$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/a5aebc3b-9575-38dc-9c39-c4f45972d657.roa File: a5aebc3b-9575-38dc-9c39-c4f45972d657.roa (raw, json) Hash identifier: lNOQ16LlChpQdsnCB1dA44Wn12N838uQizELzDWTU4A= Subject key identifier: 31:F2:77:0D:86:90:64:C9:D5:BA:15:28:00:00:0F:33:27:05:83:33 Certificate issuer: /CN=1e0f0616-6e03-49de-b5f8-4b874e6d8539 Certificate serial: 010D0C9F43285849446934058AB6256E19831400 Authority key identifier: 76:7B:57:64:B0:C8:12:01:60:AE:B6:F3:E4:B4:F9:B6:73:7A:8F:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/a5aebc3b-9575-38dc-9c39-c4f45972d657.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 6327 IP address blocks: 70.64.0.0/12 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:34:05:8a:b6:25:6e:19:83:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e0f0616-6e03-49de-b5f8-4b874e6d8539 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=56d610e9-4bbd-4463-8777-080e82ea8a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5d:e6:ab:6a:c5:5c:fc:e9:f3:71:52:1f:ae: db:de:7e:46:08:29:a4:c0:93:ef:d7:5f:0e:67:fe: 42:b9:45:2b:1f:4d:61:d4:f0:ea:2b:fb:99:b7:30: ad:34:92:21:7a:03:15:15:9c:e2:5c:21:6a:fe:dd: 71:75:e7:60:b9:b4:1e:4d:78:5e:bf:9c:e0:a9:1a: ae:d5:e4:db:e9:a2:90:c1:c7:8a:e8:65:1c:08:e1: 9a:04:4a:e6:fc:e3:ff:e2:dc:69:3c:b3:a9:c1:77: 8e:52:71:c4:e4:93:b2:5b:f6:62:6f:34:53:cf:6b: 7e:6b:6f:bd:89:40:04:e1:5f:96:e3:dc:69:a2:e3: 7e:21:d6:fe:e8:0f:7c:ce:cd:d6:3f:7c:6b:ae:67: d9:ea:b2:33:53:2f:bd:51:d9:21:01:3b:5e:1c:c0: e9:4b:d5:1a:17:31:75:e9:22:89:0e:12:99:06:cb: 25:7f:49:1d:33:2b:ca:85:df:75:94:ce:bb:18:25: 03:e2:2e:55:66:54:26:9a:00:ec:b6:18:69:a7:ad: 18:61:2f:82:be:a0:4d:8d:8a:76:23:0a:1d:ff:c0: c9:8f:a4:1f:3c:20:04:68:3a:0b:df:c2:76:b2:00: fa:90:5d:ba:27:41:bf:88:12:47:26:8a:86:19:2a: f8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F2:77:0D:86:90:64:C9:D5:BA:15:28:00:00:0F:33:27:05:83:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/a5aebc3b-9575-38dc-9c39-c4f45972d657.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.crl X509v3 Authority Key Identifier: keyid:76:7B:57:64:B0:C8:12:01:60:AE:B6:F3:E4:B4:F9:B6:73:7A:8F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer sbgp-ipAddrBlock: critical IPv4: 70.64.0.0/12 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:d0:d6:c9:15:41:47:db:14:56:4a:65:54:be:d9:b4:64:7f: e9:6a:08:51:4e:55:3c:f7:8e:fa:9e:b9:df:99:10:0e:f2:ac: