$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a940db39-8b94-3a45-8f58-c597de6ac74a.roa File: a940db39-8b94-3a45-8f58-c597de6ac74a.roa (raw, json) Hash identifier: qWO6RJXhuAksvftwSzX+DzKujC5pk2e2MR6sgDPhluw= Subject key identifier: 72:65:85:26:5E:54:EB:8E:F3:29:6F:0A:9A:51:F0:AD:A7:D6:6D:F5 Certificate issuer: /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73 Certificate serial: 010D0C9F43285849088167056F8A600AAA9E16E4 Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a940db39-8b94-3a45-8f58-c597de6ac74a.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 399809 IP address blocks: 64.29.138.0/24 maxlen: 24 2607:f3a0:a00a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:67:05:6f:8a:60:0a:aa:9e:16:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=c413199c-0f1a-4fb1-9dd4-ca879ec40660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:01:4b:f4:72:bd:2e:30:8e:62:26:35:fa:6e: 32:87:57:1f:78:8c:1f:38:5d:22:66:ef:6a:52:fa: 54:98:fe:95:92:d5:eb:43:93:39:72:e6:e4:22:02: 27:2b:ec:17:4c:85:1a:93:15:48:bc:33:75:22:12: 4f:7f:9c:87:af:04:32:a1:57:38:e5:1f:2e:86:7b: de:48:fa:c0:2a:5c:0d:36:9e:7b:6d:c3:f1:1e:89: 52:81:a5:da:08:71:2d:67:05:1c:ba:b1:80:d0:03: 3b:61:99:4b:f3:17:63:37:ac:09:fc:fc:01:38:ab: 02:28:99:7b:56:40:42:4a:24:b1:e1:a8:ad:34:77: 5c:69:52:ef:3a:a2:0d:be:4f:60:fa:a0:93:45:ba: b8:06:ce:e7:a9:21:79:c4:0f:2f:85:61:5d:b8:47: a2:95:d6:94:4c:03:72:5e:fa:e6:b0:d7:77:35:96: 95:a5:3b:7c:1a:0f:b5:fa:0c:ef:33:fe:19:f2:91: 68:97:c9:52:d7:28:77:bd:4b:02:38:d3:c2:05:31: 6e:b3:73:82:da:61:23:99:89:d0:e0:76:99:55:3a: ab:e8:15:1a:d5:7f:d2:92:fe:91:96:b8:df:58:e8: ff:d4:c9:1c:5c:25:7c:43:68:8a:72:cb:3a:f7:c1: 3c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:65:85:26:5E:54:EB:8E:F3:29:6F:0A:9A:51:F0:AD:A7:D6:6D:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a940db39-8b94-3a45-8f58-c597de6ac74a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl X509v3 Authority Key Identifier: keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer sbgp-ipAddrBlock: critical IPv4: 64.29.138.0/24 IPv6: 2607:f3a0:a00a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:52:7a:5c:3c:1a:4f:77:89:e4:b4:fd:33:ad:cd:c7:d6:0c: 7a:b6:7b:20:74:96:ab:70:d1:6b:e3:5f:5f:6e:96:fb:f1:4e: c9:80:8f:7f:32:99:f0:22:97:95:53:c7:05:e4:da:bb:3d:97: 5f:b2:b9:3a:94:40:82:d8:cd:62:f5:d7:05:e3:c1:4a:f1:25: 7d:b8:f9:d7:33:5f:a7:9c:c1:02:4d:d0:37:12:c6:00:19:cb: 95:a8:b2:ac:6c:5c:a3:61:86:8c:17:45:72:b4:b0:97:52:ff: fc:3d:0a:54:08:53:b5:e7:93:41:9b:61:f9:56:91:de:95:e9: 4c:e1:3a:76:77:72:96:e7:ec:80:68:d0:ac:86:2e:e1:70:82: e3:b5:1e:ee:da:5d:f1:84:2e:ef:52:d6:5f:8f:f3:5b:a4:69: 7a:43:75:7f:ca:60:d3:6f:c0:c6:85:79:31:80:92:84:7a:12: 06:8a:58:0c:56:a0:77:d4:85:06:15:71:d8:55:bf:aa:b8:eb: bd:ee:9b:7a:6f:7c:b3:e9:f8:55:c2:59:59:55:3f:a6:a6:7b: ed:89:9e:3a:06:d9:7f:0f:ce:08:a4:b3:91:d4:3c:e5:1b:85: e3:93:14:34:4b:12:0a:e1:1a:e6:d9:43:cf:5b:0f:f1:86:a3: d6:0f:51:df -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEkIgWcFb4pgCqqeFuQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVmNzM1YjYtMGFlMi00YzJhLTgyNmItN2U4YjEyNmE0 YjczMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk YzQxMzE5OWMtMGYxYS00ZmIxLTlkZDQtY2E4NzllYzQwNjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQFL9HK9LjCOYiY1+m4yh1cfeIwfOF0iZu9q UvpUmP6VktXrQ5M5cubkIgInK+wXTIUakxVIvDN1IhJPf5yHrwQyoVc45R8uhnve SPrAKlwNNp57bcPxHolSgaXaCHEtZwUcurGA0AM7YZlL8xdjN6wJ/PwBOKsCKJl7 VkBCSiSx4aitNHdcaVLvOqINvk9g+qCTRbq4Bs7nqSF5xA8vhWFduEeildaUTANy XvrmsNd3NZaVpTt8Gg+1+gzvM/4Z8pFol8lS1yh3vUsCONPCBTFus3OC2mEjmYnQ 4HaZVTqr6BUa1X/Skv6RlrjfWOj/1MkcXCV8Q2iKcss698E8oQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFHJlhSZeVOuO8ylvCppR8K2n1m31MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NWY3 MzViNi0wYWUyLTRjMmEtODI2Yi03ZThiMTI2YTRiNzMvYTk0MGRiMzktOGI5NC0z YTQ1LThmNTgtYzU5N2RlNmFjNzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODVmNzM1YjYtMGFlMi00YzJhLTgy NmItN2U4YjEyNmE0YjczLzg1ZjczNWI2LTBhZTItNGMyYS04MjZiLTdlOGIxMjZh NGI3My5jcmwwHwYDVR0jBBgwFoAUg5odAfvJBkOReL6k09QXpHyUm9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NWY3MzViNi0wYWUyLTRjMmEtODI2Yi03ZThi MTI2YTRiNzMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQB2KMA8E AgACMAkDBwAmB/OgoAowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAHFJ6XDwaT3eJ5LT9M63Nx9YMerZ7IHSW q3DRa+NfX26W+/FOyYCPfzKZ8CKXlVPHBeTauz2XX7K5OpRAgtjNYvXXBePBSvEl fbj51zNfp5zBAk3QNxLGABnLlaiyrGxco2GGjBdFcrSwl1L//D0KVAhTteeTQZth +VaR3pXpTOE6dndylufsgGjQrIYu4XCC47Ue7tpd8YQu71LWX4/zW6RpekN1f8pg 02/AxoV5MYCShHoSBopYDFagd9SFBhVx2FW/qrjrve6bem98s+n4VcJZWVU/pqZ7 7YmeOgbZfw/OCKSzkdQ85RuF45MUNEsSCuEa5tlDz1sP8Yaj1g9R3w== -----END CERTIFICATE-----Generated at Fri Mar 14 13:25:39 2025 by rpki-client