$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/6644e09e-e6f0-35ae-b40d-dcc1a4ab7180.roa File: 6644e09e-e6f0-35ae-b40d-dcc1a4ab7180.roa (raw, json) Hash identifier: ZYvCSd95YKkRo7sR+ozybvCx2hHBJc+X4p/qZ9DGwfo= Subject key identifier: 9A:EF:EC:03:20:6F:C5:3E:46:80:D6:B1:B5:80:2D:DD:5C:F9:9F:85 Certificate issuer: /CN=d3f2a064-9e78-4a16-a8db-33eef399665d Certificate serial: 010D0C9F4328584976A98F813511B1375E686E80 Authority key identifier: 4C:38:1C:85:25:59:B6:C1:78:FF:E3:BA:9D:83:3B:C7:10:FB:1F:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/6644e09e-e6f0-35ae-b40d-dcc1a4ab7180.roa Signing time: Wed 09 Apr 2025 01:00:47 +0000 ROA not before: Wed 09 Apr 2025 01:00:47 +0000 ROA not after: Tue 08 Jul 2025 01:00:47 +0000 asID: 397753 IP address blocks: 64.49.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/d3f2a064-9e78-4a16-a8db-33eef399665d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/d3f2a064-9e78-4a16-a8db-33eef399665d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:76:a9:8f:81:35:11:b1:37:5e:68:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3f2a064-9e78-4a16-a8db-33eef399665d Validity Not Before: Apr 9 01:00:47 2025 GMT Not After : Jul 8 01:00:47 2025 GMT Subject: CN=148564cc-831e-4c35-b61c-eed07b9d12ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dd:39:1c:df:6c:ae:4f:70:1f:bd:3a:72:64: c2:27:c2:a2:f5:90:6e:74:0e:72:67:b6:87:4d:de: b0:6f:83:7f:3a:41:df:16:e8:ce:2f:42:47:fe:29: 48:20:57:de:e5:42:3c:83:76:1b:b5:ad:12:4f:1c: 8d:03:06:eb:53:c8:1b:4a:b2:43:b3:61:a8:80:b0: dc:17:b1:f5:b7:01:1c:99:fa:13:60:3d:7c:28:87: e8:70:91:de:d9:41:01:d2:b3:b6:cb:11:ca:75:32: 68:a0:f0:24:7c:9e:04:2c:b4:9d:94:6c:26:52:80: 54:c9:e4:88:74:40:ea:ff:a4:ca:6a:09:02:a9:fa: ef:f2:a8:08:34:b8:a2:3e:64:21:48:65:0e:11:db: a3:ee:38:29:53:38:30:46:bd:ed:6a:6f:d3:19:c2: 42:60:96:3c:04:6c:42:59:c0:72:0a:38:59:39:bd: 16:97:47:7f:a2:c4:6e:ce:af:87:f4:49:cf:03:ed: 36:ed:fa:7a:4b:01:9d:c8:e7:70:ad:e8:37:92:da: a3:5b:74:5f:a1:c4:f1:47:1e:81:f2:5d:c4:b4:6e: 1f:fd:05:dc:b6:5a:a3:fb:28:3a:8c:15:06:38:28: 79:0a:65:df:d9:85:59:bf:a4:1d:cc:ea:2c:c4:f0: de:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EF:EC:03:20:6F:C5:3E:46:80:D6:B1:B5:80:2D:DD:5C:F9:9F:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/6644e09e-e6f0-35ae-b40d-dcc1a4ab7180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d/d3f2a064-9e78-4a16-a8db-33eef399665d.crl X509v3 Authority Key Identifier: keyid:4C:38:1C:85:25:59:B6:C1:78:FF:E3:BA:9D:83:3B:C7:10:FB:1F:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3f2a064-9e78-4a16-a8db-33eef399665d.cer sbgp-ipAddrBlock: critical IPv4: 64.49.