$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8/a20f1c23-b345-360d-ab0a-26cae59bee50.roa File: a20f1c23-b345-360d-ab0a-26cae59bee50.roa (raw, json) Hash identifier: b9/p+LKEyvbs0LAfHVvKdeLD6GA8ULAeuSV9dsVlsmE= Subject key identifier: 80:BC:0D:C3:B0:41:90:39:F3:50:84:74:3D:AF:19:5C:25:92:3A:09 Certificate issuer: /CN=70bfa7b5-c12d-44b9-84de-fe33a4838fa8 Certificate serial: 010D0C9F432858490E16B7578E7C574060040B80 Authority key identifier: FD:7D:7F:71:AF:08:52:01:53:23:3F:DA:08:72:67:94:FC:D9:5B:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8/a20f1c23-b345-360d-ab0a-26cae59bee50.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 64.207.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8/70bfa7b5-c12d-44b9-84de-fe33a4838fa8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8/70bfa7b5-c12d-44b9-84de-fe33a4838fa8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:b7:57:8e:7c:57:40:60:04:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70bfa7b5-c12d-44b9-84de-fe33a4838fa8 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=99f00a9c-d365-49f5-9e4f-4189850aad44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:25:ff:e4:79:6f:4c:3a:81:af:73:2b:91:e7: fc:c6:d2:92:31:c7:11:9c:65:42:bb:30:4c:2c:45: 41:f9:8b:63:7f:91:2d:61:03:51:28:f7:09:a0:d1: f3:73:09:86:37:f7:c7:c1:e2:a1:b2:aa:1c:f3:77: ca:35:a9:65:74:ac:38:fd:68:df:6c:ae:fd:5f:d6: 37:a4:c4:24:93:a5:3a:eb:7b:99:c5:9d:a3:bb:28: dc:1d:4f:33:be:c1:bc:2b:29:6e:da:22:f6:e4:4c: 60:9a:a2:93:f4:8d:54:d6:8b:dc:ea:5e:14:cb:48: a1:e0:1c:a1:5d:37:48:51:c7:f4:51:3d:31:e9:ac: c0:03:19:b4:6a:e1:ef:1d:0e:40:7f:9b:fc:81:19: 32:1a:07:d3:aa:61:01:de:8f:bd:8e:79:0e:6c:3e: c2:6c:13:50:39:21:39:a1:b4:47:56:ab:cf:99:98: 61:f0:a8:b4:79:ab:83:58:b5:b5:33:1e:2a:07:c1: 30:2e:74:ac:1e:1e:98:ef:fa:15:26:7f:06:2f:2b: f1:4b:46:6e:20:48:55:69:84:f9:e9:ab:8e:1b:c0: c4:d7:b5:fc:c1:fd:d6:b2:fd:d6:76:53:09:ff:b0: 4f:b1:a1:3b:61:b7:9c:83:74:c0:3d:13:e6:4f:1b: 8d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BC:0D:C3:B0:41:90:39:F3:50:84:74:3D:AF:19:5C:25:92:3A:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8/a20f1c23-b345-360d-ab0a-26cae59bee50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8/70bfa7b5-c12d-44b9-84de-fe33a4838fa8.crl X509v3 Authority Key Identifier: keyid:FD:7D:7F:71:AF:08:52:01:53:23:3F:DA:08:72:67:94:FC:D9:5B:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8.cer sbgp-ipAddrBlock: critical IPv4: 64.207.