$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cafceee9-6623-3dbc-8b7b-87b03b1bd65d.roa File: cafceee9-6623-3dbc-8b7b-87b03b1bd65d.roa (raw, json) Hash identifier: sP1OBF6s5kXVb9i8amrsd+zy9HDBkdyoacDhAm5io0A= Subject key identifier: 2D:10:8B:D0:69:05:D5:9D:FD:29:22:F8:F2:7B:9D:B7:10:5B:20:F2 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F432858493243D7D29408EDDEF6CBF580 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cafceee9-6623-3dbc-8b7b-87b03b1bd65d.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 21949 IP address blocks: 64.137.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:d7:d2:94:08:ed:de:f6:cb:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=6b78b36a-e39a-4cea-a6c9-55ed6340ca07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a0:2d:0f:b0:c7:f4:bb:ed:dd:c7:84:0b:eb: 04:72:11:76:9c:5a:ec:93:00:d6:07:ee:48:83:53: 4f:c6:33:29:de:81:a1:00:ee:55:c6:6f:c3:d6:76: 34:55:b3:6d:3b:c4:0b:77:c5:07:1a:4f:81:ca:44: d7:63:71:a4:5c:d7:92:41:0f:fe:db:fe:b8:cb:77: 27:a4:5a:21:2a:8c:57:2c:40:79:e8:0f:35:93:6b: 12:ea:5f:98:3c:b1:11:17:03:25:00:b3:44:42:99: 0c:70:01:b1:2a:cb:50:23:2e:bf:df:b4:f4:e8:64: 62:98:c6:62:bd:70:c4:b2:47:d8:65:e7:ee:ae:f1: 06:71:e5:7c:b4:db:76:4a:a1:32:37:99:b8:d5:27: 7a:d5:80:4a:2d:0e:d5:b5:d7:0b:91:69:fa:34:2e: 97:44:3d:b5:3a:ef:7b:39:4a:30:ba:b5:1c:1e:ad: 9f:81:65:da:b2:c2:f2:b4:dd:7f:c1:f1:10:8a:8f: e7:71:9b:e2:c6:34:07:6b:7b:63:b7:2c:be:78:3c: ef:b2:d1:dd:06:c6:1b:2f:d4:53:58:c2:0e:87:74: 88:3d:59:64:a8:3c:30:1a:f0:7c:3a:1e:3d:69:88: 13:cc:9a:d9:bf:ba:82:93:c3:72:e6:ca:11:1c:0f: bf:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:10:8B:D0:69:05:D5:9D:FD:29:22:F8:F2:7B:9D:B7:10:5B:20:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cafceee9-6623-3dbc-8b7b-87b03b1bd65d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 64.137.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:cd:3c:06:89:e2:3b:e0:a4:a2:c0:5f:ad:55:0f:6c:43:59: 7c:ea:23:da:c3:87:84:ea:21:0b:96:0a:91:2a:d7:cc:dc:0b: 3d:34:9a:b8:c1:0f:6d:f5:78:7f:47:97:06:1b:5d:47:84:b1: 8d:4f:e0:17:f0:e3:f3:76:01:12:08:50:8b:f9:10:58:6a:ba: e4:af:bb:9e:83:74:95:84:d3:1a:18:06:50:af:75:b6:85:17: 37:5f:24:59:97:e9:10:b9:82:94:f3:10:22:2c:bb:e8:f9:bc: f3:42:d2:59:d0:7f:f1:22:c8:dc:d4:e7:aa:dd:9b:00:13:54: f2:29:cc:33:f0:11:5c:33:d5:a7:6a:c7:69:f9:4e:56:b1:73: 89:69:c3:92:c8:bc:15:b8:ae:4a:18:b4:ca:eb:3f:9c:6c:f0: 9a:cd:94:5f:96:0c:3f:07:9a:f6:2d:3a:e4:40:41:ad:99:84: 80:15:50:bd:1d:95:35:32:95:e3:cb:32:3c:25:73:54:70:3d: 4d:35:2c:b9:0f:f6:70:38:2a:6f:dd:a1:01:2d:ff:36:9b:6d: 57:b4:94:f3:fd:91:7b:7d:2f:cd:30:41:14:71:29:8b:68:70: 94:90:fb:ea:c1:9d:e2:28:2c:5c:44:e3:77:7e:17:0f:1d:ac: 72:e9:85:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ9fSlAjt3vbL9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk NmI3OGIzNmEtZTM5YS00Y2VhLWE2YzktNTVlZDYzNDBjYTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6AtD7DH9Lvt3ceEC+sEchF2nFrskwDWB+5I g1NPxjMp3oGhAO5Vxm/D1nY0VbNtO8QLd8UHGk+BykTXY3GkXNeSQQ/+2/64y3cn pFohKoxXLEB56A81k2sS6l+YPLERFwMlALNEQpkMcAGxKstQIy6/37T06GRimMZi vXDEskfYZefurvEGceV8tNt2SqEyN5m41Sd61YBKLQ7VtdcLkWn6NC6XRD21Ou97 OUowurUcHq2fgWXassLytN1/wfEQio/ncZvixjQHa3tjtyy+eDzvstHdBsYbL9RT WMIOh3SIPVlkqDwwGvB8Oh49aYgTzJrZv7qCk8Ny5soRHA+/2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0Qi9BpBdWd/Ski+PJ7nbcQWyDyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvY2FmY2VlZTktNjYyMy0z ZGJjLThiN2ItODdiMDNiMWJkNjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQImAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfNPAaJ4jvgpKLAX61VD2xDWXzqI9rDh4TqIQuWCpEq18zcCz00mrjB D231eH9HlwYbXUeEsY1P4Bfw4/N2ARIIUIv5EFhquuSvu56DdJWE0xoYBlCvdbaF FzdfJFmX6RC5gpTzECIsu+j5vPNC0lnQf/EiyNzU56rdmwATVPIpzDPwEVwz1adq x2n5Tlaxc4lpw5LIvBW4rkoYtMrrP5xs8JrNlF+WDD8HmvYtOuRAQa2ZhIAVUL0d lTUylePLMjwlc1RwPU01LLkP9nA4Km/doQEt/zabbVe0lPP9kXt9L80wQRRxKYto cJSQ++rBneIoLFxE43d+Fw8drHLphf0= -----END CERTIFICATE-----Generated at Tue Apr 8 10:03:57 2025 by rpki-client