$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/86895382-8fbd-3247-a11b-816425f20c48.roa File: 86895382-8fbd-3247-a11b-816425f20c48.roa (raw, json) Hash identifier: rhAYjTxFOjxsXStyGMtpenahOWMnSzaBhVIbK52lSkc= Subject key identifier: F2:F1:56:5C:C5:5E:E1:69:D7:B8:7C:02:33:EF:5B:E0:13:72:D8:15 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858490021681A5150B135F4075C40 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/86895382-8fbd-3247-a11b-816425f20c48.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 399439 IP address blocks: 64.33.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:68:1a:51:50:b1:35:f4:07:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=d612ccd5-8015-4a83-be65-a01885e2e509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:78:06:3d:41:49:47:70:fd:ee:79:f8:31:1c: d6:7b:7e:89:82:31:71:42:34:e4:6e:69:03:19:47: 21:b3:64:db:c3:35:f9:5b:57:4a:4c:9f:3d:b3:29: 71:c9:89:45:45:09:78:42:3c:05:63:2b:29:52:66: 5b:2a:67:ed:93:34:31:ff:23:9e:be:8d:96:cc:73: 89:45:6c:16:cc:da:d7:d0:86:a1:4d:6b:45:7a:a6: c8:43:1a:0a:75:f5:19:5f:0b:e2:56:d6:10:1c:2c: e7:59:e9:d2:c8:0a:91:13:8a:c6:35:0a:13:4d:2e: 1b:ee:f7:1a:d5:d8:20:98:71:4e:9c:ff:59:a4:0d: 99:ce:46:c3:a9:8d:ce:c3:74:ab:94:58:d7:a5:e0: 1d:de:c4:e7:70:8f:d8:51:f7:3b:90:a6:bd:82:a1: b6:06:2a:d4:10:5d:6f:0e:5f:d1:7d:84:95:a9:b7: 41:6f:27:01:5f:fd:ea:d4:90:c4:76:d4:41:e6:13: f9:f0:d0:5a:7e:85:7d:eb:88:5f:33:79:68:5d:3b: 15:a1:89:56:48:fd:54:f9:29:02:7b:d1:f9:0b:56: 15:67:73:91:1a:e0:75:10:8a:79:8b:16:ec:26:ad: 51:62:5a:09:15:f2:48:b5:ac:df:5a:d2:10:1f:e3: 88:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F1:56:5C:C5:5E:E1:69:D7:B8:7C:02:33:EF:5B:E0:13:72:D8:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/86895382-8fbd-3247-a11b-816425f20c48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:2a:6d:dc:1e:8c:86:75:a6:7f:ee:2d:7c:78:6c:20:c1:fe: 4d:ed:b3:e9:49:6a:2b:52:bf:71:ec:7e:ba:09:90:32:01:51: e9:fa:aa:84:49:31:f2:c2:ec:b2:91:f8:b8:8a:59:51:71:8f: 2e:f5:82:d5:5c:3f:20:94:bf:5c:6e:2a:60:6a:b6:96:81:8b: 5b:48:9a:c3:ee:79:c9:ea:bf:c1:ee:81:d4:5a:01:47:7b:25: d2:77:b1:f2:d8:7f:66:db:ec:94:c8:6e:87:92:54:ee:77:31: 55:8f:ef:bb:4b:8b:46:ed:2b:1f:21:66:72:e4:e8:94:84:9f: c8:6e:fa:8b:ac:e2:9e:27:f0:4a:cc:ab:6e:65:74:63:b8:78: eb:d3:ac:37:9b:d4:a6:67:e7:fd:51:35:91:97:a8:04:ef:b0: 58:41:0e:76:2d:65:bc:06:4e:91:6f:24:0d:72:a8:32:11:be: d5:c5:b6:64:0d:57:92:4f:31:ed:37:ea:a4:aa:23:cf:76:da: 54:07:04:a7:fc:93:d3:21:f7:cf:07:2f:15:b8:28:67:75:1b: ba:ff:f8:eb:13:47:71:ab:c4:79:8c:ea:74:cf:33:0d:02:f9: 65:4b:ef:e0:6f:21:d7:b8:4e:81:7c:e5:e9:b0:11:90:0c:94: 1e:8e:0d:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIWgaUVCxNfQHXEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk ZDYxMmNjZDUtODAxNS00YTgzLWJlNjUtYTAxODg1ZTJlNTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3gGPUFJR3D97nn4MRzWe36JgjFxQjTkbmkD GUchs2TbwzX5W1dKTJ89sylxyYlFRQl4QjwFYyspUmZbKmftkzQx/yOevo2WzHOJ RWwWzNrX0IahTWtFeqbIQxoKdfUZXwviVtYQHCznWenSyAqRE4rGNQoTTS4b7vca 1dggmHFOnP9ZpA2ZzkbDqY3Ow3SrlFjXpeAd3sTncI/YUfc7kKa9gqG2BirUEF1v Dl/RfYSVqbdBbycBX/3q1JDEdtRB5hP58NBafoV964hfM3loXTsVoYlWSP1U+SkC e9H5C1YVZ3ORGuB1EIp5ixbsJq1RYloJFfJItazfWtIQH+OIbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLxVlzFXuFp17h8AjPvW+ATctgVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvODY4OTUzODItOGZiZC0z MjQ3LWExMWItODE2NDI1ZjIwYzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUqbdwejIZ1pn/uLXx4bCDB/k3ts+lJaitSv3HsfroJkDIBUen6qoRJ MfLC7LKR+LiKWVFxjy71gtVcPyCUv1xuKmBqtpaBi1tImsPuecnqv8HugdRaAUd7 JdJ3sfLYf2bb7JTIboeSVO53MVWP77tLi0btKx8hZnLk6JSEn8hu+ous4p4n8ErM q25ldGO4eOvTrDeb1KZn5/1RNZGXqATvsFhBDnYtZbwGTpFvJA1yqDIRvtXFtmQN V5JPMe036qSqI8922lQHBKf8k9Mh988HLxW4KGd1G7r/+OsTR3GrxHmM6nTPMw0C +WVL7+BvIde4ToF85emwEZAMlB6ODfQ= -----END CERTIFICATE-----Generated at Fri Mar 14 08:33:45 2025 by rpki-client