$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/ddcd16e6-3b5b-3645-b8a0-3490a2aef029.roa File: ddcd16e6-3b5b-3645-b8a0-3490a2aef029.roa (raw, json) Hash identifier: GyZLgz4ndSOkyzWieYYC8oTCeEBta5/ToXaaJbVVvYY= Subject key identifier: FA:92:33:8F:03:44:63:FC:C3:03:E9:E9:E3:9F:30:95:AE:4F:7E:1A Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F43285848F65BD2D91DCE2B3A51B53CA0 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/ddcd16e6-3b5b-3645-b8a0-3490a2aef029.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 32204 IP address blocks: 64.44.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:d2:d9:1d:ce:2b:3a:51:b5:3c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=399fe949-4281-4e96-8941-855da6e388e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f8:d7:e5:95:a1:3e:2e:56:e4:f9:24:d4:5c: 07:ad:06:1c:3b:40:37:42:6d:92:aa:2f:e5:98:a0: a2:2f:00:10:64:7b:3b:20:75:f1:84:74:8b:2e:56: f2:04:78:64:40:e6:e9:af:71:10:33:9e:ca:7e:d0: bd:b2:e2:e4:69:c1:fb:01:9c:3a:d5:b5:27:7f:25: b9:e9:c2:13:5a:ce:f9:96:b6:f4:10:0e:0e:2f:ef: 4f:19:62:09:56:fc:9c:ee:ba:71:30:d9:b8:af:4d: ef:26:cf:cd:8e:a2:a6:65:df:bf:57:e8:ef:3c:eb: db:34:cb:37:2e:41:fb:4c:da:6d:f7:93:0f:36:18: 42:a1:37:1d:cb:b4:8c:e4:15:15:4e:c9:8d:77:19: 28:4d:55:59:f8:60:f0:7b:46:13:09:b2:b5:8b:ca: 6c:7d:b7:8f:06:b5:1e:6b:65:5d:11:61:9f:47:b4: 5c:99:f7:c2:61:03:04:c6:bc:cf:43:63:f7:8a:57: bf:c1:87:08:ae:a5:2a:6e:01:26:80:88:41:90:d8: 8d:2b:ec:27:51:37:d3:bb:ab:43:fe:c4:8f:6b:86: 11:11:5c:a1:40:00:a5:a9:ef:65:55:09:29:72:b1: b9:fe:58:45:68:51:78:16:1a:85:15:4d:23:4e:80: 6c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:92:33:8F:03:44:63:FC:C3:03:E9:E9:E3:9F:30:95:AE:4F:7E:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/ddcd16e6-3b5b-3645-b8a0-3490a2aef029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv4: 64.44.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:cf:b0:6e:53:c5:af:f9:f3:b8:ac:47:b0:69:d1:26:a5:46: 3f:e5:71:df:b9:1c:41:5c:3c:4f:18:7a:b7:28:79:20:e9:05: 38:21:dc:4d:13:4e:28:95:cd:14:a3:23:7b:e1:93:e9:92:dd: e9:d0:50:a1:c1:72:67:00:d6:8d:ff:c4:d4:64:44:d7:ba:98: 55:30:57:b2:ec:01:60:84:b7:48:26:f2:b6:5c:74:4c:45:66: 91:a7:05:d7:2b:1d:b4:b9:02:be:4a:01:d3:4f:fa:0b:a3:14: b6:7f:3b:d0:d6:4f:91:8a:7f:06:e8:0b:ae:01:ca:e0:8e:0b: e6:93:76:7b:c5:60:bb:6e:85:4b:0c:66:28:48:d9:27:d1:85: c5:30:7d:d0:ab:53:e6:73:b7:40:e6:1e:40:28:56:8f:20:00: f1:21:2e:be:ee:41:a4:ab:d2:22:d4:72:1a:72:48:2a:05:c1: 05:5c:f2:07:24:2a:52:91:61:a3:d3:3d:75:56:55:8f:6c:f7: 78:93:33:f6:04:1f:6f:e1:15:43:79:6d:08:8f:00:df:47:e2: d4:24:d9:81:6f:0a:1d:3d:bb:54:4b:7c:c1:06:9b:87:82:d8: c9:9e:88:22:2f:b2:5f:a0:b8:d4:86:10:75:c2:b6:53:c4:60: 70:ad:9a:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W9LZHc4rOlG1PKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk Mzk5ZmU5NDktNDI4MS00ZTk2LTg5NDEtODU1ZGE2ZTM4OGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvjX5ZWhPi5W5Pkk1FwHrQYcO0A3Qm2Sqi/l mKCiLwAQZHs7IHXxhHSLLlbyBHhkQObpr3EQM57KftC9suLkacH7AZw61bUnfyW5 6cITWs75lrb0EA4OL+9PGWIJVvyc7rpxMNm4r03vJs/NjqKmZd+/V+jvPOvbNMs3 LkH7TNpt95MPNhhCoTcdy7SM5BUVTsmNdxkoTVVZ+GDwe0YTCbK1i8psfbePBrUe a2VdEWGfR7RcmffCYQMExrzPQ2P3ile/wYcIrqUqbgEmgIhBkNiNK+wnUTfTu6tD /sSPa4YREVyhQAClqe9lVQkpcrG5/lhFaFF4FhqFFU0jToBs0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqSM48DRGP8wwPp6eOfMJWuT34aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvZGRjZDE2ZTYtM2I1Yi0z NjQ1LWI4YTAtMzQ5MGEyYWVmMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQCzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHPsG5Txa/587isR7Bp0SalRj/lcd+5HEFcPE8YercoeSDpBTgh3E0T TiiVzRSjI3vhk+mS3enQUKHBcmcA1o3/xNRkRNe6mFUwV7LsAWCEt0gm8rZcdExF ZpGnBdcrHbS5Ar5KAdNP+gujFLZ/O9DWT5GKfwboC64ByuCOC+aTdnvFYLtuhUsM ZihI2SfRhcUwfdCrU+Zzt0DmHkAoVo8gAPEhLr7uQaSr0iLUchpySCoFwQVc8gck KlKRYaPTPXVWVY9s93iTM/YEH2/hFUN5bQiPAN9H4tQk2YFvCh09u1RLfMEGm4eC 2MmeiCIvsl+guNSGEHXCtlPEYHCtmsc= -----END CERTIFICATE-----Generated at Sat Apr 5 21:21:19 2025 by rpki-client