$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/4b50e3cb-bf61-3242-bd51-7c419281bb0e.roa File: 4b50e3cb-bf61-3242-bd51-7c419281bb0e.roa (raw, json) Hash identifier: gg5AeBk0tvU194+yXF0wc2f2hnOCf2ocF5LSzzPFCNY= Subject key identifier: 36:9B:30:AE:3D:80:B8:61:DE:D5:FB:E1:91:A7:1E:A9:7A:E2:05:48 Certificate issuer: /CN=1e38a0af-c492-44f5-88b1-b4dfdb1180f2 Certificate serial: 010D0C9F43285848E16BD61488760967376A7010 Authority key identifier: 65:A9:BA:30:CA:A9:4B:F4:DD:1C:34:F5:E9:D5:C8:5A:94:81:1B:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/4b50e3cb-bf61-3242-bd51-7c419281bb0e.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 63440 IP address blocks: 64.16.224.0/19 maxlen: 24 192.76.120.0/24 maxlen: 24 2620:b2:c000::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:d6:14:88:76:09:67:37:6a:70:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e38a0af-c492-44f5-88b1-b4dfdb1180f2 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=58987d40-482b-4693-b887-f2c2a37038b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:10:4e:3d:e2:70:fd:b7:fd:ef:b1:83:28:7f: 23:d8:1f:52:3c:12:b4:ff:e7:9d:d6:74:9b:c9:be: 30:69:fd:43:1f:89:cf:68:70:46:56:33:8d:89:66: 28:73:8b:75:9a:b1:fc:37:b4:bc:47:74:8f:d8:dd: a5:3a:94:9f:3d:ce:c1:17:e8:97:87:67:b5:d8:58: 43:65:16:2c:5f:c4:29:73:de:23:48:c7:d5:4d:88: 1e:42:85:3f:b1:84:ad:30:09:ed:a5:a6:31:f3:92: 49:07:cf:74:6c:f7:4b:9d:cd:54:f4:04:81:38:65: 5a:a7:72:a7:60:99:2a:d0:65:8b:1f:05:b7:44:88: 9f:b0:c0:28:6f:4f:10:7b:de:df:41:71:03:7c:90: ec:02:b6:a7:e4:b1:f9:2b:98:ab:2b:b9:e4:f5:e9: 9e:f0:2c:30:ea:a9:95:37:7e:22:45:bd:6f:f4:b5: 88:26:cc:aa:7f:65:d8:eb:44:ff:92:49:3d:55:6e: df:a1:9a:24:61:60:dd:b7:b3:64:df:64:c6:9f:83: 50:32:54:47:d9:85:dc:de:b9:41:ea:c0:77:c3:83: 74:b2:c3:22:ee:6d:be:cc:06:30:d7:fb:40:dc:61: c2:48:c9:98:6e:ac:b9:08:f4:ef:2f:2b:5d:6d:ac: c3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9B:30:AE:3D:80:B8:61:DE:D5:FB:E1:91:A7:1E:A9:7A:E2:05:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/4b50e3cb-bf61-3242-bd51-7c419281bb0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.crl X509v3 Authority Key Identifier: keyid:65:A9:BA:30:CA:A9:4B:F4:DD:1C:34:F5:E9:D5:C8:5A:94:81:1B:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.cer sbgp-ipAddrBlock: critical IPv4: 64.16.224.0/19 192.76.120.0/24 IPv6: 2620:b2:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:8c:27:49:4f:da:ca:68:25:72:78:d2:45:41:8c:32:1b:58: d3:d2:62:c3:b6:fe:41:9f:b0:33:56:fe:11:31:49:51:fa:2c: