$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/f8b7c31b-343a-3c9f-88d3-57eca42e9b53.roa File: f8b7c31b-343a-3c9f-88d3-57eca42e9b53.roa (raw, json) Hash identifier: Hu6yM9zx/fW5E73iS9SM6lVI5KfoJwVvP94voQ3jFLg= Subject key identifier: D1:00:C4:9C:79:54:32:36:FB:8D:B3:B0:28:5B:1E:5A:CF:BA:54:B4 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584900216006BEE522F087D62C80 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/f8b7c31b-343a-3c9f-88d3-57eca42e9b53.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 399629 IP address blocks: 64.94.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:60:06:be:e5:22:f0:87:d6:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=903bde32-72a8-45a6-b992-6c31235312b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:25:98:20:b5:ad:f8:fe:e2:b4:cb:a5:54:e9: 72:63:4d:02:cc:f5:8d:da:90:34:4f:91:23:7a:6f: 3c:2d:7c:9a:72:d0:39:59:b6:a5:7a:c5:3e:0a:9d: 01:c9:ba:0d:b9:d0:2d:64:73:aa:ca:c5:8a:64:6b: f9:e2:68:06:1f:ea:c5:f2:54:46:6e:c4:63:63:b9: 14:6d:6b:2d:8f:f0:ad:9c:b1:13:7e:44:f3:c3:14: b5:5a:62:a3:2e:85:10:1c:93:43:f8:5f:f8:ff:e6: ad:21:19:01:a2:fb:b7:07:0f:30:7e:55:03:5e:f8: 53:51:30:4b:3f:bd:89:8c:75:1d:7a:2e:8d:6d:86: fb:63:a4:26:59:39:f2:4b:50:0d:28:2a:4a:7e:61: 41:42:37:f6:5f:03:33:bd:41:d7:ad:7c:0a:b8:2d: f1:e8:fc:99:83:7b:06:76:a3:50:7b:8f:8f:aa:b3: 54:9c:d2:7e:01:fa:f0:fb:5b:e5:4f:e7:73:86:04: 33:b5:f0:32:28:bb:65:83:40:91:29:53:75:bd:3d: f7:01:91:ab:16:ad:3b:d1:8c:7f:52:20:33:5a:b5: b0:e9:3b:6c:9f:a5:c7:b4:ec:8e:c5:74:56:51:18: 9e:6b:fa:9e:b4:d9:e0:f3:44:1d:33:c9:e7:2e:05: a8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:00:C4:9C:79:54:32:36:FB:8D:B3:B0:28:5B:1E:5A:CF:BA:54:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/f8b7c31b-343a-3c9f-88d3-57eca42e9b53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 64.94.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:56:bf:59:0e:d3:93:7d:fe:49:1f:8f:29:53:12:3e:79:45: ed:98:90:1a:bf:ff:14:25:6b:5c:0f:63:26:22:df:36:58:d8: 47:cb:f8:6f:12:59:ff:53:86:ab:ac:fb:1e:40:34:d7:37:fe: 79:63:41:f1:a8:d5:b0:3c:6d:11:e9:9e:a9:83:a6:e7:a2:eb: 78:81:51:26:00:fa:a6:97:4a:e5:31:b1:2b:8e:3b:58:f7:de: 08:43:6f:cf:0d:10:80:dd:c9:4d:1a:fd:45:f9:44:37:3d:19: 94:0f:2b:ee:7c:ab:3c:ea:67:a2:07:89:ab:bc:a1:6a:eb:45: 58:98:90:af:76:fb:94:34:55:c8:d0:62:29:b4:70:c8:d6:35: dd:3e:dc:e9:b6:ce:65:88:c7:b8:3f:00:f0:30:09:b9:ba:bd: 27:05:94:f0:55:32:1f:c5:c1:6d:f2:0b:71:4c:32:1f:8d:5d: 1c:06:4b:e9:1d:40:ae:cd:c2:ff:8b:00:a3:4a:64:94:fc:1b: 6a:29:4b:aa:b0:95:da:8b:82:53:14:55:ef:f3:a2:21:aa:9e: 9c:03:72:ba:5b:c2:f2:24:a0:94:5b:bc:00:88:b1:c6:12:0b: 41:a0:d5:0a:88:54:10:52:93:a1:bd:5d:be:88:f6:cc:22:a2: c0:fb:05:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIWAGvuUi8IfWLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk OTAzYmRlMzItNzJhOC00NWE2LWI5OTItNmMzMTIzNTMxMmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyWYILWt+P7itMulVOlyY00CzPWN2pA0T5Ej em88LXyactA5WbalesU+Cp0ByboNudAtZHOqysWKZGv54mgGH+rF8lRGbsRjY7kU bWstj/CtnLETfkTzwxS1WmKjLoUQHJND+F/4/+atIRkBovu3Bw8wflUDXvhTUTBL P72JjHUdei6NbYb7Y6QmWTnyS1ANKCpKfmFBQjf2XwMzvUHXrXwKuC3x6PyZg3sG dqNQe4+PqrNUnNJ+Afrw+1vlT+dzhgQztfAyKLtlg0CRKVN1vT33AZGrFq070Yx/ UiAzWrWw6Ttsn6XHtOyOxXRWURiea/qetNng80QdM8nnLgWoeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEAxJx5VDI2+42zsChbHlrPulS0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvZjhiN2MzMWItMzQzYS0z YzlmLTg4ZDMtNTdlY2E0MmU5YjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQF5UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANWv1kO05N9/kkfjylTEj55Re2YkBq//xQla1wPYyYi3zZY2EfL+G8S Wf9Thqus+x5ANNc3/nljQfGo1bA8bRHpnqmDpuei63iBUSYA+qaXSuUxsSuOO1j3 3ghDb88NEIDdyU0a/UX5RDc9GZQPK+58qzzqZ6IHiau8oWrrRViYkK92+5Q0VcjQ Yim0cMjWNd0+3Om2zmWIx7g/APAwCbm6vScFlPBVMh/FwW3yC3FMMh+NXRwGS+kd QK7Nwv+LAKNKZJT8G2opS6qwldqLglMUVe/zoiGqnpwDcrpbwvIkoJRbvACIscYS C0Gg1QqIVBBSk6G9Xb6I9swiosD7Bes= -----END CERTIFICATE-----Generated at Fri Mar 14 11:06:46 2025 by rpki-client