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:d8:94:0d:cc:5a:ec:bd:c8:4a:b4:b2:e9:67:9f:cf:8d:fd: 73:ca:0b:09:2f:de:51:a6:ea:3a:2e:27:0f:1d:16:1f:3f:60: bd:b7:db:cc:43:54:24:87:94:32:5f:2b:fd:f4:2f:a8:6f:f9: 75:e2:23:f5:47:09:f5:64:db:17:63:b8:02:bb:a1:e9:ed:26: b4:85:d2:60:42:b4:1c:8d:d0:53:1e:3b:25:87:4e:9c:c0:75: c5:33:71:fa:21:33:07:8f:e9:22:ed:7d:69:14:66:c3:82:8b: a2:27:15:01:75:7a:83:87:99:25:91:0e:9f:73:0d:22:04:af: a1:db:66:1a:a7:5e:de:c0:5e:0b:83:0b:5b:03:56:40:6f:2e: b3:63:77:c8:40:a4:70:81:54:35:ed:70:64:ed:a1:24:de:5e: 50:f5:1d:54:cd:c9:dc:84:8d:bf:6c:ec:85:1b:c0:fa:12:6c: 93:e5:c1:a3:ff:d4:72:21:f4:0e:5f:68:42:18:c6:56:d2:57: 39:0f:6a:48:9c:86:c9:b3:91:35:8b:6f:ab:48:05:cf:1f:1f: 3c:86:03:0d:ae:5d:38:25:11:7b:77:15:a9:84:61:ae:c5:d5: bf:57:2e:3f:0f:78:41:4d:56:e1:9c:5a:0e:36:7b:29:a0:a6: 5a:a7:6a:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFrdXjnxXQGAEC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBiZmE3YjUtYzEyZC00NGI5LTg0ZGUtZmUzM2E0ODM4 ZmE4MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk OTlmMDBhOWMtZDM2NS00OWY1LTllNGYtNDE4OTg1MGFhZDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSX/5HlvTDqBr3Mrkef8xtKSMccRnGVCuzBM LEVB+Ytjf5EtYQNRKPcJoNHzcwmGN/fHweKhsqoc83fKNalldKw4/WjfbK79X9Y3 pMQkk6U663uZxZ2juyjcHU8zvsG8Kylu2iL25ExgmqKT9I1U1ovc6l4Uy0ih4Byh XTdIUcf0UT0x6azAAxm0auHvHQ5Af5v8gRkyGgfTqmEB3o+9jnkObD7CbBNQOSE5 obRHVqvPmZhh8Ki0eauDWLW1Mx4qB8EwLnSsHh6Y7/oVJn8GLyvxS0ZuIEhVaYT5 6auOG8DE17X8wf3Wsv3WdlMJ/7BPsaE7Ybecg3TAPRPmTxuNWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIC8DcOwQZA581CEdD2vGVwlkjoJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MGJm YTdiNS1jMTJkLTQ0YjktODRkZS1mZTMzYTQ4MzhmYTgvYTIwZjFjMjMtYjM0NS0z NjBkLWFiMGEtMjZjYWU1OWJlZTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzBiZmE3YjUtYzEyZC00NGI5LTg0 ZGUtZmUzM2E0ODM4ZmE4LzcwYmZhN2I1LWMxMmQtNDRiOS04NGRlLWZlMzNhNDgz OGZhOC5jcmwwHwYDVR0jBBgwFoAU/X1/ca8IUgFTIz/aCHJnlPzZW+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83MGJmYTdiNS1jMTJkLTQ0YjktODRkZS1mZTMz YTQ4MzhmYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQM/CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDYlA3MWuy9yEq0sulnn8+N/XPKCwkv3lGm6jouJw8dFh8/YL2328xD VCSHlDJfK/30L6hv+XXiI/VHCfVk2xdjuAK7oentJrSF0mBCtByN0FMeOyWHTpzA dcUzcfohMweP6SLtfWkUZsOCi6InFQF1eoOHmSWRDp9zDSIEr6HbZhqnXt7AXguD C1sDVkBvLrNjd8hApHCBVDXtcGTtoSTeXlD1HVTNydyEjb9s7IUbwPoSbJPlwaP/ 1HIh9A5faEIYxlbSVzkPakichsmzkTWLb6tIBc8fHzyGAw2uXTglEXt3FamEYa7F 1b9XLj8PeEFNVuGcWg42eymgplqnaow= -----END CERTIFICATE-----Generated at Sat Apr 5 11:15:44 2025 by rpki-client