$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/af0a8e4a-42b9-3667-8ce3-865564983774.roa File: af0a8e4a-42b9-3667-8ce3-865564983774.roa (raw, json) Hash identifier: 3zGvmh1WkSZYydARQLFdW5wRzjZn3SacSRkvE3bIkT0= Subject key identifier: F8:97:99:F3:5E:78:19:39:C5:19:6A:57:FE:22:96:AA:7A:90:78:11 Certificate issuer: /CN=64a6009d-12b8-4b34-95f9-d26180d8bf4c Certificate serial: 010D0C9F4328584917DC2B60CB2AB7FD466B0E00 Authority key identifier: F7:18:5E:88:BA:94:F1:D1:B6:C1:14:FF:F6:CF:D5:09:C5:AA:5F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/af0a8e4a-42b9-3667-8ce3-865564983774.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 11444 IP address blocks: 161.129.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:2b:60:cb:2a:b7:fd:46:6b:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64a6009d-12b8-4b34-95f9-d26180d8bf4c Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=2f47dc94-b96a-42ce-8a79-23a0456af4d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:82:00:c8:ea:73:ad:33:65:b3:74:23:c4:ed: ef:a7:16:f6:95:7c:29:68:45:80:0a:0c:37:b7:f8: 6b:ec:6d:2c:4d:83:bc:b9:a1:25:9c:0c:a5:08:bf: b6:a2:2a:20:9e:c7:ea:6d:b9:0d:bd:9b:a7:b3:e5: ba:3f:0a:aa:c9:a1:15:98:a7:05:ab:e4:40:20:25: 3e:95:c6:2e:21:67:ee:02:ab:dc:6b:d2:68:03:30: 9a:df:9e:25:91:b5:77:2d:b4:d4:f2:94:a7:9f:e7: 5e:f5:6a:9e:ed:97:7a:39:b6:22:2a:43:0a:df:ae: 2b:aa:df:8c:e8:78:fe:c2:b8:02:f1:69:64:95:94: 35:84:02:8f:56:7f:d7:41:83:0c:85:8d:d7:98:e2: 4f:7d:a7:50:6f:3e:92:81:ce:1f:92:cd:7b:9a:bb: af:58:1c:4f:c5:78:32:ad:d3:ec:d4:05:c2:6a:8c: ff:c5:1b:5a:98:f7:69:39:cf:d8:6a:2e:51:73:e8: f2:fe:e6:b3:da:75:9a:b2:47:c0:1e:49:f5:fc:d6: e1:b4:16:34:10:b7:34:5d:4c:a7:a4:fe:19:6f:95: 84:8c:64:42:2a:7c:2b:3b:d2:1c:5b:01:50:e1:c7: 4f:a1:62:4b:35:55:91:cc:9c:3e:b7:51:6a:c8:17: 59:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:97:99:F3:5E:78:19:39:C5:19:6A:57:FE:22:96:AA:7A:90:78:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/af0a8e4a-42b9-3667-8ce3-865564983774.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl X509v3 Authority Key Identifier: keyid:F7:18:5E:88:BA:94:F1:D1:B6:C1:14:FF:F6:CF:D5:09:C5:AA:5F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer sbgp-ipAddrBlock: critical IPv4: 161.129.