$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/42218378-fc67-3b7b-af80-93064b4e7d2a.roa File: 42218378-fc67-3b7b-af80-93064b4e7d2a.roa (raw, json) Hash identifier: yH2SWu0ly5agzhrCnB5CJMTVIthfr77Brl7GTNdG7Gc= Subject key identifier: 81:03:19:F9:FD:5D:4A:2A:F8:06:A9:AA:A2:9C:C8:E1:71:12:43:35 Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F43285848F22C615FB6E786DB11512F40 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/42218378-fc67-3b7b-af80-93064b4e7d2a.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 7131 IP address blocks: 64.86.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:61:5f:b6:e7:86:db:11:51:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=d81ceea6-50c7-4c94-980e-499c96673e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a5:b3:dd:8e:2f:9e:69:16:28:25:cd:f2:a9: e3:f0:44:8f:3b:63:8f:f3:31:07:06:3b:77:3c:47: 1a:69:98:08:89:dd:9a:d0:24:b3:3a:e8:3c:05:13: ae:33:84:ee:40:c6:e6:7d:01:28:ff:72:17:b0:4a: 63:10:18:d5:ff:21:92:12:e7:56:88:36:68:5c:87: b4:4d:3a:88:8b:0e:ea:b9:63:8a:bb:c1:15:97:c1: 6c:bf:60:3d:e3:8e:a0:c9:7d:db:ce:ae:93:0a:f9: 65:f1:0f:21:df:70:6d:50:d4:69:a8:f8:67:a0:30: 78:73:17:2f:eb:07:68:f1:a8:11:eb:fe:c2:b2:60: de:92:4f:3a:51:1b:2d:33:1e:b3:8f:fd:40:15:28: 8a:6a:0e:2f:01:24:c6:c0:20:2f:c2:26:d4:26:09: d3:52:6e:59:ff:d9:43:bd:03:3f:a2:6b:61:0c:4d: a0:b1:bf:e5:ab:90:a5:1c:09:97:c2:86:74:2d:b9: ba:20:a5:f2:7a:d1:89:c5:5c:f6:9e:a8:ae:d6:35: c2:e3:54:44:7b:fc:54:a3:d6:94:6a:79:a1:4f:b2: 7e:25:47:4c:30:f6:b0:b2:4a:39:31:bc:a1:44:ce: f3:e6:a3:64:ae:82:f0:b8:76:24:ac:47:72:6b:37: b9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:03:19:F9:FD:5D:4A:2A:F8:06:A9:AA:A2:9C:C8:E1:71:12:43:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/42218378-fc67-3b7b-af80-93064b4e7d2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 64.86.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:72:ca:18:79:7a:6c:d0:1d:71:a6:10:78:7c:63:6a:5a:9e: e2:0c:18:11:4a:af:37:74:7d:44:60:6c:52:cd:9d:78:08:2e: 53:fa:d9:b0:a3:11:b9:e4:bd:4f:fe:1b:a5:16:8a:5b:35:51: 1c:4f:e0:ce:61:49:27:66:d8:bd:9c:00:14:4b:23:5f:5d:f1: da:8f:5a:ae:22:0f:93:72:ee:f1:95:c4:8f:62:ec:32:03:a4: 39:93:77:6b:7f:8e:9c:d9:3e:5f:60:7e:de:9c:2c:f4:e3:75: 54:12:ba:9f:9e:15:13:0a:61:13:d3:b8:83:8f:4e:c6:18:fc: 4b:b7:15:56:e2:8b:a6:6c:10:e2:ae:49:c7:d4:5e:50:bb:37: 06:67:83:ab:48:a5:04:a3:f4:a0:7e:53:4a:6c:e7:a2:27:49: ff:68:89:64:f9:a8:6a:5f:f2:96:a5:fa:51:1c:3e:83:3e:95: 20:c1:81:7f:25:31:49:4b:7a:1d:c6:00:f4:ef:b4:cb:a3:6f: db:19:27:02:10:a9:e5:cf:c0:89:48:b0:92:e5:50:ba:0c:81: 29:fa:1d:b1:13:d0:d2:fc:28:89:64:d2:7a:e6:d1:7b:a9:85: 57:2a:d5:60:38:f7:a4:7a:48:c1:12:0a:30:14:a4:e0:73:25: cf:8a:79:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGFftueG2xFRL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ZDgxY2VlYTYtNTBjNy00Yzk0LTk4MGUtNDk5Yzk2NjczZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qWz3Y4vnmkWKCXN8qnj8ESPO2OP8zEHBjt3 PEcaaZgIid2a0CSzOug8BROuM4TuQMbmfQEo/3IXsEpjEBjV/yGSEudWiDZoXIe0 TTqIiw7quWOKu8EVl8Fsv2A9446gyX3bzq6TCvll8Q8h33BtUNRpqPhnoDB4cxcv 6wdo8agR6/7CsmDekk86URstMx6zj/1AFSiKag4vASTGwCAvwibUJgnTUm5Z/9lD vQM/omthDE2gsb/lq5ClHAmXwoZ0Lbm6IKXyetGJxVz2nqiu1jXC41REe/xUo9aU anmhT7J+JUdMMPawsko5MbyhRM7z5qNkroLwuHYkrEdyaze5zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEDGfn9XUoq+AapqqKcyOFxEkM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvNDIyMTgzNzgtZmM2Ny0z YjdiLWFmODAtOTMwNjRiNGU3ZDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQFZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARyyhh5emzQHXGmEHh8Y2panuIMGBFKrzd0fURgbFLNnXgILlP62bCj EbnkvU/+G6UWils1URxP4M5hSSdm2L2cABRLI19d8dqPWq4iD5Ny7vGVxI9i7DID pDmTd2t/jpzZPl9gft6cLPTjdVQSup+eFRMKYRPTuIOPTsYY/Eu3FVbii6ZsEOKu ScfUXlC7NwZng6tIpQSj9KB+U0ps56InSf9oiWT5qGpf8pal+lEcPoM+lSDBgX8l MUlLeh3GAPTvtMujb9sZJwIQqeXPwIlIsJLlULoMgSn6HbET0NL8KIlk0nrm0Xup hVcq1WA496R6SMESCjAUpOBzJc+KeSY= -----END CERTIFICATE-----Generated at Fri Mar 14 11:05:49 2025 by rpki-client