$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a7de35f4-0ee5-3b2a-b729-2954d30d0a1d.roa File: a7de35f4-0ee5-3b2a-b729-2954d30d0a1d.roa (raw, json) Hash identifier: 9s9ErYhrRTVU083OlTfgBnq/KSG6aFxjNRCk6x3Z2Gw= Subject key identifier: E8:58:0E:9D:F6:B2:6A:63:C9:C6:FA:55:F9:CE:84:57:C1:39:51:64 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F43285848C84BD9E586657623E3802980 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a7de35f4-0ee5-3b2a-b729-2954d30d0a1d.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 36492 IP address blocks: 64.9.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:d9:e5:86:65:76:23:e3:80:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=5b28d5ee-ac57-44a9-8bf5-17b633af2cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:50:ef:23:50:b7:b5:c5:b4:3d:f1:c5:8a:ad: 85:a3:d0:eb:8c:57:6b:fc:f6:5a:28:a8:a2:72:c9: fc:f8:4e:63:ae:1f:e4:2a:48:17:1a:d3:59:98:d4: bb:35:e1:46:0b:59:b5:30:e3:f0:49:d7:98:80:e0: 45:d5:39:f8:4b:14:40:b3:92:53:8c:46:5a:6f:5d: 22:fa:1d:e3:5b:1f:e5:21:dc:86:d8:c4:eb:24:a7: d7:4f:6c:49:4b:12:fe:d0:9d:cc:ce:99:58:7c:6f: 72:08:f8:06:dd:c9:32:bd:7f:84:b7:15:2c:81:41: 20:51:94:d4:db:86:e0:be:e8:1d:82:85:72:30:d6: 62:d2:d8:c8:81:a3:60:29:69:ad:a5:d9:ed:14:7f: 32:9b:8d:97:60:37:9b:ee:03:c4:3d:83:99:96:a9: fe:c0:45:c0:8b:44:c6:f7:4f:a2:92:1e:72:78:d1: 5a:26:20:5d:54:59:41:76:a9:60:14:69:31:4a:2c: 78:50:67:30:8e:b4:10:4c:49:5a:8d:b9:1e:58:e7: c4:16:57:ab:34:c4:5f:0b:81:8a:0b:1b:d3:c3:ac: 82:c3:7d:3e:24:ca:53:2b:4f:31:8b:f9:7b:5c:3b: a9:d3:61:89:34:e2:2f:ff:f4:38:2f:55:a5:96:e9: f1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:58:0E:9D:F6:B2:6A:63:C9:C6:FA:55:F9:CE:84:57:C1:39:51:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a7de35f4-0ee5-3b2a-b729-2954d30d0a1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 64.9.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:a0:ae:90:2b:47:81:d8:f1:1a:74:76:ec:c5:d1:d8:07:ec: 27:60:f7:4f:20:8e:1b:c8:de:5a:a4:26:2c:3c:7c:9a:5f:3e: 31:1c:48:26:55:42:24:c9:95:53:92:aa:20:68:d1:ce:a1:d3: 5b:fb:56:7d:71:cf:84:73:9d:da:d6:6b:a7:a0:f6:16:2e:39: 0e:61:c1:01:b1:84:4e:cb:5d:31:36:91:a4:83:a2:86:5a:18: ec:e1:92:c4:9d:ce:07:84:c7:9e:bb:26:97:0d:a7:8b:8a:86: 14:78:c2:01:d3:66:3e:5e:4b:35:f7:33:2c:8a:40:e7:f1:50: d5:bf:b7:e1:5c:cd:b2:36:73:ac:77:53:70:59:a7:3c:6b:c4: 0a:0f:c8:0b:a9:e8:82:6f:c8:36:1c:88:38:f6:8b:7e:8f:9e: 6b:9e:b1:e4:8b:cd:f0:ca:ca:3f:07:52:4e:0b:61:84:9b:d3: c2:04:48:aa:40:9f:8a:c4:8d:1d:32:7c:2a:00:d8:e9:a0:41: 62:e0:5b:cc:8b:2b:60:b8:00:36:e7:4e:00:49:df:fe:87:31: ac:ee:94:4a:1c:da:2d:ef:03:16:e8:d9:25:c8:5a:a7:06:eb: ac:96:9b:4d:e2:44:c7:40:37:6c:00:d0:83:86:8e:e7:49:bc: df:a8:7b:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS9nlhmV2I+OAKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NWIyOGQ1ZWUtYWM1Ny00NGE5LThiZjUtMTdiNjMzYWYyY2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFDvI1C3tcW0PfHFiq2Fo9DrjFdr/PZaKKii csn8+E5jrh/kKkgXGtNZmNS7NeFGC1m1MOPwSdeYgOBF1Tn4SxRAs5JTjEZab10i +h3jWx/lIdyG2MTrJKfXT2xJSxL+0J3MzplYfG9yCPgG3ckyvX+EtxUsgUEgUZTU 24bgvugdgoVyMNZi0tjIgaNgKWmtpdntFH8ym42XYDeb7gPEPYOZlqn+wEXAi0TG 90+ikh5yeNFaJiBdVFlBdqlgFGkxSix4UGcwjrQQTElajbkeWOfEFlerNMRfC4GK CxvTw6yCw30+JMpTK08xi/l7XDup02GJNOIv//Q4L1WllunxKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhYDp32smpjycb6VfnOhFfBOVFkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYTdkZTM1ZjQtMGVlNS0z YjJhLWI3MjktMjk1NGQzMGQwYTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAnnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESgrpArR4HY8Rp0duzF0dgH7Cdg908gjhvI3lqkJiw8fJpfPjEcSCZV QiTJlVOSqiBo0c6h01v7Vn1xz4RzndrWa6eg9hYuOQ5hwQGxhE7LXTE2kaSDooZa GOzhksSdzgeEx567JpcNp4uKhhR4wgHTZj5eSzX3MyyKQOfxUNW/t+FczbI2c6x3 U3BZpzxrxAoPyAup6IJvyDYciDj2i36PnmueseSLzfDKyj8HUk4LYYSb08IESKpA n4rEjR0yfCoA2OmgQWLgW8yLK2C4ADbnTgBJ3/6HMazulEoc2i3vAxbo2SXIWqcG 66yWm03iRMdAN2wA0IOGjudJvN+oe5E= -----END CERTIFICATE-----Generated at Sat Apr 5 20:22:28 2025 by rpki-client