$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a2af7c81-aa82-3c15-a78f-d69453ae61d1.roa File: a2af7c81-aa82-3c15-a78f-d69453ae61d1.roa (raw, json) Hash identifier: VuVy+RLGu4t1M5zSQOjjzhWj+jW7vKTFL9ft77wJD6w= Subject key identifier: 30:4E:65:9C:52:0D:06:84:CE:DB:FA:F6:38:C8:45:78:13:FF:4F:A5 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584917DC2A2296F8C4927C08BE40 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a2af7c81-aa82-3c15-a78f-d69453ae61d1.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 20473 IP address blocks: 64.156.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:2a:22:96:f8:c4:92:7c:08:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=3750a3fb-369b-4299-830c-2d7e57446759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:66:59:34:e4:01:87:c7:fb:7f:c7:b2:b6:e8: 6b:9d:12:a1:0c:67:e4:56:55:23:6b:ca:ab:5e:e9: 0d:cf:e1:cb:b8:68:40:0a:9b:af:d7:d0:00:17:4f: 55:0e:44:6c:2e:99:05:ca:87:7c:67:fd:82:d5:92: ea:94:15:3d:bf:7e:24:de:f4:ab:e5:6d:c5:3a:9d: e9:08:eb:dc:e8:6c:87:7b:fd:d8:f8:fc:58:ed:ae: 33:04:6e:9f:f3:e0:51:5d:16:12:4c:1b:3d:53:6c: 8b:c6:7a:1b:1b:cb:02:10:67:df:2f:d8:79:2d:dd: 7f:2e:6f:fe:58:6f:c3:78:bd:c0:a4:28:6f:7b:56: a0:0c:7c:a4:96:bb:97:e7:bf:17:27:00:cc:71:34: 97:06:a5:0c:18:1a:31:f7:72:8e:8f:94:d4:60:09: 6b:29:7c:5b:b4:67:86:1f:8d:12:0b:98:db:91:50: 95:d2:ac:b6:65:32:f4:97:56:d3:83:84:b4:0e:51: ab:4a:ea:cb:e7:24:01:e1:a5:96:c9:43:e3:3e:03: 77:94:08:e1:d2:3f:a1:ed:70:70:c7:f0:9b:c9:68: 23:19:21:83:31:b3:4c:8d:7b:3c:68:72:32:54:e6: 9f:04:78:e3:84:e1:7b:35:ed:b6:ec:8d:56:31:a8: d9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4E:65:9C:52:0D:06:84:CE:DB:FA:F6:38:C8:45:78:13:FF:4F:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a2af7c81-aa82-3c15-a78f-d69453ae61d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.156.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:74:da:3f:44:24:94:5c:21:53:ca:ba:0c:31:a2:48:69:45: a4:d9:10:59:60:ee:ba:e9:9c:ab:da:33:99:44:3c:e0:33:fe: df:43:fe:3b:85:35:01:a9:0b:a5:47:27:4b:b6:69:26:aa:08: fd:0a:22:c7:cf:69:1b:13:cb:13:bc:6c:e9:6f:69:ae:bf:13: 14:4b:e2:18:95:20:08:57:77:29:e5:cb:fb:9d:0d:89:c4:90: 32:c8:21:19:be:89:22:e9:47:5d:16:16:9b:2e:ec:ad:55:46: fa:46:f5:ae:72:a8:d9:01:bf:44:28:4d:8b:5a:e8:de:1b:aa: ea:ff:05:7c:d7:31:39:2f:11:b8:63:5b:33:45:ce:4a:cd:b1: 67:34:ea:b3:e7:30:c4:be:71:96:43:7f:fe:6e:f9:7a:6d:7f: 18:c8:92:2a:44:b1:94:5d:97:ea:4c:24:97:ff:c6:39:cb:c5: 2e:2e:56:d7:08:ed:c7:6c:54:6f:0c:01:b8:33:9a:93:be:49: ef:03:d7:60:2b:b9:ac:a5:1f:25:79:9c:1d:a7:fe:4d:07:a6: 18:af:dc:00:8b:c5:14:c8:a1:f0:eb:49:1d:37:8b:c0:7a:42: 55:2b:3f:fb:7a:74:9c:59:df:4a:44:c0:2b:27:24:24:d7:8b: 0b:a3:fb:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3CoilvjEknwIvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk Mzc1MGEzZmItMzY5Yi00Mjk5LTgzMGMtMmQ3ZTU3NDQ2NzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmZZNOQBh8f7f8eytuhrnRKhDGfkVlUja8qr XukNz+HLuGhACpuv19AAF09VDkRsLpkFyod8Z/2C1ZLqlBU9v34k3vSr5W3FOp3p COvc6GyHe/3Y+PxY7a4zBG6f8+BRXRYSTBs9U2yLxnobG8sCEGffL9h5Ld1/Lm/+ WG/DeL3ApChve1agDHyklruX578XJwDMcTSXBqUMGBox93KOj5TUYAlrKXxbtGeG H40SC5jbkVCV0qy2ZTL0l1bTg4S0DlGrSurL5yQB4aWWyUPjPgN3lAjh0j+h7XBw x/CbyWgjGSGDMbNMjXs8aHIyVOafBHjjhOF7Ne227I1WMajZYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBOZZxSDQaEztv69jjIRXgT/0+lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYTJhZjdjODEtYWE4Mi0z YzE1LWE3OGYtZDY5NDUzYWU2MWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQJwOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB102j9EJJRcIVPKugwxokhpRaTZEFlg7rrpnKvaM5lEPOAz/t9D/juF NQGpC6VHJ0u2aSaqCP0KIsfPaRsTyxO8bOlvaa6/ExRL4hiVIAhXdynly/udDYnE kDLIIRm+iSLpR10WFpsu7K1VRvpG9a5yqNkBv0QoTYta6N4bqur/BXzXMTkvEbhj WzNFzkrNsWc06rPnMMS+cZZDf/5u+XptfxjIkipEsZRdl+pMJJf/xjnLxS4uVtcI 7cdsVG8MAbgzmpO+Se8D12AruaylHyV5nB2n/k0Hphiv3ACLxRTIofDrSR03i8B6 QlUrP/t6dJxZ30pEwCsnJCTXiwuj+xw= -----END CERTIFICATE-----Generated at Wed Apr 9 01:05:01 2025 by rpki-client