$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/b08c9f96-d93b-34d5-83ad-9121ee025c58.roa File: b08c9f96-d93b-34d5-83ad-9121ee025c58.roa (raw, json) Hash identifier: WqR4dSnbHNs0GQqUO4GMGIgiGgx6jPgVToVLR9Gzkpg= Subject key identifier: 37:5F:67:50:AC:0A:85:AF:61:93:B2:FF:B7:B9:B0:0A:EC:02:5F:00 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F43285848A136158FD58BF86ACB42B780 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/b08c9f96-d93b-34d5-83ad-9121ee025c58.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 11055 IP address blocks: 64.17.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:15:8f:d5:8b:f8:6a:cb:42:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=28dad61c-fad2-477c-905c-9d2d05bb4809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:46:9b:bd:d1:c2:9f:41:20:d2:c7:4b:a1:7e: 58:e9:30:5c:87:99:05:c1:e0:0c:53:fb:c7:5e:07: 81:1c:07:e2:7d:73:3a:18:3d:d9:24:41:3f:3e:1e: dc:b0:9a:81:ed:5f:f1:31:3e:f6:9d:57:e8:d7:05: 0c:f4:03:c1:b8:ef:cf:83:14:fe:ad:9d:26:b7:69: f9:df:f5:e5:68:e0:70:09:1c:ff:fb:d9:21:fb:f8: ac:43:14:fb:e0:7a:c7:10:5e:30:97:cc:0f:2d:2c: 08:e6:51:16:55:85:41:6a:56:4a:6d:f4:53:59:28: fd:c6:21:e9:85:80:75:7f:53:1d:a0:26:69:ec:20: aa:60:8b:f9:f0:32:d1:3b:55:8c:5e:49:10:12:fa: ed:a1:f7:06:8f:4e:b5:7e:b0:87:97:c7:63:06:e3: bf:5c:4a:83:f9:bf:dc:da:a7:6c:62:4c:a7:8a:c3: 3a:91:09:3d:e1:7f:cf:17:c0:d8:15:c8:c8:4b:6e: e2:67:2d:6c:d5:8d:1b:1f:19:a5:1a:53:52:be:8d: c0:03:ac:85:6b:e4:0f:a5:75:d8:5a:9e:86:fd:e9: aa:05:6a:9c:ed:c3:ac:5b:60:38:9f:b8:27:d5:99: cf:3d:98:52:2b:d1:8b:62:87:bb:04:3b:bd:22:f4: 7a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:5F:67:50:AC:0A:85:AF:61:93:B2:FF:B7:B9:B0:0A:EC:02:5F:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/b08c9f96-d93b-34d5-83ad-9121ee025c58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 64.17.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:e5:23:a0:83:e4:e8:73:0b:52:3b:8b:94:12:cd:5c:81:c7: a7:ba:a9:74:f6:e7:3a:10:ca:4a:f4:2d:3a:2b:32:c7:e1:93: 7c:ee:40:6d:28:a5:c2:b0:20:1a:4d:2e:69:f0:99:3c:20:5d: 5f:13:79:13:fd:2f:17:51:4c:1e:da:bf:5a:a0:d7:e2:3f:0e: 5f:d5:39:18:ea:7e:9e:17:d7:a2:e3:14:96:a2:de:cc:11:6b: 55:cb:b0:83:9f:59:68:f2:49:ce:b5:57:7a:9f:97:b6:73:7f: dd:23:00:0a:fd:2d:1c:24:59:40:53:27:90:bc:fe:18:d5:f7: 9d:93:25:91:b7:48:a9:0d:5d:08:73:b6:0e:05:64:9f:a2:1d: e4:97:a4:a9:38:2a:b7:99:45:7b:69:01:0d:c9:6f:28:20:9f: 27:57:4d:f3:b6:37:3f:a3:4e:ac:4f:ab:19:1f:3c:2c:70:f7: 51:50:56:3a:20:27:71:cb:28:7f:b4:a3:88:00:89:39:6a:99: d7:65:93:a4:23:03:c3:23:4b:eb:2b:dd:68:95:90:d8:68:1a: ba:83:49:e9:fb:42:b5:4a:c8:9d:28:fc:02:6d:d5:18:b8:4d: 37:84:ba:0d:81:2f:f0:2d:5c:21:ef:93:1d:5c:ad:26:1d:b5: 95:1d:e5:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNhWP1Yv4astCt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk MjhkYWQ2MWMtZmFkMi00NzdjLTkwNWMtOWQyZDA1YmI0ODA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUabvdHCn0Eg0sdLoX5Y6TBch5kFweAMU/vH XgeBHAfifXM6GD3ZJEE/Ph7csJqB7V/xMT72nVfo1wUM9APBuO/PgxT+rZ0mt2n5 3/XlaOBwCRz/+9kh+/isQxT74HrHEF4wl8wPLSwI5lEWVYVBalZKbfRTWSj9xiHp hYB1f1MdoCZp7CCqYIv58DLRO1WMXkkQEvrtofcGj061frCHl8djBuO/XEqD+b/c 2qdsYkynisM6kQk94X/PF8DYFcjIS27iZy1s1Y0bHxmlGlNSvo3AA6yFa+QPpXXY Wp6G/emqBWqc7cOsW2A4n7gn1ZnPPZhSK9GLYoe7BDu9IvR6rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdfZ1CsCoWvYZOy/7e5sArsAl8AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvYjA4YzlmOTYtZDkzYi0z NGQ1LTgzYWQtOTEyMWVlMDI1YzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBFKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDlI6CD5OhzC1I7i5QSzVyBx6e6qXT25zoQykr0LTorMsfhk3zuQG0o pcKwIBpNLmnwmTwgXV8TeRP9LxdRTB7av1qg1+I/Dl/VORjqfp4X16LjFJai3swR a1XLsIOfWWjySc61V3qfl7Zzf90jAAr9LRwkWUBTJ5C8/hjV952TJZG3SKkNXQhz tg4FZJ+iHeSXpKk4KreZRXtpAQ3JbyggnydXTfO2Nz+jTqxPqxkfPCxw91FQVjog J3HLKH+0o4gAiTlqmddlk6QjA8MjS+sr3WiVkNhoGrqDSen7QrVKyJ0o/AJt1Ri4 TTeEug2BL/AtXCHvkx1crSYdtZUd5TU= -----END CERTIFICATE-----Generated at Fri Apr 11 23:10:40 2025 by rpki-client