$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/dec8ab73-0262-34e2-a529-54abcb563e1f.roa File: dec8ab73-0262-34e2-a529-54abcb563e1f.roa (raw, json) Hash identifier: Q73gaot0evcGS+7h2hz/lTeNIvUU0i41Yq1mqg5gr3I= Subject key identifier: 85:EF:2D:52:40:A1:FB:0E:6B:C0:0A:1D:03:DF:BC:BE:1A:94:A6:DB Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F43285848E2D11D8AFA4AD44ABDB83280 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/dec8ab73-0262-34e2-a529-54abcb563e1f.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 18607 IP address blocks: 64.145.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:1d:8a:fa:4a:d4:4a:bd:b8:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=f96d1547-9b5d-4302-9ce7-8d6eb4ce8bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1a:fa:a2:ce:72:9b:5c:f8:b3:b6:6b:03:8d: 12:e4:f2:53:2e:56:c9:14:61:0f:25:03:09:73:07: 5a:e2:6a:8e:09:29:89:e4:60:a9:c0:66:dc:97:0c: 3e:19:14:82:3c:a6:53:e0:64:7d:c1:80:a6:3b:9a: d4:7e:c1:49:a3:de:a3:17:76:9b:4f:02:5e:40:2e: e0:4e:63:07:92:c3:e8:bd:06:3f:a0:e4:73:72:39: 8d:e9:cc:7d:18:73:51:3a:0d:28:0b:6d:5f:2b:ea: 9a:34:fd:1a:16:fa:d0:16:53:d1:b2:f6:d4:5b:9f: 19:0c:c7:a8:6a:2d:83:90:33:f9:4c:f0:18:41:5d: 04:f5:33:d5:66:33:ba:53:6f:cf:89:9b:4b:8c:60: 93:24:8d:2b:95:75:73:af:c4:5c:ac:55:28:44:58: 36:e4:b9:be:be:56:97:bf:14:2d:1d:0d:a9:67:fd: d4:99:6c:b3:6e:f8:1d:3a:85:47:f6:14:56:6f:a1: 9b:08:5f:f3:1f:e3:4c:79:c6:76:81:40:5c:71:80: 0b:d5:4c:43:ac:97:47:91:c6:51:f7:86:83:4f:70: d2:8d:9c:4e:54:e4:19:71:f7:e5:c5:a6:7c:51:32: e6:da:c9:9d:41:e7:ef:77:c1:9e:2c:fe:49:43:8a: fa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EF:2D:52:40:A1:FB:0E:6B:C0:0A:1D:03:DF:BC:BE:1A:94:A6:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/dec8ab73-0262-34e2-a529-54abcb563e1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 64.145.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:3d:38:fa:b6:47:88:d2:1f:84:38:19:1d:09:89:42:dc:ed: d5:ec:48:da:a8:bf:35:8d:08:9e:19:bc:08:1d:05:e7:c5:7f: e5:ba:00:e4:b2:d2:59:f3:3d:da:06:7e:ac:44:f8:98:46:18: 27:76:84:73:1c:f0:6b:54:d1:50:cb:da:c0:ea:a6:09:44:ff: e8:f0:59:de:d4:28:94:1a:50:54:5e:13:10:ea:8b:49:54:ec: 06:71:8d:a1:8e:99:99:a8:ff:23:d6:b0:9f:13:ea:44:a4:cd: 29:84:1b:88:a6:38:a6:b7:7b:f6:0c:4c:a3:02:ae:69:cd:8d: b8:44:de:6c:1b:61:e3:63:f6:16:d1:8e:16:c2:ab:3f:33:91: e5:05:50:a9:ca:e6:97:d1:91:fa:85:49:84:14:48:02:94:42: e6:42:8b:10:36:ea:40:f3:b2:ac:78:91:fa:ed:48:da:02:21: 6e:48:01:74:c1:5d:1b:ea:ed:fb:05:58:c7:7b:92:26:26:af: 04:88:8b:f9:87:d1:6c:e7:2c:f2:1c:2f:8a:29:93:a6:8d:c3: c4:59:e8:54:34:11:5c:75:83:b7:13:75:a2:d2:09:96:23:42: 65:25:1b:5d:c7:84:61:88:3e:85:42:21:08:a6:d5:ab:62:45: f6:6a:64:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0R2K+krUSr24MoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk Zjk2ZDE1NDctOWI1ZC00MzAyLTljZTctOGQ2ZWI0Y2U4YmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxr6os5ym1z4s7ZrA40S5PJTLlbJFGEPJQMJ cwda4mqOCSmJ5GCpwGbclww+GRSCPKZT4GR9wYCmO5rUfsFJo96jF3abTwJeQC7g TmMHksPovQY/oORzcjmN6cx9GHNROg0oC21fK+qaNP0aFvrQFlPRsvbUW58ZDMeo ai2DkDP5TPAYQV0E9TPVZjO6U2/PiZtLjGCTJI0rlXVzr8RcrFUoRFg25Lm+vlaX vxQtHQ2pZ/3UmWyzbvgdOoVH9hRWb6GbCF/zH+NMecZ2gUBccYAL1UxDrJdHkcZR 94aDT3DSjZxOVOQZcfflxaZ8UTLm2smdQefvd8GeLP5JQ4r6rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXvLVJAofsOa8AKHQPfvL4alKbbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvZGVjOGFiNzMtMDI2Mi0z NGUyLWE1MjktNTRhYmNiNTYzZTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQJFJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADk9OPq2R4jSH4Q4GR0JiULc7dXsSNqovzWNCJ4ZvAgdBefFf+W6AOSy 0lnzPdoGfqxE+JhGGCd2hHMc8GtU0VDL2sDqpglE/+jwWd7UKJQaUFReExDqi0lU 7AZxjaGOmZmo/yPWsJ8T6kSkzSmEG4imOKa3e/YMTKMCrmnNjbhE3mwbYeNj9hbR jhbCqz8zkeUFUKnK5pfRkfqFSYQUSAKUQuZCixA26kDzsqx4kfrtSNoCIW5IAXTB XRvq7fsFWMd7kiYmrwSIi/mH0WznLPIcL4opk6aNw8RZ6FQ0EVx1g7cTdaLSCZYj QmUlG13HhGGIPoVCIQim1atiRfZqZGA= -----END CERTIFICATE-----Generated at Thu Apr 3 07:13:25 2025 by rpki-client