$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/dd8ac448-7845-3707-82ae-e039ea217c8d.roa File: dd8ac448-7845-3707-82ae-e039ea217c8d.roa (raw, json) Hash identifier: JL8AS6n9iyIMoFaV0UoH4YgEa5w3i7m2dHvGlNrBqUw= Subject key identifier: 6A:93:62:63:66:0E:E1:C5:BA:83:23:21:F4:4A:94:65:1E:CA:CF:F8 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584905B6B4B3F396105217704EC0 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/dd8ac448-7845-3707-82ae-e039ea217c8d.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 399629 IP address blocks: 65.38.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:b4:b3:f3:96:10:52:17:70:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=0a0a8d0d-0422-46ee-975f-a9f7e060823a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e3:88:a0:e2:9d:8c:19:d8:24:c8:82:23:04: 6a:e8:01:f1:03:c5:4e:16:a8:4d:c6:aa:c3:5d:2a: 09:36:91:15:52:1a:e8:56:45:d7:f9:51:1e:29:fc: e2:c9:d3:c9:b0:d5:3e:bc:31:e7:93:6a:93:f4:48: 8a:ff:cf:c8:85:a3:ba:3c:6b:8d:ea:56:92:55:cd: 63:8a:4a:d4:03:52:4d:0f:10:46:01:13:2b:98:8f: a6:c2:0e:17:bf:49:d0:97:d4:ec:ab:59:88:8c:e4: 9f:5c:cc:b1:40:34:1a:13:11:0a:72:d8:b3:ab:a2: 2d:41:6f:67:29:b6:bb:64:99:70:cc:e3:c0:27:f1: 59:a1:c4:4f:b0:0c:f4:82:75:18:a0:8d:b3:3b:ea: d2:56:61:62:28:77:e6:8e:1e:b4:59:32:1c:6b:67: 5b:40:a0:d2:9b:b4:50:36:90:66:54:84:f9:18:0e: 10:80:9d:e7:42:bc:cb:4c:ed:46:00:d7:1e:bc:c6: 19:89:1c:09:a3:f4:0b:93:63:01:6f:c9:d8:37:ef: f2:46:fb:d8:6b:a3:80:53:48:ea:e8:26:77:7a:74: 77:a2:1b:eb:95:cb:e1:96:90:7b:fd:35:d8:c4:da: d6:30:d5:b4:03:c8:6a:b2:3f:52:c8:76:4a:41:58: 11:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:93:62:63:66:0E:E1:C5:BA:83:23:21:F4:4A:94:65:1E:CA:CF:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/dd8ac448-7845-3707-82ae-e039ea217c8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 65.38.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:9b:d9:47:61:69:1f:29:c8:0b:b4:48:9f:36:2f:f4:a1:f8: 14:86:b4:fb:bd:71:53:ac:c1:34:69:92:b2:8e:bb:98:fd:5c: 81:60:82:69:58:62:77:f4:48:48:a6:66:26:67:e7:fc:37:28: 5c:ad:67:19:31:88:68:d1:bf:e3:3b:48:0d:f5:99:60:d6:07: ab:37:d5:5a:db:17:bc:83:3a:51:71:af:10:b3:d4:e7:a9:51: a6:83:4d:97:9e:39:c6:77:c4:72:a4:58:b8:3b:36:7f:ef:82: 9b:67:5c:dc:31:de:03:5d:23:3a:24:c4:71:ed:91:31:33:e8: c6:ed:e2:fb:c6:1b:b6:fa:f4:ce:9c:80:b0:af:33:8c:77:57: f5:39:2d:34:2c:34:da:60:8d:7e:9c:75:f6:fd:18:bb:40:20: 1b:6c:1a:de:4e:73:06:6a:16:ba:3c:47:30:ec:47:bb:31:5c: c2:9e:2f:5e:c6:c2:2e:4f:ad:92:f3:67:19:ee:4d:b9:0d:e7: d1:a4:e3:bf:b1:e2:c1:8b:6c:b1:5c:b0:15:e6:10:c2:4b:7c: 73:01:0f:89:90:07:b2:9c:9e:34:78:b8:8a:34:37:f6:df:a3: ab:95:cc:92:a6:aa:4e:bd:bb:39:17:23:8c:e3:b0:50:8f:a4: f3:84:b1:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrSz85YQUhdwTsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk MGEwYThkMGQtMDQyMi00NmVlLTk3NWYtYTlmN2UwNjA4MjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieOIoOKdjBnYJMiCIwRq6AHxA8VOFqhNxqrD XSoJNpEVUhroVkXX+VEeKfziydPJsNU+vDHnk2qT9EiK/8/IhaO6PGuN6laSVc1j ikrUA1JNDxBGARMrmI+mwg4Xv0nQl9Tsq1mIjOSfXMyxQDQaExEKctizq6ItQW9n Kba7ZJlwzOPAJ/FZocRPsAz0gnUYoI2zO+rSVmFiKHfmjh60WTIca2dbQKDSm7RQ NpBmVIT5GA4QgJ3nQrzLTO1GANcevMYZiRwJo/QLk2MBb8nYN+/yRvvYa6OAU0jq 6CZ3enR3ohvrlcvhlpB7/TXYxNrWMNW0A8hqsj9SyHZKQVgRlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqTYmNmDuHFuoMjIfRKlGUeys/4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvZGQ4YWM0NDgtNzg0NS0z NzA3LTgyYWUtZTAzOWVhMjE3YzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQSZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2b2UdhaR8pyAu0SJ82L/Sh+BSGtPu9cVOswTRpkrKOu5j9XIFggmlY Ynf0SEimZiZn5/w3KFytZxkxiGjRv+M7SA31mWDWB6s31VrbF7yDOlFxrxCz1Oep UaaDTZeeOcZ3xHKkWLg7Nn/vgptnXNwx3gNdIzokxHHtkTEz6Mbt4vvGG7b69M6c gLCvM4x3V/U5LTQsNNpgjX6cdfb9GLtAIBtsGt5OcwZqFro8RzDsR7sxXMKeL17G wi5PrZLzZxnuTbkN59Gk47+x4sGLbLFcsBXmEMJLfHMBD4mQB7KcnjR4uIo0N/bf o6uVzJKmqk69uzkXI4zjsFCPpPOEsQQ= -----END CERTIFICATE-----Generated at Fri Mar 14 10:58:57 2025 by rpki-client