$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/f4f36be5-2c3b-3917-80ab-4a292c945078.roa File: f4f36be5-2c3b-3917-80ab-4a292c945078.roa (raw, json) Hash identifier: dkxwM4q0IdYo6eY/bOqhsvpW69tBJmsihgAAUqRLVBM= Subject key identifier: 9E:16:1D:8E:5A:34:26:7A:46:66:6D:FB:AC:99:FA:1A:E0:9A:A5:D5 Certificate issuer: /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Certificate serial: 010D0C9F4328584917DC308B85D2F4C84C291440 Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/f4f36be5-2c3b-3917-80ab-4a292c945078.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 31898 IP address blocks: 64.39.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:30:8b:85:d2:f4:c8:4c:29:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=811a4271-ade6-4906-a3d3-a65129f49ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8e:42:83:36:2e:e6:47:2b:43:dd:86:76:03: 34:ed:03:d7:a1:55:2f:c4:64:72:ab:66:d9:0a:69: a0:f6:5a:2a:e3:eb:84:0e:f7:d1:68:6b:fe:64:75: 07:4e:dd:f5:f6:d7:be:67:b6:b4:fd:1e:8d:fa:3d: ee:5c:3c:81:10:ec:87:89:ba:eb:86:23:fd:27:f5: eb:d9:42:3b:54:9a:45:a8:10:53:2b:30:29:74:b4: ab:6d:e2:a7:38:8d:76:76:53:43:ff:aa:64:82:9e: 4f:eb:d0:80:51:89:75:75:b4:ef:74:a4:a8:7e:ef: 61:d2:77:93:8d:ee:85:33:f7:ce:8f:5b:00:0c:22: 89:30:60:cd:7c:29:28:bb:dd:9a:07:60:ae:6e:87: e5:63:0b:65:db:b8:5f:ab:a6:f0:c1:51:61:06:88: 43:c1:ea:3c:94:aa:a6:49:ca:d2:0c:b1:70:1f:ae: e8:db:f6:94:9b:3d:b5:54:a2:96:ba:13:84:f8:ba: 5f:0e:5f:55:3a:65:34:67:31:26:09:ce:79:69:29: 3b:db:32:16:40:94:0a:db:87:e8:fc:5c:7e:91:97: cb:d3:6d:62:2a:03:5c:78:8f:59:5a:5c:94:46:60: 36:47:ea:d9:f3:e9:d7:64:42:93:38:12:1f:99:b0: 73:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:16:1D:8E:5A:34:26:7A:46:66:6D:FB:AC:99:FA:1A:E0:9A:A5:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/f4f36be5-2c3b-3917-80ab-4a292c945078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl X509v3 Authority Key Identifier: keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer sbgp-ipAddrBlock: critical IPv4: 64.39.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:00:79:ba:2c:1e:7a:a9:3c:05:9f:df:4a:c3:eb:09:e0:67: 78:50:1d:1d:c9:01:9a:e9:40:78:b1:1c:a8:93:e5:0d:96:80: a0:2f:c6:10:96:23:59:35:41:b4:25:7b:e0:3c:09:1c:ba:d7: 1b:b8:84:59:57:f6:f0:79:db:5f:5b:30:92:0f:26:15:23:10: 64:2e:de:7d:d0:26:6b:78:b0:f3:2e:75:df:a5:dc:d8:2c:65: 6f:5c:f3:5c:3e:04:a1:71:4b:1e:d4:2e:29:4d:27:17:96:ad: 20:41:c9:60:9a:58:cf:75:d5:d8:7c:69:c2:37:a5:0f:e2:9b: 77:02:03:23:21:b7:dd:47:7e:2f:c5:7d:a5:53:05:fc:0e:2e: 57:77:5e:64:f4:f2:31:54:61:cf:5d:1d:40:3d:bb:cf:f8:1c: 27:f5:e5:86:6f:35:cc:2c:12:29:40:92:a2:8f:99:24:4c:f1: f8:25:4f:47:57:d2:0f:95:8b:8e:f4:01:62:43:07:45:ca:a4: d6:33:90:01:e7:6e:08:3d:68:79:92:0f:61:8c:cc:69:97:0f: ac:21:f7:9c:e4:6d:27:8b:55:a6:91:57:7c:0b:e0:01:fb:93: db:ce:04:60:7b:b2:b3:df:68:9a:de:5f:30:1a:80:87:44:dc: bc:da:2c:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3DCLhdL0yEwpFEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMx ZDQxMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk ODExYTQyNzEtYWRlNi00OTA2LWEzZDMtYTY1MTI5ZjQ5Y2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY5CgzYu5kcrQ92GdgM07QPXoVUvxGRyq2bZ Cmmg9loq4+uEDvfRaGv+ZHUHTt319te+Z7a0/R6N+j3uXDyBEOyHibrrhiP9J/Xr 2UI7VJpFqBBTKzApdLSrbeKnOI12dlND/6pkgp5P69CAUYl1dbTvdKSofu9h0neT je6FM/fOj1sADCKJMGDNfCkou92aB2CuboflYwtl27hfq6bwwVFhBohDweo8lKqm ScrSDLFwH67o2/aUmz21VKKWuhOE+LpfDl9VOmU0ZzEmCc55aSk72zIWQJQK24fo /Fx+kZfL021iKgNceI9ZWlyURmA2R+rZ8+nXZEKTOBIfmbBziwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4WHY5aNCZ6RmZt+6yZ+hrgmqXVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2 ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvZjRmMzZiZTUtMmMzYi0z OTE3LTgwYWItNGEyOTJjOTQ1MDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWQwNmVkNjYtOWZkZC00MDQ4LTg2 NDUtZTMzZThjZWMxZDQxLzlkMDZlZDY2LTlmZGQtNDA0OC04NjQ1LWUzM2U4Y2Vj MWQ0MS5jcmwwHwYDVR0jBBgwFoAUAkRNXm0Knu393PU01zFjuct6wgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNl OGNlYzFkNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCdhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAAebosHnqpPAWf30rD6wngZ3hQHR3JAZrpQHixHKiT5Q2WgKAvxhCW I1k1QbQle+A8CRy61xu4hFlX9vB5219bMJIPJhUjEGQu3n3QJmt4sPMudd+l3Ngs ZW9c81w+BKFxSx7ULilNJxeWrSBByWCaWM911dh8acI3pQ/im3cCAyMht91Hfi/F faVTBfwOLld3XmT08jFUYc9dHUA9u8/4HCf15YZvNcwsEilAkqKPmSRM8fglT0dX 0g+Vi470AWJDB0XKpNYzkAHnbgg9aHmSD2GMzGmXD6wh95zkbSeLVaaRV3wL4AH7 k9vOBGB7srPfaJreXzAagIdE3LzaLFc= -----END CERTIFICATE-----Generated at Sat Apr 5 20:48:11 2025 by rpki-client