$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d1384c00-6932-3116-92cd-2f77a5f3f0f6.roa File: d1384c00-6932-3116-92cd-2f77a5f3f0f6.roa (raw, json) Hash identifier: H6tqVnaH7fS+HQAZj1m8cDXh6bYrq/Kf95GT2V63B4o= Subject key identifier: F9:4C:F6:D0:B5:DF:CB:C6:51:A0:89:87:C8:DB:7A:80:38:8D:0B:25 Certificate issuer: /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec Certificate serial: 010D0C9F432858487CEB34F9E2470A68E8E9BC00 Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d1384c00-6932-3116-92cd-2f77a5f3f0f6.roa Signing time: Thu 09 Jan 2025 14:00:52 +0000 ROA not before: Thu 09 Jan 2025 14:00:52 +0000 ROA not after: Wed 09 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 64.7.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7c:eb:34:f9:e2:47:0a:68:e8:e9:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec Validity Not Before: Jan 9 14:00:52 2025 GMT Not After : Apr 9 13:00:52 2025 GMT Subject: CN=99b26e36-da90-44be-aa90-d1155b5a916a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b2:3f:50:36:f2:2e:69:e8:fb:80:b7:74:f0: 79:9c:04:65:04:36:b2:de:d1:e2:5e:c0:42:40:b2: 62:7b:f9:6c:ba:24:48:21:7a:d9:6a:07:d3:7d:b5: 15:83:2e:54:4b:82:a8:bc:42:1c:7a:6b:9e:66:a3: 83:9c:5a:a3:c3:bb:db:7a:e6:f6:f0:96:a4:f6:23: 8b:bd:74:1a:35:b2:c7:f4:fd:24:10:82:ed:6d:80: c9:c9:22:d4:97:93:69:57:d3:9d:62:bf:5d:13:69: c6:d0:0d:06:21:6d:e5:a2:03:ea:93:5a:fa:5b:0e: 4b:8b:0f:f1:71:33:7f:8e:68:61:3c:14:5e:ab:6c: fd:61:c8:37:b9:86:ba:3a:42:ce:0a:74:1e:4f:aa: 63:95:dd:63:b1:a7:4a:2c:88:11:0f:4c:5b:4d:91: eb:09:97:29:b2:3d:c3:be:26:5d:56:75:d0:15:1b: 09:68:4c:fc:c6:26:59:62:61:4a:76:60:b0:04:96: 9e:08:84:84:5e:fa:c3:3d:8c:0a:07:86:d4:b4:53: d1:59:92:fd:a4:dc:f9:c1:f6:2f:12:70:83:e1:65: fc:fb:9f:8d:a9:e7:43:a2:ab:f6:ee:e6:5b:db:b4: 39:3f:f3:1a:8e:88:40:4e:96:49:c0:f7:c4:fb:5d: 50:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4C:F6:D0:B5:DF:CB:C6:51:A0:89:87:C8:DB:7A:80:38:8D:0B:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d1384c00-6932-3116-92cd-2f77a5f3f0f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl X509v3 Authority Key Identifier: keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer sbgp-ipAddrBlock: critical IPv4: 64.7.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:f1:62:db:33:e7:e8:b0:eb:a5:6d:1c:06:eb:6d:94:6b:8f: 13:31:d1:b3:55:d0:66:0f:21:d2:1f:8b:d1:cb:1d:51:3d:34: ed:97:c8:d9:01:c1:18:98:e6:b8:2a:75:c8:2c:81:fe:44:6d: 0a:a9:5e:9a:a8:ab:8f:1c:f5:6c:8d:13:c9:26:c3:98:dc:76: 97:b4:47:ec:c8:14:b1:98:fa:ef:59:99:37:2c:aa:6f:36:ab: 2e:37:e4:0f:dd:d1:98:59:e3:b3:13:54:d2:2c:fb:a6:02:ff: 2c:d8:f4:f2:45:af:be:c1:03:7e:3a:da:76:a4:3c:c4:d4:0c: a0:a9:98:79:e4:20:50:b2:4a:7e:ca:0f:f1:00:93:f4:69:9b: 84:55:72:23:4c:c3:80:62:56:d5:a8:b9:87:49:ef:77:53:e7: 11:37:b4:48:66:1c:22:1b:2e:e6:76:c1:4f:3c:01:13:27:44: 53:5b:07:45:c4:48:66:b8:86:e1:d3:26:79:99:66:c5:42:f6: 88:39:e5:f1:64:d3:ff:0e:73:c3:59:eb:0b:f3:af:74:3c:4d: cb:56:60:10:b1:b3:65:5e:fe:c8:98:46:cd:6d:03:99:b8:2d: 71:5d:7c:9d:5f:c1:8e:56:7a:f5:c5:e4:f1:91:9f:64:99:a3: 82:00:a2:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh86zT54kcKaOjpvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdjOGUxYTItNjk1NS00NWFhLWJkNTgtYzJlYzI2ZThl NWVjMB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk OTliMjZlMzYtZGE5MC00NGJlLWFhOTAtZDExNTViNWE5MTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbI/UDbyLmno+4C3dPB5nARlBDay3tHiXsBC QLJie/lsuiRIIXrZagfTfbUVgy5US4KovEIcemueZqODnFqjw7vbeub28Jak9iOL vXQaNbLH9P0kEILtbYDJySLUl5NpV9OdYr9dE2nG0A0GIW3logPqk1r6Ww5Liw/x cTN/jmhhPBReq2z9Ycg3uYa6OkLOCnQeT6pjld1jsadKLIgRD0xbTZHrCZcpsj3D viZdVnXQFRsJaEz8xiZZYmFKdmCwBJaeCISEXvrDPYwKB4bUtFPRWZL9pNz5wfYv EnCD4WX8+5+NqedDoqv27uZb27Q5P/MajohATpZJwPfE+11QcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlM9tC138vGUaCJh8jbeoA4jQslMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82N2M4 ZTFhMi02OTU1LTQ1YWEtYmQ1OC1jMmVjMjZlOGU1ZWMvZDEzODRjMDAtNjkzMi0z MTE2LTkyY2QtMmY3N2E1ZjNmMGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjdjOGUxYTItNjk1NS00NWFhLWJk NTgtYzJlYzI2ZThlNWVjLzY3YzhlMWEyLTY5NTUtNDVhYS1iZDU4LWMyZWMyNmU4 ZTVlYy5jcmwwHwYDVR0jBBgwFoAUPNX2nFOg47bXPQIwtOEtAyhsMGgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82N2M4ZTFhMi02OTU1LTQ1YWEtYmQ1OC1jMmVj MjZlOGU1ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbxYtsz5+iw66VtHAbrbZRrjxMx0bNV0GYPIdIfi9HLHVE9NO2XyNkB wRiY5rgqdcgsgf5EbQqpXpqoq48c9WyNE8kmw5jcdpe0R+zIFLGY+u9ZmTcsqm82 qy435A/d0ZhZ47MTVNIs+6YC/yzY9PJFr77BA3462nakPMTUDKCpmHnkIFCySn7K D/EAk/Rpm4RVciNMw4BiVtWouYdJ73dT5xE3tEhmHCIbLuZ2wU88ARMnRFNbB0XE SGa4huHTJnmZZsVC9og55fFk0/8Oc8NZ6wvzr3Q8TctWYBCxs2Ve/siYRs1tA5m4 LXFdfJ1fwY5WevXF5PGRn2SZo4IAol0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:30 2025 by rpki-client