$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/b8de485f-6d19-38dc-b135-710947fa94af.roa File: b8de485f-6d19-38dc-b135-710947fa94af.roa (raw, json) Hash identifier: qAwYEXQbf2tU+YVGMSaIq+uRUfoxtdQfM7qvLcPyJAU= Subject key identifier: 6D:C6:69:D3:5B:DF:D8:75:C4:ED:57:2E:45:F3:26:8E:81:73:07:C2 Certificate issuer: /CN=ff081ee5-1af1-4a04-9fee-2540bcef95c3 Certificate serial: 010D0C9F43285848EF6136F00BECB0F7287464C0 Authority key identifier: 5C:7A:5D:FA:65:3A:32:DA:E6:35:F9:92:DA:69:5C:AD:F6:7E:82:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/b8de485f-6d19-38dc-b135-710947fa94af.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 14860 IP address blocks: 64.209.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/ff081ee5-1af1-4a04-9fee-2540bcef95c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/ff081ee5-1af1-4a04-9fee-2540bcef95c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:36:f0:0b:ec:b0:f7:28:74:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff081ee5-1af1-4a04-9fee-2540bcef95c3 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=7fc033a9-85b9-4b54-ad9a-d96a8e32c03c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2f:55:75:69:d2:9d:84:e5:d1:17:fc:f5:64: d8:7d:1c:62:47:46:04:06:3c:13:7d:ff:20:b6:36: f5:0f:4b:7f:77:8f:e1:80:d5:c7:22:44:4e:1e:b6: 5a:52:06:01:d6:20:85:8d:e0:13:41:e8:41:2b:0f: 64:f4:7f:79:51:6c:c4:eb:0c:72:64:4b:36:31:64: 36:c4:a4:ac:d7:6f:79:a8:91:ce:32:39:82:56:d3: 42:5c:9a:13:ec:41:63:8d:67:e5:3f:bf:25:c9:78: e6:51:cd:fa:1a:2a:3d:96:9c:b9:4d:8c:b4:e3:7e: f6:56:4c:37:21:f5:d0:f1:0f:1f:d5:d5:be:db:80: b0:00:06:9d:f1:d0:30:12:7f:a2:44:f0:f1:6e:ef: 2f:6b:f9:d6:1e:2e:cd:05:ed:90:de:83:c9:d0:54: 1a:bb:60:96:1b:8a:81:1f:ad:7b:ed:03:3e:8f:f2: aa:ce:39:3a:ff:d2:f6:41:90:aa:90:be:68:41:0a: 14:4c:21:97:d4:49:37:e8:ef:8c:c3:04:e5:fa:f8: 26:61:68:33:00:f0:a2:bb:6d:55:29:f4:32:1e:d2: 6b:16:89:33:e0:36:02:79:c1:7d:42:67:36:a5:5e: 24:4d:a1:cf:db:ba:22:37:2f:2e:72:9b:ad:29:8d: 37:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C6:69:D3:5B:DF:D8:75:C4:ED:57:2E:45:F3:26:8E:81:73:07:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/b8de485f-6d19-38dc-b135-710947fa94af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/ff081ee5-1af1-4a04-9fee-2540bcef95c3.crl X509v3 Authority Key Identifier: keyid:5C:7A:5D:FA:65:3A:32:DA:E6:35:F9:92:DA:69:5C:AD:F6:7E:82:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3.cer sbgp-ipAddrBlock: critical IPv4: 64.209.