$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/20c6f98d-a739-3e55-8480-2f3ea3c0232c.roa File: 20c6f98d-a739-3e55-8480-2f3ea3c0232c.roa (raw, json) Hash identifier: ew8Tf2NpL6h57dZExCLCbzOiL9oUlGEQh8TqyDTiIH4= Subject key identifier: 4D:67:F4:B0:09:93:51:45:99:E1:42:46:04:A3:F4:7F:43:C5:BC:2A Certificate issuer: /CN=f6333ed6-b74f-4665-b7a8-2f04df6f87f3 Certificate serial: 010D0C9F432858495ABEB53AD71446D7770D8910 Authority key identifier: 49:02:B5:B5:43:93:D2:6F:ED:30:8D:50:A5:AF:E0:A8:45:08:DD:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/20c6f98d-a739-3e55-8480-2f3ea3c0232c.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 14618 IP address blocks: 64.57.8.0/21 maxlen: 21 64.57.8.0/24 maxlen: 24 64.57.9.0/24 maxlen: 24 64.57.10.0/24 maxlen: 24 64.57.11.0/24 maxlen: 24 64.57.12.0/24 maxlen: 24 64.57.13.0/24 maxlen: 24 64.57.14.0/24 maxlen: 24 64.57.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:b5:3a:d7:14:46:d7:77:0d:89:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6333ed6-b74f-4665-b7a8-2f04df6f87f3 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=7d99b855-3126-462a-8cae-a03e7f195c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:64:d3:49:0c:d6:c8:06:5d:fa:cc:26:8b:1c: a1:29:6e:3c:b7:69:a9:b9:57:20:ec:0d:ab:21:f8: cb:94:d3:ca:6c:02:78:98:09:5f:68:45:ff:8d:3d: 5a:a2:fe:00:4d:11:a6:b6:2b:9d:76:91:72:74:25: f8:22:7c:e5:40:39:df:c3:6c:48:66:2b:9e:85:06: 7f:00:ca:1a:06:95:e7:42:79:98:e7:3f:49:49:05: b6:03:e7:cc:3a:39:75:01:c0:90:49:17:dc:3b:93: 38:5c:0d:c4:78:90:ed:c5:d9:4e:cb:8f:19:7c:39: 87:5f:8e:4f:41:45:af:df:dd:a9:81:77:6a:a3:8d: 34:ab:3e:42:8b:c2:f9:73:69:04:2d:b6:34:9b:84: c5:e7:61:51:be:07:bf:aa:ee:29:92:1b:77:f0:93: 2f:02:eb:20:87:41:4b:16:3a:0f:06:1a:a6:75:06: 72:45:13:8b:09:08:61:7b:aa:2d:0c:6b:02:ab:85: 41:fa:75:4e:27:a4:b0:04:e1:cd:db:b7:57:44:ae: 63:62:ae:38:c4:e6:c6:df:75:b3:9d:0d:cc:4e:2f: 9d:a3:29:ae:86:8c:2d:d5:b6:68:33:0c:54:a1:09: 18:e9:ff:bc:bf:94:9a:f6:34:9a:2e:7d:9e:dd:29: 41:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:67:F4:B0:09:93:51:45:99:E1:42:46:04:A3:F4:7F:43:C5:BC:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/20c6f98d-a739-3e55-8480-2f3ea3c0232c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.crl X509v3 Authority Key Identifier: keyid:49:02:B5:B5:43:93:D2:6F:ED:30:8D:50:A5:AF:E0:A8:45:08:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer sbgp-ipAddrBlock: critical IPv4: 64.57.