$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/f6ab5e64-53f7-383b-a1f1-24933c2ee26f.roa File: f6ab5e64-53f7-383b-a1f1-24933c2ee26f.roa (raw, json) Hash identifier: 37ed5nFp0UtX+nEP1ClUGzks4GDp1cv3cTGfZGE0d5s= Subject key identifier: B0:05:C9:1A:B8:E4:C8:37:39:B2:00:E3:57:4B:6E:D9:FF:99:F4:16 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584929E3CF3D4B97B84B0EE4E880 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/f6ab5e64-53f7-383b-a1f1-24933c2ee26f.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 13768 IP address blocks: 64.34.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:cf:3d:4b:97:b8:4b:0e:e4:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=b67a94e3-6127-460b-baf5-fae2eedff122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8c:86:75:41:ad:c3:84:56:88:ef:b0:75:c4: 56:6c:e0:84:22:96:b5:fe:3e:91:c6:58:34:ae:0e: d8:68:73:34:14:69:01:ff:54:42:6e:d9:ec:db:2a: c8:3c:35:70:17:c9:75:d1:5f:08:78:66:67:44:3b: 5a:c4:7d:4f:8f:3e:83:17:93:6f:bb:18:21:57:82: cd:43:c8:bf:a3:49:94:3d:d5:e4:02:7a:e7:de:2d: 2a:19:c0:63:67:1e:b3:9b:5a:fe:cc:bc:f1:b3:92: 56:10:1f:a2:8b:d2:47:33:5d:67:91:96:0d:24:31: 89:aa:4b:0f:03:58:37:0c:ee:b3:35:5f:b8:4b:01: 23:1f:d1:3f:18:a6:4c:72:4b:17:38:86:d2:c7:c2: 56:8f:3c:62:7d:4a:ff:8c:b1:9b:9b:c5:d4:b0:2f: b4:16:f9:62:ef:6a:a5:99:25:98:87:21:e6:6e:75: 54:b8:51:54:d9:4d:e6:c8:59:04:4d:d0:d7:fd:41: 52:fc:1a:28:d4:04:be:68:ef:4c:d6:74:5a:66:60: 78:83:73:9e:7f:4c:db:83:b0:e0:70:72:af:3b:95: 52:db:42:cf:03:76:83:3a:9a:1b:0b:69:a5:0a:36: fd:08:1d:bb:bd:3c:a8:d6:c8:d0:ad:57:ff:75:3d: 5e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:05:C9:1A:B8:E4:C8:37:39:B2:00:E3:57:4B:6E:D9:FF:99:F4:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/f6ab5e64-53f7-383b-a1f1-24933c2ee26f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.34.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:63:33:9c:0a:89:dc:af:f6:12:aa:93:1c:ac:80:3e:6c:69: 7f:63:27:0e:20:2c:ff:84:eb:ed:fe:a2:06:30:fd:7b:cd:c3: c8:43:6e:cf:9d:a7:e1:97:78:47:d8:db:05:46:4a:62:fe:ad: ca:a6:c1:7d:05:7c:1f:05:23:88:3a:9d:08:14:03:f2:df:5b: bc:da:58:a8:56:12:1b:fc:b2:86:6c:4f:3f:b1:cb:0b:7b:c3: c0:95:e3:c3:e9:b1:24:e6:2f:71:c1:cf:3c:f2:11:47:7a:a4: ed:e8:1c:90:31:20:5f:57:55:ef:2d:7f:d6:0a:54:77:9f:49: 75:cc:6e:d9:2d:e4:94:3f:88:96:b6:e8:70:d8:0c:38:ca:dd: 98:10:f3:e9:47:9c:33:6f:8a:ea:04:5a:37:ef:be:61:21:44: 88:81:95:78:b5:bc:a2:ed:42:c4:1e:21:ca:a0:8c:77:f4:61: f2:7a:37:66:b5:f2:aa:96:b7:fd:89:73:22:16:2f:ed:0e:65: a7:a6:ea:5c:81:d7:b1:e2:6f:a0:1b:59:8f:a8:3c:e4:e5:cc: c7:d7:40:9b:92:86:50:f8:34:df:bd:9c:76:45:8a:62:f8:97: 8a:fc:d3:ce:5c:ed:42:bc:7a:51:7a:64:e5:2b:09:09:fd:7e: b4:84:7f:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkp4889S5e4Sw7k6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk YjY3YTk0ZTMtNjEyNy00NjBiLWJhZjUtZmFlMmVlZGZmMTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoyGdUGtw4RWiO+wdcRWbOCEIpa1/j6Rxlg0 rg7YaHM0FGkB/1RCbtns2yrIPDVwF8l10V8IeGZnRDtaxH1Pjz6DF5NvuxghV4LN Q8i/o0mUPdXkAnrn3i0qGcBjZx6zm1r+zLzxs5JWEB+ii9JHM11nkZYNJDGJqksP A1g3DO6zNV+4SwEjH9E/GKZMcksXOIbSx8JWjzxifUr/jLGbm8XUsC+0Fvli72ql mSWYhyHmbnVUuFFU2U3myFkETdDX/UFS/Boo1AS+aO9M1nRaZmB4g3Oef0zbg7Dg cHKvO5VS20LPA3aDOpobC2mlCjb9CB27vTyo1sjQrVf/dT1eSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAFyRq45Mg3ObIA41dLbtn/mfQWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvZjZhYjVlNjQtNTNmNy0z ODNiLWExZjEtMjQ5MzNjMmVlMjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQCIYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABjM5wKidyv9hKqkxysgD5saX9jJw4gLP+E6+3+ogYw/XvNw8hDbs+d p+GXeEfY2wVGSmL+rcqmwX0FfB8FI4g6nQgUA/LfW7zaWKhWEhv8soZsTz+xywt7 w8CV48PpsSTmL3HBzzzyEUd6pO3oHJAxIF9XVe8tf9YKVHefSXXMbtkt5JQ/iJa2 6HDYDDjK3ZgQ8+lHnDNviuoEWjfvvmEhRIiBlXi1vKLtQsQeIcqgjHf0YfJ6N2a1 8qqWt/2JcyIWL+0OZaem6lyB17Hib6AbWY+oPOTlzMfXQJuShlD4NN+9nHZFimL4 l4r8085c7UK8elF6ZOUrCQn9frSEf6M= -----END CERTIFICATE-----Generated at Fri Apr 4 18:59:38 2025 by rpki-client