$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/873bc85e-dac9-3017-925c-b171be06d393.roa File: 873bc85e-dac9-3017-925c-b171be06d393.roa (raw, json) Hash identifier: lxNYTn+ZeV0o08zFvf/ES0hu+NKdkp7YFqLLr/d2rLU= Subject key identifier: 3A:8F:24:48:B6:2E:A0:CE:1C:93:24:A6:40:D3:98:4A:AF:43:AF:28 Certificate issuer: /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Certificate serial: 010D0C9F432858489075F56590238624F61CA800 Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/873bc85e-dac9-3017-925c-b171be06d393.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 20454 IP address blocks: 64.38.224.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:75:f5:65:90:23:86:24:f6:1c:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=8f90a6f7-3e7e-41f0-8046-951c65d69e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f8:8f:7f:2b:78:bb:ab:be:6e:29:49:40:45: 0e:d7:0a:fd:ea:ab:82:c4:ec:01:f5:cc:2c:a1:d2: 45:6f:78:24:f0:fa:a4:f6:d4:5b:55:f8:4b:49:1d: 67:fb:18:2c:f7:af:03:95:ae:b4:da:00:3f:bc:68: 2f:bc:df:1d:ff:dd:9b:4e:2f:26:33:8a:2b:f7:56: b4:8f:27:e9:25:e3:89:cd:5b:1b:07:87:4b:71:61: 09:8d:7a:62:7e:4d:88:24:15:91:bc:bc:94:8c:06: ff:0d:52:22:b1:50:f6:c6:83:ad:36:9a:56:7f:79: 2d:d2:1b:e9:07:f4:e3:3c:52:84:e3:52:94:3e:d5: c0:9b:78:6d:17:c2:b0:0a:54:a5:d3:48:00:71:bb: 4d:c1:89:05:5e:3f:23:06:d7:c6:f9:dd:71:92:bf: 56:1e:dc:13:83:b5:60:97:21:56:c3:c9:8c:3a:01: 1c:4e:24:ec:3a:53:fe:7a:15:a3:ec:c5:a6:ce:41: 99:33:3c:3f:e9:c7:4d:47:92:4b:e2:d0:00:88:ef: ac:ef:62:1a:f8:c5:8a:9f:78:4a:52:71:b4:22:32: a6:97:64:80:79:f0:9f:88:68:8c:7b:35:69:ec:24: 94:df:42:d5:39:d5:b6:72:3a:61:ce:91:4c:31:20: c8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:8F:24:48:B6:2E:A0:CE:1C:93:24:A6:40:D3:98:4A:AF:43:AF:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/873bc85e-dac9-3017-925c-b171be06d393.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl X509v3 Authority Key Identifier: keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer sbgp-ipAddrBlock: critical IPv4: 64.38.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:39:2c:8c:1b:c6:f2:84:f5:3b:69:29:85:18:a5:06:29:e5: 4a:3c:2f:5b:4e:82:03:61:7e:ee:ed:5e:29:c8:93:15:df:fd: 7e:bf:db:b1:40:fb:dc:5f:19:0f:47:83:b2:1e:59:4d:e5:ed: 16:21:54:ca:10:4c:86:ed:91:e9:0d:1f:40:ed:9a:0c:65:9d: a0:ed:56:98:46:34:74:4e:25:be:79:a2:4d:fa:82:bc:dc:46: 4e:b2:ff:c4:86:69:a7:ac:c2:83:84:eb:50:73:6a:85:28:fd: 6d:1c:b0:59:4e:40:34:75:e6:e5:d3:80:9b:a2:80:77:11:83: 73:b9:22:83:8f:ca:a1:d7:51:de:af:17:66:49:67:72:6d:91: 16:35:03:7f:62:71:cb:aa:bd:14:e9:10:ba:ce:0b:7d:f7:1a: 3f:5e:9a:03:1a:8b:1a:96:6b:d4:b0:62:a0:4c:87:f8:b1:be: f4:01:b3:6d:43:56:2d:1d:53:6f:56:2c:36:c6:91:b5:2e:fd: 46:6f:7b:ad:a9:85:84:f1:49:0a:fa:96:5d:a5:94:25:81:03: 60:79:b1:b4:75:fc:31:34:a9:89:4d:89:61:09:ec:e2:1f:69: d1:f0:00:95:48:09:2f:6e:d7:14:1e:62:6c:73:1d:70:5f:60: 3d:45:5a:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdfVlkCOGJPYcqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAyMzEzZTYtNTZiZi00ZmQ4LWFlMGQtYzllMDU3ZDNi Mzk4MB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk OGY5MGE2ZjctM2U3ZS00MWYwLTgwNDYtOTUxYzY1ZDY5ZTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPiPfyt4u6u+bilJQEUO1wr96quCxOwB9cws odJFb3gk8Pqk9tRbVfhLSR1n+xgs968Dla602gA/vGgvvN8d/92bTi8mM4or91a0 jyfpJeOJzVsbB4dLcWEJjXpifk2IJBWRvLyUjAb/DVIisVD2xoOtNppWf3kt0hvp B/TjPFKE41KUPtXAm3htF8KwClSl00gAcbtNwYkFXj8jBtfG+d1xkr9WHtwTg7Vg lyFWw8mMOgEcTiTsOlP+ehWj7MWmzkGZMzw/6cdNR5JL4tAAiO+s72Ia+MWKn3hK UnG0IjKml2SAefCfiGiMezVp7CSU30LVOdW2cjphzpFMMSDICQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqPJEi2LqDOHJMkpkDTmEqvQ68oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIz MTNlNi01NmJmLTRmZDgtYWUwZC1jOWUwNTdkM2IzOTgvODczYmM4NWUtZGFjOS0z MDE3LTkyNWMtYjE3MWJlMDZkMzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODAyMzEzZTYtNTZiZi00ZmQ4LWFl MGQtYzllMDU3ZDNiMzk4LzgwMjMxM2U2LTU2YmYtNGZkOC1hZTBkLWM5ZTA1N2Qz YjM5OC5jcmwwHwYDVR0jBBgwFoAU6Nx8ybbq227grPfqrNCHZurVu2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIzMTNlNi01NmJmLTRmZDgtYWUwZC1jOWUw NTdkM2IzOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQCbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJw5LIwbxvKE9TtpKYUYpQYp5Uo8L1tOggNhfu7tXinIkxXf/X6/27FA +9xfGQ9Hg7IeWU3l7RYhVMoQTIbtkekNH0DtmgxlnaDtVphGNHROJb55ok36grzc Rk6y/8SGaaeswoOE61BzaoUo/W0csFlOQDR15uXTgJuigHcRg3O5IoOPyqHXUd6v F2ZJZ3JtkRY1A39iccuqvRTpELrOC333Gj9emgMaixqWa9SwYqBMh/ixvvQBs21D Vi0dU29WLDbGkbUu/UZve62phYTxSQr6ll2llCWBA2B5sbR1/DE0qYlNiWEJ7OIf adHwAJVICS9u1xQeYmxzHXBfYD1FWrg= -----END CERTIFICATE-----Generated at Fri Mar 14 10:42:26 2025 by rpki-client