$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e16e00ad-982c-33fb-95af-67a63de985b7.roa File: e16e00ad-982c-33fb-95af-67a63de985b7.roa (raw, json) Hash identifier: gL/mHu7XOn6QR4HdYXvIkhcZbovORu4fg6OzUvVWKak= Subject key identifier: 08:C0:39:76:8D:F3:85:2A:EC:3A:B3:52:06:AE:73:90:CF:A9:00:18 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858490021624AD1EC662E00773D00 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e16e00ad-982c-33fb-95af-67a63de985b7.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 20014 IP address blocks: 64.33.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:62:4a:d1:ec:66:2e:00:77:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=36c50fc2-48b1-4907-8cc7-8937c9f3df8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9a:19:bd:d7:44:10:22:90:34:07:44:7e:37: 52:f4:af:cb:d7:b3:8a:1d:3f:10:37:eb:13:9c:ff: 17:b0:18:7a:10:65:be:ca:0f:c6:61:95:bf:59:61: 0f:c6:e7:21:9a:19:76:9e:47:00:55:4a:b0:02:bd: bf:bc:fc:c2:4b:e3:c4:3c:e1:0c:18:26:65:c0:6e: 67:60:8b:84:e8:b1:c8:6b:4e:46:7a:42:bd:82:c8: 89:eb:23:f3:1b:33:ac:c3:a0:f1:bf:cf:db:b4:c6: 40:a6:af:27:31:96:f9:bb:b6:03:45:af:6d:a3:5d: 96:d0:b1:0c:b9:53:3e:a1:a4:c2:11:15:c5:f6:28: ee:a7:6e:c1:58:a8:bf:95:dd:b4:09:9b:0f:57:60: 99:d2:9d:53:33:a2:73:c7:31:f0:7b:aa:9d:31:fb: 9d:5d:fe:7e:a7:39:c5:f2:6e:f8:ce:37:d1:f7:bd: ee:df:7e:da:5e:d8:31:3d:6a:7d:21:e9:68:a7:29: 46:b5:a0:95:9c:76:f9:de:73:e2:fd:a9:ad:34:be: df:2f:ec:e3:97:e6:0f:fb:a9:c8:ad:d3:02:e1:53: dc:4f:71:f4:e3:94:83:b7:81:9e:d5:3d:e2:0a:70: b9:95:40:12:42:b3:f3:9e:2a:9a:ab:aa:58:b1:99: 19:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C0:39:76:8D:F3:85:2A:EC:3A:B3:52:06:AE:73:90:CF:A9:00:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e16e00ad-982c-33fb-95af-67a63de985b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:a9:27:eb:e2:8c:8f:cb:09:4a:41:66:28:1d:80:8c:b1:f4: bd:71:53:e2:9f:71:ab:2b:2a:75:54:58:b0:32:af:f7:b0:70: 9d:4a:cb:d3:83:0f:44:79:f6:b3:95:e1:b0:b8:94:76:8e:f9: a9:bd:fd:3d:f2:e5:87:16:b5:2a:43:22:6f:f4:2d:8f:60:44: 03:3a:12:3d:7a:36:6c:df:4a:74:9e:32:cb:12:92:28:cd:56: 5c:f0:9a:42:62:3b:07:b9:7c:3f:98:fa:73:88:cc:0f:4f:27: 63:f8:f0:bf:91:33:99:c0:4d:ed:80:dd:b0:7f:ec:71:e5:f9: 7d:d4:c0:1f:05:63:b1:d9:c0:8d:36:ed:9e:bd:88:59:f9:d3: de:d2:65:b2:8d:dc:35:85:91:f7:0b:4c:62:1b:5f:7d:b1:2c: 37:c3:e4:7e:a2:f3:b4:23:79:ba:ff:88:ad:4f:b6:53:fd:73: ad:7e:48:2f:b7:57:87:2d:de:aa:11:04:80:ff:56:dd:d7:01: 32:f9:2c:71:d3:1c:65:ac:3a:0e:33:54:9e:3e:f7:49:12:3a: f5:08:8a:7c:85:97:12:2e:02:fd:89:fe:26:0a:94:88:c9:4a: 53:f5:15:98:c9:08:e1:b1:42:14:8c:e7:db:bf:25:1c:73:7f: a3:33:ae:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIWJK0exmLgB3PQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk MzZjNTBmYzItNDhiMS00OTA3LThjYzctODkzN2M5ZjNkZjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45oZvddEECKQNAdEfjdS9K/L17OKHT8QN+sT nP8XsBh6EGW+yg/GYZW/WWEPxuchmhl2nkcAVUqwAr2/vPzCS+PEPOEMGCZlwG5n YIuE6LHIa05GekK9gsiJ6yPzGzOsw6Dxv8/btMZApq8nMZb5u7YDRa9to12W0LEM uVM+oaTCERXF9ijup27BWKi/ld20CZsPV2CZ0p1TM6JzxzHwe6qdMfudXf5+pznF 8m74zjfR973u337aXtgxPWp9IelopylGtaCVnHb53nPi/amtNL7fL+zjl+YP+6nI rdMC4VPcT3H045SDt4Ge1T3iCnC5lUASQrPzniqaq6pYsZkZ2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjAOXaN84Uq7DqzUgauc5DPqQAYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZTE2ZTAwYWQtOTgyYy0z M2ZiLTk1YWYtNjdhNjNkZTk4NWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCHuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAipJ+vijI/LCUpBZigdgIyx9L1xU+KfcasrKnVUWLAyr/ewcJ1Ky9OD D0R59rOV4bC4lHaO+am9/T3y5YcWtSpDIm/0LY9gRAM6Ej16NmzfSnSeMssSkijN VlzwmkJiOwe5fD+Y+nOIzA9PJ2P48L+RM5nATe2A3bB/7HHl+X3UwB8FY7HZwI02 7Z69iFn5097SZbKN3DWFkfcLTGIbX32xLDfD5H6i87Qjebr/iK1PtlP9c61+SC+3 V4ct3qoRBID/Vt3XATL5LHHTHGWsOg4zVJ4+90kSOvUIinyFlxIuAv2J/iYKlIjJ SlP1FZjJCOGxQhSM59u/JRxzf6MzrsE= -----END CERTIFICATE-----Generated at Fri Mar 14 11:19:48 2025 by rpki-client