$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/b1a610e0-b222-3681-807e-2bdaf3392014.roa File: b1a610e0-b222-3681-807e-2bdaf3392014.roa (raw, json) Hash identifier: SEyvDpTFcSpt2XBdhIrW6gnb9dHuzuVvpdInC5esO6Y= Subject key identifier: 66:5B:12:08:EF:11:EB:A7:35:CE:F4:91:D2:63:3E:16:C4:36:70:08 Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F43285848F22C642899A84522498AF480 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/b1a610e0-b222-3681-807e-2bdaf3392014.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 6453 IP address blocks: 64.7.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:64:28:99:a8:45:22:49:8a:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=4c9dce96-d9b6-4e45-9090-7e228075135f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:11:cf:fc:15:45:5c:2f:be:91:17:f2:26:9e: 79:74:ca:e3:b4:fd:6b:97:ac:6b:1c:9b:37:82:41: 6c:45:69:e4:43:21:ab:a2:00:58:50:3d:35:fd:8f: 83:0a:35:ae:91:f9:c9:a6:9b:ed:d9:0d:b3:c8:50: 8d:77:7e:68:9e:07:30:6c:5e:ad:cd:d0:3b:f3:27: a4:35:03:19:09:d3:a4:b6:1a:16:b3:25:f0:47:2e: 64:11:24:32:68:32:0c:43:48:f2:f6:3d:ea:b5:f9: 88:33:72:88:71:c7:94:c2:8a:14:b0:31:64:57:4a: 15:7a:8b:c9:a3:ab:67:48:47:2c:0f:21:1d:e6:a6: 14:53:62:45:22:5e:e8:8e:d9:ca:26:98:a1:b6:f3: a1:5e:15:a8:8c:fb:8f:65:cd:a7:c2:79:8b:e0:9b: 41:72:a3:64:0a:15:da:fa:18:ab:1f:f3:63:aa:19: d6:b5:82:d5:3b:4a:94:d7:f0:a3:28:ba:e5:ca:90: 4f:9b:43:8e:cf:85:41:a6:e8:82:d0:7f:96:83:52: fd:8b:5a:c8:39:05:90:3c:7a:a1:6b:b4:3d:dd:e5: a7:4a:aa:22:d4:b4:03:d5:d7:c7:c2:de:fc:6d:e2: 23:cb:78:b7:d1:c8:b7:2f:76:f0:e9:99:c2:3b:d3: f1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5B:12:08:EF:11:EB:A7:35:CE:F4:91:D2:63:3E:16:C4:36:70:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/b1a610e0-b222-3681-807e-2bdaf3392014.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 64.7.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:35:43:fc:83:55:9c:f5:50:18:58:9a:62:bc:5e:90:3d:9e: 19:04:1b:ee:74:c1:16:a5:9c:ed:b7:6c:65:03:00:97:e7:0b: 1e:bf:ae:dc:89:f9:82:ae:55:9e:f0:7a:7a:76:27:7b:0b:87: 6d:b9:69:65:bf:77:4e:1a:b7:e5:1e:d3:d2:83:1e:ae:3e:15: 4e:3e:0d:26:9f:50:75:1f:59:87:a8:52:5b:46:89:d4:fa:8f: 09:56:49:31:22:93:ed:e0:64:aa:86:8b:73:89:06:0c:2c:86: 1e:85:a3:b6:5a:0f:a8:1e:64:5d:d0:d5:3f:ce:2e:7c:9a:a9: 50:97:cf:5a:47:c6:66:6e:2d:6b:6a:79:ff:ea:be:fe:71:9e: 71:c8:78:5c:44:64:0e:67:e5:17:7e:e5:84:9e:29:62:6c:f0: b2:d5:f1:9f:25:18:fe:3f:f9:66:39:79:94:26:09:58:c8:bc: 67:e5:aa:52:66:20:00:ce:06:45:c8:47:d9:5c:06:6d:4b:78: d2:8f:7a:01:1c:cf:7c:43:34:8b:32:6f:cd:dd:1c:e3:a8:cd: fa:ca:9e:d2:58:e3:65:31:ea:38:11:ee:2b:9d:2d:a2:2e:6e: f0:aa:e6:9a:5b:49:b3:70:9a:ff:55:08:1b:46:d6:4e:1e:dc: da:08:11:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGQomahFIkmK9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk NGM5ZGNlOTYtZDliNi00ZTQ1LTkwOTAtN2UyMjgwNzUxMzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBHP/BVFXC++kRfyJp55dMrjtP1rl6xrHJs3 gkFsRWnkQyGrogBYUD01/Y+DCjWukfnJppvt2Q2zyFCNd35ongcwbF6tzdA78yek NQMZCdOkthoWsyXwRy5kESQyaDIMQ0jy9j3qtfmIM3KIcceUwooUsDFkV0oVeovJ o6tnSEcsDyEd5qYUU2JFIl7ojtnKJpihtvOhXhWojPuPZc2nwnmL4JtBcqNkChXa +hirH/NjqhnWtYLVO0qU1/CjKLrlypBPm0OOz4VBpuiC0H+Wg1L9i1rIOQWQPHqh a7Q93eWnSqoi1LQD1dfHwt78beIjy3i30ci3L3bw6ZnCO9PxsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZbEgjvEeunNc70kdJjPhbENnAIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvYjFhNjEwZTAtYjIyMi0z NjgxLTgwN2UtMmJkYWYzMzkyMDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQAdwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACY1Q/yDVZz1UBhYmmK8XpA9nhkEG+50wRalnO23bGUDAJfnCx6/rtyJ +YKuVZ7wenp2J3sLh225aWW/d04at+Ue09KDHq4+FU4+DSafUHUfWYeoUltGidT6 jwlWSTEik+3gZKqGi3OJBgwshh6Fo7ZaD6geZF3Q1T/OLnyaqVCXz1pHxmZuLWtq ef/qvv5xnnHIeFxEZA5n5Rd+5YSeKWJs8LLV8Z8lGP4/+WY5eZQmCVjIvGflqlJm IADOBkXIR9lcBm1LeNKPegEcz3xDNIsyb83dHOOozfrKntJY42Ux6jgR7iudLaIu bvCq5ppbSbNwmv9VCBtG1k4e3NoIEdE= -----END CERTIFICATE-----Generated at Sat Apr 12 00:31:01 2025 by rpki-client