ac:2e:5e:b0:a5:21:94:2e:6c:90:8b:0e:88:7f:34:2e:12:a2: 06:9e:6e:12:de:8c:35:de:df:ab:f6:57:12:cc:0b:cb:ca:ab: b3:36:c6:ec:99:be:cf:93:f2:75:72:20:58:74:d1:d6:47:73: 34:3b:a5:7f:60:0e:d9:3a:00:17:cf:fe:5f:33:ce:a1:69:e4: 37:19:fd:21:b8:4f:97:de:9e:e6:f0:82:e6:03:0b:8e:06:e9: 9b:f8:d2:e0:e5:fc:46:56:51:af:f8:b7:d3:7b:1a:c0:5e:4e: 6a:05:29:12:32:a7:c6:87:77:5a:79:78:fd:0f:d5:7e:e0:aa: c6:46:fd:62:d0:8b:5a:f2:6a:5f:cf:6a:44:7b:ec:57:06:b2: e1:79:fd:0b:58:44:5b:bc:00:99:e5:9a:1c:95:38:08:cf:03: 97:02:5a:fc:a5:1c:85:b1:f2:8b:41:fd:3f:ab:6a:9b:5c:94: d5:4d:e7:53:53:10:89:89:bc:64:65:83:7b:de:3b:80:4a:bc: f4:25:f9:f9:e6:6c:05:df:7a:79:5d:f8:92:fc:ba:24:be:88: 70:ed:d7:39 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWElEaTQFirYlbhmDFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWUwZjA2MTYtNmUwMy00OWRlLWI1ZjgtNGI4NzRlNmQ4 NTM5MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk NTZkNjEwZTktNGJiZC00NDYzLTg3NzctMDgwZTgyZWE4YTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV3mq2rFXPzp83FSH67b3n5GCCmkwJPv118O Z/5CuUUrH01h1PDqK/uZtzCtNJIhegMVFZziXCFq/t1xdedgubQeTXhev5zgqRqu 1eTb6aKQwceK6GUcCOGaBErm/OP/4txpPLOpwXeOUnHE5JOyW/ZibzRTz2t+a2+9 iUAE4V+W49xpouN+Idb+6A98zs3WP3xrrmfZ6rIzUy+9UdkhATteHMDpS9UaFzF1 6SKJDhKZBsslf0kdMyvKhd91lM67GCUD4i5VZlQmmgDsthhpp60YYS+CvqBNjYp2 Iwod/8DJj6QfPCAEaDoL38J2sgD6kF26J0G/iBJHJoqGGSr4MQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDHydw2GkGTJ1boVKAAADzMnBYMzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZTBm MDYxNi02ZTAzLTQ5ZGUtYjVmOC00Yjg3NGU2ZDg1MzkvYTVhZWJjM2ItOTU3NS0z OGRjLTljMzktYzRmNDU5NzJkNjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWUwZjA2MTYtNmUwMy00OWRlLWI1 ZjgtNGI4NzRlNmQ4NTM5LzFlMGYwNjE2LTZlMDMtNDlkZS1iNWY4LTRiODc0ZTZk ODUzOS5jcmwwHwYDVR0jBBgwFoAUdntXZLDIEgFgrrbz5LT5tnN6j5gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZTBmMDYxNi02ZTAzLTQ5ZGUtYjVmOC00Yjg3 NGU2ZDg1MzkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMERkAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAjtDWyRVBR9sUVkplVL7ZtGR/6WoIUU5VPPeO+p6535kQDvKsrC5esKUh lC5skIsOiH80LhKiBp5uEt6MNd7fq/ZXEswLy8qrszbG7Jm+z5PydXIgWHTR1kdz NDulf2AO2ToAF8/+XzPOoWnkNxn9IbhPl96e5vCC5gMLjgbpm/jS4OX8RlZRr/i3 03sawF5OagUpEjKnxod3Wnl4/Q/VfuCqxkb9YtCLWvJqX89qRHvsVway4Xn9C1hE W7wAmeWaHJU4CM8DlwJa/KUchbHyi0H9P6tqm1yU1U3nU1MQiYm8ZGWDe947gEq8 9CX5+eZsBd96eV34kvy6JL6IcO3XOQ== -----END CERTIFICATE-----Generated at Sat Apr 12 11:52:52 2025 by rpki-client