$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/afb4666f-59e3-376d-baad-c76c41ee77ab.roa File: afb4666f-59e3-376d-baad-c76c41ee77ab.roa (raw, json) Hash identifier: mznEU7jkDvB/vOHPXo0a+yP53p0f7BoIXZcxlRMULpU= Subject key identifier: 0B:47:CB:E9:4E:85:1E:EC:E6:C8:93:4D:25:80:9A:33:94:B6:02:7A Certificate issuer: /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6 Certificate serial: 010D0C9F4328584898D60C5B244B8C8B79677C00 Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/afb4666f-59e3-376d-baad-c76c41ee77ab.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 27539 IP address blocks: 64.68.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:0c:5b:24:4b:8c:8b:79:67:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=f1d98488-4e5d-48a6-8ed8-01de816e947d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:10:55:26:ad:81:92:6d:82:39:38:f5:eb:d4: 19:2d:93:f5:4e:a8:93:13:39:cc:e1:34:82:b7:bc: 28:d0:c1:df:f8:b1:0c:1f:26:c0:c2:72:cd:b1:d8: 32:51:97:6a:27:5a:80:1d:9a:1f:87:d1:31:a9:02: 9a:77:9a:68:82:a8:50:e7:6b:f6:c8:c4:01:2f:6a: 48:01:d6:b1:22:99:33:9c:9e:d1:8a:60:b6:89:b8: 96:22:4a:c1:0e:86:97:27:34:3d:0e:1d:90:9f:43: 5f:1c:e1:d7:32:82:0c:40:ae:e3:5e:6f:95:b6:da: 01:87:27:fe:bc:d7:33:8c:46:78:5f:aa:0a:b7:eb: d6:74:62:a5:d4:75:39:f7:55:69:06:c6:90:70:3f: 52:a2:eb:78:2f:03:3f:ce:11:10:b2:d2:0e:9c:4c: 2a:ba:db:02:3f:61:be:9d:43:1d:5d:46:40:ec:00: 87:6d:40:59:a6:a9:fd:59:c0:06:e1:a2:e2:c4:8c: 84:e1:fb:9b:c8:6f:98:79:42:ac:63:6a:2a:9e:7d: 96:13:dc:f5:d2:62:b3:76:54:e0:2b:0d:49:5e:e7: 22:2c:fd:f0:45:1a:57:ac:bc:7c:7f:df:07:33:1c: d5:92:30:8d:c4:3c:ea:8b:14:08:79:75:60:3e:85: 0d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:47:CB:E9:4E:85:1E:EC:E6:C8:93:4D:25:80:9A:33:94:B6:02:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/afb4666f-59e3-376d-baad-c76c41ee77ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl X509v3 Authority Key Identifier: keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer sbgp-ipAddrBlock: critical IPv4: 64.68.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:66:9e:3f:6d:62:34:2d:a1:cd:f1:d8:2b:4c:9f:49:c2:ab: e9:29:84:2a:e9:35:0b:51:82:9b:42:cf:7c:f1:b5:e0:fc:7e: 8d:cd:cb:bb:bd:aa:0f:f8:c7:49:56:08:cf:e5:fb:35:ef:c3: 49:e7:19:1b:f5:91:ef:b4:2f:4e:9f:c0:7e:75:65:97:bb:24: 31:c4:10:dc:37:b4:a5:1d:42:d1:a1:d2:ac:fb:8f:ce:e3:b3: fd:7e:25:ae:92:ef:45:ae:fc:0f:aa:af:c3:50:94:eb:e0:68: 2f:9a:b1:c9:3c:f2:cb:da:47:20:f9:d0:6b:05:ca:b7:c2:f1: 5e:29:45:a4:a0:86:7f:f6:fe:4c:75:14:ef:63:be:22:df:75: 9a:f0:3e:02:5a:1f:63:8e:9e:f5:68:fc:bb:73:55:15:53:3f: a9:91:83:22:3a:da:e1:5e:8d:e5:81:dc:a3:ab:59:9e:9c:02: 0c:ff:6c:70:c1:e7:0c:e1:43:e3:84:75:f3:e4:7a:12:36:0d: 7e:e1:1f:d2:45:79:51:f8:1f:80:ed:59:c3:10:44:87:b8:fa: 07:39:2b:07:de:68:3e:60:fb:1e:f4:c0:d3:96:d0:93:48:95: db:8c:e4:31:e6:c6:2a:1a:91:ca:b2:78:54:a6:ac:c9:8f:a8: 82:a0:30:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1gxbJEuMi3lnfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY0YTUzMDQtOTc0ZC00Yzg2LTk4MjktMmY0ZDhkYzli OWI2MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZjFkOTg0ODgtNGU1ZC00OGE2LThlZDgtMDFkZTgxNmU5NDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhBVJq2Bkm2COTj169QZLZP1TqiTEznM4TSC t7wo0MHf+LEMHybAwnLNsdgyUZdqJ1qAHZofh9ExqQKad5pogqhQ52v2yMQBL2pI AdaxIpkznJ7RimC2ibiWIkrBDoaXJzQ9Dh2Qn0NfHOHXMoIMQK7jXm+VttoBhyf+ vNczjEZ4X6oKt+vWdGKl1HU591VpBsaQcD9Sout4LwM/zhEQstIOnEwqutsCP2G+ nUMdXUZA7ACHbUBZpqn9WcAG4aLixIyE4fubyG+YeUKsY2oqnn2WE9z10mKzdlTg Kw1JXuciLP3wRRpXrLx8f98HMxzVkjCNxDzqixQIeXVgPoUN8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtHy+lOhR7s5siTTSWAmjOUtgJ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80NjRh NTMwNC05NzRkLTRjODYtOTgyOS0yZjRkOGRjOWI5YjYvYWZiNDY2NmYtNTllMy0z NzZkLWJhYWQtYzc2YzQxZWU3N2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDY0YTUzMDQtOTc0ZC00Yzg2LTk4 MjktMmY0ZDhkYzliOWI2LzQ2NGE1MzA0LTk3NGQtNGM4Ni05ODI5LTJmNGQ4ZGM5 YjliNi5jcmwwHwYDVR0jBBgwFoAUcgemEPwzJXUhFkgvpE9t1tV3MNUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80NjRhNTMwNC05NzRkLTRjODYtOTgyOS0yZjRk OGRjOWI5YjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQEQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRmnj9tYjQtoc3x2CtMn0nCq+kphCrpNQtRgptCz3zxteD8fo3Ny7u9 qg/4x0lWCM/l+zXvw0nnGRv1ke+0L06fwH51ZZe7JDHEENw3tKUdQtGh0qz7j87j s/1+Ja6S70Wu/A+qr8NQlOvgaC+asck88svaRyD50GsFyrfC8V4pRaSghn/2/kx1 FO9jviLfdZrwPgJaH2OOnvVo/LtzVRVTP6mRgyI62uFejeWB3KOrWZ6cAgz/bHDB 5wzhQ+OEdfPkehI2DX7hH9JFeVH4H4DtWcMQRIe4+gc5KwfeaD5g+x70wNOW0JNI lduM5DHmxioakcqyeFSmrMmPqIKgMLY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:43 2025 by rpki-client