$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/2db12b78-bb60-3bee-8ea6-72b50ff5c07e.roa File: 2db12b78-bb60-3bee-8ea6-72b50ff5c07e.roa (raw, json) Hash identifier: VwNu3H29qP+PHh+LvtPBufaqRV+TOSHbaa+KXWFjSV4= Subject key identifier: 38:35:AB:E3:74:49:B1:6D:85:FF:82:42:52:21:BC:F1:19:17:FA:94 Certificate issuer: /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Certificate serial: 010D0C9F43285848A99615D2A33BF90BA787F800 Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/2db12b78-bb60-3bee-8ea6-72b50ff5c07e.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 395567 IP address blocks: 64.225.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:15:d2:a3:3b:f9:0b:a7:87:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=c51fec7f-8473-4ce5-8f67-1bdeb50329c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1f:31:4b:67:62:7a:af:00:af:1a:a4:6b:f2: 61:5a:b1:26:96:12:40:6e:e4:c4:50:65:3c:be:4b: 45:f0:c3:5c:ff:c5:0f:74:ea:89:db:4f:41:92:66: 04:c9:1e:5c:ac:96:a3:93:4c:fc:e5:3a:f7:4a:7f: 61:89:59:5e:cb:de:28:68:65:72:7d:7f:59:83:4f: 0d:2b:8e:d1:4b:b3:ca:ed:41:7c:67:f8:c3:b0:14: e7:ef:f6:9a:b7:ac:68:e2:d1:6f:c0:32:44:5e:00: 6a:aa:4d:f9:0b:04:cf:32:a1:58:0c:45:47:ab:51: 35:5f:ad:f5:c5:81:e7:81:00:31:80:81:97:7c:1a: 39:85:e4:bb:a2:80:7b:3a:f7:13:7a:f2:53:07:26: dd:87:d0:88:b2:eb:a7:8b:af:a8:c2:11:1d:43:b5: 0b:b9:90:c1:6b:d6:d0:1f:e6:70:82:47:91:50:7e: 36:d9:42:21:26:ca:8d:e7:54:0d:28:84:bb:56:b8: a1:ed:a9:16:d3:66:d9:25:9c:7d:b1:c9:41:2e:0a: 30:92:b9:53:ec:e7:38:a8:60:56:aa:60:fa:66:b8: 8f:fa:9e:cd:e6:06:c3:8a:bf:d3:06:39:5c:78:02: 33:ab:84:bd:6e:f6:b9:92:76:b3:78:22:fd:e7:39: 23:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:35:AB:E3:74:49:B1:6D:85:FF:82:42:52:21:BC:F1:19:17:FA:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/2db12b78-bb60-3bee-8ea6-72b50ff5c07e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl X509v3 Authority Key Identifier: keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer sbgp-ipAddrBlock: critical IPv4: 64.225.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:0c:75:71:38:65:f0:d0:a7:1b:9d:b4:8d:b4:7f:1b:fa:0a: e1:88:29:15:19:e8:f2:c8:a4:de:8b:5b:bd:d4:75:ea:27:08: a8:9d:42:18:3a:d4:73:a6:79:3f:9e:8b:36:d2:5c:10:2e:f2: 36:63:b1:60:7f:50:2c:2e:a1:42:a9:79:e4:7b:90:28:03:dc: 24:54:6f:6a:d9:a5:1e:5b:88:48:1e:7b:ff:43:db:e4:09:b3: 49:fe:fe:39:18:24:d5:de:3b:c2:c1:45:17:cc:ef:09:ec:f8: 7b:f8:66:2b:6d:09:d0:78:d3:bb:3a:64:62:b6:67:0a:24:1f: b3:65:dc:96:05:d9:aa:5b:57:8e:5e:d2:99:14:cf:80:72:0f: 08:f2:51:30:ba:eb:d5:71:b8:e8:7d:e3:db:79:68:23:76:a5: 08:5f:f0:5c:e6:7b:08:e3:61:4f:58:65:0e:9e:99:76:38:2d: c4:09:1d:87:71:e3:a0:88:24:a2:f7:e7:87:0a:3b:4a:c7:db: 34:c1:7b:f6:78:4a:f6:4b:a2:54:fa:6e:7b:16:bc:3d:1b:d0: 51:33:d8:5b:cf:c9:a1:54:63:fa:84:38:83:8c:92:4d:1a:e8: 36:ae:05:45:85:21:2a:b9:95:80:c2:91:8e:58:e5:3e:15:49: 8b:3c:c4:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplhXSozv5C6eH+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU3N2I1YWYtYTFiNS00ODU4LWI2MWQtZjA5ZmQ2N2Y3 Y2IzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk YzUxZmVjN2YtODQ3My00Y2U1LThmNjctMWJkZWI1MDMyOWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh8xS2dieq8Arxqka/JhWrEmlhJAbuTEUGU8 vktF8MNc/8UPdOqJ209BkmYEyR5crJajk0z85Tr3Sn9hiVley94oaGVyfX9Zg08N K47RS7PK7UF8Z/jDsBTn7/aat6xo4tFvwDJEXgBqqk35CwTPMqFYDEVHq1E1X631 xYHngQAxgIGXfBo5heS7ooB7OvcTevJTBybdh9CIsuuni6+owhEdQ7ULuZDBa9bQ H+ZwgkeRUH422UIhJsqN51QNKIS7Vrih7akW02bZJZx9sclBLgowkrlT7Oc4qGBW qmD6ZriP+p7N5gbDir/TBjlceAIzq4S9bva5knazeCL95zkj2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDg1q+N0SbFthf+CQlIhvPEZF/qUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3 YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlmZDY3ZjdjYjMvMmRiMTJiNzgtYmI2MC0z YmVlLThlYTYtNzJiNTBmZjVjMDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWU3N2I1YWYtYTFiNS00ODU4LWI2 MWQtZjA5ZmQ2N2Y3Y2IzL2FlNzdiNWFmLWExYjUtNDg1OC1iNjFkLWYwOWZkNjdm N2NiMy5jcmwwHwYDVR0jBBgwFoAUQ8bZZVYwh5KCSgXB185ho81dPhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlm ZDY3ZjdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQOHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIMdXE4ZfDQpxudtI20fxv6CuGIKRUZ6PLIpN6LW73UdeonCKidQhg6 1HOmeT+eizbSXBAu8jZjsWB/UCwuoUKpeeR7kCgD3CRUb2rZpR5biEgee/9D2+QJ s0n+/jkYJNXeO8LBRRfM7wns+Hv4ZittCdB407s6ZGK2ZwokH7Nl3JYF2apbV45e 0pkUz4ByDwjyUTC669VxuOh949t5aCN2pQhf8FzmewjjYU9YZQ6emXY4LcQJHYdx 46CIJKL354cKO0rH2zTBe/Z4SvZLolT6bnsWvD0b0FEz2FvPyaFUY/qEOIOMkk0a 6DauBUWFISq5lYDCkY5Y5T4VSYs8xHo= -----END CERTIFICATE-----Generated at Sat Apr 12 11:55:42 2025 by rpki-client