$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/c81b4e9d-6b25-353f-b21c-f0758e3a3921.roa File: c81b4e9d-6b25-353f-b21c-f0758e3a3921.roa (raw, json) Hash identifier: dkCPbgip7GWYyP8M3pq4cos/5GfRTXs6FbIxbDOLZoE= Subject key identifier: 6E:BF:F6:25:03:A9:94:03:43:2B:14:38:3C:70:76:51:4E:A7:A2:38 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F43285848A13616844ED0656B7F824F80 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/c81b4e9d-6b25-353f-b21c-f0758e3a3921.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 54989 IP address blocks: 64.17.97.0/24 maxlen: 24 64.17.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:16:84:4e:d0:65:6b:7f:82:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=abb89af1-7c5d-4365-abf7-589e7af1ccd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:99:04:8c:68:d3:a9:2f:49:61:33:43:b9:dd: 49:1e:a8:f9:1e:b5:f2:b0:ec:19:cb:fc:b6:26:12: 71:06:6a:a7:d1:9d:bf:7c:f6:c3:4b:54:69:99:51: 35:97:f9:13:2c:18:48:bc:89:c8:d7:03:71:93:e4: c9:d3:b6:58:ff:6a:84:f5:69:21:24:e7:e9:ce:f1: 1a:40:24:c3:b1:42:39:08:13:ec:2e:69:04:2b:62: 36:73:a6:17:44:f3:f0:02:88:6c:63:85:0e:2b:31: 4d:9f:83:e8:b3:af:71:92:6f:0e:39:1d:55:27:08: 21:2b:32:f9:0d:3c:1f:a2:2d:21:1c:77:12:9f:1b: 7b:87:ad:3d:a1:92:b3:72:14:52:42:7b:e5:c7:13: c7:5a:f2:94:23:f8:2b:4a:3d:3e:53:8c:fe:aa:eb: f7:61:20:9a:5a:31:4f:0a:05:93:c2:ef:33:d2:89: 1e:e8:4d:84:29:b2:a1:3c:6f:08:8b:5f:e2:ee:13: 00:b9:5d:68:f4:43:35:e3:f5:b3:52:d4:53:23:5d: a1:0a:bb:0a:ce:33:c4:d5:91:63:6b:fb:c0:4e:eb: b7:f7:89:b6:05:99:d9:bf:4c:6c:3e:3c:67:19:77: 2c:d8:aa:bb:cf:c6:1b:23:b0:07:58:0b:39:a9:62: 05:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:BF:F6:25:03:A9:94:03:43:2B:14:38:3C:70:76:51:4E:A7:A2:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/c81b4e9d-6b25-353f-b21c-f0758e3a3921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 64.17.97.0/24 64.17.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:b3:cc:4e:fe:b2:ce:06:ac:61:fd:12:d5:03:db:dd:2f:72: 45:10:e4:95:a1:3f:de:58:60:ae:c2:4c:24:bb:dd:9f:5a:5d: 5b:e0:0c:21:3c:e6:fe:f6:1a:1a:05:7d:de:94:bb:44:6f:e4: 7a:b4:98:35:85:46:87:9c:01:b4:b2:b1:7a:48:3f:e0:50:35: 82:25:a2:2a:81:af:d9:c7:98:ca:5d:60:98:2a:34:35:e5:ab: 11:1e:8c:de:51:81:c1:a5:6b:d6:92:a8:ca:c1:dd:c1:8d:a1: 28:25:d7:8d:87:63:6b:a7:f2:1c:26:ba:b3:82:5f:f7:af:9d: 42:5f:19:73:d9:d6:38:3e:bd:5c:49:68:f4:4a:8a:24:8f:47: 01:42:e4:21:d1:a7:c1:be:5d:9e:b3:b3:a3:68:be:ce:42:8e: cb:fc:a2:04:41:d0:71:28:53:9d:49:72:56:7d:f3:4e:96:38: 6d:47:12:46:4c:29:87:15:d4:a4:5f:db:c9:ac:54:66:58:7e: 2c:f1:19:5c:33:e7:47:47:14:f4:2f:73:fe:87:31:c0:dd:61: 93:27:7b:6b:13:98:aa:19:2a:af:40:df:a4:c3:6c:98:fc:08: aa:d0:28:ec:79:15:13:6a:b9:71:9d:8b:b5:ab:27:fd:7f:e4: 68:33:78:e2 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEihNhaETtBla3+CT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk YWJiODlhZjEtN2M1ZC00MzY1LWFiZjctNTg5ZTdhZjFjY2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5kEjGjTqS9JYTNDud1JHqj5HrXysOwZy/y2 JhJxBmqn0Z2/fPbDS1RpmVE1l/kTLBhIvInI1wNxk+TJ07ZY/2qE9WkhJOfpzvEa QCTDsUI5CBPsLmkEK2I2c6YXRPPwAohsY4UOKzFNn4Pos69xkm8OOR1VJwghKzL5 DTwfoi0hHHcSnxt7h609oZKzchRSQnvlxxPHWvKUI/grSj0+U4z+quv3YSCaWjFP CgWTwu8z0oke6E2EKbKhPG8Ii1/i7hMAuV1o9EM14/WzUtRTI12hCrsKzjPE1ZFj a/vATuu394m2BZnZv0xsPjxnGXcs2Kq7z8YbI7AHWAs5qWIF9QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFG6/9iUDqZQDQysUODxwdlFOp6I4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvYzgxYjRlOWQtNmIyNS0z NTNmLWIyMWMtZjA3NThlM2EzOTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQBFhAwQA QBF3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAmzzE7+ss4GrGH9EtUD290vckUQ5JWhP95YYK7CTCS73Z9a XVvgDCE85v72GhoFfd6Uu0Rv5Hq0mDWFRoecAbSysXpIP+BQNYIloiqBr9nHmMpd YJgqNDXlqxEejN5RgcGla9aSqMrB3cGNoSgl142HY2un8hwmurOCX/evnUJfGXPZ 1jg+vVxJaPRKiiSPRwFC5CHRp8G+XZ6zs6Novs5Cjsv8ogRB0HEoU51JclZ9806W OG1HEkZMKYcV1KRf28msVGZYfizxGVwz50dHFPQvc/6HMcDdYZMne2sTmKoZKq9A 36TDbJj8CKrQKOx5FRNquXGdi7WrJ/1/5GgzeOI= -----END CERTIFICATE-----Generated at Fri Apr 11 23:39:54 2025 by rpki-client