$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/6851468d-791f-3582-8090-bbf757f8e43b.roa File: 6851468d-791f-3582-8090-bbf757f8e43b.roa (raw, json) Hash identifier: OT1zTzR4BmDMPaijqxGTILlesjfrela7inCRL/E1FcA= Subject key identifier: 9C:6C:6A:70:55:5A:FF:C9:17:AA:42:61:F7:CD:B7:C1:AD:7D:04:22 Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Certificate serial: 010D0C9F4328584930DE707337430CBD4BE9DEC0 Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/6851468d-791f-3582-8090-bbf757f8e43b.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 36236 IP address blocks: 64.68.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:70:73:37:43:0c:bd:4b:e9:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=a00a79d5-cbf7-417d-ad53-b8ae9ea6bf9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:54:9a:79:80:87:38:14:25:58:fc:e9:e4:85: bd:e7:06:2e:75:d4:ef:a0:06:93:21:e9:07:86:2b: e0:6f:28:b3:73:66:55:99:c7:6f:58:77:a0:10:0b: 11:80:34:2d:ce:5b:0a:9d:b9:e3:23:8b:55:ca:90: d0:26:81:2d:33:8e:48:d8:67:58:f6:90:20:4d:ea: d1:42:24:d7:af:0b:4a:dd:6d:5b:3b:58:11:c0:1e: 56:d0:e0:da:3d:ed:dd:81:69:0d:bc:b8:c5:88:fb: 0f:cc:6e:01:32:1f:9f:7e:6e:92:35:7f:ff:70:47: 0c:eb:6a:10:c0:33:3a:b0:de:48:82:09:60:31:6a: 0f:86:cd:51:50:41:b2:94:d9:8b:74:b9:77:58:51: 70:c6:c0:b7:d9:d2:75:b6:67:8f:9c:75:8d:95:c3: 14:aa:2b:48:16:0f:6a:07:68:e9:70:68:2f:82:34: d3:36:6d:69:54:78:16:f5:c1:f9:3d:6d:90:34:c2: 2e:bc:d1:65:0d:78:01:fd:00:2c:4e:c9:7b:d6:d9: f1:33:11:0f:da:01:89:37:31:7d:f1:e8:92:1a:66: f3:46:86:ee:10:ab:a8:2d:e8:25:47:4c:e1:bc:97: a9:fb:c1:55:f5:05:dd:c6:12:7e:1e:6a:1a:a6:e8: 61:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6C:6A:70:55:5A:FF:C9:17:AA:42:61:F7:CD:B7:C1:AD:7D:04:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/6851468d-791f-3582-8090-bbf757f8e43b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl X509v3 Authority Key Identifier: keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer sbgp-ipAddrBlock: critical IPv4: 64.68.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:79:d4:f4:31:08:25:c9:9b:f5:20:6c:67:73:fc:b4:7b:2c: fa:b1:57:50:42:83:40:bc:c6:f2:0b:ed:aa:5c:24:6c:7c:82: f4:a9:d8:bb:0c:c2:f6:74:2f:8b:dc:c5:1a:25:f0:10:1c:ce: 49:5e:63:d1:62:b6:0d:b1:7d:5f:5c:4d:3f:09:2b:83:00:ba: 04:7d:d7:c0:d9:f1:99:f9:1d:ba:e8:82:ab:f4:70:f2:32:fb: 18:67:74:2e:9d:04:6b:9c:ed:e6:42:60:86:68:2a:41:6c:ab: 34:0a:cb:39:53:19:2a:b7:3e:42:70:80:0f:aa:01:c4:68:42: 85:ad:2e:32:4f:45:2b:cd:1c:fc:98:0f:0a:93:b1:82:35:d5: 92:4b:d4:c7:6b:2e:84:46:68:6f:9c:62:60:2e:af:14:de:93: b4:cc:3f:0a:c5:ef:c5:47:74:f4:a9:b6:0b:fb:b2:34:12:73: 82:97:a5:61:86:3c:94:0b:d6:d2:1d:a7:c1:22:fd:eb:db:a4: c9:f9:38:d3:83:04:7f:a5:91:53:87:ce:9b:56:15:49:b0:bd: 20:ae:7e:0a:d0:66:aa:c4:9e:91:46:7d:b8:0d:ab:0b:1a:ac: ee:88:93:92:6f:d7:34:93:a5:8f:88:31:f3:64:bd:70:1b:27: 82:cc:a4:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3nBzN0MMvUvp3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwNzQ5ZWQtNzBlZi00NDdjLWIxN2MtZGE2YmU4ZDdm MzEyMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk YTAwYTc5ZDUtY2JmNy00MTdkLWFkNTMtYjhhZTllYTZiZjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFSaeYCHOBQlWPzp5IW95wYuddTvoAaTIekH hivgbyizc2ZVmcdvWHegEAsRgDQtzlsKnbnjI4tVypDQJoEtM45I2GdY9pAgTerR QiTXrwtK3W1bO1gRwB5W0ODaPe3dgWkNvLjFiPsPzG4BMh+ffm6SNX//cEcM62oQ wDM6sN5IgglgMWoPhs1RUEGylNmLdLl3WFFwxsC32dJ1tmePnHWNlcMUqitIFg9q B2jpcGgvgjTTNm1pVHgW9cH5PW2QNMIuvNFlDXgB/QAsTsl71tnxMxEP2gGJNzF9 8eiSGmbzRobuEKuoLeglR0zhvJep+8FV9QXdxhJ+HmoapuhhiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxsanBVWv/JF6pCYffNt8GtfQQiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3 NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThkN2YzMTIvNjg1MTQ2OGQtNzkxZi0z NTgyLTgwOTAtYmJmNzU3ZjhlNDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDAwNzQ5ZWQtNzBlZi00NDdjLWIx N2MtZGE2YmU4ZDdmMzEyL2QwMDc0OWVkLTcwZWYtNDQ3Yy1iMTdjLWRhNmJlOGQ3 ZjMxMi5jcmwwHwYDVR0jBBgwFoAU9SAVhzNYxRJ4ZGbzsONdivR4eXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZi ZThkN2YzMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQETFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJ51PQxCCXJm/UgbGdz/LR7LPqxV1BCg0C8xvIL7apcJGx8gvSp2LsM wvZ0L4vcxRol8BAczkleY9Fitg2xfV9cTT8JK4MAugR918DZ8Zn5Hbrogqv0cPIy +xhndC6dBGuc7eZCYIZoKkFsqzQKyzlTGSq3PkJwgA+qAcRoQoWtLjJPRSvNHPyY DwqTsYI11ZJL1MdrLoRGaG+cYmAurxTek7TMPwrF78VHdPSptgv7sjQSc4KXpWGG PJQL1tIdp8Ei/evbpMn5ONODBH+lkVOHzptWFUmwvSCufgrQZqrEnpFGfbgNqwsa rO6Ik5Jv1zSTpY+IMfNkvXAbJ4LMpFo= -----END CERTIFICATE-----Generated at Tue Apr 8 11:21:40 2025 by rpki-client