$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e774ae0c-ce9b-34cd-b151-96a5aceaa589.roa File: e774ae0c-ce9b-34cd-b151-96a5aceaa589.roa (raw, json) Hash identifier: k8kWF7UbaSju3vw5TxFu7LOcFD3nM74A4czfdj9s94s= Subject key identifier: A6:B6:01:1F:5E:F8:71:4A:04:F5:4F:54:DA:23:5F:87:42:02:B0:08 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F43285848FD56B765EB0015357AE5F080 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e774ae0c-ce9b-34cd-b151-96a5aceaa589.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 19905 IP address blocks: 64.18.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:b7:65:eb:00:15:35:7a:e5:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=e254a35b-3549-4843-b040-ae245477dc44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:40:7a:cb:8f:01:d1:ba:62:ba:11:bc:68:fe: 4c:d3:42:21:33:e4:9e:e3:69:7a:b4:c1:ad:c5:da: b6:f9:b1:d8:56:c9:1f:c2:cc:96:c4:94:79:dd:f5: b0:d5:68:cc:05:29:6a:21:ab:32:f3:40:16:bc:9d: 29:12:ae:c1:ad:f1:1a:c7:07:bc:2c:ce:da:74:1f: 2e:8f:21:e9:5f:0a:a8:71:be:e4:a7:f8:54:f3:b1: e0:10:c2:32:bf:e1:a1:29:c0:8f:a1:ae:26:db:83: d7:4c:e1:13:66:94:0e:37:73:db:1c:15:eb:18:b2: 17:d6:da:cb:66:5d:21:7e:29:15:a2:be:3d:01:7f: 1b:64:47:9c:a7:fe:0b:7c:ba:72:e8:c1:c8:f6:a2: 6c:f8:98:8f:fc:f1:d8:66:06:b5:c3:a6:b5:d8:6d: b1:43:1f:38:87:1f:6c:06:7e:77:b4:c0:2f:c2:36: 9d:a8:f3:cb:d6:05:82:64:81:07:4a:e4:c3:50:0f: bc:1e:74:51:66:92:ec:e4:f7:43:9e:9e:92:25:bc: 51:a9:95:b7:19:09:2e:0d:4b:12:7c:cb:1e:1b:63: e6:48:a6:0b:1a:9c:d0:a0:b0:48:45:fb:55:71:0a: 98:d1:e5:60:cf:af:bd:a8:cc:a1:c3:73:c0:59:38: ba:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B6:01:1F:5E:F8:71:4A:04:F5:4F:54:DA:23:5F:87:42:02:B0:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e774ae0c-ce9b-34cd-b151-96a5aceaa589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 64.18.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:e6:5b:ab:04:7d:9d:c3:67:a3:eb:f6:f0:ea:a7:3d:05:ac: 4a:53:77:79:ce:9b:cc:db:d0:6c:9b:50:09:bb:38:ca:18:32: 3b:b6:f0:b1:91:98:5c:ba:83:ca:6c:ab:8b:af:aa:70:ff:0a: 03:10:14:53:d5:db:69:8e:21:8c:30:0d:19:66:a0:a4:63:f2: 7c:a8:5a:5f:0f:f7:90:bc:4d:41:c5:c8:a7:ba:84:89:5f:3a: bb:c0:1e:44:eb:6f:68:b1:da:f0:3a:9b:f3:7c:80:8a:d5:37: 5f:26:a1:61:35:97:ce:59:ea:d6:d4:df:c6:22:11:ea:43:0c: 82:2f:bc:54:d7:93:14:8c:74:7d:3c:0e:50:5e:32:db:43:52: 46:26:68:da:c3:15:48:35:c0:db:ef:dc:9c:86:0d:c3:c1:ee: dd:36:21:f1:01:3e:12:e9:a2:7d:e0:23:08:bd:70:70:4b:a5: 0e:5a:f4:c5:83:80:3b:b0:23:1d:1b:fb:fc:1e:da:4a:84:0b: 87:88:cd:11:4e:01:7f:98:8e:ba:94:80:b6:54:8e:ca:38:6c: 14:4f:7d:a6:73:f9:b2:70:1e:3e:ba:81:a0:10:47:83:ce:a3: 29:55:19:62:bb:99:f0:d7:e9:73:ab:e7:4c:2e:ad:c6:57:08: cd:61:35:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vrdl6wAVNXrl8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTI1NGEzNWItMzU0OS00ODQzLWIwNDAtYWUyNDU0NzdkYzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0B6y48B0bpiuhG8aP5M00IhM+Se42l6tMGt xdq2+bHYVskfwsyWxJR53fWw1WjMBSlqIasy80AWvJ0pEq7BrfEaxwe8LM7adB8u jyHpXwqocb7kp/hU87HgEMIyv+GhKcCPoa4m24PXTOETZpQON3PbHBXrGLIX1trL Zl0hfikVor49AX8bZEecp/4LfLpy6MHI9qJs+JiP/PHYZga1w6a12G2xQx84hx9s Bn53tMAvwjadqPPL1gWCZIEHSuTDUA+8HnRRZpLs5PdDnp6SJbxRqZW3GQkuDUsS fMseG2PmSKYLGpzQoLBIRftVcQqY0eVgz6+9qMyhw3PAWTi6oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKa2AR9e+HFKBPVPVNojX4dCArAIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvZTc3NGFlMGMtY2U5Yi0z NGNkLWIxNTEtOTZhNWFjZWFhNTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBJCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfmW6sEfZ3DZ6Pr9vDqpz0FrEpTd3nOm8zb0GybUAm7OMoYMju28LGR mFy6g8psq4uvqnD/CgMQFFPV22mOIYwwDRlmoKRj8nyoWl8P95C8TUHFyKe6hIlf OrvAHkTrb2ix2vA6m/N8gIrVN18moWE1l85Z6tbU38YiEepDDIIvvFTXkxSMdH08 DlBeMttDUkYmaNrDFUg1wNvv3JyGDcPB7t02IfEBPhLpon3gIwi9cHBLpQ5a9MWD gDuwIx0b+/we2kqEC4eIzRFOAX+YjrqUgLZUjso4bBRPfaZz+bJwHj66gaAQR4PO oylVGWK7mfDX6XOr50wurcZXCM1hNaQ= -----END CERTIFICATE-----Generated at Fri Apr 11 23:30:08 2025 by rpki-client