$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/6d99cd54-71d5-3019-9c9b-65e3534462e3.roa File: 6d99cd54-71d5-3019-9c9b-65e3534462e3.roa (raw, json) Hash identifier: f6XsJJXrobgbhdkIAlzKP6GwEoMhWxKcVFGaumM7fvA= Subject key identifier: EB:36:C1:30:17:EF:E3:1C:EF:A6:75:1B:4E:19:49:0D:96:BC:E7:DF Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858494B64030CE457F2D98C5F0820 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/6d99cd54-71d5-3019-9c9b-65e3534462e3.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 13576 IP address blocks: 64.33.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:03:0c:e4:57:f2:d9:8c:5f:08:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=36b878f4-a63e-4376-9ede-ad77670f1253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6e:89:c1:f3:16:b3:fd:00:2a:63:40:92:42: 33:bf:1a:3b:ad:6a:46:d8:ef:33:c8:a5:79:ec:a7: 12:d2:8d:0a:03:eb:6b:a5:72:de:ad:e5:14:c9:7e: 8b:03:b2:03:b4:79:ad:22:8f:99:2d:cf:44:1f:8b: a7:df:9a:2d:0c:81:52:9e:3a:16:c1:7a:d1:cf:8f: b1:a5:e1:eb:ad:a7:7d:2d:70:f2:97:20:03:87:7a: 78:c7:0b:3d:62:cb:65:2c:77:0d:21:4f:98:0f:cb: 42:58:f8:cd:5b:bd:27:60:72:be:ba:3e:5d:91:4a: 09:6f:da:57:98:e6:ec:e3:f3:1d:2e:b4:6d:d6:d3: f1:e6:32:f7:44:46:d5:e6:17:8d:ea:4d:7b:3c:4c: 3c:cd:db:19:93:90:dd:58:ad:c9:b2:ca:60:a2:48: 18:f0:e1:96:33:e3:93:cd:23:f3:be:8d:08:23:25: fb:5d:ba:a7:35:c9:da:50:6a:c9:4f:9d:0b:56:54: 97:53:ba:53:ca:c4:1d:77:4d:b5:7e:6f:fd:67:43: 3a:56:8c:c6:49:20:a9:12:b6:68:3b:1d:22:ee:d1: ed:c2:81:5f:bc:ef:b0:69:48:f5:86:c4:6d:58:88: 90:6d:e9:6b:a7:8d:cd:d3:d9:2e:ce:b6:5c:37:07: 13:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:36:C1:30:17:EF:E3:1C:EF:A6:75:1B:4E:19:49:0D:96:BC:E7:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/6d99cd54-71d5-3019-9c9b-65e3534462e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:4d:ea:78:ec:12:45:93:98:8d:cc:e2:70:08:a2:12:39:14: 31:8b:2d:93:de:db:72:d9:4f:c4:8d:15:2f:32:1d:82:43:07: c7:46:16:e8:38:07:c5:e3:49:f7:54:cf:35:0e:8c:5e:36:41: c7:70:6c:2d:31:5c:a7:ee:4d:ab:3b:65:7a:86:01:a8:d7:ea: 20:92:c7:38:86:82:d7:f7:37:fb:99:26:38:c2:fd:6c:bb:6e: e1:9d:9b:3c:a5:46:b8:42:6b:ac:ba:c4:9b:72:ba:1d:3f:d9: 00:74:e0:3e:2e:ae:ce:4f:b4:14:33:46:f2:8b:a9:15:9b:f2: d8:4a:c1:2f:1f:67:07:85:64:8c:dc:95:45:4f:6c:aa:27:d0: f9:3d:67:b8:43:bf:be:cf:e2:6c:11:50:2e:59:a1:02:40:9d: 96:d5:20:5f:0a:0e:23:35:28:79:87:b2:c7:57:43:6f:e7:a3: 1a:d4:da:0f:98:5d:6e:06:f3:8b:9d:be:a0:7e:d7:dc:bd:f2: ff:96:56:cd:40:c4:7c:9b:c0:2d:15:d0:cf:f5:d5:31:64:d7: f0:af:78:ab:8b:75:eb:df:74:e8:ba:20:a6:88:7c:73:09:c5: 8e:5c:83:3c:7a:09:11:86:fd:ec:a3:80:48:79:87:a6:16:02: 67:52:39:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZAMM5Ffy2YxfCCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MzZiODc4ZjQtYTYzZS00Mzc2LTllZGUtYWQ3NzY3MGYxMjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv26JwfMWs/0AKmNAkkIzvxo7rWpG2O8zyKV5 7KcS0o0KA+trpXLereUUyX6LA7IDtHmtIo+ZLc9EH4un35otDIFSnjoWwXrRz4+x peHrrad9LXDylyADh3p4xws9YstlLHcNIU+YD8tCWPjNW70nYHK+uj5dkUoJb9pX mObs4/MdLrRt1tPx5jL3REbV5heN6k17PEw8zdsZk5DdWK3JsspgokgY8OGWM+OT zSPzvo0IIyX7XbqnNcnaUGrJT50LVlSXU7pTysQdd021fm/9Z0M6VozGSSCpErZo Ox0i7tHtwoFfvO+waUj1hsRtWIiQbelrp43N09kuzrZcNwcT/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOs2wTAX7+Mc76Z1G04ZSQ2WvOffMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNmQ5OWNkNTQtNzFkNS0z MDE5LTljOWItNjVlMzUzNDQ2MmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANRN6njsEkWTmI3M4nAIohI5FDGLLZPe23LZT8SNFS8yHYJDB8dGFug4 B8XjSfdUzzUOjF42QcdwbC0xXKfuTas7ZXqGAajX6iCSxziGgtf3N/uZJjjC/Wy7 buGdmzylRrhCa6y6xJtyuh0/2QB04D4urs5PtBQzRvKLqRWb8thKwS8fZweFZIzc lUVPbKon0Pk9Z7hDv77P4mwRUC5ZoQJAnZbVIF8KDiM1KHmHssdXQ2/noxrU2g+Y XW4G84udvqB+19y98v+WVs1AxHybwC0V0M/11TFk1/CveKuLdevfdOi6IKaIfHMJ xY5cgzx6CRGG/eyjgEh5h6YWAmdSOeI= -----END CERTIFICATE-----Generated at Thu Apr 17 08:32:37 2025 by rpki-client