$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/f7b88c4b-0481-3bcf-b1d3-e24cc2ffd9c3.roa File: f7b88c4b-0481-3bcf-b1d3-e24cc2ffd9c3.roa (raw, json) Hash identifier: VB/MOwE7VsaGiP2nsHFmiBgbvxMNBkpbez+XsNbKIaQ= Subject key identifier: 41:53:EC:3D:66:D8:B7:8D:BA:75:E9:2C:B7:A7:89:4B:9A:AC:C0:18 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F43285848705AF604F98B9882FF238760 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/f7b88c4b-0481-3bcf-b1d3-e24cc2ffd9c3.roa Signing time: Sun 05 Jan 2025 02:00:39 +0000 ROA not before: Sun 05 Jan 2025 02:00:39 +0000 ROA not after: Sat 05 Apr 2025 01:00:39 +0000 asID: 852 IP address blocks: 64.22.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:70:5a:f6:04:f9:8b:98:82:ff:23:87:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Jan 5 02:00:39 2025 GMT Not After : Apr 5 01:00:39 2025 GMT Subject: CN=b77db084-b63d-494a-9663-2fae27b03cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:55:63:1b:1f:0c:33:02:40:c7:40:f5:62:35: 93:2e:62:d3:9d:2f:e6:2e:26:a4:96:25:72:2b:74: 14:86:01:ae:25:03:33:20:10:61:e0:dd:bc:25:41: 8f:25:ec:d0:20:4f:92:5a:e4:cd:65:79:d7:3e:5e: ee:0c:b3:95:ea:1f:24:df:07:46:ad:a8:86:5d:7e: 87:3e:bd:d0:d2:18:dc:c2:8c:74:f4:38:ac:7b:12: 5d:fb:ed:b6:27:b7:29:db:67:f2:d4:5f:c8:85:b4: 59:61:cd:ba:45:a7:5a:cb:ae:ad:89:9d:fd:ff:20: 94:0f:7e:dd:ba:ca:ad:3d:ec:1c:a0:e2:94:a2:d6: a8:22:88:8f:f0:cf:ab:bc:da:fe:65:bc:ef:6f:81: 77:1b:01:d9:53:01:61:8d:98:5c:8a:2a:ee:fc:1a: 59:f2:2d:eb:46:40:af:e8:c4:00:69:6a:c8:23:87: 81:a4:88:ce:08:12:1f:11:61:bc:e4:27:87:62:a2: f3:5f:cd:a8:df:b5:d6:0c:a6:78:90:fb:5c:62:59: 08:f6:54:0e:5d:74:2a:7c:70:8b:ae:66:50:d0:44: d5:ff:cc:cc:d5:ae:b9:63:bd:b8:64:ea:76:ce:23: 2d:5e:45:44:24:4c:b7:78:df:22:f1:78:67:36:b3: 24:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:53:EC:3D:66:D8:B7:8D:BA:75:E9:2C:B7:A7:89:4B:9A:AC:C0:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/f7b88c4b-0481-3bcf-b1d3-e24cc2ffd9c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 64.22.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:8a:83:05:b7:25:3d:14:97:0c:02:06:b0:12:84:2f:15:d8: b7:0a:cf:cd:88:98:da:b8:62:13:be:3f:82:b6:15:ac:46:c4: 5a:22:18:d6:e5:51:be:1c:96:5f:90:fe:0a:3b:93:e5:f2:93: d1:b3:2c:5d:22:88:04:df:57:7a:ce:8a:0f:83:3b:2b:fe:8c: d1:f0:4b:2c:28:af:cc:e4:b2:53:26:83:27:0d:9a:0a:f8:37: f0:44:01:23:d9:77:14:58:a0:e0:96:3d:5c:99:d6:d4:8d:a9: dd:48:bf:50:4e:08:95:10:a8:5d:c6:bf:b6:b6:27:bf:d6:03: 32:5f:e8:9a:fd:08:33:22:b1:13:a8:cd:9c:6c:65:fc:0e:05: 10:76:ba:c4:1c:11:b6:42:b5:89:f2:03:dd:22:6c:c0:cd:b7: 0c:2a:eb:a6:19:1c:0f:41:66:83:ff:df:89:71:78:f8:14:65: d7:1b:07:e1:71:87:18:5b:0f:3a:06:a1:b0:71:f5:b8:74:91: 5e:b8:74:66:93:b0:69:64:0b:99:61:20:4d:d7:02:ec:01:ad: c8:1e:13:45:f4:83:5e:21:7c:64:a9:d0:6a:eb:55:81:79:62: 1a:af:1a:cf:7c:ac:9f:76:64:db:e0:15:d2:b6:d6:db:52:e5: 94:70:9d:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhwWvYE+YuYgv8jh2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDEwNTAyMDAzOVoXDTI1MDQwNTAxMDAzOVowLzEtMCsGA1UEAxMk Yjc3ZGIwODQtYjYzZC00OTRhLTk2NjMtMmZhZTI3YjAzY2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVVjGx8MMwJAx0D1YjWTLmLTnS/mLiakliVy K3QUhgGuJQMzIBBh4N28JUGPJezQIE+SWuTNZXnXPl7uDLOV6h8k3wdGraiGXX6H Pr3Q0hjcwox09DisexJd++22J7cp22fy1F/IhbRZYc26Raday66tiZ39/yCUD37d usqtPewcoOKUotaoIoiP8M+rvNr+Zbzvb4F3GwHZUwFhjZhciiru/BpZ8i3rRkCv 6MQAaWrII4eBpIjOCBIfEWG85CeHYqLzX82o37XWDKZ4kPtcYlkI9lQOXXQqfHCL rmZQ0ETV/8zM1a65Y724ZOp2ziMtXkVEJEy3eN8i8XhnNrMk0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFT7D1m2LeNunXpLLeniUuarMAYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvZjdiODhjNGItMDQ4MS0z YmNmLWIxZDMtZTI0Y2MyZmZkOWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQBZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKKgwW3JT0UlwwCBrAShC8V2LcKz82ImNq4YhO+P4K2FaxGxFoiGNbl Ub4cll+Q/go7k+Xyk9GzLF0iiATfV3rOig+DOyv+jNHwSywor8zkslMmgycNmgr4 N/BEASPZdxRYoOCWPVyZ1tSNqd1Iv1BOCJUQqF3Gv7a2J7/WAzJf6Jr9CDMisROo zZxsZfwOBRB2usQcEbZCtYnyA90ibMDNtwwq66YZHA9BZoP/34lxePgUZdcbB+Fx hxhbDzoGobBx9bh0kV64dGaTsGlkC5lhIE3XAuwBrcgeE0X0g14hfGSp0GrrVYF5 YhqvGs98rJ92ZNvgFdK21ttS5ZRwnZU= -----END CERTIFICATE-----Generated at Sun Feb 16 21:00:58 2025 by rpki-client