$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ba928cd3-74e7-3e5f-a258-c51d51f5a624.roa File: ba928cd3-74e7-3e5f-a258-c51d51f5a624.roa (raw, json) Hash identifier: QYLc64e7yqMw/GGg6Ezhw5gKt5mQqsrtMtCy6jOSLqo= Subject key identifier: F3:AB:71:8C:06:58:69:52:6C:5D:4F:28:72:2F:DA:BE:9F:84:12:4A Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584949FE874E061DC892F0148600 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ba928cd3-74e7-3e5f-a258-c51d51f5a624.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 13414 IP address blocks: 64.63.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:87:4e:06:1d:c8:92:f0:14:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=73d3bcda-d581-4005-9402-093c739400d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f7:a5:ca:0e:5f:15:36:30:e9:de:b3:1e:be: 68:1a:a8:03:1b:e8:dd:7a:03:9e:20:07:f4:47:59: 08:9b:71:0a:c4:af:d9:e3:e6:cf:6a:dc:6a:17:6a: 03:a8:7b:8b:a9:77:93:ba:ed:bd:62:07:50:6a:a1: 3f:7a:0c:9a:28:bf:54:89:45:02:b1:85:18:e2:ed: be:14:f0:04:83:45:9e:09:7c:6b:e6:b1:2d:16:fc: 80:f1:6d:1c:f7:94:a2:39:f8:eb:be:7e:7b:08:cd: ef:68:10:9c:4f:c7:23:48:ae:7f:4c:a7:24:35:e9: 96:28:1c:61:5c:fa:b3:53:1d:7a:79:25:d4:1a:2b: 61:4c:83:67:b0:05:e2:a6:66:3b:0a:60:02:7d:63: ea:1e:36:7b:99:40:c9:90:ff:39:88:66:bb:e8:66: cf:93:65:22:79:b6:8b:fa:62:f1:4b:21:73:c0:39: 79:21:8a:1e:4c:34:f6:c0:33:db:6c:1a:6c:49:eb: 6d:76:e8:8c:66:07:80:fe:f7:f1:c6:ca:93:9f:69: 8e:c6:8a:42:d0:4e:ab:60:09:96:b7:da:1a:31:b6: 49:dc:f8:90:ad:da:c3:1d:23:35:61:f8:3f:48:18: fd:34:9e:53:8f:b3:07:57:3c:ef:91:96:ac:cb:6f: 29:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AB:71:8C:06:58:69:52:6C:5D:4F:28:72:2F:DA:BE:9F:84:12:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ba928cd3-74e7-3e5f-a258-c51d51f5a624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 64.63.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:02:f0:ee:07:57:06:23:7e:0d:d2:1a:c1:78:8d:6b:ba:4a: 83:c4:c0:da:3b:d5:52:94:5f:48:b2:f6:41:74:e1:18:2a:dc: 1e:3a:47:57:7a:3a:ab:84:87:3c:98:6f:6d:18:ca:f9:6c:a4: 95:60:fe:00:8c:38:0f:b6:4d:57:e4:c1:be:e7:c2:13:0b:f9: 34:41:4c:8b:a6:0e:43:23:da:7a:f1:c9:47:e6:6f:ab:d0:e7: d9:e2:6b:e2:1b:3f:45:f3:83:fa:71:60:49:3e:0d:b4:51:c8: 73:5b:b6:83:d0:cf:00:1b:34:5f:fb:80:be:d4:05:0c:21:82: a1:c7:49:9a:74:4d:a6:26:56:54:32:48:e9:d0:c3:6c:0a:4c: 8c:56:15:7d:df:7a:48:0d:94:c6:a1:18:0b:2d:50:ce:30:2e: 8e:17:59:8d:4e:98:e9:1f:69:05:67:fb:49:97:ed:e2:3b:9e: 77:d7:26:96:c9:3e:67:08:33:83:ec:ce:80:b1:cf:9b:d2:45: 44:8c:1a:0d:d8:59:26:5c:80:65:17:dc:3c:ba:91:cc:00:ef: a0:24:80:02:a0:13:a0:ee:c6:94:15:95:9a:10:88:17:fd:a3: d4:85:fe:67:f3:28:ca:e2:cd:93:38:e0:6b:ed:ae:66:e2:72: 56:0b:d2:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/odOBh3IkvAUhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk NzNkM2JjZGEtZDU4MS00MDA1LTk0MDItMDkzYzczOTQwMGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPelyg5fFTYw6d6zHr5oGqgDG+jdegOeIAf0 R1kIm3EKxK/Z4+bPatxqF2oDqHuLqXeTuu29YgdQaqE/egyaKL9UiUUCsYUY4u2+ FPAEg0WeCXxr5rEtFvyA8W0c95SiOfjrvn57CM3vaBCcT8cjSK5/TKckNemWKBxh XPqzUx16eSXUGithTINnsAXipmY7CmACfWPqHjZ7mUDJkP85iGa76GbPk2UiebaL +mLxSyFzwDl5IYoeTDT2wDPbbBpsSettduiMZgeA/vfxxsqTn2mOxopC0E6rYAmW t9oaMbZJ3PiQrdrDHSM1Yfg/SBj9NJ5Tj7MHVzzvkZasy28pWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOrcYwGWGlSbF1PKHIv2r6fhBJKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYmE5MjhjZDMtNzRlNy0z ZTVmLWEyNTgtYzUxZDUxZjVhNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYC8O4HVwYjfg3SGsF4jWu6SoPEwNo71VKUX0iy9kF04Rgq3B46R1d6 OquEhzyYb20YyvlspJVg/gCMOA+2TVfkwb7nwhML+TRBTIumDkMj2nrxyUfmb6vQ 59nia+IbP0Xzg/pxYEk+DbRRyHNbtoPQzwAbNF/7gL7UBQwhgqHHSZp0TaYmVlQy SOnQw2wKTIxWFX3fekgNlMahGAstUM4wLo4XWY1OmOkfaQVn+0mX7eI7nnfXJpbJ PmcIM4PszoCxz5vSRUSMGg3YWSZcgGUX3Dy6kcwA76AkgAKgE6DuxpQVlZoQiBf9 o9SF/mfzKMrizZM44GvtrmbiclYL0gE= -----END CERTIFICATE-----Generated at Sat Apr 5 05:17:32 2025 by rpki-client