$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1f44119d-afb2-31eb-8419-9ede30a7fbe8.roa File: 1f44119d-afb2-31eb-8419-9ede30a7fbe8.roa (raw, json) Hash identifier: Qn+AMlatTnOEW3p6pSky/fU3hsi7rg9vH0uIH03mJXY= Subject key identifier: 30:37:3F:9A:BD:9F:F6:E1:D8:D6:14:28:BD:6F:4C:38:4A:B4:EE:6B Certificate issuer: /CN=1246a6a7-1908-49e7-9777-16290e028fb7 Certificate serial: 010D0C9F43285848EF614137F9F84FF56CB9B880 Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1f44119d-afb2-31eb-8419-9ede30a7fbe8.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 13638 IP address blocks: 64.186.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:41:37:f9:f8:4f:f5:6c:b9:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=9caaef71-5e69-4d2f-bd1c-fa6e72b3d307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d8:27:0e:69:49:23:32:be:cd:45:bf:10:16: 39:7e:32:c6:71:84:a9:d9:55:cf:51:2c:49:5a:d5: c9:3d:ed:60:69:b0:1b:c5:5d:a2:66:f6:1f:15:d4: 68:9b:5d:df:a2:07:94:91:b3:65:08:c5:16:05:2b: 30:cd:65:5d:b1:f7:59:d9:83:99:70:8f:3d:c6:81: 91:12:35:9d:d8:9d:77:ec:38:73:0f:65:62:04:38: f5:2a:52:5c:ee:76:6a:12:7f:47:e7:29:91:ff:03: a8:41:50:d4:17:2a:73:df:8a:89:44:c1:96:4e:d6: c7:30:96:78:c0:dc:0e:9e:27:71:91:67:d4:39:03: c1:27:da:f6:de:ae:6e:49:19:16:30:af:af:bb:e7: 22:f9:97:57:2c:45:fc:61:fb:7b:95:cf:c5:04:bb: 5b:8d:7c:36:67:a1:85:fa:e7:a9:7b:01:56:e8:70: c3:3e:b7:01:ca:83:25:31:07:8d:a8:d5:fa:14:7e: 93:ef:0f:31:b2:04:51:27:66:fa:ce:bd:95:30:6d: 9a:94:1e:ce:5a:d3:9a:e8:b5:ab:8b:30:15:65:ed: c7:be:1a:3b:bc:4e:d9:7c:f7:4c:85:72:ce:a2:65: b6:84:9e:2f:41:db:19:ad:7a:d1:9b:0f:61:d6:1e: 6e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:37:3F:9A:BD:9F:F6:E1:D8:D6:14:28:BD:6F:4C:38:4A:B4:EE:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1f44119d-afb2-31eb-8419-9ede30a7fbe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl X509v3 Authority Key Identifier: keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer sbgp-ipAddrBlock: critical IPv4: 64.186.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:7c:73:a5:ea:e2:9f:ed:41:6d:a3:71:2a:b6:81:75:23:31: 72:87:30:29:4f:d1:eb:ec:5d:18:72:62:32:d6:88:38:66:7f: 05:be:b0:8c:3d:eb:b9:aa:47:ec:4d:bf:db:4e:d6:b4:da:b0: 8c:ab:48:e0:ad:1a:55:9f:54:8e:d1:26:d6:97:23:0a:80:2c: ab:19:bc:2e:ab:0a:25:bf:e2:71:d1:ed:bd:48:b8:e7:d7:31: e5:7d:60:56:3c:1d:29:eb:cc:bd:14:c3:83:bf:0f:ac:89:07: 19:24:37:a6:13:3c:04:df:ac:d8:b0:5e:b3:4d:f0:2d:9b:46: b9:e8:aa:0f:a2:b5:b0:69:e8:53:19:f1:39:db:e8:2f:33:fb: f5:26:f5:64:bb:9a:29:cd:4f:e6:8e:06:4b:19:26:32:4a:05: f3:9d:2d:78:ad:b8:96:38:34:bc:84:ac:50:2f:ab:6b:55:37: 6a:46:30:44:80:f2:a7:c6:a7:71:29:77:b4:34:d2:13:9a:a5: bb:2e:02:c0:94:f2:c5:f8:8c:fb:e5:f3:20:0e:8c:b7:03:61: 02:5f:14:fc:01:6d:65:4e:61:a9:d5:73:ff:f0:bc:22:88:2a: d1:f1:df:30:9e:c1:ec:8c:6c:4c:2b:60:c8:3f:2e:b9:e1:7a: 02:a3:76:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYUE3+fhP9Wy5uIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0NmE2YTctMTkwOC00OWU3LTk3NzctMTYyOTBlMDI4 ZmI3MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk OWNhYWVmNzEtNWU2OS00ZDJmLWJkMWMtZmE2ZTcyYjNkMzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtgnDmlJIzK+zUW/EBY5fjLGcYSp2VXPUSxJ WtXJPe1gabAbxV2iZvYfFdRom13fogeUkbNlCMUWBSswzWVdsfdZ2YOZcI89xoGR EjWd2J137DhzD2ViBDj1KlJc7nZqEn9H5ymR/wOoQVDUFypz34qJRMGWTtbHMJZ4 wNwOnidxkWfUOQPBJ9r23q5uSRkWMK+vu+ci+ZdXLEX8Yft7lc/FBLtbjXw2Z6GF +uepewFW6HDDPrcByoMlMQeNqNX6FH6T7w8xsgRRJ2b6zr2VMG2alB7OWtOa6LWr izAVZe3Hvho7vE7ZfPdMhXLOomW2hJ4vQdsZrXrRmw9h1h5uFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDA3P5q9n/bh2NYUKL1vTDhKtO5rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2 YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5MGUwMjhmYjcvMWY0NDExOWQtYWZiMi0z MWViLTg0MTktOWVkZTMwYTdmYmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI0NmE2YTctMTkwOC00OWU3LTk3 NzctMTYyOTBlMDI4ZmI3LzEyNDZhNmE3LTE5MDgtNDllNy05Nzc3LTE2MjkwZTAy OGZiNy5jcmwwHwYDVR0jBBgwFoAUiHR7NSkK+xF7li5+uh5bOX3olmowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5 MGUwMjhmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQLpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABF8c6Xq4p/tQW2jcSq2gXUjMXKHMClP0evsXRhyYjLWiDhmfwW+sIw9 67mqR+xNv9tO1rTasIyrSOCtGlWfVI7RJtaXIwqALKsZvC6rCiW/4nHR7b1IuOfX MeV9YFY8HSnrzL0Uw4O/D6yJBxkkN6YTPATfrNiwXrNN8C2bRrnoqg+itbBp6FMZ 8Tnb6C8z+/Um9WS7minNT+aOBksZJjJKBfOdLXituJY4NLyErFAvq2tVN2pGMESA 8qfGp3Epd7Q00hOapbsuAsCU8sX4jPvl8yAOjLcDYQJfFPwBbWVOYanVc//wvCKI KtHx3zCeweyMbEwrYMg/LrnhegKjdmE= -----END CERTIFICATE-----Generated at Fri Apr 11 23:23:44 2025 by rpki-client