$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/22ffa8f4-e794-3a66-89df-98333aa3af9f.roa File: 22ffa8f4-e794-3a66-89df-98333aa3af9f.roa (raw, json) Hash identifier: QEHt6w46xow07+pP4r3b6IUYQkddEEDlTyvk3c1FWrc= Subject key identifier: CA:B4:02:5F:97:5E:03:87:01:B9:0A:05:C3:50:51:31:F5:DA:C8:40 Certificate issuer: /CN=29c10060-705c-45ae-937b-544864b670d7 Certificate serial: 010D0C9F43285848E59BC020AA157D32AD672CC0 Authority key identifier: 7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/22ffa8f4-e794-3a66-89df-98333aa3af9f.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 14618 IP address blocks: 64.71.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:c0:20:aa:15:7d:32:ad:67:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29c10060-705c-45ae-937b-544864b670d7 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=1f5b3b53-32ff-4c90-bf04-abdabe4d4b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:36:be:e3:68:59:50:ea:f8:7d:da:1a:8d:62: d5:2b:88:4d:f2:22:8b:4d:9a:1d:04:ab:98:7d:85: b9:2b:e2:70:0d:cd:cd:c9:6c:10:39:db:0c:00:00: 85:d9:c2:f7:2c:15:4e:db:3c:aa:f2:41:5f:74:f0: 28:38:d9:9a:c2:3d:c6:7b:c2:0e:3b:d0:72:ec:6c: 31:ba:e8:55:4c:90:e5:df:7b:5b:99:65:bf:eb:79: 48:d9:b7:c8:56:00:55:e3:bb:96:69:4e:d5:c5:71: e0:b8:62:70:4f:64:9f:04:55:2e:48:2e:44:35:84: 91:02:17:ce:aa:16:3d:73:62:b9:3a:ac:a9:70:28: fc:44:bc:94:d8:6a:e5:b0:ad:c7:86:d7:c4:bf:16: ce:4d:81:b8:86:2d:cc:5f:a8:6a:48:f1:64:2e:44: a5:7c:88:6a:06:e7:8b:a4:8b:d2:77:ab:1d:e4:97: 5d:cb:b5:3c:4b:54:2b:6a:e1:81:a3:25:ab:fa:94: 1d:67:98:19:2c:11:48:69:be:16:4e:88:43:25:4f: c8:43:c5:02:13:85:9e:6e:a7:21:3c:15:bd:56:3b: 91:dd:44:2f:2c:ac:ed:a1:f8:37:35:e1:fd:85:c2: c7:67:2c:93:fa:f1:fa:57:d9:27:a2:28:24:66:78: e6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B4:02:5F:97:5E:03:87:01:B9:0A:05:C3:50:51:31:F5:DA:C8:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/22ffa8f4-e794-3a66-89df-98333aa3af9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.crl X509v3 Authority Key Identifier: keyid:7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer sbgp-ipAddrBlock: critical IPv4: 64.71.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:b1:6c:d9:ef:50:b2:e1:37:f9:6b:00:14:f9:d4:e4:81:a8: fb:e9:13:b6:fc:c4:53:44:50:c9:b1:cc:4b:99:8e:a7:c4:6f: 33:74:c8:16:5a:19:4d:17:76:95:71:be:26:1c:d3:25:9b:cd: 6d:7c:19:63:d8:14:d3:f4:0a:c3:a1:26:b3:1b:94:f6:f0:7a: 2e:66:cd:c3:f4:67:88:51:43:ca:5a:83:fa:e2:0f:b3:eb:04: 60:49:cc:d4:9b:77:93:8e:73:af:00:27:d8:a1:2b:07:29:6c: b5:c2:50:eb:b1:f6:bc:b0:77:7d:b9:b1:62:66:38:70:91:b5: 7f:bb:73:44:8c:de:66:70:b5:3d:c8:6a:5e:6b:c2:85:89:b7: d9:b2:83:9a:8d:18:57:a4:51:2e:73:62:b2:4b:89:7c:9c:6c: 46:c6:16:3c:42:d3:d6:fa:68:2c:14:e2:e4:af:fd:b3:60:8e: 07:96:08:9b:ca:0e:97:1e:77:d0:6c:eb:bf:1e:97:03:c4:b2: 3a:f1:2b:ba:cf:a0:ac:ef:c9:a0:ef:9c:08:3d:55:b9:50:5e: f0:bd:56:f9:1c:d4:61:68:a2:c7:2a:7b:10:2b:09:7f:f3:c6: 4f:4e:c9:17:1c:38:e0:ec:15:1c:d1:02:d2:7c:7e:c9:35:1f: 0f:89:be:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm8AgqhV9Mq1nLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjljMTAwNjAtNzA1Yy00NWFlLTkzN2ItNTQ0ODY0YjY3 MGQ3MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk MWY1YjNiNTMtMzJmZi00YzkwLWJmMDQtYWJkYWJlNGQ0YjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyza+42hZUOr4fdoajWLVK4hN8iKLTZodBKuY fYW5K+JwDc3NyWwQOdsMAACF2cL3LBVO2zyq8kFfdPAoONmawj3Ge8IOO9By7Gwx uuhVTJDl33tbmWW/63lI2bfIVgBV47uWaU7VxXHguGJwT2SfBFUuSC5ENYSRAhfO qhY9c2K5OqypcCj8RLyU2GrlsK3HhtfEvxbOTYG4hi3MX6hqSPFkLkSlfIhqBueL pIvSd6sd5Jddy7U8S1QrauGBoyWr+pQdZ5gZLBFIab4WTohDJU/IQ8UCE4Webqch PBW9VjuR3UQvLKztofg3NeH9hcLHZyyT+vH6V9knoigkZnjm7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMq0Al+XXgOHAbkKBcNQUTH12shAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWMx MDA2MC03MDVjLTQ1YWUtOTM3Yi01NDQ4NjRiNjcwZDcvMjJmZmE4ZjQtZTc5NC0z YTY2LTg5ZGYtOTgzMzNhYTNhZjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjljMTAwNjAtNzA1Yy00NWFlLTkz N2ItNTQ0ODY0YjY3MGQ3LzI5YzEwMDYwLTcwNWMtNDVhZS05MzdiLTU0NDg2NGI2 NzBkNy5jcmwwHwYDVR0jBBgwFoAUerujR0uJvb0x9xey3AKylKEuC8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWMxMDA2MC03MDVjLTQ1YWUtOTM3Yi01NDQ4 NjRiNjcwZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEfuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSxbNnvULLhN/lrABT51OSBqPvpE7b8xFNEUMmxzEuZjqfEbzN0yBZa GU0XdpVxviYc0yWbzW18GWPYFNP0CsOhJrMblPbwei5mzcP0Z4hRQ8pag/riD7Pr BGBJzNSbd5OOc68AJ9ihKwcpbLXCUOux9rywd325sWJmOHCRtX+7c0SM3mZwtT3I al5rwoWJt9myg5qNGFekUS5zYrJLiXycbEbGFjxC09b6aCwU4uSv/bNgjgeWCJvK Dpced9Bs678elwPEsjrxK7rPoKzvyaDvnAg9VblQXvC9Vvkc1GFooscqexArCX/z xk9OyRccOODsFRzRAtJ8fsk1Hw+Jvp8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:36 2025 by rpki-client