$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/5a72f703-fbe8-361c-ba27-9625ee1622a2.roa File: 5a72f703-fbe8-361c-ba27-9625ee1622a2.roa (raw, json) Hash identifier: mjq35z5RaT8rz5eaP58dRL+CHbHUhLrmXaWHDp7cmZg= Subject key identifier: C1:31:61:DF:AE:56:F4:10:1A:4F:A1:EE:73:F1:DD:C9:36:2F:3B:13 Certificate issuer: /CN=eeff816f-42ef-47a6-ba61-7075adb85329 Certificate serial: 010D0C9F43285848DD3BAD263AC9EF3E05110B80 Authority key identifier: EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/5a72f703-fbe8-361c-ba27-9625ee1622a2.roa Signing time: Thu 13 Feb 2025 02:00:40 +0000 ROA not before: Thu 13 Feb 2025 02:00:40 +0000 ROA not after: Wed 14 May 2025 01:00:40 +0000 asID: 393457 IP address blocks: 64.191.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:dd:3b:ad:26:3a:c9:ef:3e:05:11:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeff816f-42ef-47a6-ba61-7075adb85329 Validity Not Before: Feb 13 02:00:40 2025 GMT Not After : May 14 01:00:40 2025 GMT Subject: CN=afe97564-5b2e-4a3f-94d2-4e6ca35c7d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6a:30:38:f4:5e:3a:5e:df:ed:15:5c:94:34: 23:d3:9d:89:a7:11:cf:e3:bf:8c:d7:36:b6:94:b0: 26:55:61:22:3e:68:bb:ee:cb:97:0f:fe:82:a9:8e: a6:9c:79:44:36:16:8c:ab:5d:50:a1:db:de:08:ac: 2c:46:f7:ce:82:12:65:b7:bb:c3:08:59:be:e6:c0: 82:62:33:89:7a:82:80:62:43:63:2e:a8:bf:71:57: 15:a5:5c:63:4a:b1:9b:26:67:28:df:05:67:5e:eb: a1:7f:e8:bd:6a:46:84:75:4a:83:ec:f3:c0:eb:da: 3a:44:23:89:0f:b9:2b:dd:f4:f5:32:fb:90:96:cc: 06:12:95:96:58:ff:bd:af:b6:4d:94:f3:96:76:ca: 68:45:b4:2f:8d:4b:b8:39:4c:29:d4:c2:24:7c:0b: a2:87:be:a9:e1:bc:58:83:63:cb:b0:86:11:9e:e2: d1:24:e9:0d:84:ce:ff:5b:8e:ad:07:37:39:88:67: 66:14:47:cb:36:32:30:a1:47:12:8c:72:f4:8f:a1: e0:48:20:b7:8b:09:9b:5c:2a:af:e9:c2:10:ae:46: c1:6c:e5:60:16:e4:07:e9:b7:ec:31:c8:fa:2f:6b: 9f:46:4e:6d:47:0b:2b:3c:d9:af:3d:54:53:09:ce: 90:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:31:61:DF:AE:56:F4:10:1A:4F:A1:EE:73:F1:DD:C9:36:2F:3B:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/5a72f703-fbe8-361c-ba27-9625ee1622a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl X509v3 Authority Key Identifier: keyid:EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer sbgp-ipAddrBlock: critical IPv4: 64.191.