$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/3dd6c447-11e7-3124-8886-5326a815b42c.roa File: 3dd6c447-11e7-3124-8886-5326a815b42c.roa (raw, json) Hash identifier: thYpV+2oWVNWXH0G8nBg3auR2L16ppEKSBRooaXQoOU= Subject key identifier: 31:7B:61:87:9C:A2:3E:4C:22:A0:3E:25:6C:3E:AA:36:E7:E0:6B:4A Certificate issuer: /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b Certificate serial: 010D0C9F43285849674EF2A9F7CFF9DDC32ABDC0 Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/3dd6c447-11e7-3124-8886-5326a815b42c.roa Signing time: Thu 03 Apr 2025 13:01:02 +0000 ROA not before: Thu 03 Apr 2025 13:01:02 +0000 ROA not after: Wed 02 Jul 2025 13:01:02 +0000 asID: 32133 IP address blocks: 64.99.104.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:4e:f2:a9:f7:cf:f9:dd:c3:2a:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b Validity Not Before: Apr 3 13:01:02 2025 GMT Not After : Jul 2 13:01:02 2025 GMT Subject: CN=d285d2fb-ae22-420c-aa7b-825f2cef927f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:49:87:e0:15:2f:55:a0:85:fd:eb:bc:91:8f: ae:06:20:9f:a5:fa:40:4d:74:ad:f7:87:3c:9d:73: 97:e5:62:47:7f:54:fa:c3:96:89:81:28:34:b8:38: 7f:a2:27:a4:a0:ec:5d:e8:f0:96:f9:de:85:06:c7: a2:0a:8a:f0:83:96:87:9b:8c:39:7f:41:16:36:2a: f1:45:19:b9:7d:11:75:6a:66:58:05:fa:2c:0b:38: 03:85:04:38:1d:72:a0:af:99:d2:19:37:12:21:f2: 6e:5e:1c:33:f1:2b:c8:d9:29:00:b7:84:5b:44:5e: 5d:41:cb:21:95:fd:4e:f1:3c:1b:dc:34:ec:4a:0c: 7a:32:a8:15:eb:2f:7b:56:99:e3:3c:18:95:21:d3: e0:14:e1:21:eb:21:87:f4:3a:5e:10:a0:2d:30:70: e8:2a:66:1d:60:a5:e0:74:3d:31:c3:d5:8b:dc:45: ff:47:b1:6b:b8:80:88:91:3c:71:27:91:e9:23:d3: 33:92:75:1c:11:41:a5:6c:c9:54:28:15:a5:b9:e6: 12:c4:d4:84:1e:d6:14:43:74:a9:1d:8c:f5:9d:95: 44:e6:a9:c3:ca:e9:9c:40:65:01:a8:8f:76:3b:59: 55:04:e1:0e:00:94:b1:ce:f5:57:a7:b8:18:45:bb: 9f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:7B:61:87:9C:A2:3E:4C:22:A0:3E:25:6C:3E:AA:36:E7:E0:6B:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/3dd6c447-11e7-3124-8886-5326a815b42c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl X509v3 Authority Key Identifier: keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer sbgp-ipAddrBlock: critical IPv4: 64.99.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:c0:ed:64:1d:d8:d4:1a:fd:e5:6d:4c:6a:e2:82:47:ac:f6: 36:f2:3e:1e:2f:be:fd:93:d3:d7:23:02:df:10:0f:da:a1:0e: 6f:29:9f:49:22:0f:30:8f:88:3e:34:ce:7c:03:dd:78:f8:37: c4:a3:27:02:44:36:75:e9:5c:15:e7:0c:ed:e6:91:36:6e:ed: 92:fd:3a:7d:c6:3c:e6:41:91:e8:a2:eb:1e:bc:a1:c9:be:f1: 49:d5:b2:8f:84:99:4e:db:fd:65:a3:87:12:66:4b:6c:47:d5: ed:0e:8d:85:11:5c:b7:ce:73:35:c6:62:2c:a3:0e:0c:26:e8: 12:e4:dd:61:90:10:dc:9c:25:c6:9c:16:ed:5b:3e:dc:f7:a4: 05:1f:71:91:f1:c2:8c:2f:b6:a2:d6:e1:93:f9:6f:cb:1f:df: d2:9e:16:de:90:d8:d3:82:04:8d:21:be:26:96:2a:48:b7:15: 78:61:6c:ed:a2:be:36:31:9a:fa:5c:d6:79:56:f9:b2:7c:88: 27:5c:3e:1b:b9:35:a0:89:ee:c3:07:ba:32:35:e9:7a:28:15: 2d:74:24:3c:f2:20:42:75:1a:d4:2f:61:86:62:eb:96:e0:cc: cc:bb:83:69:05:75:28:c2:c4:26:95:27:38:cc:6d:f1:5c:93: 5a:12:60:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElnTvKp98/53cMqvcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA3OTM2ODMtYWEwNy00OTM1LWEyYzItZWM0MjNlYTdk ZDBiMB4XDTI1MDQwMzEzMDEwMloXDTI1MDcwMjEzMDEwMlowLzEtMCsGA1UEAxMk ZDI4NWQyZmItYWUyMi00MjBjLWFhN2ItODI1ZjJjZWY5MjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kmH4BUvVaCF/eu8kY+uBiCfpfpATXSt94c8 nXOX5WJHf1T6w5aJgSg0uDh/oiekoOxd6PCW+d6FBseiCorwg5aHm4w5f0EWNirx RRm5fRF1amZYBfosCzgDhQQ4HXKgr5nSGTcSIfJuXhwz8SvI2SkAt4RbRF5dQcsh lf1O8Twb3DTsSgx6MqgV6y97VpnjPBiVIdPgFOEh6yGH9DpeEKAtMHDoKmYdYKXg dD0xw9WL3EX/R7FruICIkTxxJ5HpI9MzknUcEUGlbMlUKBWlueYSxNSEHtYUQ3Sp HYz1nZVE5qnDyumcQGUBqI92O1lVBOEOAJSxzvVXp7gYRbufLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDF7YYecoj5MIqA+JWw+qjbn4GtKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5 MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQyM2VhN2RkMGIvM2RkNmM0NDctMTFlNy0z MTI0LTg4ODYtNTMyNmE4MTViNDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzA3OTM2ODMtYWEwNy00OTM1LWEy YzItZWM0MjNlYTdkZDBiL2MwNzkzNjgzLWFhMDctNDkzNS1hMmMyLWVjNDIzZWE3 ZGQwYi5jcmwwHwYDVR0jBBgwFoAUOdwqnqE5xltso0hvdvSX3QTCyKowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQy M2VhN2RkMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQGNoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjA7WQd2NQa/eVtTGrigkes9jbyPh4vvv2T09cjAt8QD9qhDm8pn0ki DzCPiD40znwD3Xj4N8SjJwJENnXpXBXnDO3mkTZu7ZL9On3GPOZBkeii6x68ocm+ 8UnVso+EmU7b/WWjhxJmS2xH1e0OjYURXLfOczXGYiyjDgwm6BLk3WGQENycJcac Fu1bPtz3pAUfcZHxwowvtqLW4ZP5b8sf39KeFt6Q2NOCBI0hviaWKki3FXhhbO2i vjYxmvpc1nlW+bJ8iCdcPhu5NaCJ7sMHujI16XooFS10JDzyIEJ1GtQvYYZi65bg zMy7g2kFdSjCxCaVJzjMbfFck1oSYAY= -----END CERTIFICATE-----Generated at Mon Apr 7 12:03:43 2025 by rpki-client