$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/53ec8ac6-be69-3986-b4cf-d0f5875ab3d6.roa File: 53ec8ac6-be69-3986-b4cf-d0f5875ab3d6.roa (raw, json) Hash identifier: sqm6MNkRELlJtw57WyG7KZTY3OFD8Jo51w3bniR9UOc= Subject key identifier: 5A:11:A3:70:79:E4:64:24:FC:2E:FA:1B:62:A2:74:50:98:61:7E:50 Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Certificate serial: 010D0C9F432858489075FDA13C5FF6A478716880 Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/53ec8ac6-be69-3986-b4cf-d0f5875ab3d6.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 30644 IP address blocks: 64.40.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:75:fd:a1:3c:5f:f6:a4:78:71:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=21bc14fc-9ccb-4826-bbcf-5657950f715d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7e:02:99:8b:71:7e:28:cc:d7:6b:3e:f8:65: 76:35:84:01:bb:e2:7a:ce:63:6f:7b:57:46:2c:13: 56:20:0b:00:5c:53:40:4e:44:c6:1e:03:3c:2f:a9: 6c:42:c7:7a:b9:a3:cb:c7:b7:3c:53:54:e1:65:3d: 26:e4:4e:2d:20:cb:a0:3a:d7:56:12:11:3b:be:84: 3e:3c:c9:7a:68:2f:28:af:4d:c1:a2:3b:82:fa:7a: df:2e:14:56:3f:c9:39:a5:7f:a9:8e:f7:8d:29:3e: 7b:c9:86:d1:20:1a:82:7e:0f:62:06:b7:22:36:cb: 69:d7:e5:38:45:0a:40:ab:d3:01:81:62:d1:0e:9a: 08:07:7e:ea:7e:05:f7:c4:a5:fd:e9:8f:77:59:dc: 10:8e:26:44:c4:04:ff:a1:44:79:d1:7d:c6:de:dc: 5c:e1:c1:8e:73:7f:37:9d:d1:66:4c:27:f4:6c:ba: b5:04:ef:8c:66:1f:ca:55:07:84:24:76:1e:cf:83: d8:ab:5b:96:08:b4:46:67:ad:60:29:cc:f2:8b:6f: 01:ac:ef:72:fb:08:91:c6:5c:85:6c:cb:d4:dc:03: 41:b8:92:48:6e:e9:35:25:90:02:f8:36:a9:f4:b8: 25:cf:de:64:0e:14:04:eb:61:e5:1d:24:50:06:42: e0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:11:A3:70:79:E4:64:24:FC:2E:FA:1B:62:A2:74:50:98:61:7E:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/53ec8ac6-be69-3986-b4cf-d0f5875ab3d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl X509v3 Authority Key Identifier: keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer sbgp-ipAddrBlock: critical IPv4: 64.40.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:08:5a:33:4a:20:35:ba:1e:ea:e8:a6:33:a8:61:45:26:f2: 22:72:26:a0:f4:32:8f:51:7a:ff:c3:58:ef:04:0c:f7:02:be: 7f:b3:4f:5f:8e:49:3b:7c:71:33:d7:d9:de:a7:6a:9c:35:8b: f1:81:e6:ff:89:d2:13:6d:39:cb:d7:2a:fd:83:79:9e:a8:64: 55:33:58:d5:83:0b:3c:fe:39:70:7c:4c:e6:09:f8:14:f4:61: 91:79:fe:d5:f2:64:78:28:20:7b:df:b9:eb:91:07:7b:ec:7e: 8e:45:6f:6b:7b:2f:ad:4d:e6:56:d5:6e:58:66:e4:97:54:52: 32:1d:8d:19:23:b7:41:71:aa:43:b9:bb:80:46:48:45:6f:ec: 6d:c7:1a:96:51:09:6d:40:e0:68:ed:24:8f:5d:f4:81:b5:59: 94:b0:fb:38:49:3d:a3:d3:4d:ad:3b:94:77:11:5d:bb:f2:3c: f9:19:77:d0:02:28:21:61:a7:fd:4f:1d:d7:97:c9:06:06:88: 5b:4f:bb:04:83:7d:bf:a4:66:a3:e6:b1:12:da:98:9b:9a:67: 39:41:83:01:2f:14:ab:e4:89:01:26:ef:92:5c:87:94:11:61: 87:bf:ca:68:3f:0b:77:49:9c:9b:0a:87:c6:c6:10:88:41:0e: 63:d6:44:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdf2hPF/2pHhxaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk NWVlMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk MjFiYzE0ZmMtOWNjYi00ODI2LWJiY2YtNTY1Nzk1MGY3MTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX4CmYtxfijM12s++GV2NYQBu+J6zmNve1dG LBNWIAsAXFNATkTGHgM8L6lsQsd6uaPLx7c8U1ThZT0m5E4tIMugOtdWEhE7voQ+ PMl6aC8or03BojuC+nrfLhRWP8k5pX+pjveNKT57yYbRIBqCfg9iBrciNstp1+U4 RQpAq9MBgWLRDpoIB37qfgX3xKX96Y93WdwQjiZExAT/oUR50X3G3txc4cGOc383 ndFmTCf0bLq1BO+MZh/KVQeEJHYez4PYq1uWCLRGZ61gKczyi28BrO9y+wiRxlyF bMvU3ANBuJJIbuk1JZAC+Dap9Lglz95kDhQE62HlHSRQBkLgTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoRo3B55GQk/C76G2KidFCYYX5QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5 MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvNTNlYzhhYzYtYmU2OS0z OTg2LWI0Y2YtZDBmNTg3NWFiM2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4 Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1 YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCiVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgIWjNKIDW6HuropjOoYUUm8iJyJqD0Mo9Rev/DWO8EDPcCvn+zT1+O STt8cTPX2d6napw1i/GB5v+J0hNtOcvXKv2DeZ6oZFUzWNWDCzz+OXB8TOYJ+BT0 YZF5/tXyZHgoIHvfueuRB3vsfo5Fb2t7L61N5lbVblhm5JdUUjIdjRkjt0FxqkO5 u4BGSEVv7G3HGpZRCW1A4GjtJI9d9IG1WZSw+zhJPaPTTa07lHcRXbvyPPkZd9AC KCFhp/1PHdeXyQYGiFtPuwSDfb+kZqPmsRLamJuaZzlBgwEvFKvkiQEm75Jch5QR YYe/ymg/C3dJnJsKh8bGEIhBDmPWRBc= -----END CERTIFICATE-----Generated at Sat Apr 5 18:24:34 2025 by rpki-client