$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/53f4060c-0024-371a-a601-a2f3125b6163.roa File: 53f4060c-0024-371a-a601-a2f3125b6163.roa (raw, json) Hash identifier: dCXBCNDEdKQMVtZmEUsaIhZa+VXC7k0pN4xiCJc4Jec= Subject key identifier: 23:A0:B1:B0:35:D1:78:8F:C8:F4:28:21:BB:34:9B:42:22:1C:18:56 Certificate issuer: /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9 Certificate serial: 010D0C9F432858487755D47DEDBE0488F9A97FC0 Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/53f4060c-0024-371a-a601-a2f3125b6163.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 398391 IP address blocks: 64.226.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:d4:7d:ed:be:04:88:f9:a9:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9 Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=6fefac22-36c5-4e98-b581-698f08ccf431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:10:9a:01:d1:2a:b2:94:6f:22:30:7f:23:35: 77:a1:e0:2f:6c:48:2f:5e:8e:ea:67:99:4f:1b:4d: 3c:d5:2a:69:6f:66:43:3e:d7:64:e7:cb:39:ba:ca: b8:51:39:a4:54:0e:14:ef:12:54:1b:30:e2:3b:e7: ae:ff:64:4c:2b:d9:8c:d8:c0:13:8c:82:7c:58:9c: b9:9c:36:c8:22:05:41:dc:5d:30:fd:6c:00:33:ec: 62:3c:59:e3:9d:49:f7:a7:58:24:2a:4a:8b:39:cc: 8d:e5:d5:20:a8:a9:4c:4f:ea:3d:54:2b:a9:76:55: 4a:bc:b7:9f:67:66:71:57:e7:7d:7b:85:c0:cb:6f: fe:f6:3b:dd:a5:2c:64:f0:07:01:20:af:51:ee:38: 50:3e:5c:c2:7e:c4:ad:d9:81:45:48:79:7a:39:e1: 81:d4:43:bd:4b:95:66:d2:00:ef:fd:a7:1d:95:f1: a3:06:a3:57:6b:4d:3b:cf:33:29:91:4d:b1:d5:7b: 7f:3d:54:4a:09:c0:43:51:21:13:b2:f8:fe:f5:88: b6:c2:d5:2b:7e:c2:b9:8e:84:18:ee:77:89:87:ee: da:9a:6d:6c:d3:5b:26:b4:8e:e9:49:d9:de:c7:69: 8b:1a:fa:99:eb:90:0b:1f:fe:7b:55:01:b0:9b:a5: 54:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A0:B1:B0:35:D1:78:8F:C8:F4:28:21:BB:34:9B:42:22:1C:18:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/53f4060c-0024-371a-a601-a2f3125b6163.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl X509v3 Authority Key Identifier: keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer sbgp-ipAddrBlock: critical IPv4: 64.226.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:00:63:a4:cd:d7:34:1e:2f:3d:f2:71:21:32:73:cf:90:9c: 42:9f:ec:72:75:98:28:36:60:00:c6:1b:f0:17:f0:83:74:a8: c5:0d:7e:42:de:6a:17:66:46:12:41:34:87:7e:2c:8d:a0:d1: 59:5b:b8:03:39:0c:06:21:7e:c6:3d:0b:f0:98:63:a8:07:56: c9:69:88:0c:d5:e0:f7:b5:8f:d8:69:0f:94:2e:36:2f:4c:a1: ba:44:ef:02:b6:71:ad:3a:42:d8:7c:d0:2c:e5:14:1c:96:ef: 95:01:0b:a5:69:19:18:b0:50:7e:2a:99:6a:bc:4b:89:c9:8c: ee:2c:86:43:c8:29:76:a2:41:72:00:92:d0:e0:97:71:9a:ed: 55:f5:48:a0:98:21:a4:87:97:ae:f6:c9:f6:68:44:30:e5:45: af:14:ae:b3:a8:d3:d5:8e:bf:01:0f:dd:61:ef:be:d3:da:ca: 42:6c:03:7f:43:bf:af:be:90:a4:b3:cf:55:64:51:a8:68:b0: 8f:f8:db:f5:bf:15:60:14:d6:c3:7c:ca:a0:1c:1c:3b:25:cb: 20:ac:e6:b4:63:72:7b:44:3d:c0:ee:39:0d:32:cf:66:25:b8: fc:09:37:37:9b:a3:f8:63:c0:38:f1:91:05:09:64:1c:d8:ce: f2:6d:63:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VdR97b4EiPmpf8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQyMzk4MjUtZDNlNi00YjFmLWEzMzktZjczZjJkYjg5 ZWU5MB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk NmZlZmFjMjItMzZjNS00ZTk4LWI1ODEtNjk4ZjA4Y2NmNDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBCaAdEqspRvIjB/IzV3oeAvbEgvXo7qZ5lP G0081Sppb2ZDPtdk58s5usq4UTmkVA4U7xJUGzDiO+eu/2RMK9mM2MATjIJ8WJy5 nDbIIgVB3F0w/WwAM+xiPFnjnUn3p1gkKkqLOcyN5dUgqKlMT+o9VCupdlVKvLef Z2ZxV+d9e4XAy2/+9jvdpSxk8AcBIK9R7jhQPlzCfsSt2YFFSHl6OeGB1EO9S5Vm 0gDv/acdlfGjBqNXa007zzMpkU2x1Xt/PVRKCcBDUSETsvj+9Yi2wtUrfsK5joQY 7neJh+7amm1s01smtI7pSdnex2mLGvqZ65ALH/57VQGwm6VU3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOgsbA10XiPyPQoIbs0m0IiHBhWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDIz OTgyNS1kM2U2LTRiMWYtYTMzOS1mNzNmMmRiODllZTkvNTNmNDA2MGMtMDAyNC0z NzFhLWE2MDEtYTJmMzEyNWI2MTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQyMzk4MjUtZDNlNi00YjFmLWEz MzktZjczZjJkYjg5ZWU5LzY0MjM5ODI1LWQzZTYtNGIxZi1hMzM5LWY3M2YyZGI4 OWVlOS5jcmwwHwYDVR0jBBgwFoAUiYq+4lrGIGWwmxKaCUUuy2q5rIMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDIzOTgyNS1kM2U2LTRiMWYtYTMzOS1mNzNm MmRiODllZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOKEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUAY6TN1zQeLz3ycSEyc8+QnEKf7HJ1mCg2YADGG/AX8IN0qMUNfkLe ahdmRhJBNId+LI2g0VlbuAM5DAYhfsY9C/CYY6gHVslpiAzV4Pe1j9hpD5QuNi9M obpE7wK2ca06Qth80CzlFByW75UBC6VpGRiwUH4qmWq8S4nJjO4shkPIKXaiQXIA ktDgl3Ga7VX1SKCYIaSHl672yfZoRDDlRa8UrrOo09WOvwEP3WHvvtPaykJsA39D v6++kKSzz1VkUahosI/42/W/FWAU1sN8yqAcHDslyyCs5rRjcntEPcDuOQ0yz2Yl uPwJNzebo/hjwDjxkQUJZBzYzvJtY/Q= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:44 2025 by rpki-client