$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/3acff935-390a-35f4-8b00-7267d2b359be.roa File: 3acff935-390a-35f4-8b00-7267d2b359be.roa (raw, json) Hash identifier: GDqxtAe8GMdawBTdqAYpUcjIeCrFyuv38UX+gFvAYJ8= Subject key identifier: CB:1B:32:EE:86:04:BC:C6:76:90:D2:B3:BE:2C:3B:60:49:8B:E7:E1 Certificate issuer: /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35 Certificate serial: 010D0C9F432858495ABEBE42E66CF462B3CD24B0 Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/3acff935-390a-35f4-8b00-7267d2b359be.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 399045 IP address blocks: 64.112.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:be:42:e6:6c:f4:62:b3:cd:24:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=f1bae991-3b35-49c0-88e9-5c739d9906a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:20:32:91:79:4d:19:43:0b:05:fc:d2:13:30: 58:e8:52:24:e2:0e:25:6d:9e:3b:f1:f5:35:d3:3c: 9e:73:9e:f2:b2:a7:bb:46:3f:1b:26:11:f0:23:dc: ac:5a:da:f9:7e:f9:90:0a:82:39:7f:7f:5d:4a:90: d9:71:75:c7:39:8c:f7:1a:1b:95:e0:33:cb:21:5e: dc:bc:05:b3:ae:4d:ab:4b:77:00:94:9f:35:79:50: e7:23:ef:48:3e:d1:a4:33:e2:e1:56:78:00:c6:68: 45:a3:b7:ca:48:54:c8:97:bd:9a:ea:ce:27:d9:08: f9:f8:c0:76:c2:b5:68:25:4d:24:f4:14:bd:5e:bb: b1:e6:40:4c:c6:4c:b0:eb:dd:b0:cb:c4:f7:1e:ee: 55:12:65:0c:8f:bb:6e:75:92:7c:c8:1b:3d:98:fe: 91:37:d5:dd:be:31:82:ae:98:bf:ff:17:db:4d:8a: 9a:ca:23:86:47:2a:0b:7e:ac:34:b9:1b:aa:10:45: 88:6f:17:42:0d:31:ff:da:b1:bf:dd:19:f7:8c:ea: 3d:a5:a0:d9:02:b4:0e:67:de:a8:ba:ae:37:3a:53: 92:61:90:dd:5a:f9:ad:2c:90:fc:ad:6d:36:b6:ca: 1c:bf:63:a3:d5:4a:3f:13:a0:13:ed:b2:17:bf:60: 8d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1B:32:EE:86:04:BC:C6:76:90:D2:B3:BE:2C:3B:60:49:8B:E7:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/3acff935-390a-35f4-8b00-7267d2b359be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl X509v3 Authority Key Identifier: keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer sbgp-ipAddrBlock: critical IPv4: 64.112.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:23:2e:50:34:c9:82:fb:95:9e:9e:e7:da:19:51:70:3c:63: b3:72:a9:2b:c8:e8:91:b6:5b:39:31:a7:91:93:cb:8b:9d:25: e2:d5:ba:1a:28:48:7c:4f:43:3b:f6:3d:13:34:f7:9a:8f:4c: 73:bd:18:fc:12:25:4b:83:c2:51:80:00:e0:5b:70:1b:ce:e4: 86:c6:44:67:a6:af:f4:37:0b:c7:39:2e:42:58:48:bd:f0:66: 9b:ba:63:b4:75:8f:48:12:67:cd:9b:73:6c:dc:20:c2:39:59: b0:48:5d:a5:24:dd:f5:a8:99:55:f3:a6:97:44:e0:bc:45:24: cd:14:cc:23:dc:47:d9:20:d8:39:bf:eb:32:77:66:52:08:d6: 36:f3:f1:55:13:86:e0:a1:25:87:4b:c3:1b:a2:da:74:c6:76: b6:c5:89:bb:c4:fa:df:1a:0e:4f:b1:b5:b3:28:20:50:78:c8: 55:fe:dc:92:db:80:24:ca:e4:10:cf:c5:ea:3b:7e:09:ba:f6: 38:a0:1e:16:a0:41:ef:fd:a2:2b:e5:a3:56:c8:7b:7f:76:5d: 25:41:da:47:2c:bc:65:28:d9:1b:36:d9:64:2f:ef:74:d5:7e: 87:be:59:9f:8f:e3:65:dd:01:57:3f:ad:ec:fc:69:12:a3:3f: 31:2f:d4:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavr5C5mz0YrPNJLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU0OWI0YzYtNGQ1OC00MmUwLWFiZTItOTM3NTRmZGNk YTM1MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk ZjFiYWU5OTEtM2IzNS00OWMwLTg4ZTktNWM3MzlkOTkwNmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCAykXlNGUMLBfzSEzBY6FIk4g4lbZ478fU1 0zyec57ysqe7Rj8bJhHwI9ysWtr5fvmQCoI5f39dSpDZcXXHOYz3GhuV4DPLIV7c vAWzrk2rS3cAlJ81eVDnI+9IPtGkM+LhVngAxmhFo7fKSFTIl72a6s4n2Qj5+MB2 wrVoJU0k9BS9Xrux5kBMxkyw692wy8T3Hu5VEmUMj7tudZJ8yBs9mP6RN9XdvjGC rpi//xfbTYqayiOGRyoLfqw0uRuqEEWIbxdCDTH/2rG/3Rn3jOo9paDZArQOZ96o uq43OlOSYZDdWvmtLJD8rW02tsocv2Oj1Uo/E6AT7bIXv2CNpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsbMu6GBLzGdpDSs74sO2BJi+fhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5 YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1NGZkY2RhMzUvM2FjZmY5MzUtMzkwYS0z NWY0LThiMDAtNzI2N2QyYjM1OWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU0OWI0YzYtNGQ1OC00MmUwLWFi ZTItOTM3NTRmZGNkYTM1LzhlNDliNGM2LTRkNTgtNDJlMC1hYmUyLTkzNzU0ZmRj ZGEzNS5jcmwwHwYDVR0jBBgwFoAUCkkYlphvz9SNs+aiIifBJlnS62swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1 NGZkY2RhMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQHBIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAjLlA0yYL7lZ6e59oZUXA8Y7NyqSvI6JG2Wzkxp5GTy4udJeLVuhoo SHxPQzv2PRM095qPTHO9GPwSJUuDwlGAAOBbcBvO5IbGRGemr/Q3C8c5LkJYSL3w Zpu6Y7R1j0gSZ82bc2zcIMI5WbBIXaUk3fWomVXzppdE4LxFJM0UzCPcR9kg2Dm/ 6zJ3ZlII1jbz8VUThuChJYdLwxui2nTGdrbFibvE+t8aDk+xtbMoIFB4yFX+3JLb gCTK5BDPxeo7fgm69jigHhagQe/9oivlo1bIe392XSVB2kcsvGUo2Rs22WQv73TV foe+WZ+P42XdAVc/rez8aRKjPzEv1DI= -----END CERTIFICATE-----Generated at Sun Apr 6 03:36:14 2025 by rpki-client