$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4107dc0c-6d35-3ba5-8b49-9ac86bf71a40.roa File: 4107dc0c-6d35-3ba5-8b49-9ac86bf71a40.roa (raw, json) Hash identifier: 3A+8yYkkwWHTHlWb94yhKGsIaIlCzIlWlN1PPkX89Fw= Subject key identifier: 43:95:C9:E2:3D:4F:66:AA:B2:B3:F9:B3:26:CB:41:D5:90:5B:59:34 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848B8F0C58BC08A669F89F76680 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4107dc0c-6d35-3ba5-8b49-9ac86bf71a40.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 852 IP address blocks: 64.114.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:c5:8b:c0:8a:66:9f:89:f7:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=d087c63e-eb3d-4767-b3d8-397b0b108467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7a:3a:f9:a4:0f:a2:7b:f5:8e:45:e5:53:43: 8d:ae:06:18:d4:e8:9b:23:30:93:ea:77:f7:d2:3c: 44:2c:fa:ac:b2:50:8f:d9:33:5c:f8:ee:d9:76:13: ab:ac:98:42:19:62:3f:e1:85:46:c5:b7:97:90:49: cb:98:96:b5:d7:43:b6:ba:85:20:ce:3a:df:93:98: 2c:a6:2d:34:6b:68:99:81:a2:35:e0:9b:8e:6a:99: 95:87:d4:8c:37:51:14:b4:5b:1a:a9:4f:a5:e1:a4: eb:9b:d2:78:02:ee:8c:bd:14:3a:be:4e:05:d4:37: 4c:a0:de:79:56:c9:ae:59:14:fc:51:ec:3a:d1:0e: a4:4f:92:f7:4f:35:ae:75:3d:a5:cd:79:3f:28:a6: 0b:c4:09:5c:2e:83:93:56:c9:3f:7b:2e:80:26:ee: 6d:e7:34:ba:3c:bc:12:d4:60:02:96:48:c3:0f:00: 8e:8a:20:fa:54:6f:b3:a7:3e:fd:a2:81:75:77:44: c2:2a:4c:b2:bf:5d:5b:fb:35:c6:be:e3:5e:a3:3f: a5:3c:20:47:be:e8:7c:64:91:c0:e6:3e:75:92:e1: 3d:43:cc:00:2d:64:9c:b4:3a:d5:52:34:76:71:63: f4:36:2a:5c:c1:85:eb:e9:69:73:eb:4c:7e:99:c9: 96:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:95:C9:E2:3D:4F:66:AA:B2:B3:F9:B3:26:CB:41:D5:90:5B:59:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4107dc0c-6d35-3ba5-8b49-9ac86bf71a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 64.114.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:d0:eb:30:ee:4b:ab:f1:4b:39:f5:8e:94:d6:8d:8d:a8:a7: 53:73:56:82:6a:7d:a5:35:8b:ee:2a:c3:f4:92:e9:f2:00:70: c9:be:22:95:4a:45:ef:21:f4:6e:c6:18:b1:f7:77:85:99:5a: 3b:ec:6e:2d:ac:57:92:af:28:6b:e8:ae:e3:70:2a:c4:1a:40: 8d:61:13:66:98:2f:92:39:72:de:4d:e5:77:a6:37:d4:c9:34: d4:8b:4b:ab:fd:59:48:a6:20:f3:d1:ec:c2:38:e4:ec:e4:23: c7:ce:83:16:a5:10:bf:0b:24:b6:89:58:41:c8:15:fd:c9:8d: 41:d5:85:14:0d:6d:62:0d:1c:ca:d8:7e:0e:7a:ac:9b:5d:c6: 05:02:0c:cb:66:54:07:f3:d2:25:62:cf:b8:68:54:b1:1a:c4: 60:ff:66:1a:eb:29:1b:2a:2b:23:af:2a:42:4f:e0:cb:95:c3: 60:5b:16:db:95:83:95:09:26:96:b8:54:81:6e:53:c7:19:5d: 2a:e4:7f:bd:6d:c1:a1:2d:d6:5e:c5:17:76:65:eb:98:fa:52: 9e:da:44:6d:95:c1:fc:0b:c8:06:e4:29:0c:05:26:ab:1f:fd: 80:ca:39:72:0a:c8:79:4c:55:7c:f2:91:1c:5b:84:27:e1:da: 35:fa:91:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48MWLwIpmn4n3ZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk ZDA4N2M2M2UtZWIzZC00NzY3LWIzZDgtMzk3YjBiMTA4NDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHo6+aQPonv1jkXlU0ONrgYY1OibIzCT6nf3 0jxELPqsslCP2TNc+O7ZdhOrrJhCGWI/4YVGxbeXkEnLmJa110O2uoUgzjrfk5gs pi00a2iZgaI14JuOapmVh9SMN1EUtFsaqU+l4aTrm9J4Au6MvRQ6vk4F1DdMoN55 VsmuWRT8Uew60Q6kT5L3TzWudT2lzXk/KKYLxAlcLoOTVsk/ey6AJu5t5zS6PLwS 1GAClkjDDwCOiiD6VG+zpz79ooF1d0TCKkyyv11b+zXGvuNeoz+lPCBHvuh8ZJHA 5j51kuE9Q8wALWSctDrVUjR2cWP0NipcwYXr6Wlz60x+mcmWRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOVyeI9T2aqsrP5sybLQdWQW1k0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDEwN2RjMGMtNmQzNS0z YmE1LThiNDktOWFjODZiZjcxYTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQHKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3Q6zDuS6vxSzn1jpTWjY2op1NzVoJqfaU1i+4qw/SS6fIAcMm+IpVK Re8h9G7GGLH3d4WZWjvsbi2sV5KvKGvoruNwKsQaQI1hE2aYL5I5ct5N5XemN9TJ NNSLS6v9WUimIPPR7MI45OzkI8fOgxalEL8LJLaJWEHIFf3JjUHVhRQNbWINHMrY fg56rJtdxgUCDMtmVAfz0iViz7hoVLEaxGD/ZhrrKRsqKyOvKkJP4MuVw2BbFtuV g5UJJpa4VIFuU8cZXSrkf71twaEt1l7FF3Zl65j6Up7aRG2VwfwLyAbkKQwFJqsf /YDKOXIKyHlMVXzykRxbhCfh2jX6kWk= -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:46 2025 by rpki-client