$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/679edc5d-f383-3359-84b0-dd5f71054e2f.roa File: 679edc5d-f383-3359-84b0-dd5f71054e2f.roa (raw, json) Hash identifier: 0+nod47OhxW4LnuZu+0/YK3wi8FjrpLEU3qeoFphYqo= Subject key identifier: 9A:54:EC:47:9F:DC:71:2E:CA:68:23:93:35:C7:21:4E:75:FF:E9:1A Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F432858489340AA8C630410F1D4B0C880 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/679edc5d-f383-3359-84b0-dd5f71054e2f.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 400402 IP address blocks: 64.44.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:aa:8c:63:04:10:f1:d4:b0:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=ab3c0f77-7af9-4cf2-a4e8-f99583cb1deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:77:80:1f:62:74:1f:e6:b0:74:33:ae:c5:f5: c0:87:dc:4b:99:35:9f:cb:10:39:5d:ef:92:84:cd: 55:08:51:b7:7a:a2:62:f0:5e:19:69:68:29:81:d1: 65:a6:04:49:da:d0:03:84:db:ab:e6:9d:b4:d3:d7: c5:a4:aa:1a:ce:34:27:65:25:c2:36:2f:85:3d:37: 00:4c:cb:73:94:f0:4a:be:a6:d0:b7:2e:d6:83:9e: 39:5a:3d:af:03:de:90:a0:55:aa:f7:64:84:b5:b7: 6d:cf:f2:3b:5c:e0:2a:19:08:0f:04:4b:31:c5:ce: ca:ea:ed:18:f2:f3:bd:db:44:1f:52:d2:61:f5:7a: d1:da:b8:a4:0a:cf:4a:f9:1c:d5:45:eb:7a:2b:1a: 2c:96:b9:34:60:20:77:72:af:05:d7:17:bc:c4:bf: 1e:4c:ea:67:db:9e:b6:b2:56:94:9b:cc:6e:5f:36: 26:e4:90:91:c2:d2:3f:e5:19:39:bb:ab:6b:46:7e: 48:3c:83:fb:50:45:67:1e:ef:8e:54:18:25:fc:43: b4:28:ca:63:82:05:95:c5:7e:eb:3e:a7:0f:73:36: 6c:7c:ae:31:10:72:81:1f:0f:c1:ac:e3:10:37:dc: 63:f6:a3:d7:06:e0:80:de:f1:74:db:d1:1e:ee:6a: a9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:54:EC:47:9F:DC:71:2E:CA:68:23:93:35:C7:21:4E:75:FF:E9:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/679edc5d-f383-3359-84b0-dd5f71054e2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv4: 64.44.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:81:72:fa:d6:42:be:43:16:2a:dc:39:9f:56:7e:68:9c:e2: 64:bb:b5:80:0c:1a:b8:bd:d3:c7:6d:e1:67:8f:24:de:46:a5: 46:93:75:b7:04:e1:ad:61:d0:ea:d5:f8:67:ec:e3:e3:8c:57: 6c:d4:8e:b8:ef:17:80:47:41:be:f9:aa:14:a5:c7:2a:8a:1b: 21:81:63:2f:2f:c8:f7:04:5c:8d:d6:90:3f:fd:07:52:f3:19: 7b:14:fc:ba:03:73:ad:0b:2c:99:82:1a:f1:08:6c:06:fb:7e: 2b:5f:69:b6:57:56:7e:58:e2:8d:6d:4e:ed:09:34:69:35:30: 6a:e0:a5:a9:21:9d:07:61:bd:66:b2:4f:c2:f3:5d:df:fc:d7: 3e:6b:86:1a:ba:35:06:02:b6:6e:7b:b9:69:2b:2b:8c:2d:f2: dd:f6:3c:ce:bc:65:68:87:36:93:ad:22:11:d7:32:80:22:cf: e8:a6:13:a4:15:5c:c9:29:9d:da:09:fe:c9:03:18:b3:7a:11: f7:67:f8:7a:00:0a:ae:3c:63:d9:bf:90:6f:d5:28:90:29:8f: fb:dd:bc:19:fd:e8:e4:2d:ed:44:41:c9:a9:69:d5:90:fd:47: 0f:6e:1c:64:d0:af:b0:cf:8d:09:6d:59:72:a9:6d:7e:a7:70: 44:30:da:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQKqMYwQQ8dSwyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk YWIzYzBmNzctN2FmOS00Y2YyLWE0ZTgtZjk5NTgzY2IxZGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHeAH2J0H+awdDOuxfXAh9xLmTWfyxA5Xe+S hM1VCFG3eqJi8F4ZaWgpgdFlpgRJ2tADhNur5p2009fFpKoazjQnZSXCNi+FPTcA TMtzlPBKvqbQty7Wg545Wj2vA96QoFWq92SEtbdtz/I7XOAqGQgPBEsxxc7K6u0Y 8vO920QfUtJh9XrR2rikCs9K+RzVRet6Kxoslrk0YCB3cq8F1xe8xL8eTOpn2562 slaUm8xuXzYm5JCRwtI/5Rk5u6trRn5IPIP7UEVnHu+OVBgl/EO0KMpjggWVxX7r PqcPczZsfK4xEHKBHw/BrOMQN9xj9qPXBuCA3vF029Ee7mqp4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpU7Eef3HEuymgjkzXHIU51/+kaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvNjc5ZWRjNWQtZjM4My0z MzU5LTg0YjAtZGQ1ZjcxMDU0ZTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCyZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmBcvrWQr5DFircOZ9Wfmic4mS7tYAMGri908dt4WePJN5GpUaTdbcE 4a1h0OrV+Gfs4+OMV2zUjrjvF4BHQb75qhSlxyqKGyGBYy8vyPcEXI3WkD/9B1Lz GXsU/LoDc60LLJmCGvEIbAb7fitfabZXVn5Y4o1tTu0JNGk1MGrgpakhnQdhvWay T8LzXd/81z5rhhq6NQYCtm57uWkrK4wt8t32PM68ZWiHNpOtIhHXMoAiz+imE6QV XMkpndoJ/skDGLN6Efdn+HoACq48Y9m/kG/VKJApj/vdvBn96OQt7URByalp1ZD9 Rw9uHGTQr7DPjQltWXKpbX6ncEQw2jw= -----END CERTIFICATE-----Generated at Sat Apr 5 21:50:03 2025 by rpki-client