$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/f4284db4-a392-3e0b-93cd-4e2892f83d65.roa File: f4284db4-a392-3e0b-93cd-4e2892f83d65.roa (raw, json) Hash identifier: dXM3Vk/qc93yPStfxyfCFdfqHzMkZRdhYO2WrFD4pSk= Subject key identifier: 05:DE:13:5E:D6:37:F1:84:23:C6:0E:A6:8C:2E:F8:59:55:00:D3:5D Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584923D16B4FB38BA8C034DF1FA0 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/f4284db4-a392-3e0b-93cd-4e2892f83d65.roa Signing time: Mon 10 Mar 2025 08:49:04 +0000 ROA not before: Mon 10 Mar 2025 08:49:04 +0000 ROA not after: Sun 08 Jun 2025 08:49:04 +0000 asID: 26042 IP address blocks: 64.22.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:23:d1:6b:4f:b3:8b:a8:c0:34:df:1f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Mar 10 08:49:04 2025 GMT Not After : Jun 8 08:49:04 2025 GMT Subject: CN=d9910766-aff8-48ce-b88f-eaa482124eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d3:cc:5d:8f:1c:3c:85:f7:6a:3e:a9:07:07: 8e:a8:bc:1b:9b:c9:5e:4f:40:88:2a:db:58:58:13: 21:13:ee:16:a5:c3:89:3b:5d:b9:b9:df:1a:e4:ec: a5:af:c3:e7:d2:b6:ed:c8:c2:4c:61:6c:35:6c:77: bb:d3:ce:c6:f7:4a:e8:81:23:9f:73:d7:b5:a1:79: 7e:22:07:4e:9c:28:33:b8:d4:9a:98:fd:13:11:8b: 2d:1e:25:37:76:46:ad:9e:9f:3a:33:25:b0:e4:70: 03:4a:79:9f:ca:e3:0f:45:24:16:47:b6:aa:db:25: da:b1:b3:cf:9a:7d:35:bd:5f:2a:dc:9e:fb:4f:17: 3e:2f:03:ee:f3:69:eb:a7:57:2d:0c:e5:68:14:ae: c5:2d:2b:8f:b9:b5:68:31:35:5c:22:00:72:90:e0: 3f:36:aa:11:6e:28:45:8b:c4:5f:c1:f6:9a:06:32: 5f:fb:85:5f:a1:ef:b5:9e:1a:f2:f1:a5:1b:8f:29: b5:fc:2f:96:2c:0b:45:e0:41:92:20:a4:6a:8e:a4: 87:2c:81:23:61:9c:44:aa:96:0e:ba:77:61:68:39: 43:8e:21:92:0a:30:f8:3f:5d:ed:ac:2b:6b:9c:47: c1:d1:38:69:4f:7e:86:c2:21:58:cb:b9:5d:50:3f: 69:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DE:13:5E:D6:37:F1:84:23:C6:0E:A6:8C:2E:F8:59:55:00:D3:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/f4284db4-a392-3e0b-93cd-4e2892f83d65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 64.22.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:28:91:c7:09:7d:ca:36:7e:53:76:6d:df:d8:8e:75:29:b0: 22:ad:23:14:8d:1d:b6:64:8e:e6:e6:3e:5c:34:a3:44:9c:a5: 93:e7:3f:30:04:94:84:17:2d:61:c8:b6:f3:33:c4:fb:a4:54: f4:28:2a:9d:57:00:06:4d:50:73:1d:85:55:b4:d8:2d:fd:66: 1a:0a:a1:67:64:c1:49:96:b6:7a:fa:4a:1b:63:aa:cc:a5:44: 0d:2b:5f:b0:7e:96:91:42:ed:09:b6:a8:59:ab:03:9f:ab:5c: 03:99:95:b7:36:8e:0f:4c:7f:51:0c:69:c7:85:be:21:4f:ea: 0c:ea:07:c8:e4:f7:88:fb:9b:49:47:5e:e5:64:86:fd:a3:72: 1a:fd:40:20:4c:d6:f3:dc:5a:b8:95:11:66:a6:f7:2f:3f:00: 4f:49:76:79:4d:91:cb:0f:d6:f1:7c:8d:52:2a:13:67:da:38: 68:a7:34:eb:d0:1b:cf:41:e4:8b:84:79:66:46:e3:87:56:b6: 5c:81:62:24:e8:5b:bb:4d:f0:97:84:fa:96:87:73:00:6d:67: 2f:e9:8e:7a:f1:e5:c4:d4:4d:e5:83:9d:4d:ec:a9:0b:74:d9: e6:03:a5:13:6d:11:39:29:34:79:42:7f:50:0a:47:56:89:68: 80:25:1d:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkj0WtPs4uowDTfH6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDMxMDA4NDkwNFoXDTI1MDYwODA4NDkwNFowLzEtMCsGA1UEAxMk ZDk5MTA3NjYtYWZmOC00OGNlLWI4OGYtZWFhNDgyMTI0ZWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tPMXY8cPIX3aj6pBweOqLwbm8leT0CIKttY WBMhE+4WpcOJO125ud8a5Oylr8Pn0rbtyMJMYWw1bHe7087G90rogSOfc9e1oXl+ IgdOnCgzuNSamP0TEYstHiU3dkatnp86MyWw5HADSnmfyuMPRSQWR7aq2yXasbPP mn01vV8q3J77Txc+LwPu82nrp1ctDOVoFK7FLSuPubVoMTVcIgBykOA/NqoRbihF i8RfwfaaBjJf+4Vfoe+1nhry8aUbjym1/C+WLAtF4EGSIKRqjqSHLIEjYZxEqpYO undhaDlDjiGSCjD4P13trCtrnEfB0ThpT36GwiFYy7ldUD9psQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXeE17WN/GEI8YOpowu+FlVANNdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvZjQyODRkYjQtYTM5Mi0z ZTBiLTkzY2QtNGUyODkyZjgzZDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAokccJfco2flN2bd/YjnUpsCKtIxSNHbZkjubmPlw0o0ScpZPnPzAE lIQXLWHItvMzxPukVPQoKp1XAAZNUHMdhVW02C39ZhoKoWdkwUmWtnr6Shtjqsyl RA0rX7B+lpFC7Qm2qFmrA5+rXAOZlbc2jg9Mf1EMaceFviFP6gzqB8jk94j7m0lH XuVkhv2jchr9QCBM1vPcWriVEWam9y8/AE9JdnlNkcsP1vF8jVIqE2faOGinNOvQ G89B5IuEeWZG44dWtlyBYiToW7tN8JeE+paHcwBtZy/pjnrx5cTUTeWDnU3sqQt0 2eYDpRNtETkpNHlCf1AKR1aJaIAlHTA= -----END CERTIFICATE-----Generated at Sat Apr 5 12:12:51 2025 by rpki-client