$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/b88f00ad-140f-3079-83ac-77b0f6907420.roa File: b88f00ad-140f-3079-83ac-77b0f6907420.roa (raw, json) Hash identifier: mTvBSu8dnNC6220VhJ7uFn4BqYhYuECdUObtWcdVdcc= Subject key identifier: 49:F1:7F:2F:B6:46:80:47:B7:F6:5C:47:F7:72:4F:26:26:A9:9F:EC Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584930200E15DFAE9F6C48B15080 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/b88f00ad-140f-3079-83ac-77b0f6907420.roa Signing time: Fri 14 Mar 2025 18:37:13 +0000 ROA not before: Fri 14 Mar 2025 18:37:13 +0000 ROA not after: Thu 12 Jun 2025 18:37:13 +0000 asID: 12213 IP address blocks: 64.255.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:20:0e:15:df:ae:9f:6c:48:b1:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Mar 14 18:37:13 2025 GMT Not After : Jun 12 18:37:13 2025 GMT Subject: CN=2acc4a4c-d664-4b7e-94f1-e8beb21f0fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ac:b8:14:f3:c6:02:13:da:77:ce:35:b1:d2: 19:1b:36:2d:13:e1:88:ce:40:22:80:53:20:3a:91: be:d6:3c:ad:c3:78:0b:44:d8:eb:68:56:f1:2b:cb: e2:f3:31:2a:78:67:63:35:12:72:ff:de:b5:75:fe: 41:05:2c:aa:bf:60:39:dc:92:ea:fa:db:89:65:25: c7:8b:1d:65:5e:d2:e4:74:52:50:cf:46:86:35:53: 47:70:01:0e:44:11:6f:e9:15:88:73:60:3a:d0:1b: d7:2d:48:e4:1b:90:01:81:9c:57:1c:b4:be:1a:9f: f8:81:11:7d:66:e1:db:43:b3:2e:c9:5c:76:a7:2d: 3a:79:db:09:76:bf:fe:32:35:6b:25:d0:9f:96:88: a8:36:8e:e9:b4:b8:21:41:63:74:53:1d:e2:63:67: 83:98:60:bd:c9:52:6f:7f:87:ec:e4:13:69:f2:d4: c3:0a:45:e9:f1:c8:9c:40:ad:74:7f:b5:20:04:f5: 03:f9:8a:d6:24:84:1e:9b:5a:d6:8e:99:5e:e6:d8: b6:eb:e5:d4:9a:50:09:08:9d:e2:88:11:33:f2:bf: a6:5e:e3:4b:3c:21:ac:9e:27:b3:4f:34:6a:d3:89: b7:96:65:35:f8:ff:93:17:54:53:5c:9c:d7:d4:c1: 27:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F1:7F:2F:B6:46:80:47:B7:F6:5C:47:F7:72:4F:26:26:A9:9F:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/b88f00ad-140f-3079-83ac-77b0f6907420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 64.255.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:02:1a:85:62:10:9a:e2:4f:03:5a:62:f1:1d:bf:49:0e:63: e2:d8:cd:9b:de:71:c1:b6:aa:3d:1e:33:2e:f5:77:a7:a0:47: 02:32:90:e1:5a:b1:df:af:aa:a5:7f:a4:0c:a7:e1:1e:91:22: 56:ba:b1:db:ac:6d:c7:45:4f:ce:5e:ad:33:3b:3b:77:ec:d2: 1c:f3:1a:0f:38:c4:25:95:e4:b1:34:f2:1e:24:49:a1:ce:4d: e9:5e:4f:c5:56:20:86:c3:74:5c:29:b6:8f:81:b2:77:0f:77: 5b:06:c2:fd:28:db:2d:7f:9c:8f:64:b8:17:01:5e:51:d1:1a: 49:be:cd:db:71:26:b0:84:29:a2:86:e9:51:4c:c5:f7:bd:84: b5:a7:0e:03:ad:a9:f7:69:f3:8a:f4:6c:6f:9d:27:c6:ec:eb: 6c:88:ee:38:a2:c5:cc:2c:45:4d:f7:6f:9e:e3:18:9c:ea:9e: df:e6:b1:9e:71:2d:90:45:84:89:4d:80:bd:b0:f4:cc:5e:1b: de:59:12:ce:da:35:e4:7f:9b:1b:9e:9f:a8:1b:0b:b8:02:0e: 12:95:05:d3:f8:39:f2:f4:b7:01:e3:c9:f5:bd:44:95:e5:e0: db:56:95:a6:60:aa:bc:cd:15:81:5a:d0:b6:ac:c9:b4:32:fc: 20:25:b5:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkwIA4V366fbEixUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI1MDMxNDE4MzcxM1oXDTI1MDYxMjE4MzcxM1owLzEtMCsGA1UEAxMk MmFjYzRhNGMtZDY2NC00YjdlLTk0ZjEtZThiZWIyMWYwZmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKy4FPPGAhPad841sdIZGzYtE+GIzkAigFMg OpG+1jytw3gLRNjraFbxK8vi8zEqeGdjNRJy/961df5BBSyqv2A53JLq+tuJZSXH ix1lXtLkdFJQz0aGNVNHcAEORBFv6RWIc2A60BvXLUjkG5ABgZxXHLS+Gp/4gRF9 ZuHbQ7MuyVx2py06edsJdr/+MjVrJdCfloioNo7ptLghQWN0Ux3iY2eDmGC9yVJv f4fs5BNp8tTDCkXp8cicQK10f7UgBPUD+YrWJIQem1rWjple5ti26+XUmlAJCJ3i iBEz8r+mXuNLPCGsniezTzRq04m3lmU1+P+TF1RTXJzX1MEnmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnxfy+2RoBHt/ZcR/dyTyYmqZ/sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvYjg4ZjAwYWQtMTQwZi0z MDc5LTgzYWMtNzdiMGY2OTA3NDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQP/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkCGoViEJriTwNaYvEdv0kOY+LYzZveccG2qj0eMy71d6egRwIykOFa sd+vqqV/pAyn4R6RIla6sdusbcdFT85erTM7O3fs0hzzGg84xCWV5LE08h4kSaHO TeleT8VWIIbDdFwpto+BsncPd1sGwv0o2y1/nI9kuBcBXlHRGkm+zdtxJrCEKaKG 6VFMxfe9hLWnDgOtqfdp84r0bG+dJ8bs62yI7jiixcwsRU33b57jGJzqnt/msZ5x LZBFhIlNgL2w9MxeG95ZEs7aNeR/mxuen6gbC7gCDhKVBdP4OfL0twHjyfW9RJXl 4NtWlaZgqrzNFYFa0LasybQy/CAltQs= -----END CERTIFICATE-----Generated at Fri Apr 11 22:26:49 2025 by rpki-client