$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/e33d3a6b-16f7-3c6e-bcb4-c027348822ce.roa File: e33d3a6b-16f7-3c6e-bcb4-c027348822ce.roa (raw, json) Hash identifier: ykDiMRnR+8YAfDSCMi70pzVvUMvbKpNmG3DmUkgWCFc= Subject key identifier: E7:3D:8B:32:E1:FE:BF:EF:12:1D:AD:20:D4:D5:A6:5A:ED:49:47:BE Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F43285849088173E22E20F0A7E0A1ABC0 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/e33d3a6b-16f7-3c6e-bcb4-c027348822ce.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 21657 IP address blocks: 64.147.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:73:e2:2e:20:f0:a7:e0:a1:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=bbe09c23-51be-4af4-b333-8dc4346d5128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c8:9e:dc:2d:14:0b:db:53:f7:40:60:3b:a0: 6b:7e:f1:d1:44:70:30:f2:ae:45:4e:c0:80:97:63: 74:12:7f:8c:b3:53:45:36:4c:70:f5:dc:c3:ed:e7: 3c:e8:e4:a8:65:7e:68:4f:af:20:59:bc:df:09:83: c1:f3:c8:b1:cb:d9:53:6f:76:4c:16:09:a9:6c:29: 6b:5b:d4:5c:cb:54:82:58:58:58:36:c4:3d:4d:b4: 65:d9:b7:8b:40:fc:b8:cf:7f:dc:2c:21:cd:f4:d6: 2d:0d:ce:93:8e:74:2d:06:11:e4:a5:62:03:18:99: ab:24:99:39:ff:26:fc:98:28:6f:8c:ad:aa:a7:e1: 83:e6:89:38:af:11:24:44:d6:14:78:34:e9:28:47: 67:37:f2:20:3a:5d:ad:97:a8:5f:86:d1:2b:29:fd: cf:a5:ab:4e:48:c4:96:55:0e:cb:83:99:fe:1b:5e: e6:99:af:ce:8f:ea:69:d1:c5:cf:2c:f0:47:1c:99: 9a:57:38:5d:af:37:b3:24:24:ee:9b:da:76:07:17: 35:18:32:7e:fd:ad:e5:df:3c:a5:39:5d:17:21:e4: 09:20:b8:d5:19:d2:d6:ed:76:a2:5b:66:f9:1c:a2: 79:1c:df:a4:58:09:4d:56:1f:4c:f8:49:01:bc:16: 88:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3D:8B:32:E1:FE:BF:EF:12:1D:AD:20:D4:D5:A6:5A:ED:49:47:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/e33d3a6b-16f7-3c6e-bcb4-c027348822ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 64.147.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:49:02:1b:db:18:f4:6d:b0:06:66:d7:56:6d:4c:f3:20:cf: a4:18:f1:15:2e:0b:c4:d4:9e:0a:e8:fa:3e:9d:1f:7a:df:b0: 7c:9a:0a:31:a8:68:0d:11:06:94:3b:4a:36:01:11:bb:23:f8: c5:2e:1f:9d:ab:6e:6a:e1:9e:57:6d:20:9b:f9:0c:c9:91:74: 18:59:e1:0b:82:1f:e2:9b:f8:3b:b6:12:5e:06:62:e1:c7:99: 2e:ef:5a:f3:64:c6:5a:e5:1d:26:56:dd:fa:c9:0a:4c:20:61: cd:3c:e0:14:64:50:6f:57:ec:5f:07:82:23:07:a7:32:84:6f: 71:8b:9c:5b:46:f9:24:a3:ec:6e:b7:5a:df:c8:72:52:ff:33: b6:26:17:dc:71:09:3c:e0:98:c1:a7:27:92:82:28:ee:cf:37: ba:56:31:e9:c7:53:2a:df:27:55:76:0a:0d:5a:b8:86:29:28: 66:1f:88:3a:c1:d3:bf:f2:fe:2d:ef:01:a2:90:bb:3c:71:9a: a0:fb:c2:c1:33:f9:4f:07:0d:1e:4c:08:3a:d6:42:84:da:0b: 39:8e:74:4e:1d:de:c7:45:87:33:6c:2f:84:f5:57:43:fb:2e: cd:88:74:dc:32:25:4e:94:53:4a:23:4c:8d:a6:01:f0:0f:35: 21:87:9c:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgXPiLiDwp+Chq8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk YmJlMDljMjMtNTFiZS00YWY0LWIzMzMtOGRjNDM0NmQ1MTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsie3C0UC9tT90BgO6BrfvHRRHAw8q5FTsCA l2N0En+Ms1NFNkxw9dzD7ec86OSoZX5oT68gWbzfCYPB88ixy9lTb3ZMFgmpbClr W9Rcy1SCWFhYNsQ9TbRl2beLQPy4z3/cLCHN9NYtDc6TjnQtBhHkpWIDGJmrJJk5 /yb8mChvjK2qp+GD5ok4rxEkRNYUeDTpKEdnN/IgOl2tl6hfhtErKf3PpatOSMSW VQ7Lg5n+G17mma/Oj+pp0cXPLPBHHJmaVzhdrzezJCTum9p2Bxc1GDJ+/a3l3zyl OV0XIeQJILjVGdLW7XaiW2b5HKJ5HN+kWAlNVh9M+EkBvBaIhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOc9izLh/r/vEh2tINTVplrtSUe+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvZTMzZDNhNmItMTZmNy0z YzZlLWJjYjQtYzAyNzM0ODgyMmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQJPqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtJAhvbGPRtsAZm11ZtTPMgz6QY8RUuC8TUngro+j6dH3rfsHyaCjGo aA0RBpQ7SjYBEbsj+MUuH52rbmrhnldtIJv5DMmRdBhZ4QuCH+Kb+Du2El4GYuHH mS7vWvNkxlrlHSZW3frJCkwgYc084BRkUG9X7F8HgiMHpzKEb3GLnFtG+SSj7G63 Wt/IclL/M7YmF9xxCTzgmMGnJ5KCKO7PN7pWMenHUyrfJ1V2Cg1auIYpKGYfiDrB 07/y/i3vAaKQuzxxmqD7wsEz+U8HDR5MCDrWQoTaCzmOdE4d3sdFhzNsL4T1V0P7 Ls2IdNwyJU6UU0ojTI2mAfAPNSGHnDM= -----END CERTIFICATE-----Generated at Sat Apr 12 13:42:58 2025 by rpki-client