$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/afdbac6f-debc-393d-952e-f803e27af2c1.roa File: afdbac6f-debc-393d-952e-f803e27af2c1.roa (raw, json) Hash identifier: 7l91N9WD8+PkXmvc0s337m6JsHIozepPfdaPvnQM0aY= Subject key identifier: A2:F2:3C:80:51:77:17:27:5A:C5:B6:31:BC:CB:5A:44:1C:D9:36:CF Certificate issuer: /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Certificate serial: 010D0C9F43285849287E661E2917AB3AD0F26100 Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/afdbac6f-debc-393d-952e-f803e27af2c1.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 53828 IP address blocks: 64.191.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:66:1e:29:17:ab:3a:d0:f2:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=72867b32-d1bb-46b4-a93b-6449726b417f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e9:24:0e:8a:14:d1:41:ec:66:e9:64:12:47: 4c:e7:a2:ec:00:5b:fc:90:1e:97:db:8a:9e:04:1e: 58:52:22:14:98:51:9c:85:cd:f4:88:fb:d9:6b:c6: 8c:0f:ed:f9:cb:48:63:5e:a1:d8:11:6b:ae:c3:ae: de:3d:6f:1e:ad:ca:0a:54:e2:b9:1a:63:64:c1:88: 0e:12:82:ac:52:07:81:4d:10:98:db:8c:54:0a:fe: 18:b9:2b:b1:1b:90:eb:41:5c:a0:73:2d:6f:27:c2: bf:57:d3:9d:85:f6:75:dc:a9:2b:f0:15:48:21:11: f6:87:6c:1b:75:7c:b4:3c:b4:ce:57:f6:a9:7b:72: e7:c1:b3:3a:02:ec:9f:28:fb:16:de:9d:38:16:5d: cb:a7:3a:51:46:50:19:4f:6c:da:e9:fb:eb:a6:81: f2:2f:18:28:1b:c2:f1:be:61:5a:c2:c2:7e:8e:3f: 2e:94:32:8b:7a:8c:ef:74:4d:63:9e:47:d5:d7:5f: 53:16:4c:0e:58:3e:d6:70:7a:52:98:85:27:33:b3: af:3e:c5:fb:c2:d5:02:ac:fe:48:26:77:b3:49:a4: f5:60:bc:6f:3e:e8:9c:4b:ca:d2:b8:f1:34:5d:7f: 45:e8:58:b4:41:f5:bb:3a:ca:6e:ac:ad:f9:0f:ed: ee:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F2:3C:80:51:77:17:27:5A:C5:B6:31:BC:CB:5A:44:1C:D9:36:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/afdbac6f-debc-393d-952e-f803e27af2c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl X509v3 Authority Key Identifier: keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer sbgp-ipAddrBlock: critical IPv4: 64.191.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:b6:84:55:ac:af:42:6d:8d:44:3c:65:2e:0a:7a:25:bd:4a: 8d:13:8d:35:b9:6a:e5:58:4b:bc:4b:03:ff:cd:9b:69:bc:52: ca:29:93:68:52:43:99:60:8b:14:95:d5:d6:25:f5:41:53:2a: d2:3f:af:fb:92:2f:83:e5:8b:b6:71:ce:a2:1c:c6:4e:ab:49: 22:d7:94:f6:80:bf:a3:dc:47:c6:be:36:8f:8a:88:48:97:db: 68:7e:79:ab:62:12:a2:8e:6f:8d:b3:90:5d:32:1c:8b:59:07: 6b:2b:a5:6a:62:d4:21:7b:74:b0:27:0c:91:0c:a8:19:a1:5e: 9f:2a:4d:53:f5:e2:de:4b:95:be:04:9f:79:28:e3:94:55:b4: 74:49:b5:9c:75:7c:1b:af:5e:7b:9a:37:3c:ef:43:eb:16:f3: ff:8b:ea:c7:c2:49:61:a5:c3:e9:72:9f:4a:ba:f1:0b:e3:93: 73:cb:5a:13:a9:b9:ee:5f:90:d2:ac:29:fe:4e:fa:7c:4d:70: 53:eb:52:c9:ef:1c:0c:c4:ad:c2:da:85:74:28:f3:6c:09:93: dd:86:29:75:4c:fe:10:83:2d:97:83:c0:89:1c:7b:d5:b6:03: ac:a9:84:df:84:f5:5c:d4:6a:8b:d7:10:70:a0:b4:92:f3:04: 5b:6a:c3:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofmYeKRerOtDyYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyN2JjNTUtYjA0MS00N2NkLTg0ZWItZjNlOTcwN2Fj ZmYxMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk NzI4NjdiMzItZDFiYi00NmI0LWE5M2ItNjQ0OTcyNmI0MTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+kkDooU0UHsZulkEkdM56LsAFv8kB6X24qe BB5YUiIUmFGchc30iPvZa8aMD+35y0hjXqHYEWuuw67ePW8ercoKVOK5GmNkwYgO EoKsUgeBTRCY24xUCv4YuSuxG5DrQVygcy1vJ8K/V9OdhfZ13Kkr8BVIIRH2h2wb dXy0PLTOV/ape3LnwbM6AuyfKPsW3p04Fl3LpzpRRlAZT2za6fvrpoHyLxgoG8Lx vmFawsJ+jj8ulDKLeozvdE1jnkfV119TFkwOWD7WcHpSmIUnM7OvPsX7wtUCrP5I JnezSaT1YLxvPuicS8rSuPE0XX9F6Fi0QfW7OspurK35D+3uGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLyPIBRdxcnWsW2MbzLWkQc2TbPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3 YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5NzA3YWNmZjEvYWZkYmFjNmYtZGViYy0z OTNkLTk1MmUtZjgwM2UyN2FmMmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGMyN2JjNTUtYjA0MS00N2NkLTg0 ZWItZjNlOTcwN2FjZmYxLzBjMjdiYzU1LWIwNDEtNDdjZC04NGViLWYzZTk3MDdh Y2ZmMS5jcmwwHwYDVR0jBBgwFoAUxGYN+fPG33iLV0S/f1yezNk2Bp8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5 NzA3YWNmZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQL9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFm2hFWsr0JtjUQ8ZS4KeiW9So0TjTW5auVYS7xLA//Nm2m8Usopk2hS Q5lgixSV1dYl9UFTKtI/r/uSL4Pli7ZxzqIcxk6rSSLXlPaAv6PcR8a+No+KiEiX 22h+eatiEqKOb42zkF0yHItZB2srpWpi1CF7dLAnDJEMqBmhXp8qTVP14t5Llb4E n3ko45RVtHRJtZx1fBuvXnuaNzzvQ+sW8/+L6sfCSWGlw+lyn0q68Qvjk3PLWhOp ue5fkNKsKf5O+nxNcFPrUsnvHAzErcLahXQo82wJk92GKXVM/hCDLZeDwIkce9W2 A6yphN+E9VzUaovXEHCgtJLzBFtqw04= -----END CERTIFICATE-----Generated at Fri Mar 14 11:09:36 2025 by rpki-client