$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/239c7b2a-d138-33cf-be7d-13d8071140a8.roa File: 239c7b2a-d138-33cf-be7d-13d8071140a8.roa (raw, json) Hash identifier: ughILSWINs0TKLpqL32X/iEYFGkegg3xvYy77+Jzh/g= Subject key identifier: 6B:81:0F:60:AE:3C:31:F5:38:FA:AA:5F:D5:40:CE:88:69:44:EC:9F Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F43285848F22C659D043AEA32613B7880 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/239c7b2a-d138-33cf-be7d-13d8071140a8.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 18563 IP address blocks: 64.86.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:65:9d:04:3a:ea:32:61:3b:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=7b44faab-6d73-441d-b6eb-d0be7c0cd04c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:19:5e:77:a9:ec:f1:41:b7:6d:ba:6f:93:1a: 99:b3:b1:c4:03:34:2e:22:af:47:de:f0:c5:9f:ae: cb:49:87:ca:db:94:87:59:62:79:87:55:03:c9:8e: 37:86:35:4a:14:bc:e2:68:30:aa:7f:69:84:a0:f9: 9b:71:1a:b2:36:75:24:6e:35:8d:7c:8c:09:8b:68: a7:97:20:bd:9a:46:65:96:4e:7b:40:20:0c:1d:9d: b1:2b:35:96:02:6f:0c:2e:e7:d7:e5:d1:09:06:51: 2c:f2:f4:b1:f5:2c:8f:fd:52:1f:4e:9f:47:00:5b: 2c:91:10:d9:80:a1:d7:bc:c7:eb:bd:5a:ab:2c:93: 2d:71:b3:65:be:17:ec:9b:b9:08:ff:b9:9e:52:ae: e2:c4:0b:27:77:b8:1f:c3:09:bb:d5:3b:ca:a2:01: b3:17:b3:0f:c2:e2:93:b4:9b:9e:f2:c7:4f:8c:4e: 70:70:31:5d:de:08:05:47:62:0a:f1:64:b5:65:4d: 21:de:54:65:45:f2:27:82:8a:23:63:85:e3:ae:e6: f7:57:c0:93:db:ab:41:53:b0:01:43:41:e7:ba:8d: f1:5a:a3:98:52:55:dd:d0:55:41:ab:21:a4:bc:01: 1f:26:59:5f:13:8d:24:71:e6:c8:c1:bc:80:e5:b2: 5f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:81:0F:60:AE:3C:31:F5:38:FA:AA:5F:D5:40:CE:88:69:44:EC:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/239c7b2a-d138-33cf-be7d-13d8071140a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 64.86.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:5f:be:f2:7f:17:39:48:fd:ef:ce:02:8b:c9:47:a1:81:64: 5e:18:8d:38:0d:18:51:94:52:cb:c5:79:91:40:b2:a5:52:b7: c0:0f:d9:fd:c9:19:5a:f6:e0:aa:b1:c1:ae:3f:70:ef:7f:21: 1b:27:23:8b:3e:eb:a2:f4:6e:7f:6a:4a:81:8e:2e:7a:10:d8: 87:9d:f0:7b:79:1e:00:b5:0e:3f:0a:63:7a:40:b6:a5:90:c6: 0e:f4:5b:3e:69:b2:5a:85:00:89:c5:d2:f6:3a:74:db:94:c1: 54:ed:fb:ac:ff:31:96:ff:62:09:8b:6f:27:7c:74:64:8a:dc: b3:4b:8a:d6:13:0c:b9:4e:fc:49:72:43:1b:9b:44:9d:9d:90: a3:b4:96:5f:c6:80:71:8d:5d:81:63:fa:36:5b:23:d9:66:ca: ce:6f:ab:0e:a5:b9:06:11:7c:d9:7d:6f:04:2d:bd:12:22:ce: 51:e4:cc:67:12:71:3c:d3:1d:90:de:15:83:18:98:52:79:dd: 3b:28:34:21:89:a2:5c:fc:7b:9c:50:47:d1:bf:9f:63:3b:78: 10:37:8e:26:6b:70:13:a7:16:48:a6:b7:c0:3c:2f:27:d7:42: db:c0:0c:22:19:42:21:e3:1a:7e:52:95:01:b7:53:31:e8:29: 66:af:ae:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGWdBDrqMmE7eIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk N2I0NGZhYWItNmQ3My00NDFkLWI2ZWItZDBiZTdjMGNkMDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxled6ns8UG3bbpvkxqZs7HEAzQuIq9H3vDF n67LSYfK25SHWWJ5h1UDyY43hjVKFLziaDCqf2mEoPmbcRqyNnUkbjWNfIwJi2in lyC9mkZllk57QCAMHZ2xKzWWAm8MLufX5dEJBlEs8vSx9SyP/VIfTp9HAFsskRDZ gKHXvMfrvVqrLJMtcbNlvhfsm7kI/7meUq7ixAsnd7gfwwm71TvKogGzF7MPwuKT tJue8sdPjE5wcDFd3ggFR2IK8WS1ZU0h3lRlRfIngoojY4Xjrub3V8CT26tBU7AB Q0Hnuo3xWqOYUlXd0FVBqyGkvAEfJllfE40kcebIwbyA5bJfkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGuBD2CuPDH1OPqqX9VAzohpROyfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvMjM5YzdiMmEtZDEzOC0z M2NmLWJlN2QtMTNkODA3MTE0MGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQFaMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBfvvJ/FzlI/e/OAovJR6GBZF4YjTgNGFGUUsvFeZFAsqVSt8AP2f3J GVr24Kqxwa4/cO9/IRsnI4s+66L0bn9qSoGOLnoQ2Ied8Ht5HgC1Dj8KY3pAtqWQ xg70Wz5pslqFAInF0vY6dNuUwVTt+6z/MZb/YgmLbyd8dGSK3LNLitYTDLlO/Ely QxubRJ2dkKO0ll/GgHGNXYFj+jZbI9lmys5vqw6luQYRfNl9bwQtvRIizlHkzGcS cTzTHZDeFYMYmFJ53TsoNCGJolz8e5xQR9G/n2M7eBA3jiZrcBOnFkimt8A8LyfX QtvADCIZQiHjGn5SlQG3UzHoKWavrvw= -----END CERTIFICATE-----Generated at Fri Mar 14 08:41:36 2025 by rpki-client