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:af:bb:da:c8:2a:42:02:c4:68:8c:a2:8b:59:5e:fa:74:3d: e9:88:92:f2:b3:21:c5:5e:6d:24:34:ea:48:9c:3c:8f:1c:93: fe:d6:dd:83:a7:ff:8e:bd:24:b6:48:fc:19:28:50:fd:d7:09: 17:c8:1b:e0:9c:7f:1b:8a:82:fe:65:d1:a3:78:b7:31:34:08: dd:f2:57:b5:92:c0:b9:1e:0c:80:cc:34:64:3a:79:9c:01:37: 28:52:0e:1e:9d:d3:3e:b7:dc:b8:0b:e5:16:f6:9d:89:5f:c5: 90:e3:09:e8:62:06:7f:62:36:17:05:10:77:f4:f3:c3:e1:21: f7:a3:98:10:ea:4f:ae:21:d8:a7:34:15:f3:4c:c4:3a:c4:a3: b6:48:15:d1:64:95:6f:6a:af:60:5c:90:b3:a3:4f:57:a5:1c: 3d:ce:fa:22:75:b4:db:38:d5:86:83:95:bc:6f:51:8d:5f:dd: 66:b0:78:bf:4c:3c:ea:d0:90:3e:b5:e7:94:7c:ab:51:7e:04: 3c:97:98:38:19:ae:e2:46:6a:5f:4a:d5:38:6b:0c:12:da:52: 56:46:9c:8f:09:c8:6e:df:5a:36:33:aa:9a:57:b5:08:02:41: 20:a4:df:b7:d3:41:1a:3f:b8:1a:69:cb:28:b8:48:15:50:a6: 9c:8e:83:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjdO60mOsnvPgURC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVmZjgxNmYtNDJlZi00N2E2LWJhNjEtNzA3NWFkYjg1 MzI5MB4XDTI1MDIxMzAyMDA0MFoXDTI1MDUxNDAxMDA0MFowLzEtMCsGA1UEAxMk YWZlOTc1NjQtNWIyZS00YTNmLTk0ZDItNGU2Y2EzNWM3ZDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGowOPReOl7f7RVclDQj052JpxHP47+M1za2 lLAmVWEiPmi77suXD/6CqY6mnHlENhaMq11QodveCKwsRvfOghJlt7vDCFm+5sCC YjOJeoKAYkNjLqi/cVcVpVxjSrGbJmco3wVnXuuhf+i9akaEdUqD7PPA69o6RCOJ D7kr3fT1MvuQlswGEpWWWP+9r7ZNlPOWdspoRbQvjUu4OUwp1MIkfAuih76p4bxY g2PLsIYRnuLRJOkNhM7/W46tBzc5iGdmFEfLNjIwoUcSjHL0j6HgSCC3iwmbXCqv 6cIQrkbBbOVgFuQH6bfsMcj6L2ufRk5tRwsrPNmvPVRTCc6Q2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMExYd+uVvQQGk+h7nPx3ck2LzsTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZWZm ODE2Zi00MmVmLTQ3YTYtYmE2MS03MDc1YWRiODUzMjkvNWE3MmY3MDMtZmJlOC0z NjFjLWJhMjctOTYyNWVlMTYyMmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWVmZjgxNmYtNDJlZi00N2E2LWJh NjEtNzA3NWFkYjg1MzI5L2VlZmY4MTZmLTQyZWYtNDdhNi1iYTYxLTcwNzVhZGI4 NTMyOS5jcmwwHwYDVR0jBBgwFoAU6ll783GIb8wezeqNVRDlPcsR9H0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZWZmODE2Zi00MmVmLTQ3YTYtYmE2MS03MDc1 YWRiODUzMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQL8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+vu9rIKkICxGiMootZXvp0PemIkvKzIcVebSQ06kicPI8ck/7W3YOn /469JLZI/BkoUP3XCRfIG+CcfxuKgv5l0aN4tzE0CN3yV7WSwLkeDIDMNGQ6eZwB NyhSDh6d0z633LgL5Rb2nYlfxZDjCehiBn9iNhcFEHf088PhIfejmBDqT64h2Kc0 FfNMxDrEo7ZIFdFklW9qr2BckLOjT1elHD3O+iJ1tNs41YaDlbxvUY1f3WaweL9M POrQkD6155R8q1F+BDyXmDgZruJGal9K1ThrDBLaUlZGnI8JyG7fWjYzqppXtQgC QSCk37fTQRo/uBppyyi4SBVQppyOg80= -----END CERTIFICATE-----Generated at Fri Apr 11 23:12:53 2025 by rpki-client