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:7f:cd:9b:90:7c:f2:f1:a5:7f:6f:d7:c9:42:f7:44:21:1b: 0e:fc:b2:0a:1e:35:1c:bc:cb:4c:33:bc:00:5f:24:80:48:6d: 4c:05:92:c7:fb:b2:84:f2:76:ae:44:01:14:19:fa:0b:0a:7f: 76:ca:69:9a:6e:de:68:dc:8c:36:73:81:30:e5:40:40:c4:ec: 28:8f:9d:e8:d1:77:42:d3:1a:1d:0f:af:4f:1d:39:c7:20:f3: 1b:0b:77:84:52:c9:3c:dd:f9:8c:b5:0c:8c:af:88:73:7d:40: 69:d2:7b:4a:5e:4e:6b:1b:dd:21:8e:45:0c:bd:b4:c1:ef:a2: fe:35:f7:94:44:9a:44:ed:18:b3:8c:71:04:c9:ca:81:29:cb: 78:af:7a:33:3d:43:0b:87:2c:c7:ff:a5:49:fa:78:67:32:63: 50:0b:ac:81:5b:f0:93:10:19:56:a0:c9:22:9a:3e:c6:1a:0d: ec:7d:88:6e:78:6c:bc:df:00:81:27:a8:32:c2:56:77:4d:ab: eb:7e:a7:17:3d:62:79:27:04:3b:ba:9d:ba:63:da:24:79:f1: 22:8b:6a:e8:15:5f:ab:fa:fc:80:c8:cb:1a:34:c1:e7:25:fd: 0c:f5:7d:17:f1:dd:08:05:db:1f:17:57:56:f9:da:4f:64:01: e3:40:15:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYTbwC+yw9yh0ZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYwODFlZTUtMWFmMS00YTA0LTlmZWUtMjU0MGJjZWY5 NWMzMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk N2ZjMDMzYTktODViOS00YjU0LWFkOWEtZDk2YThlMzJjMDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxy9VdWnSnYTl0Rf89WTYfRxiR0YEBjwTff8g tjb1D0t/d4/hgNXHIkROHrZaUgYB1iCFjeATQehBKw9k9H95UWzE6wxyZEs2MWQ2 xKSs1295qJHOMjmCVtNCXJoT7EFjjWflP78lyXjmUc36Gio9lpy5TYy04372Vkw3 IfXQ8Q8f1dW+24CwAAad8dAwEn+iRPDxbu8va/nWHi7NBe2Q3oPJ0FQau2CWG4qB H6177QM+j/Kqzjk6/9L2QZCqkL5oQQoUTCGX1Ek36O+MwwTl+vgmYWgzAPCiu21V KfQyHtJrFokz4DYCecF9Qmc2pV4kTaHP27oiNy8ucputKY03jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3GadNb39h1xO1XLkXzJo6BcwfCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZjA4 MWVlNS0xYWYxLTRhMDQtOWZlZS0yNTQwYmNlZjk1YzMvYjhkZTQ4NWYtNmQxOS0z OGRjLWIxMzUtNzEwOTQ3ZmE5NGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmYwODFlZTUtMWFmMS00YTA0LTlm ZWUtMjU0MGJjZWY5NWMzL2ZmMDgxZWU1LTFhZjEtNGEwNC05ZmVlLTI1NDBiY2Vm OTVjMy5jcmwwHwYDVR0jBBgwFoAUXHpd+mU6MtrmNfmS2mlcrfZ+gsUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZjA4MWVlNS0xYWYxLTRhMDQtOWZlZS0yNTQw YmNlZjk1YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQNGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1/zZuQfPLxpX9v18lC90QhGw78sgoeNRy8y0wzvABfJIBIbUwFksf7 soTydq5EARQZ+gsKf3bKaZpu3mjcjDZzgTDlQEDE7CiPnejRd0LTGh0Pr08dOccg 8xsLd4RSyTzd+Yy1DIyviHN9QGnSe0peTmsb3SGORQy9tMHvov4195REmkTtGLOM cQTJyoEpy3ivejM9QwuHLMf/pUn6eGcyY1ALrIFb8JMQGVagySKaPsYaDex9iG54 bLzfAIEnqDLCVndNq+t+pxc9YnknBDu6nbpj2iR58SKLaugVX6v6/IDIyxo0wecl /Qz1fRfx3QgF2x8XV1b52k9kAeNAFZg= -----END CERTIFICATE-----Generated at Sat Apr 5 09:47:38 2025 by rpki-client