f9:2e:60:b8:eb:1b:fb:ff:f4:46:af:73:f0:91:3c:9d:f1:3c: 74:c2:1c:4c:04:02:34:79:d4:36:05:a6:45:9b:18:74:fe:19: cf:57:cc:26:4b:6f:80:be:e2:d9:e6:5b:88:46:61:6b:ef:0a: 5c:06:62:6a:42:07:7a:72:d3:6d:b1:85:b7:eb:82:1d:8e:aa: ae:c3:26:cd:9b:1b:a8:05:c4:96:87:a2:02:94:0b:2f:13:92: 72:9b:8c:5a:57:5c:cc:3a:55:dd:4c:06:6c:89:68:b2:bf:97: 1d:4a:d1:c6:63:6b:d6:f3:1f:b9:fb:93:e6:59:11:5b:b6:38: 24:6a:91:5e:d1:66:6e:f8:20:2e:28:b2:26:cd:62:93:08:3c: 69:2d:48:ed:18:9a:a6:eb:44:7a:c8:cd:fb:ba:25:6b:0f:74: 76:3d:58:d3:1d:98:4b:61:7b:5e:9f:ae:9e:98:f8:15:0d:f9: 55:e1:1f:1e:71:b9:8e:af:c3:23:03:f8:5d:dd:ce:1f:6f:91: a8:c3:51:2c:b5:d2:87:ff:53:04:82:79:1d:d9:5e:bc:44:9a: 12:62:06:ff -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEjha9YUiHYJZzdqcBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWUzOGEwYWYtYzQ5Mi00NGY1LTg4YjEtYjRkZmRiMTE4 MGYyMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk NTg5ODdkNDAtNDgyYi00NjkzLWI4ODctZjJjMmEzNzAzOGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRBOPeJw/bf977GDKH8j2B9SPBK0/+ed1nSb yb4waf1DH4nPaHBGVjONiWYoc4t1mrH8N7S8R3SP2N2lOpSfPc7BF+iXh2e12FhD ZRYsX8Qpc94jSMfVTYgeQoU/sYStMAntpaYx85JJB890bPdLnc1U9ASBOGVap3Kn YJkq0GWLHwW3RIifsMAob08Qe97fQXEDfJDsAran5LH5K5irK7nk9eme8Cww6qmV N34iRb1v9LWIJsyqf2XY60T/kkk9VW7foZokYWDdt7Nk32TGn4NQMlRH2YXc3rlB 6sB3w4N0ssMi7m2+zAYw1/tA3GHCSMmYbqy5CPTvLytdbazDuQIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFDabMK49gLhh3tX74ZGnHql64gVIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTM4 YTBhZi1jNDkyLTQ0ZjUtODhiMS1iNGRmZGIxMTgwZjIvNGI1MGUzY2ItYmY2MS0z MjQyLWJkNTEtN2M0MTkyODFiYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUzOGEwYWYtYzQ5Mi00NGY1LTg4 YjEtYjRkZmRiMTE4MGYyLzFlMzhhMGFmLWM0OTItNDRmNS04OGIxLWI0ZGZkYjEx ODBmMi5jcmwwHwYDVR0jBBgwFoAUZam6MMqpS/TdHDT16dXIWpSBG6EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTM4YTBhZi1jNDkyLTQ0ZjUtODhiMS1iNGRm ZGIxMTgwZjIuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQFQBDgAwQA wEx4MA8EAgACMAkDBwAmIACywAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFYwnSU/aymglcnjSRUGMMhtY 09Jiw7b+QZ+wM1b+ETFJUfos+S5guOsb+//0Rq9z8JE8nfE8dMIcTAQCNHnUNgWm RZsYdP4Zz1fMJktvgL7i2eZbiEZha+8KXAZiakIHenLTbbGFt+uCHY6qrsMmzZsb qAXEloeiApQLLxOScpuMWldczDpV3UwGbIlosr+XHUrRxmNr1vMfufuT5lkRW7Y4 JGqRXtFmbvggLiiyJs1ikwg8aS1I7RiaputEesjN+7olaw90dj1Y0x2YS2F7Xp+u npj4FQ35VeEfHnG5jq/DIwP4Xd3OH2+RqMNRLLXSh/9TBIJ5HdlevESaEmIG/w== -----END CERTIFICATE-----Generated at Fri Apr 11 21:44:25 2025 by rpki-client