$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/963d3839-4015-35a7-b38b-b1c31b4a4e68.roa File: 963d3839-4015-35a7-b38b-b1c31b4a4e68.roa (raw, json) Hash identifier: kyhjPF+hE4ORtJ0IrF2a5/ahHsYt710NbZ787O642LA= Subject key identifier: B2:95:A5:30:C6:10:35:63:88:16:A9:C4:7E:C7:47:4B:29:4F:B4:98 Certificate issuer: /CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Certificate serial: 010D0C9F432858487325B8C90741401ABA8E6280 Authority key identifier: 88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/963d3839-4015-35a7-b38b-b1c31b4a4e68.roa Signing time: Mon 06 Jan 2025 02:00:40 +0000 ROA not before: Mon 06 Jan 2025 02:00:40 +0000 ROA not after: Sun 06 Apr 2025 01:00:40 +0000 asID: 16509 IP address blocks: 64.57.33.0/24 maxlen: 24 64.57.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:73:25:b8:c9:07:41:40:1a:ba:8e:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Validity Not Before: Jan 6 02:00:40 2025 GMT Not After : Apr 6 01:00:40 2025 GMT Subject: CN=92fa3b2d-43ef-4d0e-abb9-3a125681c02c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:56:0e:29:84:fe:bf:81:d1:9c:1e:8e:2c:10: d6:c9:e6:1e:8d:ee:f9:17:bb:a0:7a:39:68:ef:a3: 74:9b:cd:83:29:7a:3c:d3:29:cf:16:bb:a0:e7:c3: 5a:31:71:3f:ca:02:43:c3:bc:e1:47:7b:b6:0d:8e: d1:b3:37:82:d2:9a:0a:b2:36:87:55:59:cb:50:43: 65:53:8d:cd:01:3b:85:06:b2:35:d8:74:31:5e:ed: 55:ac:c8:0b:3e:0f:80:ff:2c:e3:94:15:5f:b7:36: 3a:05:8f:45:4a:5f:d0:a5:95:dd:bc:ad:17:61:42: 21:01:6b:76:45:35:ca:cd:99:fd:dc:d4:80:a4:8b: b5:76:73:66:5d:51:f6:e7:c3:10:dc:ea:40:17:ce: 36:9e:32:11:57:1d:90:df:b2:15:c4:f2:ee:3b:98: 0a:b4:a0:05:b5:5a:9c:3a:dd:62:67:63:05:6c:6e: 10:ee:d7:12:75:64:f9:41:26:3e:e3:b4:48:bc:e7: 63:b1:ee:20:23:c8:24:6d:df:67:7a:8f:cb:85:0b: 3c:4e:30:dc:ce:d4:d8:fd:62:37:43:67:28:03:6b: b2:37:b2:87:4a:65:80:ab:b1:76:eb:73:66:4f:57: 31:92:be:60:ab:67:67:28:02:3e:a4:6f:3a:d5:ee: a1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:95:A5:30:C6:10:35:63:88:16:A9:C4:7E:C7:47:4B:29:4F:B4:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/963d3839-4015-35a7-b38b-b1c31b4a4e68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl X509v3 Authority Key Identifier: keyid:88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer sbgp-ipAddrBlock: critical IPv4: 64.57.33.0-64.57.34.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:d7:39:b2:6c:c1:11:06:c2:21:d1:97:a3:b1:f9:86:a1:4e: a6:4d:66:58:74:aa:9c:35:c6:25:77:03:5f:cd:cd:f1:6b:d9: ec:80:d3:50:2c:20:e4:98:20:f2:fd:87:62:03:04:fa:51:6a: e3:4b:ed:a1:4b:91:11:e5:24:ff:01:4e:f8:ae:24:4d:1f:84: 03:43:f3:b5:bc:80:27:c1:d1:6c:da:0a:6a:89:47:d4:36:50: fe:96:be:35:86:36:40:a8:09:d3:ec:28:f2:5a:c2:93:00:cd: 3f:e9:15:dd:64:bb:d7:1a:3c:7e:1e:b9:f0:24:bf:68:9b:df: 55:35:a0:c5:f5:b7:95:df:e9:77:43:99:c5:8d:82:6e:23:ba: 22:77:c8:51:0e:75:5c:2c:1e:4e:53:08:57:b8:0f:3f:9a:71: 57:e6:ea:95:fc:b2:dc:c3:f7:dc:5e:5d:6b:d7:7f:b5:1b:ef: 4e:6f:55:0b:5f:bb:71:44:cd:d8:f1:b9:3e:7e:01:88:67:64: db:d2:ab:83:97:3b:65:c4:23:d7:e2:9c:8d:f8:28:bf:30:28: 75:d2:7c:c7:ed:a6:54:fc:17:81:79:52:dd:2f:9d:14:15:81: 7b:60:7a:9e:2d:cf:f6:3c:42:34:c9:9c:e7:b3:25:9c:4b:e6: 7d:4a:15:9d -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEhzJbjJB0FAGrqOYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQzZjY2MjAtMDU3Ni00NmQ4LWIwNWQtM2UyY2RkMDZh ZmEzMB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk OTJmYTNiMmQtNDNlZi00ZDBlLWFiYjktM2ExMjU2ODFjMDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFYOKYT+v4HRnB6OLBDWyeYeje75F7ugejlo 76N0m82DKXo80ynPFrug58NaMXE/ygJDw7zhR3u2DY7RszeC0poKsjaHVVnLUENl U43NATuFBrI12HQxXu1VrMgLPg+A/yzjlBVftzY6BY9FSl/QpZXdvK0XYUIhAWt2 RTXKzZn93NSApIu1dnNmXVH258MQ3OpAF842njIRVx2Q37IVxPLuO5gKtKAFtVqc Ot1iZ2MFbG4Q7tcSdWT5QSY+47RIvOdjse4gI8gkbd9neo/LhQs8TjDcztTY/WI3 Q2coA2uyN7KHSmWAq7F263NmT1cxkr5gq2dnKAI+pG861e6hQQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFLKVpTDGEDVjiBapxH7HR0spT7SYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZDNm NjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJjZGQwNmFmYTMvOTYzZDM4MzktNDAxNS0z NWE3LWIzOGItYjFjMzFiNGE0ZTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWQzZjY2MjAtMDU3Ni00NmQ4LWIw NWQtM2UyY2RkMDZhZmEzL2FkM2Y2NjIwLTA1NzYtNDZkOC1iMDVkLTNlMmNkZDA2 YWZhMy5jcmwwHwYDVR0jBBgwFoAUiN/bmDDB0UzVtzGE7Kf8YPRf8tMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZDNmNjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJj ZGQwNmFmYTMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABAOSED BABAOSIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAR9c5smzBEQbCIdGXo7H5hqFOpk1mWHSqnDXGJXcDX83N 8WvZ7IDTUCwg5Jgg8v2HYgME+lFq40vtoUuREeUk/wFO+K4kTR+EA0PztbyAJ8HR bNoKaolH1DZQ/pa+NYY2QKgJ0+wo8lrCkwDNP+kV3WS71xo8fh658CS/aJvfVTWg xfW3ld/pd0OZxY2CbiO6InfIUQ51XCweTlMIV7gPP5pxV+bqlfyy3MP33F5da9d/ tRvvTm9VC1+7cUTN2PG5Pn4BiGdk29Krg5c7ZcQj1+KcjfgovzAoddJ8x+2mVPwX gXlS3S+dFBWBe2B6ni3P9jxCNMmc57MlnEvmfUoVnQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:20 2025 by rpki-client