$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/56613ae1-f031-300e-bc87-2f11d58c8366.roa File: 56613ae1-f031-300e-bc87-2f11d58c8366.roa (raw, json) Hash identifier: 1trKv5fsQ52XUSOZchcZETP72HRMH7wYCEZBUoBFUYg= Subject key identifier: A8:43:7A:67:DB:A7:B6:68:C3:60:E6:85:F3:C3:13:4B:EB:50:F5:DD Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3 Certificate serial: 010D0C9F4328584909E69F023845B7F32EE37600 Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/56613ae1-f031-300e-bc87-2f11d58c8366.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 11127 IP address blocks: 64.58.96.0/20 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:9f:02:38:45:b7:f3:2e:e3:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3 Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=6c427917-0d78-4adb-830c-155030df1996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:68:bb:77:87:71:76:6a:96:66:d2:e6:86:23: 95:6c:ea:c1:25:43:9b:b6:ed:5e:10:e2:c2:46:2e: 71:7c:67:6b:78:82:55:68:d9:79:7a:c8:04:4d:a1: 05:08:ad:2a:96:90:28:c7:14:15:b0:9d:22:ab:21: 73:f4:bc:7c:f0:d4:3b:12:ef:dc:d4:6d:87:3e:b4: 8d:b0:02:22:96:64:05:20:2f:bc:97:e7:e7:25:74: ea:78:7e:03:cd:39:74:46:df:95:e8:9c:d6:cc:f4: f3:95:b1:18:a7:4d:2d:55:9d:67:38:29:54:81:56: 88:b8:e1:e7:11:2c:03:a7:6f:2f:05:b5:60:98:cf: 02:96:c5:2c:29:e1:94:a6:26:03:9f:18:2d:ca:de: ad:0c:7e:80:cf:4c:68:f5:06:5b:ac:5e:24:7a:04: 44:e8:80:68:91:e9:1c:e9:a4:5d:b5:97:4f:9c:a8: ec:a7:1a:93:eb:ae:9e:e4:89:7d:5e:29:24:ce:e2: 21:9a:37:84:61:9a:c2:12:4b:36:8b:d5:f7:26:72: 02:e6:bb:64:61:0a:aa:e3:77:c0:b3:47:65:97:6a: 1f:c3:ef:1d:da:6f:a5:03:5a:31:b6:5b:11:77:7f: 21:e4:46:7c:f4:ab:e1:1b:ac:13:6c:fc:77:6c:4a: bd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:43:7A:67:DB:A7:B6:68:C3:60:E6:85:F3:C3:13:4B:EB:50:F5:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/56613ae1-f031-300e-bc87-2f11d58c8366.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl X509v3 Authority Key Identifier: keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer sbgp-ipAddrBlock: critical IPv4: 64.58.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:d5:f6:2c:ec:3a:3c:6d:b2:ba:1e:e8:e6:20:40:fd:e1:93: 98:dd:53:65:73:8c:7c:61:80:d1:c0:ba:b7:c2:e9:22:bd:c3: ea:7d:b8:29:98:86:91:be:04:7f:40:b0:98:3f:ca:93:48:cc: b7:90:af:12:df:5c:3d:25:3f:2a:68:d9:b4:b8:e8:fd:7f:65: 5c:6e:bf:24:4d:09:93:d1:cc:d1:65:9f:51:7e:95:1d:7e:d4: 7b:a2:5d:96:7a:1e:8a:1b:8e:cf:b9:36:6c:27:4b:03:78:46: b3:49:1e:a9:7f:10:34:69:53:1d:99:3b:c1:3c:e0:b0:0f:ed: 5a:ef:d4:d8:8d:6d:39:1f:17:29:bd:19:6d:2b:b8:8f:1c:b7: cb:86:b6:0e:b2:5e:a8:d4:12:56:95:fe:55:ba:e9:b4:98:56: 65:17:a2:67:cc:22:43:54:47:ec:82:03:1e:83:44:c1:6e:35: ca:b0:0d:03:0f:75:84:e9:00:84:a3:1e:6d:f0:b5:4e:47:72: f5:30:5e:ff:51:29:0a:fd:de:f9:b8:22:e7:f4:be:fe:47:90: f8:10:55:2b:f5:ea:69:1c:3e:a8:d8:ba:6b:69:83:44:40:23: c4:01:85:bb:09:2d:56:94:65:af:f5:92:d6:ff:50:ed:49:9b: 69:20:e7:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5p8COEW38y7jdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx OGUzMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk NmM0Mjc5MTctMGQ3OC00YWRiLTgzMGMtMTU1MDMwZGYxOTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmi7d4dxdmqWZtLmhiOVbOrBJUObtu1eEOLC Ri5xfGdreIJVaNl5esgETaEFCK0qlpAoxxQVsJ0iqyFz9Lx88NQ7Eu/c1G2HPrSN sAIilmQFIC+8l+fnJXTqeH4DzTl0Rt+V6JzWzPTzlbEYp00tVZ1nOClUgVaIuOHn ESwDp28vBbVgmM8ClsUsKeGUpiYDnxgtyt6tDH6Az0xo9QZbrF4kegRE6IBokekc 6aRdtZdPnKjspxqT666e5Il9XikkzuIhmjeEYZrCEks2i9X3JnIC5rtkYQqq43fA s0dll2ofw+8d2m+lA1oxtlsRd38h5EZ89KvhG6wTbPx3bEq9qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhDemfbp7Zow2DmhfPDE0vrUPXdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvNTY2MTNhZTEtZjAzMS0z MDBlLWJjODctMmYxMWQ1OGM4MzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4 MzVmYzE4ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQDpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbV9izsOjxtsroe6OYgQP3hk5jdU2VzjHxhgNHAurfC6SK9w+p9uCmY hpG+BH9AsJg/ypNIzLeQrxLfXD0lPypo2bS46P1/ZVxuvyRNCZPRzNFln1F+lR1+ 1HuiXZZ6Hoobjs+5NmwnSwN4RrNJHql/EDRpUx2ZO8E84LAP7Vrv1NiNbTkfFym9 GW0ruI8ct8uGtg6yXqjUElaV/lW66bSYVmUXomfMIkNUR+yCAx6DRMFuNcqwDQMP dYTpAISjHm3wtU5HcvUwXv9RKQr93vm4Iuf0vv5HkPgQVSv16mkcPqjYumtpg0RA I8QBhbsJLVaUZa/1ktb/UO1Jm2kg5+Q= -----END CERTIFICATE-----Generated at Fri Mar 14 10:05:39 2025 by rpki-client