$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/c477d60d-a0ed-3063-9bc0-a2c23851e6bb.roa File: c477d60d-a0ed-3063-9bc0-a2c23851e6bb.roa (raw, json) Hash identifier: t9UF7B/Hi9ydS34DZRKBHDsO55ddYt3SLOxa0feTzUg= Subject key identifier: E7:F0:37:61:D7:56:38:AA:2C:2E:9C:6C:30:F0:A8:BE:82:EA:FB:D7 Certificate issuer: /CN=f16b1ed2-491f-4ed7-be99-59b20310c475 Certificate serial: 010D0C9F432858490E16C5CBF3C553B7EC1A7F00 Authority key identifier: 10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/c477d60d-a0ed-3063-9bc0-a2c23851e6bb.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 11924 IP address blocks: 64.79.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:c5:cb:f3:c5:53:b7:ec:1a:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f16b1ed2-491f-4ed7-be99-59b20310c475 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=4a688933-bea6-4bc9-8efd-b26de7350e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bb:36:9e:aa:bb:eb:f1:4f:dd:ef:6c:74:18: 46:59:9d:37:9e:03:59:f3:01:29:54:84:f5:1a:f7: 55:aa:33:b2:0d:fc:a6:53:bf:0c:9c:3a:46:4a:29: fc:24:49:ff:55:9a:35:90:ef:43:b7:cc:3e:82:7a: c1:08:b8:cd:9a:d7:51:89:e5:9c:ef:47:b0:3f:c8: a6:66:8e:63:36:1e:2d:ff:1a:82:40:db:42:2f:c3: 7a:fe:a3:58:4b:4e:6a:71:0c:01:93:ee:b2:71:d6: 89:cf:70:eb:2e:ae:96:b4:01:f0:2a:b4:50:59:0e: f1:28:e4:1e:45:45:55:94:2b:7d:9f:60:d3:e9:53: 34:42:ad:80:59:01:6e:4d:35:6f:c5:cf:ad:38:86: b3:f5:c6:d2:8c:44:db:72:b3:0b:21:15:ab:5b:b4: ee:7c:48:5c:91:25:ab:0d:72:bd:dd:a1:d3:dd:9b: f4:17:57:9d:bd:d4:61:05:03:77:db:30:f6:cf:63: a9:db:31:8c:16:e7:ae:94:bb:88:02:67:0d:64:65: 57:7b:c5:8d:c0:20:22:eb:34:ad:fa:77:cc:5c:65: d3:4b:ba:d9:ee:52:c1:37:68:7a:73:63:a7:da:06: e7:f9:0a:84:34:4d:c3:7a:9e:37:19:14:6c:63:62: 70:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F0:37:61:D7:56:38:AA:2C:2E:9C:6C:30:F0:A8:BE:82:EA:FB:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/c477d60d-a0ed-3063-9bc0-a2c23851e6bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl X509v3 Authority Key Identifier: keyid:10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer sbgp-ipAddrBlock: critical IPv4: 64.79.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:d8:17:43:65:5e:13:85:ff:e1:06:8d:17:d3:e6:d9:49:e3: 32:d7:a0:48:6f:dc:21:36:f8:0b:ca:35:d0:7e:8c:c7:21:af: 2f:0b:0a:20:70:c8:5d:e6:3d:03:7b:94:cf:19:09:15:94:77: 59:94:d4:07:8b:6f:5c:b4:93:bb:8b:23:0f:39:e5:d3:33:64: 40:48:c2:70:b6:4a:7e:53:b1:d5:6f:f6:e2:aa:b6:15:67:53: e4:f4:3c:de:bc:54:5b:8c:6f:79:9e:74:72:86:d6:e0:3c:c0: 52:95:18:69:18:6a:8f:d6:63:8c:c2:71:96:5f:48:46:a9:9c: f3:0f:33:16:18:40:64:82:47:45:75:5e:18:b0:cf:66:f6:65: 84:ec:e0:80:b1:07:de:7d:eb:a5:52:3d:1f:0a:6d:0c:8e:ad: af:15:45:ed:aa:16:ad:ea:02:d6:ec:f9:de:e3:90:98:d1:f8: a9:94:80:d3:da:44:d5:fc:74:50:6f:65:d8:38:78:04:72:4c: 0c:bf:1a:a4:4e:fd:64:41:46:14:64:15:6e:df:b6:59:24:d7: 46:5f:70:4a:eb:e7:fb:d5:a0:f4:b8:3f:ea:12:e0:08:48:3c: 8a:b4:4b:29:c0:af:19:1d:e9:e0:0e:df:30:46:53:d0:09:ca: 0f:7a:38:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFsXL88VTt+wafwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjE2YjFlZDItNDkxZi00ZWQ3LWJlOTktNTliMjAzMTBj NDc1MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk NGE2ODg5MzMtYmVhNi00YmM5LThlZmQtYjI2ZGU3MzUwZTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7s2nqq76/FP3e9sdBhGWZ03ngNZ8wEpVIT1 GvdVqjOyDfymU78MnDpGSin8JEn/VZo1kO9Dt8w+gnrBCLjNmtdRieWc70ewP8im Zo5jNh4t/xqCQNtCL8N6/qNYS05qcQwBk+6ycdaJz3DrLq6WtAHwKrRQWQ7xKOQe RUVVlCt9n2DT6VM0Qq2AWQFuTTVvxc+tOIaz9cbSjETbcrMLIRWrW7TufEhckSWr DXK93aHT3Zv0F1edvdRhBQN32zD2z2Op2zGMFueulLuIAmcNZGVXe8WNwCAi6zSt +nfMXGXTS7rZ7lLBN2h6c2On2gbn+QqENE3Dep43GRRsY2JwdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfwN2HXVjiqLC6cbDDwqL6C6vvXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMTZi MWVkMi00OTFmLTRlZDctYmU5OS01OWIyMDMxMGM0NzUvYzQ3N2Q2MGQtYTBlZC0z MDYzLTliYzAtYTJjMjM4NTFlNmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjE2YjFlZDItNDkxZi00ZWQ3LWJl OTktNTliMjAzMTBjNDc1L2YxNmIxZWQyLTQ5MWYtNGVkNy1iZTk5LTU5YjIwMzEw YzQ3NS5jcmwwHwYDVR0jBBgwFoAUEGObLEoCatgzyXEiJFJcgL5sq9YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mMTZiMWVkMi00OTFmLTRlZDctYmU5OS01OWIy MDMxMGM0NzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQE8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3YF0NlXhOF/+EGjRfT5tlJ4zLXoEhv3CE2+AvKNdB+jMchry8LCiBw yF3mPQN7lM8ZCRWUd1mU1AeLb1y0k7uLIw855dMzZEBIwnC2Sn5TsdVv9uKqthVn U+T0PN68VFuMb3medHKG1uA8wFKVGGkYao/WY4zCcZZfSEapnPMPMxYYQGSCR0V1 Xhiwz2b2ZYTs4ICxB95966VSPR8KbQyOra8VRe2qFq3qAtbs+d7jkJjR+KmUgNPa RNX8dFBvZdg4eARyTAy/GqRO/WRBRhRkFW7ftlkk10ZfcErr5/vVoPS4P+oS4AhI PIq0SynArxkd6eAO3zBGU9AJyg96OPk= -----END CERTIFICATE-----Generated at Fri Apr 11 23:38:03 2025 by rpki-client