$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d930136e-3afa-3997-ac01-9aeed5e2d0b6.roa File: d930136e-3afa-3997-ac01-9aeed5e2d0b6.roa (raw, json) Hash identifier: 7JrXpUZ3vTf07fw1pnt/qhH+sLNvy1ko+Gtwtf6h4Mw= Subject key identifier: B8:2B:5E:74:70:87:1A:D4:AB:10:F6:33:DC:55:CB:B9:69:B1:DE:33 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858496E49870D809892D099DE35C0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d930136e-3afa-3997-ac01-9aeed5e2d0b6.roa Signing time: Sun 06 Apr 2025 01:00:47 +0000 ROA not before: Sun 06 Apr 2025 01:00:47 +0000 ROA not after: Sat 05 Jul 2025 01:00:47 +0000 asID: 18785 IP address blocks: 64.33.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6e:49:87:0d:80:98:92:d0:99:de:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Apr 6 01:00:47 2025 GMT Not After : Jul 5 01:00:47 2025 GMT Subject: CN=5b803ad3-37eb-49e5-a758-e69c32482d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:19:b7:58:4e:8e:41:64:c3:9d:99:1b:06:47: cd:be:9e:a2:ea:8b:87:34:78:f4:7e:f1:a9:f8:01: 4c:33:e6:a3:30:ae:da:f4:b0:c7:8e:31:7f:a4:65: e5:ae:ed:cd:d2:42:4f:82:11:ed:c7:7d:6d:bd:4d: 71:32:13:5c:96:ef:12:16:23:5e:3c:e7:d2:08:58: 43:72:a1:f9:49:8c:ef:3c:34:59:ce:2a:51:26:d6: 83:5a:26:03:30:f3:62:d7:6f:ea:f7:05:0a:34:60: 5e:82:f7:97:8c:31:ce:87:0f:40:92:ec:8f:bd:78: 0c:07:50:ac:d8:69:c2:3a:53:45:2f:f4:9f:fd:1f: 96:22:77:2c:02:22:07:d8:0a:c4:13:55:36:2d:94: 97:b9:d0:f1:ae:bb:e1:72:eb:33:74:f8:e3:56:96: 1b:4e:11:fd:f6:14:13:34:69:81:b3:70:f6:ef:71: 3c:55:f7:02:89:84:b1:c4:56:06:fe:37:0a:af:76: 2f:fa:16:99:40:59:ad:36:80:b8:2b:f3:cd:48:89: da:24:0b:97:5c:ab:94:cf:d1:35:76:3a:46:5f:57: 02:f6:93:67:e5:dc:c6:38:f4:5e:69:cb:c7:99:fa: 0a:36:52:53:80:1c:49:84:19:0a:9a:3d:0a:59:4d: c5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2B:5E:74:70:87:1A:D4:AB:10:F6:33:DC:55:CB:B9:69:B1:DE:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d930136e-3afa-3997-ac01-9aeed5e2d0b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:2e:27:92:cd:36:b4:d7:62:7a:75:af:e0:79:a5:c6:4e:37: 0c:57:27:0d:db:d8:c2:ad:86:60:74:54:3b:47:d5:35:5b:3e: 02:3f:a4:2a:55:3a:90:4f:76:7f:34:6e:17:93:a3:11:e8:0a: 04:0a:fd:55:c3:f9:5f:0e:2f:6d:2b:fa:48:10:96:e2:7f:79: c9:e6:a3:5e:11:f8:76:31:85:a9:1a:55:d0:c2:07:54:7f:db: 35:f4:95:7e:67:93:c2:7c:41:d8:c2:b4:89:6e:80:9b:fd:b5: f1:3a:15:92:d5:ea:22:e8:a3:8b:f0:ed:d1:86:32:f3:7a:0a: fd:88:8e:50:c6:ac:69:3b:8d:97:fb:2b:a0:f1:42:de:3b:2c: 28:00:08:39:f9:c1:27:bf:d1:7a:a9:54:12:b2:8b:af:a8:f2: f3:d0:ac:16:bf:62:ec:55:b9:e4:ed:4e:b9:3b:1e:9f:36:d7: 25:be:2d:5e:3a:c3:5b:49:81:ac:11:ba:f9:c4:84:d5:3f:5a: 5e:e0:cd:a3:36:fa:33:eb:60:9d:43:a7:aa:cf:b1:d1:45:02: 87:ae:ea:08:55:6d:9e:95:b7:1f:04:c7:36:32:b5:2f:de:de: e5:18:fb:95:8a:ae:a0:85:4f:f3:35:68:b6:39:a7:6a:74:06: 8d:fe:d2:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEluSYcNgJiS0JneNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDQwNjAxMDA0N1oXDTI1MDcwNTAxMDA0N1owLzEtMCsGA1UEAxMk NWI4MDNhZDMtMzdlYi00OWU1LWE3NTgtZTY5YzMyNDgyZDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxm3WE6OQWTDnZkbBkfNvp6i6ouHNHj0fvGp +AFMM+ajMK7a9LDHjjF/pGXlru3N0kJPghHtx31tvU1xMhNclu8SFiNePOfSCFhD cqH5SYzvPDRZzipRJtaDWiYDMPNi12/q9wUKNGBegveXjDHOhw9AkuyPvXgMB1Cs 2GnCOlNFL/Sf/R+WIncsAiIH2ArEE1U2LZSXudDxrrvhcuszdPjjVpYbThH99hQT NGmBs3D273E8VfcCiYSxxFYG/jcKr3Yv+haZQFmtNoC4K/PNSInaJAuXXKuUz9E1 djpGX1cC9pNn5dzGOPReacvHmfoKNlJTgBxJhBkKmj0KWU3FbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgrXnRwhxrUqxD2M9xVy7lpsd4zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZDkzMDEzNmUtM2FmYS0z OTk3LWFjMDEtOWFlZWQ1ZTJkMGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCH6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8uJ5LNNrTXYnp1r+B5pcZONwxXJw3b2MKthmB0VDtH1TVbPgI/pCpV OpBPdn80bheToxHoCgQK/VXD+V8OL20r+kgQluJ/ecnmo14R+HYxhakaVdDCB1R/ 2zX0lX5nk8J8QdjCtIlugJv9tfE6FZLV6iLoo4vw7dGGMvN6Cv2IjlDGrGk7jZf7 K6DxQt47LCgACDn5wSe/0XqpVBKyi6+o8vPQrBa/YuxVueTtTrk7Hp821yW+LV46 w1tJgawRuvnEhNU/Wl7gzaM2+jPrYJ1Dp6rPsdFFAoeu6ghVbZ6Vtx8ExzYytS/e 3uUY+5WKrqCFT/M1aLY5p2p0Bo3+0lc= -----END CERTIFICATE-----Generated at Sat Apr 12 10:11:34 2025 by rpki-client