$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb5b8e16-0bed-36bd-90c7-434e848e2333.roa File: cb5b8e16-0bed-36bd-90c7-434e848e2333.roa (raw, json) Hash identifier: UsfXOLy7mt1i79I0JIE8ND44LMdt2YtJssY1PM9bDL4= Subject key identifier: 8B:BD:62:14:E6:A4:D9:39:F5:F0:84:B9:E5:F3:63:19:FA:A6:4A:6A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858494B64091331A079A254E03300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb5b8e16-0bed-36bd-90c7-434e848e2333.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 22773 IP address blocks: 64.147.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:09:13:31:a0:79:a2:54:e0:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=975a095d-e453-4923-b10a-dc2ce0238f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c3:b0:be:3b:fb:36:a4:3b:f1:80:e7:47:74: a1:12:c1:43:ce:77:7d:b7:af:fb:90:cc:e9:f1:1a: a6:fa:6f:8c:9c:ea:d7:cf:6c:4e:5a:49:ad:af:51: e2:a0:c6:b0:bf:92:77:11:2d:2d:fb:c2:34:a0:29: 38:51:24:51:6b:11:26:18:6b:f1:ed:00:49:b7:28: f0:99:4c:57:7b:b2:b7:04:a3:64:9f:d7:52:db:f5: 99:f2:98:d9:40:02:b0:7a:88:10:56:cb:32:4b:9d: f7:34:d2:6d:ec:41:67:43:46:4a:6f:5f:f1:eb:39: db:4c:26:a6:87:f6:71:5b:bb:ce:94:af:04:7c:bc: d8:15:1f:63:10:92:0f:f7:83:44:30:b2:99:80:0f: b6:bd:1b:f9:7a:73:f2:93:3d:38:95:55:a8:69:d1: 56:46:fe:dd:51:3e:01:70:80:ed:14:6b:a6:6e:7e: 0e:58:e6:1d:56:1d:16:3f:c1:ef:43:90:a6:cb:91: 54:b7:9a:98:36:c3:6c:db:3a:88:36:ea:ae:5a:de: d3:3a:e4:f9:c9:72:74:b1:dd:02:35:4f:65:70:bf: a3:2b:66:18:5f:2b:86:ee:ee:ba:6a:50:10:6c:b9: 42:b5:b4:12:f9:4f:eb:b1:79:c2:b6:a1:f1:d9:6c: c0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:BD:62:14:E6:A4:D9:39:F5:F0:84:B9:E5:F3:63:19:FA:A6:4A:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb5b8e16-0bed-36bd-90c7-434e848e2333.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 64.147.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:00:8a:19:8c:c1:c1:2c:75:e3:43:76:39:b5:46:bc:e3:1b: b1:a3:54:ba:7c:98:6c:cc:86:9b:70:11:b6:64:36:a9:e7:74: 4a:c7:0d:67:7d:3f:f0:78:ed:ae:8c:be:2e:c2:40:5a:1b:9c: 42:a2:72:a5:f5:b2:6a:b5:0d:40:da:51:ae:5e:aa:19:f0:72: f9:db:ea:be:de:32:39:06:80:b8:27:03:b7:1b:e4:4a:74:35: 7b:3e:a0:48:d1:f6:38:17:9d:92:aa:4a:16:45:b1:e4:15:9e: 13:19:4f:42:01:19:f1:5d:59:03:2a:d9:b9:3c:3a:76:59:d8: 73:dd:5a:89:84:95:22:dd:4d:cf:4c:3b:0b:b4:ca:dd:43:25: 65:90:f5:9b:fa:74:56:b0:c4:9d:6b:69:10:f0:c7:23:32:5a: 2f:60:b6:53:29:b7:87:16:86:68:d7:cd:d9:24:13:8b:31:99: e6:24:22:37:60:b0:7d:7c:c8:6b:63:48:97:8b:fb:d1:40:47: 15:b6:68:b6:d0:fa:d5:cb:e1:77:c7:b9:5e:1e:9c:c2:a7:4a: 41:ba:cc:c8:2a:b9:7b:7d:ff:08:c0:27:3d:11:37:87:c6:eb: b1:32:0c:13:01:97:47:43:64:98:1a:db:fb:2c:a5:62:e4:59: fa:15:35:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZAkTMaB5olTgMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk OTc1YTA5NWQtZTQ1My00OTIzLWIxMGEtZGMyY2UwMjM4ZjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8Owvjv7NqQ78YDnR3ShEsFDznd9t6/7kMzp 8Rqm+m+MnOrXz2xOWkmtr1HioMawv5J3ES0t+8I0oCk4USRRaxEmGGvx7QBJtyjw mUxXe7K3BKNkn9dS2/WZ8pjZQAKweogQVssyS533NNJt7EFnQ0ZKb1/x6znbTCam h/ZxW7vOlK8EfLzYFR9jEJIP94NEMLKZgA+2vRv5enPykz04lVWoadFWRv7dUT4B cIDtFGumbn4OWOYdVh0WP8HvQ5Cmy5FUt5qYNsNs2zqINuquWt7TOuT5yXJ0sd0C NU9lcL+jK2YYXyuG7u66alAQbLlCtbQS+U/rsXnCtqHx2WzAtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIu9YhTmpNk59fCEueXzYxn6pkpqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2I1YjhlMTYtMGJlZC0z NmJkLTkwYzctNDM0ZTg0OGUyMzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQJMZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsAihmMwcEsdeNDdjm1RrzjG7GjVLp8mGzMhptwEbZkNqnndErHDWd9 P/B47a6Mvi7CQFobnEKicqX1smq1DUDaUa5eqhnwcvnb6r7eMjkGgLgnA7cb5Ep0 NXs+oEjR9jgXnZKqShZFseQVnhMZT0IBGfFdWQMq2bk8OnZZ2HPdWomElSLdTc9M Owu0yt1DJWWQ9Zv6dFawxJ1raRDwxyMyWi9gtlMpt4cWhmjXzdkkE4sxmeYkIjdg sH18yGtjSJeL+9FARxW2aLbQ+tXL4XfHuV4enMKnSkG6zMgquXt9/wjAJz0RN4fG 67EyDBMBl0dDZJga2/sspWLkWfoVNVo= -----END CERTIFICATE-----Generated at Sun Apr 6 16:04:51 2025 by rpki-client