$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/67c2dad8-f63f-3fcb-a30e-33c1b8985214.roa File: 67c2dad8-f63f-3fcb-a30e-33c1b8985214.roa (raw, json) Hash identifier: IOGC/dNUGzQRCb0/tcYRO75xqA2y2QzdEgga5dTGjlQ= Subject key identifier: FC:CD:C8:04:6E:21:AF:38:72:C1:FF:97:95:F1:45:7C:0C:73:13:C5 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F43285848A13616926729779F564E4C00 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/67c2dad8-f63f-3fcb-a30e-33c1b8985214.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 5738 IP address blocks: 64.17.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:16:92:67:29:77:9f:56:4e:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=041a2b2a-506a-46b5-ad48-dae1d5854023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3c:8e:86:05:fe:51:f3:87:f7:db:2a:cb:f3: 33:fe:35:c1:f8:8e:50:ae:87:ae:82:f1:73:85:cd: d3:b8:e0:38:f5:87:0d:cb:ac:b1:96:6d:68:8e:14: 67:0e:86:6d:05:cd:b0:23:3d:d7:d4:6c:84:81:91: ff:c4:63:74:7f:fa:f2:d4:5f:a8:13:eb:35:a4:2b: c8:6e:53:f0:ba:d2:ba:f7:18:12:a8:7d:d1:47:4a: 3e:bc:6c:7b:59:7c:33:77:22:1e:bd:5e:ac:b6:ee: 3e:47:13:d2:89:60:99:a1:07:3f:e2:c4:a6:58:12: 36:fb:72:2a:d2:ee:88:6c:ad:7a:1d:95:fd:c0:22: 69:4d:df:87:6a:8c:92:90:52:dd:e2:2f:f1:21:fb: bf:27:1e:8e:20:7b:77:45:43:32:dc:73:92:c5:a0: a2:46:6f:00:18:19:3f:66:08:e7:26:b6:90:13:b1: 96:3a:e4:5a:8a:5e:df:a3:68:37:de:9e:d7:78:62: 70:8e:8e:c3:bb:d8:99:fe:aa:1b:ab:11:79:63:4b: a6:d8:e8:4a:66:c3:f1:ab:56:48:65:e6:8c:b8:be: 9a:50:f4:e7:9f:dd:e5:e8:1b:a3:d2:00:90:a5:eb: 8e:24:da:18:ab:86:35:1f:df:d0:b4:df:d7:d4:83: ea:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:CD:C8:04:6E:21:AF:38:72:C1:FF:97:95:F1:45:7C:0C:73:13:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/67c2dad8-f63f-3fcb-a30e-33c1b8985214.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 64.17.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:fb:a7:b0:cf:0a:86:b3:52:70:58:73:08:30:ff:f0:83:ce: c6:84:db:01:33:8a:b2:4a:8c:49:8f:ab:02:11:b5:74:43:be: 1a:53:77:7e:72:b4:a9:1d:c2:3c:ca:85:e2:d4:b8:a1:10:d7: 43:cc:95:94:0e:79:fa:14:80:08:e8:27:ad:d5:d0:92:ea:5d: 26:6f:16:bd:2b:0b:7d:a0:9c:4c:45:76:b9:71:1c:79:7b:94: 83:bc:74:b6:f0:37:ef:18:58:44:b0:d0:65:95:f1:61:23:c6: c6:77:73:0d:47:03:a3:6f:9c:54:f3:91:27:cf:32:54:90:1b: 24:93:82:0e:55:d9:48:35:16:89:e7:16:a2:e6:be:94:07:8b: 69:72:6d:d8:d4:e7:c2:f8:2f:e6:27:2a:73:23:8e:fe:b0:29: d4:f2:d4:b5:8f:bb:87:54:63:e4:c2:bf:41:41:8c:f4:05:22: 86:77:51:dc:4a:15:97:4f:58:41:70:5c:e7:58:ac:62:11:26: 2d:d4:0c:9a:67:d8:5b:ce:ec:70:8f:1e:2b:65:e4:48:c2:8c: 31:cd:7e:23:95:9a:31:6d:f6:e2:13:19:c0:b0:d9:8d:25:5b: b7:90:e3:77:a6:28:ef:dd:8d:33:64:b0:89:44:53:28:22:8a: 19:4e:8f:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNhaSZyl3n1ZOTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk MDQxYTJiMmEtNTA2YS00NmI1LWFkNDgtZGFlMWQ1ODU0MDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzyOhgX+UfOH99sqy/Mz/jXB+I5QroeugvFz hc3TuOA49YcNy6yxlm1ojhRnDoZtBc2wIz3X1GyEgZH/xGN0f/ry1F+oE+s1pCvI blPwutK69xgSqH3RR0o+vGx7WXwzdyIevV6stu4+RxPSiWCZoQc/4sSmWBI2+3Iq 0u6IbK16HZX9wCJpTd+HaoySkFLd4i/xIfu/Jx6OIHt3RUMy3HOSxaCiRm8AGBk/ ZgjnJraQE7GWOuRail7fo2g33p7XeGJwjo7Du9iZ/qobqxF5Y0um2OhKZsPxq1ZI ZeaMuL6aUPTnn93l6Buj0gCQpeuOJNoYq4Y1H9/QtN/X1IPq2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzNyARuIa84csH/l5XxRXwMcxPFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNjdjMmRhZDgtZjYzZi0z ZmNiLWEzMGUtMzNjMWI4OTg1MjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQBFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGb7p7DPCoazUnBYcwgw//CDzsaE2wEzirJKjEmPqwIRtXRDvhpTd35y tKkdwjzKheLUuKEQ10PMlZQOefoUgAjoJ63V0JLqXSZvFr0rC32gnExFdrlxHHl7 lIO8dLbwN+8YWESw0GWV8WEjxsZ3cw1HA6NvnFTzkSfPMlSQGySTgg5V2Ug1Fonn FqLmvpQHi2lybdjU58L4L+YnKnMjjv6wKdTy1LWPu4dUY+TCv0FBjPQFIoZ3UdxK FZdPWEFwXOdYrGIRJi3UDJpn2FvO7HCPHitl5EjCjDHNfiOVmjFt9uITGcCw2Y0l W7eQ43emKO/djTNksIlEUygiihlOj3U= -----END CERTIFICATE-----Generated at Fri Apr 11 23:42:11 2025 by rpki-client