$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eae38249-949c-338e-a384-9f61ab8838c3.roa File: eae38249-949c-338e-a384-9f61ab8838c3.roa (raw, json) Hash identifier: yQ+d1dy+yasaVGfj/E7x2sSvJvzXhNIwSA/lhzYS7ko= Subject key identifier: 98:E9:01:C3:3C:41:D9:FB:12:3A:FD:71:C0:90:24:EF:C6:66:C2:FE Certificate issuer: /CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Certificate serial: 010D0C9F432858493C0920CBA8A0E28E357D9780 Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eae38249-949c-338e-a384-9f61ab8838c3.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 62856 IP address blocks: 64.207.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:20:cb:a8:a0:e2:8e:35:7d:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=ab4111d0-f009-4a03-8028-43ed3b713425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:10:8f:7e:a1:19:25:3c:43:c1:63:0f:6b:46: 60:44:fa:4e:e0:94:46:97:44:1b:90:8a:d8:77:f8: 86:b0:ff:2a:db:8c:40:f5:fe:92:dc:c9:35:23:d1: f4:8f:9b:8c:50:4e:b4:ba:93:30:78:f8:24:65:6e: af:2b:cc:7a:d5:32:18:ee:fb:34:ff:6a:41:5e:4c: 32:53:f2:c7:69:05:1f:3c:c3:92:e5:72:0f:40:1d: 87:34:4e:6e:55:c6:fc:e0:0c:e7:d4:47:66:7f:c7: ff:ee:db:70:ca:9e:33:59:88:5a:d8:ab:17:45:f2: f7:ab:b6:b8:3b:e9:f0:c8:ee:e9:af:07:66:eb:0c: 54:c8:be:cb:63:59:89:cd:6c:1e:26:38:c6:07:b0: 4a:89:86:84:0b:8b:f9:f5:ce:6a:42:bb:87:a1:72: 5e:98:75:31:67:94:20:6a:1d:f3:ef:2b:2a:fa:93: 86:57:18:70:30:e6:b3:b5:59:ea:09:4c:d5:5a:b1: e1:3a:59:40:30:fe:3c:3f:6e:61:8e:1c:b2:89:a2: 1e:31:da:b7:d5:5b:48:bd:13:7b:78:24:25:3b:95: 9a:6f:01:ab:56:76:c6:e4:ed:25:ac:4a:6c:66:c4: 06:88:d9:29:28:fc:e5:cc:40:76:85:30:71:76:9f: 09:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E9:01:C3:3C:41:D9:FB:12:3A:FD:71:C0:90:24:EF:C6:66:C2:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eae38249-949c-338e-a384-9f61ab8838c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl X509v3 Authority Key Identifier: keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer sbgp-ipAddrBlock: critical IPv4: 64.207.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:88:84:fc:ac:48:20:54:d0:3c:6e:c0:29:cf:22:3c:6b:7b: df:30:71:9d:c3:a8:bb:ae:1a:4b:9e:3a:ca:92:c3:e3:b2:9d: da:42:7a:74:72:02:37:59:32:24:cb:86:60:1f:f3:fb:bb:96: 2e:ac:91:ec:57:63:0b:96:1f:44:11:41:94:d1:72:b3:84:3c: cc:8b:29:50:b8:72:4b:3c:e3:89:fd:a9:10:57:a5:3c:a2:83: 0f:69:b5:4b:13:3a:b1:07:87:e5:6e:29:d3:04:bb:eb:01:bf: 4b:51:c4:3a:78:e7:e9:f4:c7:e8:3d:db:6f:d2:f6:54:ce:dc: b3:f4:c4:05:c5:f7:5c:55:52:b4:98:c9:10:1d:b1:d5:63:97: 20:22:47:04:7a:2f:7e:d3:ef:52:c7:38:64:46:89:8b:6a:2d: c5:c6:d1:aa:7b:e1:95:08:58:56:f7:c7:d7:3b:5b:40:05:bd: 5d:6b:6e:b4:44:22:95:b4:f6:17:ce:cc:85:d6:b9:a5:34:99: 46:69:ef:0a:fc:4a:c3:4e:7a:16:05:ac:74:1c:b0:f6:f1:7a: e1:c5:96:b5:ae:25:43:92:83:e2:f4:ad:a9:89:88:2d:6e:84: e3:e0:fe:3b:3c:4d:63:13:11:2d:25:95:87:64:34:9f:94:a5: 46:db:b9:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CSDLqKDijjV9l4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5 ZWYzMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk YWI0MTExZDAtZjAwOS00YTAzLTgwMjgtNDNlZDNiNzEzNDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxCPfqEZJTxDwWMPa0ZgRPpO4JRGl0QbkIrY d/iGsP8q24xA9f6S3Mk1I9H0j5uMUE60upMwePgkZW6vK8x61TIY7vs0/2pBXkwy U/LHaQUfPMOS5XIPQB2HNE5uVcb84Azn1Edmf8f/7ttwyp4zWYha2KsXRfL3q7a4 O+nwyO7prwdm6wxUyL7LY1mJzWweJjjGB7BKiYaEC4v59c5qQruHoXJemHUxZ5Qg ah3z7ysq+pOGVxhwMOaztVnqCUzVWrHhOllAMP48P25hjhyyiaIeMdq31VtIvRN7 eCQlO5WabwGrVnbG5O0lrEpsZsQGiNkpKPzlzEB2hTBxdp8JhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjpAcM8Qdn7Ejr9ccCQJO/GZsL+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3 ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvZWFlMzgyNDktOTQ5Yy0z MzhlLWEzODQtOWY2MWFiODgzOGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWFmN2RmMzUtYzY3Zi00NDBkLTk3 OTktNDYxZTdhODA5ZWYzL2VhZjdkZjM1LWM2N2YtNDQwZC05Nzk5LTQ2MWU3YTgw OWVmMy5jcmwwHwYDVR0jBBgwFoAU2Wzj3bzwBlTPKTIqIy/84RLCWzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFl N2E4MDllZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQM/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeIhPysSCBU0DxuwCnPIjxre98wcZ3DqLuuGkueOsqSw+OyndpCenRy AjdZMiTLhmAf8/u7li6skexXYwuWH0QRQZTRcrOEPMyLKVC4cks844n9qRBXpTyi gw9ptUsTOrEHh+VuKdMEu+sBv0tRxDp45+n0x+g922/S9lTO3LP0xAXF91xVUrSY yRAdsdVjlyAiRwR6L37T71LHOGRGiYtqLcXG0ap74ZUIWFb3x9c7W0AFvV1rbrRE IpW09hfOzIXWuaU0mUZp7wr8SsNOehYFrHQcsPbxeuHFlrWuJUOSg+L0ramJiC1u hOPg/js8TWMTES0llYdkNJ+UpUbbuWc= -----END CERTIFICATE-----Generated at Tue Apr 8 18:23:32 2025 by rpki-client