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:ea:86:a4:76:e6:3b:91:f8:11:ba:68:c1:d5:3e:7b:1b:e5: 2a:49:e0:cc:79:b8:c0:ee:64:37:e6:f1:91:9b:4f:2d:ef:dc: f7:7d:3e:3e:03:89:9b:20:67:55:af:8a:0d:1d:f1:05:59:69: 46:de:b3:9a:c3:bb:b9:e7:12:8d:1c:aa:b9:98:98:a6:c4:6f: e1:62:94:7b:48:bc:44:3d:ca:a7:6d:e5:18:60:25:b2:42:b8: 5d:6c:e3:df:65:b6:45:ea:ee:aa:b9:29:1b:d8:a1:b1:15:ca: dd:b3:fc:0b:68:c6:3a:9b:b1:26:01:d7:16:de:4f:1b:ee:c5: 6f:6d:2b:13:3c:52:23:f9:29:ee:88:b3:8c:ec:0f:cc:8d:6e: 7d:34:2f:cf:a4:80:09:22:a6:76:e3:28:de:5a:f6:cb:8f:59: 20:53:22:74:7f:18:4a:e6:6c:da:d9:0e:a7:ea:c9:cb:5b:09: 12:ae:6d:bc:03:f7:ef:2f:ec:cc:95:9a:e5:c0:96:81:e8:5d: 8d:cd:95:d4:5a:66:0f:77:76:8b:9c:e1:8c:b2:97:5e:29:be: 71:84:b7:29:ba:11:6a:d2:ae:0c:cf:76:1f:19:87:b1:e5:8d: e8:28:91:9d:ba:62:94:7c:f1:53:03:81:b2:45:cb:44:df:04: 92:6d:f7:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl2qY+BNRGxN15oboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNmMmEwNjQtOWU3OC00YTE2LWE4ZGItMzNlZWYzOTk2 NjVkMB4XDTI1MDQwOTAxMDA0N1oXDTI1MDcwODAxMDA0N1owLzEtMCsGA1UEAxMk MTQ4NTY0Y2MtODMxZS00YzM1LWI2MWMtZWVkMDdiOWQxMmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd05HN9srk9wH706cmTCJ8Ki9ZBudA5yZ7aH Td6wb4N/OkHfFujOL0JH/ilIIFfe5UI8g3Ybta0STxyNAwbrU8gbSrJDs2GogLDc F7H1twEcmfoTYD18KIfocJHe2UEB0rO2yxHKdTJooPAkfJ4ELLSdlGwmUoBUyeSI dEDq/6TKagkCqfrv8qgINLiiPmQhSGUOEduj7jgpUzgwRr3tam/TGcJCYJY8BGxC WcByCjhZOb0Wl0d/osRuzq+H9EnPA+027fp6SwGdyOdwreg3ktqjW3RfocTxRx6B 8l3EtG4f/QXctlqj+yg6jBUGOCh5CmXf2YVZv6QdzOosxPDe6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrv7AMgb8U+RoDWsbWALd1c+Z+FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kM2Yy YTA2NC05ZTc4LTRhMTYtYThkYi0zM2VlZjM5OTY2NWQvNjY0NGUwOWUtZTZmMC0z NWFlLWI0MGQtZGNjMWE0YWI3MTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDNmMmEwNjQtOWU3OC00YTE2LWE4 ZGItMzNlZWYzOTk2NjVkL2QzZjJhMDY0LTllNzgtNGExNi1hOGRiLTMzZWVmMzk5 NjY1ZC5jcmwwHwYDVR0jBBgwFoAUTDgchSVZtsF4/+O6nYM7xxD7H1EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kM2YyYTA2NC05ZTc4LTRhMTYtYThkYi0zM2Vl ZjM5OTY2NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQDEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7qhqR25juR+BG6aMHVPnsb5SpJ4Mx5uMDuZDfm8ZGbTy3v3Pd9Pj4D iZsgZ1Wvig0d8QVZaUbes5rDu7nnEo0cqrmYmKbEb+FilHtIvEQ9yqdt5RhgJbJC uF1s499ltkXq7qq5KRvYobEVyt2z/AtoxjqbsSYB1xbeTxvuxW9tKxM8UiP5Ke6I s4zsD8yNbn00L8+kgAkipnbjKN5a9suPWSBTInR/GErmbNrZDqfqyctbCRKubbwD 9+8v7MyVmuXAloHoXY3NldRaZg93douc4Yyyl14pvnGEtym6EWrSrgzPdh8Zh7Hl jegokZ26YpR88VMDgbJFy0TfBJJt93k= -----END CERTIFICATE-----Generated at Fri Apr 11 23:37:11 2025 by rpki-client