$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/f63a6ab9-11f3-3879-aa17-5cecbded3a70.roa File: f63a6ab9-11f3-3879-aa17-5cecbded3a70.roa (raw, json) Hash identifier: 8nsVFowMfwhehtBATn+YUWrBdL+nv0AsDRHdKGXsZFA= Subject key identifier: E6:57:4F:FC:02:C4:55:14:6E:58:9A:CD:6D:E3:13:8B:7A:BF:B7:A5 Certificate issuer: /CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d Certificate serial: 010D0C9F4328584902EBFDF5FA355BEF49DFD860 Authority key identifier: 6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/f63a6ab9-11f3-3879-aa17-5cecbded3a70.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 22302 IP address blocks: 64.22.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:eb:fd:f5:fa:35:5b:ef:49:df:d8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=bec52493-d8c5-4179-a475-f961f78329c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:54:bf:d8:6d:e1:81:5e:6a:5b:86:6b:0c:2f: c9:04:3c:e5:96:31:e8:bb:19:6f:f4:6b:bb:05:8a: 96:f3:26:d0:08:38:3b:7a:30:aa:d6:7a:14:c6:33: dc:98:6c:60:ac:67:86:83:f5:66:36:72:7d:53:f4: 3a:31:c4:ef:e4:fc:01:59:c7:f9:a0:cc:29:2d:09: 27:fd:8b:64:35:53:b0:d9:cc:79:ef:6d:74:62:0a: 8e:59:53:65:70:f7:0f:35:da:69:ce:4f:35:46:2e: cc:ad:8a:9e:38:7d:94:c6:4d:8b:b2:c5:63:08:a6: aa:5e:81:ff:93:b4:da:e9:0e:a2:09:90:6e:99:a7: 58:82:b0:2e:f8:cf:ba:f8:8a:35:11:96:37:29:6f: 9d:2d:7a:ad:ce:e1:5b:81:eb:7f:ba:fd:78:b1:6d: 34:dc:ba:3c:75:ef:39:1c:a8:56:03:ce:4c:69:a8: 98:32:6e:09:7b:9b:8c:fa:b7:b4:a5:0d:68:9e:58: 15:04:1d:5f:06:bf:1c:f5:29:aa:c5:13:62:e2:d1: 42:0c:2f:d5:57:79:cc:44:17:4c:31:5e:20:a3:8e: c3:ec:5c:da:c0:a0:ae:40:40:64:03:ad:22:8c:9a: 9c:2b:83:de:dc:bc:53:9f:ec:c1:36:ac:51:71:42: 8e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:57:4F:FC:02:C4:55:14:6E:58:9A:CD:6D:E3:13:8B:7A:BF:B7:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/f63a6ab9-11f3-3879-aa17-5cecbded3a70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl X509v3 Authority Key Identifier: keyid:6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer sbgp-ipAddrBlock: critical IPv4: 64.22.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ea:7f:07:c7:77:f4:a8:58:91:4b:45:96:e9:37:e6:88:61: 42:44:6e:4b:81:e7:1d:be:ad:2e:c6:a3:44:4c:f8:6e:01:6b: dc:12:d4:27:a1:1c:b6:35:9d:14:79:99:4e:b7:51:46:a3:cd: a6:7d:03:14:5c:92:e8:92:ed:ea:c5:05:3b:b0:b8:41:87:9e: f8:57:4a:9d:65:90:0e:ca:b1:47:67:76:99:10:fe:c8:49:2f: ed:6e:4a:29:35:f4:73:bc:96:a6:7a:c6:49:1f:f2:70:cc:cd: 48:be:44:0f:9c:95:f4:90:83:28:76:67:da:5d:00:08:91:7d: b7:fa:44:d5:8d:96:fc:04:25:44:72:e7:6f:a4:17:5c:0c:4d: a3:00:f5:54:5f:1b:e0:d9:8e:57:49:c6:0f:89:83:79:4d:db: 63:48:cd:ad:2a:95:02:9d:ff:e5:8b:15:79:13:93:88:64:d5: ad:e1:ed:a6:41:6e:74:10:78:18:35:dd:98:77:27:29:c5:ce: 8b:88:2a:d8:1d:9c:0d:56:da:a6:6b:2f:47:95:55:d3:f0:a8: 0e:5c:09:ed:11:28:6c:a8:21:93:5b:ae:73:11:3e:4b:43:80: f5:89:f4:dc:c4:5e:b4:c0:72:90:c2:2c:46:5c:ad:16:6e:19: 83:98:c2:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC6/31+jVb70nf2GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFiMDA1ZjUtYTMxMi00Y2I1LTgxZDgtYTVjMGJlZDVj YTRkMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk YmVjNTI0OTMtZDhjNS00MTc5LWE0NzUtZjk2MWY3ODMyOWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1S/2G3hgV5qW4ZrDC/JBDzlljHouxlv9Gu7 BYqW8ybQCDg7ejCq1noUxjPcmGxgrGeGg/VmNnJ9U/Q6McTv5PwBWcf5oMwpLQkn /YtkNVOw2cx57210YgqOWVNlcPcPNdppzk81Ri7MrYqeOH2Uxk2LssVjCKaqXoH/ k7Ta6Q6iCZBumadYgrAu+M+6+Io1EZY3KW+dLXqtzuFbget/uv14sW003Lo8de85 HKhWA85MaaiYMm4Je5uM+re0pQ1onlgVBB1fBr8c9SmqxRNi4tFCDC/VV3nMRBdM MV4go47D7FzawKCuQEBkA60ijJqcK4Pe3LxTn+zBNqxRcUKOmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZXT/wCxFUUbliazW3jE4t6v7elMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMWIw MDVmNS1hMzEyLTRjYjUtODFkOC1hNWMwYmVkNWNhNGQvZjYzYTZhYjktMTFmMy0z ODc5LWFhMTctNWNlY2JkZWQzYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDFiMDA1ZjUtYTMxMi00Y2I1LTgx ZDgtYTVjMGJlZDVjYTRkL2QxYjAwNWY1LWEzMTItNGNiNS04MWQ4LWE1YzBiZWQ1 Y2E0ZC5jcmwwHwYDVR0jBBgwFoAUanfLu4B9r+DBZ0PisNa4C6VFOXswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMWIwMDVmNS1hMzEyLTRjYjUtODFkOC1hNWMw YmVkNWNhNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQBYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbqfwfHd/SoWJFLRZbpN+aIYUJEbkuB5x2+rS7Go0RM+G4Ba9wS1Ceh HLY1nRR5mU63UUajzaZ9AxRckuiS7erFBTuwuEGHnvhXSp1lkA7KsUdndpkQ/shJ L+1uSik19HO8lqZ6xkkf8nDMzUi+RA+clfSQgyh2Z9pdAAiRfbf6RNWNlvwEJURy 52+kF1wMTaMA9VRfG+DZjldJxg+Jg3lN22NIza0qlQKd/+WLFXkTk4hk1a3h7aZB bnQQeBg13Zh3JynFzouIKtgdnA1W2qZrL0eVVdPwqA5cCe0RKGyoIZNbrnMRPktD gPWJ9NzEXrTAcpDCLEZcrRZuGYOYwgE= -----END CERTIFICATE-----Generated at Fri Mar 14 09:27:10 2025 by rpki-client