$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa File: f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa (raw, json) Hash identifier: Yp9G/eJdIAMMzooOcD8qeaapWZGlWrjc0rjORREIHOA= Subject key identifier: 94:D4:8C:49:40:B7:EB:55:D7:53:FB:DA:5B:60:E2:67:82:8F:43:F1 Certificate issuer: /CN=9970d52c-d3a1-4687-a712-212a44ee0fb2 Certificate serial: 010D0C9F43285848F926A54E21B23F732B3F7300 Authority key identifier: 56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 395035 IP address blocks: 64.239.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:a5:4e:21:b2:3f:73:2b:3f:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9970d52c-d3a1-4687-a712-212a44ee0fb2 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=653f264e-c772-4c00-be3d-8676c1a4ebc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ab:b2:a4:99:f4:4e:b1:37:31:28:48:9f:dc: e1:c3:aa:eb:f1:b5:5f:93:1f:82:52:1d:74:c6:2f: c5:a9:94:59:af:74:57:4b:ea:e9:11:df:f5:b3:a6: e7:6a:76:46:92:d9:cd:4d:96:31:c1:c2:44:ba:7f: bc:96:64:e2:0a:3e:b8:d1:b8:55:0c:0e:62:a7:50: 9a:2b:38:55:b8:34:98:6c:b3:1e:85:1b:a6:43:73: c9:0d:7e:91:f6:e2:1c:05:5d:1c:e5:6c:30:c9:75: 53:d0:ca:dd:71:da:85:7f:5c:13:ba:f8:62:18:39: 33:79:5f:81:6d:da:65:ae:44:7a:83:78:f1:02:15: fa:7e:72:08:d7:7a:98:c2:6e:35:03:f9:51:74:1a: 8e:0b:0b:75:81:7f:f6:ea:5f:e8:ba:87:24:02:9b: ec:b6:1e:44:ed:77:4b:62:d5:24:dd:03:06:39:7c: e2:ca:a2:c4:58:46:8a:ec:55:74:92:44:47:2b:07: 62:68:9f:3d:a3:9f:15:4e:eb:56:a9:a5:17:3c:f8: 4d:b0:50:36:e3:e1:96:a4:3b:5f:44:7c:44:7b:63: 22:8b:76:49:7d:87:2f:9e:94:e6:b7:db:45:ba:bf: 32:07:6f:de:85:9b:12:2c:f6:61:ba:30:72:91:e3: 41:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D4:8C:49:40:B7:EB:55:D7:53:FB:DA:5B:60:E2:67:82:8F:43:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl X509v3 Authority Key Identifier: keyid:56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer sbgp-ipAddrBlock: critical IPv4: 64.239.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:e8:86:54:dc:a2:a8:a9:47:13:c4:82:e3:d9:91:c9:cc:4f: 22:df:25:1f:68:59:16:21:bc:e8:3e:6d:e3:49:df:5c:59:e6: 5d:6b:8f:c2:ff:38:f0:f9:91:51:70:2f:7e:fe:de:2c:16:6e: 1e:d9:6f:6a:83:89:8a:5c:ac:44:06:ed:b6:cb:3b:70:3b:85: 39:26:1d:f7:ed:21:7f:50:6c:57:55:2c:f7:62:c3:d3:41:62: e1:7d:d9:4e:1e:99:fe:94:2c:20:4a:2c:8e:e2:4c:a0:f3:03: 8e:e5:55:89:c4:19:18:93:07:41:c3:1c:91:ba:9e:f6:d3:a0: 6a:98:94:b4:e1:3f:de:d8:ef:4b:f0:d4:06:2d:7d:06:24:4a: 77:c5:dc:86:58:54:e6:e1:52:7e:df:95:2a:f7:fa:f8:7b:b0: 5a:36:0a:8d:3a:29:35:fd:47:7f:d7:56:16:d4:9d:cd:53:9b: a9:4c:70:4f:0f:f3:49:27:10:07:a3:e0:0d:f5:fa:7d:67:75: 13:51:3d:3e:92:93:1c:f1:44:d5:03:86:d7:40:5a:b3:71:43: b7:7c:58:64:48:3d:c6:06:9e:8b:c5:e4:0a:98:f3:ac:4e:35: eb:a1:7e:24:4e:86:d9:af:76:a5:60:d7:18:eb:6e:cb:33:16: b3:a1:d4:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JqVOIbI/cys/cwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3MGQ1MmMtZDNhMS00Njg3LWE3MTItMjEyYTQ0ZWUw ZmIyMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NjUzZjI2NGUtYzc3Mi00YzAwLWJlM2QtODY3NmMxYTRlYmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhauypJn0TrE3MShIn9zhw6rr8bVfkx+CUh10 xi/FqZRZr3RXS+rpEd/1s6bnanZGktnNTZYxwcJEun+8lmTiCj640bhVDA5ip1Ca KzhVuDSYbLMehRumQ3PJDX6R9uIcBV0c5WwwyXVT0MrdcdqFf1wTuvhiGDkzeV+B bdplrkR6g3jxAhX6fnII13qYwm41A/lRdBqOCwt1gX/26l/ouockApvsth5E7XdL YtUk3QMGOXziyqLEWEaK7FV0kkRHKwdiaJ89o58VTutWqaUXPPhNsFA24+GWpDtf RHxEe2Mii3ZJfYcvnpTmt9tFur8yB2/ehZsSLPZhujBykeNBZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTUjElAt+tV11P72ltg4meCj0PxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OTcw ZDUyYy1kM2ExLTQ2ODctYTcxMi0yMTJhNDRlZTBmYjIvZjc5NDA1N2EtNmFjYi0z ZTBjLWFmYWMtYWIyM2I0ZDJhMGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTk3MGQ1MmMtZDNhMS00Njg3LWE3 MTItMjEyYTQ0ZWUwZmIyLzk5NzBkNTJjLWQzYTEtNDY4Ny1hNzEyLTIxMmE0NGVl MGZiMi5jcmwwHwYDVR0jBBgwFoAUVtE8CMf2LAtCo8s6F+hr2dh34XYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OTcwZDUyYy1kM2ExLTQ2ODctYTcxMi0yMTJh NDRlZTBmYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQO8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnohlTcoqipRxPEguPZkcnMTyLfJR9oWRYhvOg+beNJ31xZ5l1rj8L/ OPD5kVFwL37+3iwWbh7Zb2qDiYpcrEQG7bbLO3A7hTkmHfftIX9QbFdVLPdiw9NB YuF92U4emf6ULCBKLI7iTKDzA47lVYnEGRiTB0HDHJG6nvbToGqYlLThP97Y70vw 1AYtfQYkSnfF3IZYVObhUn7flSr3+vh7sFo2Co06KTX9R3/XVhbUnc1Tm6lMcE8P 80knEAej4A31+n1ndRNRPT6SkxzxRNUDhtdAWrNxQ7d8WGRIPcYGnovF5AqY86xO NeuhfiROhtmvdqVg1xjrbsszFrOh1OU= -----END CERTIFICATE-----Generated at Fri Apr 11 21:33:16 2025 by rpki-client