$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/1de741cb-e671-3b99-b03e-4b53456a4151.roa File: 1de741cb-e671-3b99-b03e-4b53456a4151.roa (raw, json) Hash identifier: 1iKWTktCqAKSuDdE7f1081pbjxEQtkK4R+757GPYagg= Subject key identifier: CC:8B:36:A0:ED:23:1A:7D:79:59:ED:EA:0C:12:27:61:99:0E:44:54 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F432858492CB223520253FA18321BF7C0 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/1de741cb-e671-3b99-b03e-4b53456a4151.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 13768 IP address blocks: 64.34.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:23:52:02:53:fa:18:32:1b:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=f93f0256-4478-4ab9-a693-9bcbd223c6aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e8:b1:e4:dd:a6:91:32:fe:04:f9:e0:44:42: b3:f5:9f:90:0f:8b:9e:99:33:69:bb:8e:3a:30:dc: 2b:7d:1a:4f:8b:ee:9b:c2:6d:0b:36:ec:5a:d2:be: 4d:2f:e5:e6:8b:2e:ba:c1:30:b4:8b:9e:15:52:2f: a6:74:32:1a:3d:f8:23:82:1b:37:08:b2:92:54:5e: f0:0c:28:56:52:79:73:ee:ce:d3:f1:ff:fe:8a:c3: c0:04:97:b4:88:c0:7b:9e:02:44:8d:cc:45:d1:25: 16:f6:4a:3c:67:ee:b6:d5:e9:e5:26:4e:5e:2f:ac: 1c:66:79:d5:5e:d1:2b:5c:20:92:2b:a7:07:4d:ff: a7:b9:3a:84:bb:6f:6c:01:72:8c:32:20:c7:75:9d: 5f:ea:e0:b1:24:04:4b:42:59:76:c9:8f:3c:64:5e: 0b:29:f7:94:f0:71:4b:8f:d7:69:c7:e1:16:14:a7: cd:e6:e7:90:cf:22:e7:24:00:20:99:3e:a2:00:fa: 77:b1:cc:b6:62:c9:df:d7:6b:a0:c6:60:6d:5a:c6: 73:d6:74:08:2d:e2:38:f9:a0:f6:a5:6c:fe:88:d2: c2:1b:f3:28:ee:f2:82:5f:79:93:4d:45:e1:a2:26: 5a:d9:89:09:33:40:f7:a7:03:94:4c:88:af:18:7b: 32:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:8B:36:A0:ED:23:1A:7D:79:59:ED:EA:0C:12:27:61:99:0E:44:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/1de741cb-e671-3b99-b03e-4b53456a4151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.34.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:a2:ed:a5:88:4f:bc:7f:ae:89:6f:03:38:4a:46:af:fb:ac: 98:91:44:d6:44:ab:ef:c5:0b:d4:21:23:e4:f8:3d:a8:c7:33: be:8c:11:a7:5d:b9:af:93:5e:92:0d:32:c0:17:18:aa:db:11: a3:48:f1:47:ed:d2:46:14:83:81:51:4b:63:0d:cf:65:c6:30: 4b:a0:fd:e4:38:df:47:03:fe:03:77:50:c8:cf:b0:3d:77:d2: 5c:8b:e7:66:ad:2f:6f:59:a8:a2:31:68:b1:93:6d:e8:ce:bf: aa:3c:61:0b:07:3d:8b:a8:d5:3a:56:31:94:27:6e:f0:7d:d2: 11:aa:ff:29:56:d3:0f:61:3d:81:93:5a:97:76:bf:60:a9:0b: ef:c6:1c:bb:e5:34:ec:95:21:dc:cb:58:7b:29:c2:d3:36:50: 74:19:0f:c2:6a:2c:c2:b7:a9:0a:f2:d0:2d:25:ef:aa:3f:70: 31:c2:e6:5a:db:66:ab:3f:86:7e:f1:33:0e:86:c8:37:0e:92: d6:ca:c2:44:f1:f3:f7:6d:5d:cb:74:d7:b6:99:9b:89:a9:16: 69:0b:d4:17:4e:b6:b6:cb:a9:39:41:34:94:3d:17:40:0c:3d: db:13:c5:12:31:02:59:1e:0e:41:a8:13:f1:f3:e5:41:87:c6: ea:5d:51:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssiNSAlP6GDIb98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZjkzZjAyNTYtNDQ3OC00YWI5LWE2OTMtOWJjYmQyMjNjNmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeix5N2mkTL+BPngREKz9Z+QD4uemTNpu446 MNwrfRpPi+6bwm0LNuxa0r5NL+Xmiy66wTC0i54VUi+mdDIaPfgjghs3CLKSVF7w DChWUnlz7s7T8f/+isPABJe0iMB7ngJEjcxF0SUW9ko8Z+621enlJk5eL6wcZnnV XtErXCCSK6cHTf+nuTqEu29sAXKMMiDHdZ1f6uCxJARLQll2yY88ZF4LKfeU8HFL j9dpx+EWFKfN5ueQzyLnJAAgmT6iAPp3scy2Ysnf12ugxmBtWsZz1nQILeI4+aD2 pWz+iNLCG/Mo7vKCX3mTTUXhoiZa2YkJM0D3pwOUTIivGHsyKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyLNqDtIxp9eVnt6gwSJ2GZDkRUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvMWRlNzQxY2ItZTY3MS0z Yjk5LWIwM2UtNGI1MzQ1NmE0MTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQCKcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmi7aWIT7x/rolvAzhKRq/7rJiRRNZEq+/FC9QhI+T4PajHM76MEadd ua+TXpINMsAXGKrbEaNI8Uft0kYUg4FRS2MNz2XGMEug/eQ430cD/gN3UMjPsD13 0lyL52atL29ZqKIxaLGTbejOv6o8YQsHPYuo1TpWMZQnbvB90hGq/ylW0w9hPYGT Wpd2v2CpC+/GHLvlNOyVIdzLWHspwtM2UHQZD8JqLMK3qQry0C0l76o/cDHC5lrb Zqs/hn7xMw6GyDcOktbKwkTx8/dtXct017aZm4mpFmkL1BdOtrbLqTlBNJQ9F0AM PdsTxRIxAlkeDkGoE/Hz5UGHxupdUZ8= -----END CERTIFICATE-----Generated at Fri Mar 14 10:57:20 2025 by rpki-client