:f4:4f:25:33:59: 16:70:f2:f4:52:80:40:c1:51:6f:b9:fb:c2:1a:f5: 52:68:64:94:0b:19:39:2b:1e:ea:8b:2e:08:46:4c: 4d:d5:de:41:30:3e:76:2d:71:ff:46:e3:73:26:8d: 30:80:65:ce:ab:71:ec:ac:0d:f5:c6:ad:39:11:17: bc:db:bd:72:74:a5:24:4c:7a:3e:51:8c:1d:71:65: b2:50:f3:a0:25:12:e9:5c:85:45:c9:37:1f:00:4b: 46:c0:11:b0:37:3d:da:0e:49:3e:76:8f:18:fa:fc: 43:4b:d1:c9:79:f7:dc:47:60:6c:b4:54:9c:94:11: 01:d6:e6:01:83:80:80:e4:83:e6:fa:3a:e1:2e:47: 4a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:05:E8:00:67:5D:1E:99:26:FC:B3:21:3D:3A:57:0A:9E:98:99:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/e157e3cd-7b83-3aa8-9c11-51a53aa79d08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3d1c553d-7b57-40d6-a02c-deff888b678d.crl X509v3 Authority Key Identifier: keyid:C3:50:10:57:56:61:51:2F:FA:51:AD:FB:AC:E7:E9:57:3C:D5:7D:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d.cer sbgp-ipAddrBlock: critical IPv4: 64.65.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:bd:91:d7:2a:d7:bd:25:5a:da:36:ac:7c:4e:38:80:22:ae: 89:5d:69:c5:eb:de:43:f1:57:b4:1f:47:5c:0c:b6:d5:06:6f: ec:05:26:23:f1:36:94:5e:44:5c:70:e6:88:63:40:e5:c1:ad: 07:55:15:df:7a:76:83:4f:1d:ba:65:da:d2:a9:ff:a2:0f:99: 96:82:1d:02:7a:ba:12:b3:16:7d:12:fb:a1:71:f6:5c:6b:7f: 6b:4e:69:57:61:bb:b0:92:b1:16:0c:99:cb:f7:a1:48:e2:cb: 47:b0:b6:7b:96:d7:b7:0e:ba:cd:4a:46:70:36:65:b5:48:74: 2c:6d:52:71:32:56:e1:eb:ea:c3:a5:ca:51:32:15:8a:2d:33: 86:d8:79:0e:af:2b:a4:d0:7a:7a:d9:90:e7:8a:6f:43:27:cf: d1:e0:fa:b3:d5:7d:56:25:11:40:67:23:54:c3:40:be:4c:98: 76:07:2a:1e:d8:31:4a:cf:cd:12:6b:d7:34:ae:7e:9a:6b:1a: 7b:33:11:83:e4:aa:a3:45:93:c8:32:b5:a6:d7:d6:b8:a4:96: 97:aa:9c:76:77:7e:55:dd:96:f5:64:bb:07:7c:b6:0a:3f:47: d8:ef:e1:d0:a6:c6:1b:d1:a1:41:1f:7e:12:58:b6:d1:76:8e: d7:04:28:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC1VtfUd0aCPYjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QxYzU1M2QtN2I1Ny00MGQ2LWEwMmMtZGVmZjg4OGI2 NzhkMB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk MTEzM2Y2OGEtZjUwMC00NjEzLTk0OWEtMWFlODYwOTc0ZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJjr/v7W4a3CS39XZOg+c6i+lQBYQSBMBxzM SZ4T/8BTSPEUjQPksOXHOqtE/0GoG0bMEzvhjCMeH+xGxq/lR1/XVYiqOfqwfGGE FFbhhIX3QFvkLvHZKKYz3k/5XoJV669pS5tIW29lG1SgkKOhsOqz9E8lM1kWcPL0 UoBAwVFvufvCGvVSaGSUCxk5Kx7qiy4IRkxN1d5BMD52LXH/RuNzJo0wgGXOq3Hs rA31xq05ERe8271ydKUkTHo+UYwdcWWyUPOgJRLpXIVFyTcfAEtGwBGwNz3aDkk+ do8Y+vxDS9HJeffcR2BstFSclBEB1uYBg4CA5IPm+jrhLkdKLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUF6ABnXR6ZJvyzIT06VwqemJnZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zZDFj NTUzZC03YjU3LTQwZDYtYTAyYy1kZWZmODg4YjY3OGQvZTE1N2UzY2QtN2I4My0z YWE4LTljMTEtNTFhNTNhYTc5ZDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2QxYzU1M2QtN2I1Ny00MGQ2LWEw MmMtZGVmZjg4OGI2NzhkLzNkMWM1NTNkLTdiNTctNDBkNi1hMDJjLWRlZmY4ODhi Njc4ZC5jcmwwHwYDVR0jBBgwFoAUw1AQV1ZhUS/6Ua37rOfpVzzVfZ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zZDFjNTUzZC03YjU3LTQwZDYtYTAyYy1kZWZm ODg4YjY3OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEE9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAC9kdcq170lWto2rHxOOIAiroldacXr3kPxV7QfR1wMttUGb+wFJiPx NpReRFxw5ohjQOXBrQdVFd96doNPHbpl2tKp/6IPmZaCHQJ6uhKzFn0S+6Fx9lxr f2tOaVdhu7CSsRYMmcv3oUjiy0ewtnuW17cOus1KRnA2ZbVIdCxtUnEyVuHr6sOl ylEyFYotM4bYeQ6vK6TQenrZkOeKb0Mnz9Hg+rPVfVYlEUBnI1TDQL5MmHYHKh7Y MUrPzRJr1zSufpprGnszEYPkqqNFk8gytabX1riklpeqnHZ3flXdlvVkuwd8tgo/ R9jv4dCmxhvRoUEffhJYttF2jtcEKKU= -----END CERTIFICATE-----Generated at Sat Apr 5 12:15:08 2025 by rpki-client