$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/76185e0a-7b1b-3748-987b-469b3e03e06a.roa File: 76185e0a-7b1b-3748-987b-469b3e03e06a.roa (raw, json) Hash identifier: 1qsbANz1rG5kj4M0N0FtxOklBbf2RQkq3xRN4ovbP+k= Subject key identifier: ED:1E:AA:A9:7D:7D:35:0A:B3:37:BE:6E:90:7F:8C:96:CD:E6:34:52 Certificate issuer: /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9 Certificate serial: 010D0C9F43285848A9961CC42C84E34C7A49E0C0 Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/76185e0a-7b1b-3748-987b-469b3e03e06a.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 398391 IP address blocks: 64.226.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:1c:c4:2c:84:e3:4c:7a:49:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=972d3bf7-1ba0-4b28-baad-8230b312934f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fc:52:7f:1d:c2:22:59:7d:3a:73:43:02:63: a7:36:18:0b:79:30:e7:4b:ab:48:bc:7c:cf:76:7f: 53:0b:26:11:dd:71:57:d1:d5:2d:6a:34:8a:63:4c: b5:10:9c:00:45:c9:75:1c:38:fc:f3:2b:34:79:70: 25:2f:7a:0d:a4:18:4a:8c:bc:a5:62:d0:9f:d6:1b: e2:60:4c:9d:36:31:21:60:6b:75:da:af:08:93:27: 44:ef:a8:bd:0a:b2:7c:09:bb:b9:56:0c:7e:66:47: b3:3a:75:b6:cd:e3:8c:7b:72:fa:b8:7e:6c:16:86: 49:f5:ff:9d:5e:4f:52:31:d6:df:e7:84:5e:e9:9b: d3:d2:02:8c:b3:a1:25:9e:5c:40:77:c8:c9:bc:ca: 16:7a:bd:65:50:3a:32:88:a7:c1:9f:05:43:99:ec: 8f:94:8f:ef:bf:57:2a:7d:1b:59:f7:ee:d5:39:67: f0:dc:f2:8c:ed:70:9c:a5:35:49:d2:45:3a:39:ce: eb:94:b5:11:16:33:0b:71:01:06:c6:fe:60:51:14: fb:77:0b:f8:48:46:2f:8d:d5:e0:2d:ae:5d:e1:0a: f3:91:b9:87:be:90:94:3f:c2:88:fd:ae:de:5c:2d: 18:f2:47:7a:d5:ae:a8:fe:f7:d6:76:e7:e9:e1:2f: 61:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:1E:AA:A9:7D:7D:35:0A:B3:37:BE:6E:90:7F:8C:96:CD:E6:34:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/76185e0a-7b1b-3748-987b-469b3e03e06a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl X509v3 Authority Key Identifier: keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer sbgp-ipAddrBlock: critical IPv4: 64.226.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:c6:54:32:e2:f7:7c:0e:51:c8:c7:19:99:3f:dd:09:aa:3c: 28:56:ed:24:7c:f1:86:d6:04:80:11:20:de:fd:46:74:d7:c9: 1c:62:60:bc:4a:74:1e:88:8c:f3:e0:cf:06:9c:c9:0d:53:7e: 07:de:2b:cf:75:ff:db:08:06:f0:9c:57:d1:c0:17:35:5a:e7: 50:0d:8c:e0:bd:91:c3:df:16:00:fd:e2:63:8c:f2:01:67:b8: 37:26:35:d2:fd:9e:27:30:98:f6:bb:a2:2c:35:9b:a1:88:d8: 17:6a:aa:66:2b:b3:95:50:09:bb:34:54:4b:db:a3:cc:a8:b9: d1:ec:e2:f7:fe:3e:66:58:69:94:1c:7a:a6:77:96:eb:9e:5b: 0f:98:1f:78:68:af:24:a4:f5:5e:1b:a4:14:b0:fc:1a:6f:94: b3:9b:5e:03:99:d1:3a:cf:0e:48:4a:70:7f:bf:7f:d1:07:bc: ad:fb:c8:81:8e:e9:17:18:c4:bc:d8:18:75:4d:6d:6b:95:9d: 2e:f8:3c:a7:98:ef:fd:98:36:47:28:05:6b:87:db:22:4e:12: f9:86:d0:4c:c9:01:2f:eb:40:2d:ab:60:7d:26:86:f6:cf:9b: 93:d3:ea:96:fa:dd:9a:a4:d2:90:2a:30:cd:20:f5:43:1e:b9: 2c:2e:44:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplhzELITjTHpJ4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQyMzk4MjUtZDNlNi00YjFmLWEzMzktZjczZjJkYjg5 ZWU5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk OTcyZDNiZjctMWJhMC00YjI4LWJhYWQtODIzMGIzMTI5MzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfxSfx3CIll9OnNDAmOnNhgLeTDnS6tIvHzP dn9TCyYR3XFX0dUtajSKY0y1EJwARcl1HDj88ys0eXAlL3oNpBhKjLylYtCf1hvi YEydNjEhYGt12q8IkydE76i9CrJ8Cbu5Vgx+ZkezOnW2zeOMe3L6uH5sFoZJ9f+d Xk9SMdbf54Re6ZvT0gKMs6ElnlxAd8jJvMoWer1lUDoyiKfBnwVDmeyPlI/vv1cq fRtZ9+7VOWfw3PKM7XCcpTVJ0kU6Oc7rlLURFjMLcQEGxv5gURT7dwv4SEYvjdXg La5d4QrzkbmHvpCUP8KI/a7eXC0Y8kd61a6o/vfWdufp4S9hAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0eqql9fTUKsze+bpB/jJbN5jRSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDIz OTgyNS1kM2U2LTRiMWYtYTMzOS1mNzNmMmRiODllZTkvNzYxODVlMGEtN2IxYi0z NzQ4LTk4N2ItNDY5YjNlMDNlMDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQyMzk4MjUtZDNlNi00YjFmLWEz MzktZjczZjJkYjg5ZWU5LzY0MjM5ODI1LWQzZTYtNGIxZi1hMzM5LWY3M2YyZGI4 OWVlOS5jcmwwHwYDVR0jBBgwFoAUiYq+4lrGIGWwmxKaCUUuy2q5rIMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDIzOTgyNS1kM2U2LTRiMWYtYTMzOS1mNzNm MmRiODllZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOKGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7GVDLi93wOUcjHGZk/3QmqPChW7SR88YbWBIARIN79RnTXyRxiYLxK dB6IjPPgzwacyQ1TfgfeK891/9sIBvCcV9HAFzVa51ANjOC9kcPfFgD94mOM8gFn uDcmNdL9nicwmPa7oiw1m6GI2BdqqmYrs5VQCbs0VEvbo8youdHs4vf+PmZYaZQc eqZ3luueWw+YH3horySk9V4bpBSw/BpvlLObXgOZ0TrPDkhKcH+/f9EHvK37yIGO 6RcYxLzYGHVNbWuVnS74PKeY7/2YNkcoBWuH2yJOEvmG0EzJAS/rQC2rYH0mhvbP m5PT6pb63Zqk0pAqMM0g9UMeuSwuRJs= -----END CERTIFICATE-----Generated at Tue Apr 8 21:10:57 2025 by rpki-client