$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/79244e7e-1d5f-373a-b7cc-277ba9a73b0e.roa File: 79244e7e-1d5f-373a-b7cc-277ba9a73b0e.roa (raw, json) Hash identifier: gM7XFRdv8qOC30iTkoFXFa6v5Oym6q9D5BlAk22bi08= Subject key identifier: 2F:46:0C:07:D5:BA:55:DC:A7:88:7E:4C:FF:6B:4E:BB:1C:76:33:31 Certificate issuer: /CN=aae465c0-2a10-495a-b7d2-2aa048b286a0 Certificate serial: 010D0C9F43285848F65BE32DD6F45F67178ACC80 Authority key identifier: AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/79244e7e-1d5f-373a-b7cc-277ba9a73b0e.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 19905 IP address blocks: 64.95.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:e3:2d:d6:f4:5f:67:17:8a:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae465c0-2a10-495a-b7d2-2aa048b286a0 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=d0cafaa4-3e12-407e-b116-09424f75821a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7a:85:ef:ea:c9:81:5b:86:93:30:82:3e:9c: 15:fc:8a:86:3a:e0:f3:60:aa:0e:8b:46:09:24:11: bf:65:b2:7d:28:49:6e:91:51:b7:e0:96:e0:fe:2f: c4:6f:76:ea:8a:7c:af:24:8c:f3:ee:8b:4f:2a:a1: 18:a8:73:aa:77:c6:f1:47:3d:d8:eb:10:d0:e8:93: 6d:1f:68:13:aa:33:db:c6:b8:d5:8a:df:e7:ca:8e: e6:7c:5d:1a:9f:42:d1:60:62:52:d7:db:bc:27:82: 93:ae:f5:8a:98:e6:79:37:c3:e1:3b:10:53:90:05: ce:ca:0c:04:ba:b8:e9:79:f6:ea:89:bb:35:1c:5b: b3:a3:31:50:e9:88:06:e4:92:83:fb:e2:c2:94:67: 8a:1d:da:df:bc:6f:19:ae:9e:a8:84:16:69:39:ce: 66:1f:03:24:5f:d5:e2:7a:08:a8:52:68:3a:43:f3: c0:19:a2:e7:81:da:b1:78:b3:dc:3e:d5:76:6d:bb: 20:48:eb:a0:4b:8e:fb:0b:fd:b3:7f:38:0c:6f:7b: 1f:d5:45:b1:db:e6:8d:75:91:58:a4:06:3d:53:1d: 5c:73:32:11:50:85:f1:dc:04:0e:9d:f3:05:f3:23: 14:ea:2b:64:3a:52:4b:87:fa:28:63:14:54:0e:fa: 8d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:46:0C:07:D5:BA:55:DC:A7:88:7E:4C:FF:6B:4E:BB:1C:76:33:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/79244e7e-1d5f-373a-b7cc-277ba9a73b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl X509v3 Authority Key Identifier: keyid:AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer sbgp-ipAddrBlock: critical IPv4: 64.95.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:34:24:00:23:90:bb:36:f9:33:4b:83:76:8d:e2:c8:fd:d7: 62:3f:e4:8b:42:5f:a6:1f:1e:6b:29:da:e1:dc:79:79:32:de: 60:f8:e4:df:62:91:a9:eb:07:5d:d9:eb:18:21:75:21:66:25: 15:00:24:0e:0a:58:1a:12:bf:1d:98:fd:23:6a:be:b1:c0:89: d0:ec:51:63:b8:81:73:de:14:55:ae:13:f8:af:a1:df:cc:76: 6e:c9:1e:88:4c:f3:f7:5e:b9:38:a6:d1:1c:2d:ac:c7:fe:1b: bd:20:ae:d8:39:fc:75:76:be:b0:c3:30:a6:c2:88:94:eb:05: 2f:3d:92:92:54:e0:81:78:c8:b7:02:40:cc:b8:a7:9b:3e:8d: a7:46:93:e7:63:5a:87:6a:05:40:71:43:c8:90:fb:89:1e:64: d5:71:aa:71:a4:d9:69:3c:eb:bb:ae:33:d5:c2:c2:d7:e7:ac: e5:97:a3:e7:af:5d:f3:0b:64:7e:a1:2c:14:d4:57:85:18:4f: e7:80:03:8f:7c:c6:e8:34:b6:79:b0:dc:01:27:bc:b6:cc:8e: 81:20:34:81:db:79:62:93:cc:a8:5c:34:44:10:c7:aa:b0:80: d4:da:c0:88:4e:ff:2f:96:cf:32:13:76:cd:4b:72:06:78:41: 2c:61:84:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+Mt1vRfZxeKzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFlNDY1YzAtMmExMC00OTVhLWI3ZDItMmFhMDQ4YjI4 NmEwMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ZDBjYWZhYTQtM2UxMi00MDdlLWIxMTYtMDk0MjRmNzU4MjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXqF7+rJgVuGkzCCPpwV/IqGOuDzYKoOi0YJ JBG/ZbJ9KElukVG34Jbg/i/Eb3bqinyvJIzz7otPKqEYqHOqd8bxRz3Y6xDQ6JNt H2gTqjPbxrjVit/nyo7mfF0an0LRYGJS19u8J4KTrvWKmOZ5N8PhOxBTkAXOygwE urjpefbqibs1HFuzozFQ6YgG5JKD++LClGeKHdrfvG8Zrp6ohBZpOc5mHwMkX9Xi egioUmg6Q/PAGaLngdqxeLPcPtV2bbsgSOugS477C/2zfzgMb3sf1UWx2+aNdZFY pAY9Ux1cczIRUIXx3AQOnfMF8yMU6itkOlJLh/ooYxRUDvqNRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9GDAfVulXcp4h+TP9rTrscdjMxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYWU0 NjVjMC0yYTEwLTQ5NWEtYjdkMi0yYWEwNDhiMjg2YTAvNzkyNDRlN2UtMWQ1Zi0z NzNhLWI3Y2MtMjc3YmE5YTczYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWFlNDY1YzAtMmExMC00OTVhLWI3 ZDItMmFhMDQ4YjI4NmEwL2FhZTQ2NWMwLTJhMTAtNDk1YS1iN2QyLTJhYTA0OGIy ODZhMC5jcmwwHwYDVR0jBBgwFoAUqvGlGuuoqNwlLVt4tOGaGNmKjyQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYWU0NjVjMC0yYTEwLTQ5NWEtYjdkMi0yYWEw NDhiMjg2YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQF+/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQ0JAAjkLs2+TNLg3aN4sj912I/5ItCX6YfHmsp2uHceXky3mD45N9i kanrB13Z6xghdSFmJRUAJA4KWBoSvx2Y/SNqvrHAidDsUWO4gXPeFFWuE/ivod/M dm7JHohM8/deuTim0RwtrMf+G70grtg5/HV2vrDDMKbCiJTrBS89kpJU4IF4yLcC QMy4p5s+jadGk+djWodqBUBxQ8iQ+4keZNVxqnGk2Wk867uuM9XCwtfnrOWXo+ev XfMLZH6hLBTUV4UYT+eAA498xug0tnmw3AEnvLbMjoEgNIHbeWKTzKhcNEQQx6qw gNTawIhO/y+WzzITds1LcgZ4QSxhhEI= -----END CERTIFICATE-----Generated at Fri Mar 14 10:04:10 2025 by rpki-client