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:27:19:24:b2:f1:14:6b:f1:f6:32:0a:14:59:b7:37:73:6d: b6:aa:10:b3:ed:2b:a6:71:da:b7:ce:a0:20:65:b2:0c:72:6f: 27:33:01:61:84:51:a4:f6:05:1d:7b:18:3b:6a:db:e9:be:be: 5b:88:c9:f5:61:f7:d1:29:2f:4b:48:2e:40:f8:c8:a5:29:ff: 5f:ee:e9:83:e1:4c:30:91:8d:08:36:e5:32:70:b5:07:e6:c2: a5:9f:d5:11:6d:16:1f:4c:3a:1e:5c:dd:34:5a:01:ae:4f:15: 9a:c1:fb:60:87:b4:9a:97:6b:04:bb:a0:d4:04:4a:7a:50:24: be:9f:3d:00:41:1c:c7:cf:a5:0d:72:69:b7:ee:e7:ed:de:32: 47:2d:16:9f:bd:8a:6a:52:04:71:64:0e:17:83:47:ca:fb:66: ec:00:fa:82:33:98:a6:04:4f:b2:19:95:f4:76:3c:3d:5a:9f: 09:ed:1c:7b:64:fc:f9:1d:be:3b:3b:af:58:b0:72:d0:bc:76: 56:1d:b0:9f:1f:24:8e:aa:26:90:0f:96:e5:12:ec:63:69:d5: 70:0b:f2:8e:62:fb:5a:b6:b5:1d:37:26:61:12:a1:b6:0b:24: 66:be:86:3d:c6:50:21:11:fc:cd:5f:46:5e:1c:27:23:b3:ef: 16:9a:53:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavrU61xRG13cNiRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzMzNlZDYtYjc0Zi00NjY1LWI3YTgtMmYwNGRmNmY4 N2YzMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk N2Q5OWI4NTUtMzEyNi00NjJhLThjYWUtYTAzZTdmMTk1YzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2TTSQzWyAZd+swmixyhKW48t2mpuVcg7A2r IfjLlNPKbAJ4mAlfaEX/jT1aov4ATRGmtiuddpFydCX4InzlQDnfw2xIZiuehQZ/ AMoaBpXnQnmY5z9JSQW2A+fMOjl1AcCQSRfcO5M4XA3EeJDtxdlOy48ZfDmHX45P QUWv392pgXdqo400qz5Ci8L5c2kELbY0m4TF52FRvge/qu4pkht38JMvAusgh0FL FjoPBhqmdQZyRROLCQhhe6otDGsCq4VB+nVOJ6SwBOHN27dXRK5jYq44xObG33Wz nQ3MTi+doymuhowt1bZoMwxUoQkY6f+8v5Sa9jSaLn2e3SlBrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1n9LAJk1FFmeFCRgSj9H9DxbwqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNjMz M2VkNi1iNzRmLTQ2NjUtYjdhOC0yZjA0ZGY2Zjg3ZjMvMjBjNmY5OGQtYTczOS0z ZTU1LTg0ODAtMmYzZWEzYzAyMzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjYzMzNlZDYtYjc0Zi00NjY1LWI3 YTgtMmYwNGRmNmY4N2YzL2Y2MzMzZWQ2LWI3NGYtNDY2NS1iN2E4LTJmMDRkZjZm ODdmMy5jcmwwHwYDVR0jBBgwFoAUSQK1tUOT0m/tMI1Qpa/gqEUI3Z0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNjMzM2VkNi1iNzRmLTQ2NjUtYjdhOC0yZjA0 ZGY2Zjg3ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQDkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABonGSSy8RRr8fYyChRZtzdzbbaqELPtK6Zx2rfOoCBlsgxybyczAWGE UaT2BR17GDtq2+m+vluIyfVh99EpL0tILkD4yKUp/1/u6YPhTDCRjQg25TJwtQfm wqWf1RFtFh9MOh5c3TRaAa5PFZrB+2CHtJqXawS7oNQESnpQJL6fPQBBHMfPpQ1y abfu5+3eMkctFp+9impSBHFkDheDR8r7ZuwA+oIzmKYET7IZlfR2PD1anwntHHtk /Pkdvjs7r1iwctC8dlYdsJ8fJI6qJpAPluUS7GNp1XAL8o5i+1q2tR03JmESobYL JGa+hj3GUCER/M1fRl4cJyOz7xaaU5Y= -----END CERTIFICATE-----Generated at Fri Apr 4 23:34:02 2025 by rpki-client