$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3e3563b4-96ca-349d-beb4-f511356d7ba6.roa File: 3e3563b4-96ca-349d-beb4-f511356d7ba6.roa (raw, json) Hash identifier: bztBBiDGxTCUN4KNuvbgNUZ28uLdFzxzxNfSCfsseTo= Subject key identifier: 7F:58:06:94:EC:F0:F3:CF:C7:E4:34:D3:60:65:6D:2B:78:B9:5D:2B Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F432858492134270BA7E792F0743E3480 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3e3563b4-96ca-349d-beb4-f511356d7ba6.roa Signing time: Sun 09 Mar 2025 10:20:35 +0000 ROA not before: Sun 09 Mar 2025 10:20:35 +0000 ROA not after: Sat 07 Jun 2025 10:20:35 +0000 asID: 577 IP address blocks: 64.229.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:34:27:0b:a7:e7:92:f0:74:3e:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Mar 9 10:20:35 2025 GMT Not After : Jun 7 10:20:35 2025 GMT Subject: CN=90cce134-4181-4e42-9648-2fc729cdcc4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b0:b6:6f:46:78:32:98:a4:cc:a1:d0:99:5e: 13:c4:05:bb:78:6c:03:e0:ea:61:90:92:8b:11:a8: c1:e1:b3:9e:b4:81:52:9a:0b:26:4a:45:7f:2a:d6: ae:69:fb:f8:4a:a7:2f:4f:43:56:e2:68:1b:14:9b: 21:1c:c8:86:aa:95:dc:3d:40:c7:6c:ea:58:d6:77: d0:8a:00:c3:b5:42:9d:50:58:e1:b9:fe:06:9c:d5: 08:d4:b6:ce:6a:5b:4e:01:fd:90:5d:81:ee:93:77: 44:86:c6:c2:90:6c:fd:5e:7d:d5:27:d5:e5:28:b3: 1a:d1:b8:fe:9a:b1:17:d1:b2:e9:99:57:db:06:0b: a0:02:af:41:b7:47:28:b0:e8:1d:7f:2a:bb:a4:73: 9d:11:1b:a4:17:64:8d:cf:43:a6:2d:90:ae:1a:bb: ab:9e:30:00:6a:d4:a8:85:92:2f:30:dd:3d:e2:03: 08:17:e9:32:36:de:75:e9:be:64:11:22:fb:8d:b6: fb:d0:31:40:d2:31:37:dd:13:89:a3:84:fd:f3:e8: b4:ba:68:62:dc:37:31:a3:89:79:10:83:3c:fe:22: 88:ad:7a:d7:46:20:20:65:54:63:0e:7c:3e:7d:b8: 11:d1:08:b9:61:d4:b6:8f:0c:17:ad:01:82:53:6a: c6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:58:06:94:EC:F0:F3:CF:C7:E4:34:D3:60:65:6D:2B:78:B9:5D:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3e3563b4-96ca-349d-beb4-f511356d7ba6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 64.229.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:bd:21:cb:41:6e:63:af:33:4c:7a:bc:13:a3:38:a0:5b:de: 63:da:c9:90:96:6c:56:a2:d9:31:f2:33:5e:49:cd:94:38:cb: 69:66:0b:f5:53:3a:83:af:59:f4:f9:58:43:2e:20:af:d0:59: 4c:53:c4:1e:96:4d:e5:ee:63:40:75:35:1a:70:94:c8:a6:22: a1:18:b7:15:f9:5c:77:f0:96:85:79:cc:27:ee:3f:47:39:19: 14:f0:50:d3:52:eb:11:81:80:04:e0:4b:34:48:ed:7a:2c:41: a5:2c:ef:61:9d:c3:29:12:36:d5:a5:03:e2:2d:58:e5:07:08: 6a:26:1c:ac:72:44:7c:d9:1e:df:23:ff:c5:42:fb:4b:28:c2: 72:2d:aa:f1:6c:01:83:45:67:77:4e:80:6d:53:33:c9:e0:b8: 84:8e:04:82:29:4b:69:9b:6f:b6:fe:d0:64:c0:29:5e:ab:35: d9:68:7c:59:3e:12:f9:fb:38:b8:5b:b0:41:a6:17:75:e4:22: 31:02:79:d9:4a:fa:c1:3e:b0:15:46:74:74:bd:79:af:d4:fb: da:8a:13:3b:04:a6:18:b4:e6:11:0f:6e:ac:5d:2e:86:98:1c: 6d:75:04:00:f4:fe:03:ce:b2:c9:d7:84:04:6f:dd:81:c1:f3: b2:9d:95:64 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkhNCcLp+eS8HQ+NIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI1MDMwOTEwMjAzNVoXDTI1MDYwNzEwMjAzNVowLzEtMCsGA1UEAxMk OTBjY2UxMzQtNDE4MS00ZTQyLTk2NDgtMmZjNzI5Y2RjYzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrC2b0Z4MpikzKHQmV4TxAW7eGwD4OphkJKL EajB4bOetIFSmgsmSkV/Ktauafv4SqcvT0NW4mgbFJshHMiGqpXcPUDHbOpY1nfQ igDDtUKdUFjhuf4GnNUI1LbOaltOAf2QXYHuk3dEhsbCkGz9Xn3VJ9XlKLMa0bj+ mrEX0bLpmVfbBgugAq9Bt0cosOgdfyq7pHOdERukF2SNz0OmLZCuGrurnjAAatSo hZIvMN094gMIF+kyNt516b5kESL7jbb70DFA0jE33ROJo4T98+i0umhi3Dcxo4l5 EIM8/iKIrXrXRiAgZVRjDnw+fbgR0Qi5YdS2jwwXrQGCU2rG3QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFH9YBpTs8PPPx+Q002BlbSt4uV0rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvM2UzNTYzYjQtOTZjYS0z NDlkLWJlYjQtZjUxMTM1NmQ3YmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQOUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAOr0hy0FuY68zTHq8E6M4oFveY9rJkJZsVqLZMfIzXknNlDjLaWYL9VM6 g69Z9PlYQy4gr9BZTFPEHpZN5e5jQHU1GnCUyKYioRi3Fflcd/CWhXnMJ+4/RzkZ FPBQ01LrEYGABOBLNEjteixBpSzvYZ3DKRI21aUD4i1Y5QcIaiYcrHJEfNke3yP/ xUL7SyjCci2q8WwBg0Vnd06AbVMzyeC4hI4EgilLaZtvtv7QZMApXqs12Wh8WT4S +fs4uFuwQaYXdeQiMQJ52Ur6wT6wFUZ0dL15r9T72ooTOwSmGLTmEQ9urF0uhpgc bXUEAPT+A86yydeEBG/dgcHzsp2VZA== -----END CERTIFICATE-----Generated at Mon Apr 7 17:01:03 2025 by rpki-client