$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0af33e37-3fbd-37d4-ae50-a7e7f28fa9ca.roa File: 0af33e37-3fbd-37d4-ae50-a7e7f28fa9ca.roa (raw, json) Hash identifier: T58vSDNOt4iWXIx6cNlyfCKCWAciEoBOWZcAJw7QNpY= Subject key identifier: 4F:11:D1:36:99:7F:53:F6:3A:40:BC:CC:35:EC:51:4B:43:D9:BD:F5 Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584812D53070A24D47D2D4140760 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0af33e37-3fbd-37d4-ae50-a7e7f28fa9ca.roa Signing time: Mon 02 Dec 2024 14:00:51 +0000 ROA not before: Mon 02 Dec 2024 14:00:51 +0000 ROA not after: Sun 02 Mar 2025 14:00:51 +0000 asID: 24439 IP address blocks: 64.86.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:12:d5:30:70:a2:4d:47:d2:d4:14:07:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Dec 2 14:00:51 2024 GMT Not After : Mar 2 14:00:51 2025 GMT Subject: CN=3e6cbc39-4f56-4112-b79c-1c9041b16ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:52:a8:58:64:0e:4b:44:d7:34:2f:58:bc:5a: ee:cf:6d:2f:55:ad:c0:3a:a5:36:e5:aa:08:db:3d: e3:f2:36:08:16:9f:28:9c:4c:a2:02:c8:89:c7:96: 06:0c:1f:88:0d:61:25:a1:82:d1:cc:79:0b:ab:43: f0:e1:d3:b0:9b:13:e7:34:27:22:c8:a6:79:59:21: fe:82:b2:f8:c1:29:94:f3:06:2d:78:a5:c5:58:da: bc:96:24:94:90:1d:68:67:98:7d:98:29:6b:bc:ab: 72:90:d7:db:14:ca:28:67:fb:1d:fe:5a:08:7d:c0: f4:58:ed:82:6c:1e:60:e1:65:f1:6a:0a:02:2c:0b: bb:a5:6c:3e:a5:46:2a:a0:d0:c2:a4:8b:38:9f:0d: 69:61:07:a8:ba:da:12:37:1c:7b:08:27:21:b6:81: b8:2d:ce:89:10:82:7d:b8:e5:89:59:d9:d2:44:5b: cd:8b:60:cb:33:97:ac:b9:26:2a:07:48:a6:1a:7e: 43:ec:e1:8c:27:cc:71:d0:a8:63:4a:ef:af:e5:32: 5a:c3:dd:9a:a5:a5:35:b7:26:73:a9:6b:4d:0a:fb: 8b:e3:fd:03:dc:dd:86:d3:91:35:d9:8a:ac:94:f1: 4e:91:34:c2:d5:b9:84:4b:0b:dd:a6:ca:2b:ee:e1: b3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:11:D1:36:99:7F:53:F6:3A:40:BC:CC:35:EC:51:4B:43:D9:BD:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0af33e37-3fbd-37d4-ae50-a7e7f28fa9ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 64.86.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:cd:22:47:bf:dc:59:f0:2d:b1:e3:07:03:a8:22:ec:5c:88: b8:ad:7f:b0:ef:eb:90:39:1a:49:95:7e:27:2b:65:74:2b:fa: 1a:04:29:f6:c8:d0:a5:52:80:28:b9:f1:cd:25:f4:b1:8f:f7: bd:b8:6a:7f:76:fe:81:9d:5e:6f:f8:6a:bd:1d:e2:0a:1f:9b: 03:5c:da:39:b1:9f:ce:ec:86:7b:ba:04:61:3f:82:65:42:71: 43:b5:a1:d0:fe:cc:2b:b0:83:ac:7c:73:9d:80:d5:a9:cf:1b: 9a:0c:3e:ba:f6:f7:a0:8f:72:9e:2d:aa:fb:a7:9f:ca:49:9d: e9:2c:be:2d:00:b1:55:60:c6:a9:0e:33:be:9b:aa:e6:66:bc: 7e:0b:49:a8:93:d9:ce:f7:66:ef:c7:2d:77:7c:c3:5b:b0:e5: e7:5e:6c:16:85:2b:f0:c1:d6:62:95:38:92:85:10:68:f0:c8: c2:cc:5f:18:21:cc:da:23:be:97:59:64:de:41:f6:6a:a7:46: 27:22:05:d3:45:4a:f6:4a:ae:8d:41:a4:bb:3a:3a:60:f8:57: 27:2a:cf:dd:59:d0:84:9f:6d:75:ac:0e:39:b4:77:9b:97:7f: 6a:4a:53:a1:5a:39:b2:d5:01:ac:8e:6c:26:29:a8:c4:86:94: e6:9c:f0:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgS1TBwok1H0tQUB2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI0MTIwMjE0MDA1MVoXDTI1MDMwMjE0MDA1MVowLzEtMCsGA1UEAxMk M2U2Y2JjMzktNGY1Ni00MTEyLWI3OWMtMWM5MDQxYjE2Y2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41KoWGQOS0TXNC9YvFruz20vVa3AOqU25aoI 2z3j8jYIFp8onEyiAsiJx5YGDB+IDWEloYLRzHkLq0Pw4dOwmxPnNCciyKZ5WSH+ grL4wSmU8wYteKXFWNq8liSUkB1oZ5h9mClrvKtykNfbFMooZ/sd/loIfcD0WO2C bB5g4WXxagoCLAu7pWw+pUYqoNDCpIs4nw1pYQeoutoSNxx7CCchtoG4Lc6JEIJ9 uOWJWdnSRFvNi2DLM5esuSYqB0imGn5D7OGMJ8xx0KhjSu+v5TJaw92apaU1tyZz qWtNCvuL4/0D3N2G05E12YqslPFOkTTC1bmESwvdpsor7uGzNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8R0TaZf1P2OkC8zDXsUUtD2b31MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvMGFmMzNlMzctM2ZiZC0z N2Q0LWFlNTAtYTdlN2YyOGZhOWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFYXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbNIke/3FnwLbHjBwOoIuxciLitf7Dv65A5GkmVficrZXQr+hoEKfbI 0KVSgCi58c0l9LGP9724an92/oGdXm/4ar0d4gofmwNc2jmxn87shnu6BGE/gmVC cUO1odD+zCuwg6x8c52A1anPG5oMPrr296CPcp4tqvunn8pJneksvi0AsVVgxqkO M76bquZmvH4LSaiT2c73Zu/HLXd8w1uw5edebBaFK/DB1mKVOJKFEGjwyMLMXxgh zNojvpdZZN5B9mqnRiciBdNFSvZKro1BpLs6OmD4Vycqz91Z0ISfbXWsDjm0d5uX f2pKU6FaObLVAayObCYpqMSGlOac8II= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:19 2025 by rpki-client