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:a5:df:d3:e9:df:70:8c:da:69:3b:7b:cb:cd:25:6f:84:41: fd:ca:ce:32:7e:53:30:a4:bd:68:46:64:f3:d0:4a:ba:bd:fa: 09:19:6d:fc:35:48:6d:d1:51:a9:9a:48:f0:b2:9d:44:18:81: 57:ae:67:1c:86:c1:56:47:51:db:09:e8:3b:a6:25:51:09:9c: 61:4f:d9:ff:1b:91:ec:24:00:03:b6:f5:f3:e8:54:a4:51:36: bd:86:9f:4b:be:2a:ca:bd:ac:a5:e6:f7:ed:32:26:82:d0:7e: cb:34:50:93:2e:b6:51:16:74:22:cb:f9:e8:ba:f4:4f:b0:c5: cb:b4:54:50:ed:c8:da:50:10:68:4f:17:08:75:5a:ed:85:ad: f5:eb:21:db:ed:cc:58:8a:53:96:a8:da:9c:24:eb:64:a0:cf: 5a:2a:89:0c:dc:d9:ae:78:bb:8f:f1:2a:60:d9:af:9b:62:03: d0:cc:e2:76:cb:86:33:af:de:e1:f5:1f:9f:0f:d3:e5:54:91: 24:70:8f:67:67:cd:34:5d:a7:aa:fe:92:b2:43:4f:0b:d7:0d: d8:54:2c:ad:18:07:92:5a:cb:a7:e8:72:5d:51:57:ec:11:fd: 7e:3a:2d:3c:bb:1f:42:d6:b7:83:3d:78:1f:7b:15:10:5c:3c: 6b:53:a2:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3Ctgyyq3/UZrDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRhNjAwOWQtMTJiOC00YjM0LTk1ZjktZDI2MTgwZDhi ZjRjMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk MmY0N2RjOTQtYjk2YS00MmNlLThhNzktMjNhMDQ1NmFmNGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYIAyOpzrTNls3QjxO3vpxb2lXwpaEWACgw3 t/hr7G0sTYO8uaElnAylCL+2oiognsfqbbkNvZuns+W6PwqqyaEVmKcFq+RAICU+ lcYuIWfuAqvca9JoAzCa354lkbV3LbTU8pSnn+de9Wqe7Zd6ObYiKkMK364rqt+M 6Hj+wrgC8WlklZQ1hAKPVn/XQYMMhY3XmOJPfadQbz6Sgc4fks17mruvWBxPxXgy rdPs1AXCaoz/xRtamPdpOc/Yai5Rc+jy/uaz2nWaskfAHkn1/NbhtBY0ELc0XUyn pP4Zb5WEjGRCKnwrO9IcWwFQ4cdPoWJLNVWRzJw+t1FqyBdZKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPiXmfNeeBk5xRlqV/4ilqp6kHgRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGE2 MDA5ZC0xMmI4LTRiMzQtOTVmOS1kMjYxODBkOGJmNGMvYWYwYThlNGEtNDJiOS0z NjY3LThjZTMtODY1NTY0OTgzNzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRhNjAwOWQtMTJiOC00YjM0LTk1 ZjktZDI2MTgwZDhiZjRjLzY0YTYwMDlkLTEyYjgtNGIzNC05NWY5LWQyNjE4MGQ4 YmY0Yy5jcmwwHwYDVR0jBBgwFoAU9xheiLqU8dG2wRT/9s/VCcWqX+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NGE2MDA5ZC0xMmI4LTRiMzQtOTVmOS1kMjYx ODBkOGJmNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYFJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSl39Pp33CM2mk7e8vNJW+EQf3KzjJ+UzCkvWhGZPPQSrq9+gkZbfw1 SG3RUamaSPCynUQYgVeuZxyGwVZHUdsJ6DumJVEJnGFP2f8bkewkAAO29fPoVKRR Nr2Gn0u+Ksq9rKXm9+0yJoLQfss0UJMutlEWdCLL+ei69E+wxcu0VFDtyNpQEGhP Fwh1Wu2FrfXrIdvtzFiKU5ao2pwk62Sgz1oqiQzc2a54u4/xKmDZr5tiA9DM4nbL hjOv3uH1H58P0+VUkSRwj2dnzTRdp6r+krJDTwvXDdhULK0YB5Jay6focl1RV+wR /X46LTy7H0LWt4M9eB97FRBcPGtTokA= -----END CERTIFICATE-----Generated at Sat Apr 12 15:33:21 2025 by rpki-client