$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/ccea40b6-6b8b-3260-8acb-11e182c16519.roa File: ccea40b6-6b8b-3260-8acb-11e182c16519.roa (raw, json) Hash identifier: yLOcV95alRpJraCT0dafP1dfxoI7NRdRc+eiobIUugM= Subject key identifier: 5C:38:FA:FD:36:43:1A:DD:36:FF:AC:8A:DF:2F:E9:18:64:21:EA:A0 Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F43285849088173F38DC6C96B77DD8780 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/ccea40b6-6b8b-3260-8acb-11e182c16519.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 21657 IP address blocks: 64.147.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:73:f3:8d:c6:c9:6b:77:dd:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=c5b0292e-76ec-4188-a01b-46b4603ee1a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fb:ca:a7:5a:8d:4d:20:c5:4c:aa:5a:4f:7c: 20:ea:ab:a8:35:4d:04:66:04:0a:ea:ee:11:50:2e: 1e:1d:3c:5e:3b:78:2e:bf:ea:13:31:71:f9:f2:ff: 47:04:2b:94:49:bb:17:af:5e:8c:d8:11:b8:f1:1c: de:fd:ee:5b:01:9a:f2:6c:6f:53:90:97:ed:93:15: 0a:30:4a:57:df:7f:a4:2a:0f:38:87:d2:72:5c:e2: c5:ae:ab:ed:2f:35:c7:3e:21:c9:5a:fd:d6:77:43: c9:a6:4b:a0:37:0a:c4:5d:a6:fa:27:02:fe:4c:70: 5c:3f:aa:e2:b8:22:2d:3b:51:4f:b6:04:22:79:89: d7:c3:77:f5:7b:a6:cb:02:20:38:06:f6:68:fd:04: c7:e6:d1:41:4f:58:d9:6c:ae:af:f8:c3:8c:d3:f4: 08:3b:26:1d:47:22:80:bb:e7:c0:a3:b8:c7:69:98: 59:97:f4:bc:89:31:61:5c:53:a5:ef:3d:99:27:b2: 14:63:70:65:37:1d:21:2c:d4:0f:3d:e4:c4:d4:bb: 3a:72:99:b5:a7:f5:a6:38:a6:9d:6d:f3:c2:25:6b: ec:78:38:df:10:6d:70:69:fd:89:35:f9:06:3c:c7: d6:78:35:57:1c:3d:b8:50:b4:5c:85:03:41:66:0b: c9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:38:FA:FD:36:43:1A:DD:36:FF:AC:8A:DF:2F:E9:18:64:21:EA:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/ccea40b6-6b8b-3260-8acb-11e182c16519.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 64.147.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:c3:87:62:e4:f7:8f:27:49:e9:41:06:51:e3:0d:9c:82:4e: 99:cf:b2:71:c6:51:68:e2:e2:a7:e6:30:d5:bc:13:b0:c1:f5: 21:30:7d:fd:c0:d8:b3:bb:de:f4:e0:67:a3:cd:c6:ce:35:00: 91:5d:23:a7:7d:ef:1a:20:69:3e:66:d6:c2:1e:41:67:ae:f8: 06:e8:ea:e2:17:fc:6c:18:cd:0e:8b:6b:36:98:78:3d:46:34: 85:71:0b:04:e7:dd:5e:ac:21:7a:c6:75:d7:e0:c7:7e:6e:5c: bf:e0:19:18:5d:f9:51:4e:64:9e:56:74:94:c2:ad:01:e0:ad: 2c:46:a2:df:eb:b3:8d:35:42:33:72:4f:d9:18:0b:e2:26:14: c6:79:a9:5c:c7:94:6b:1c:b1:ac:a5:df:77:90:98:55:b6:36: b1:a3:c7:0b:e6:b9:76:29:11:e3:40:d4:4d:eb:c0:3b:88:eb: d0:65:d5:03:a2:e9:02:a2:0f:d4:09:02:a0:71:b4:5a:ce:f5: a1:e4:7d:07:f8:8c:62:68:25:99:1e:d1:ce:cd:8b:ae:ff:5c: 46:e7:5d:98:52:dc:79:43:ba:31:4f:00:0f:ac:65:e5:cb:c1: 9d:76:c5:08:dc:8c:ec:02:64:c2:6e:21:1b:93:43:17:90:4b: 99:bb:a1:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgXPzjcbJa3fdh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk YzViMDI5MmUtNzZlYy00MTg4LWEwMWItNDZiNDYwM2VlMWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/vKp1qNTSDFTKpaT3wg6quoNU0EZgQK6u4R UC4eHTxeO3guv+oTMXH58v9HBCuUSbsXr16M2BG48Rze/e5bAZrybG9TkJftkxUK MEpX33+kKg84h9JyXOLFrqvtLzXHPiHJWv3Wd0PJpkugNwrEXab6JwL+THBcP6ri uCItO1FPtgQieYnXw3f1e6bLAiA4BvZo/QTH5tFBT1jZbK6v+MOM0/QIOyYdRyKA u+fAo7jHaZhZl/S8iTFhXFOl7z2ZJ7IUY3BlNx0hLNQPPeTE1Ls6cpm1p/WmOKad bfPCJWvseDjfEG1waf2JNfkGPMfWeDVXHD24ULRchQNBZgvJ0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFw4+v02QxrdNv+sit8v6RhkIeqgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvY2NlYTQwYjYtNmI4Yi0z MjYwLThhY2ItMTFlMTgyYzE2NTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQJPvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXDh2Lk948nSelBBlHjDZyCTpnPsnHGUWji4qfmMNW8E7DB9SEwff3A 2LO73vTgZ6PNxs41AJFdI6d97xogaT5m1sIeQWeu+Abo6uIX/GwYzQ6LazaYeD1G NIVxCwTn3V6sIXrGddfgx35uXL/gGRhd+VFOZJ5WdJTCrQHgrSxGot/rs401QjNy T9kYC+ImFMZ5qVzHlGscsayl33eQmFW2NrGjxwvmuXYpEeNA1E3rwDuI69Bl1QOi 6QKiD9QJAqBxtFrO9aHkfQf4jGJoJZke0c7Ni67/XEbnXZhS3HlDujFPAA+sZeXL wZ12xQjcjOwCZMJuIRuTQxeQS5m7obE= -----END CERTIFICATE-----Generated at Sat Apr 12 14:05:13 2025 by rpki-client