$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/4329ba6e-6e0a-3138-98ed-2d011364b519.roa File: 4329ba6e-6e0a-3138-98ed-2d011364b519.roa (raw, json) Hash identifier: QemTPu3gjCO2JR9OWrrZWHz+1oXP3ZCGbgGtR5ZjrfA= Subject key identifier: 34:6E:32:F3:79:FE:4F:27:C2:4F:69:24:38:6B:5E:50:75:36:EA:1F Certificate issuer: /CN=7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6 Certificate serial: 010D0C9F432858495ABEE3CCBE822B3A47A84600 Authority key identifier: 3D:F8:45:F1:26:71:A6:9C:56:6C:DE:41:7A:35:28:C5:81:AF:52:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/4329ba6e-6e0a-3138-98ed-2d011364b519.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 10297 IP address blocks: 64.79.64.0/19 maxlen: 24 173.45.64.0/18 maxlen: 24 173.244.160.0/19 maxlen: 24 207.182.128.0/19 maxlen: 24 209.190.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:e3:cc:be:82:2b:3a:47:a8:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=cbc7488e-8496-4e8e-9371-cb1fe4ce6327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:50:1e:ee:54:95:1e:f9:f2:0f:c6:61:86:3a: 6e:ac:c9:bd:aa:d6:af:d6:0c:68:46:fe:e0:9d:7a: 7e:96:d6:a1:0a:cf:09:19:84:01:41:ce:b3:fb:ed: 0b:91:56:6d:2a:d5:94:82:9c:ea:69:69:a8:19:3d: 08:bb:63:42:45:7f:b2:55:21:e4:3e:79:76:ce:b2: 49:b2:e1:30:5b:02:1e:e4:96:6c:2b:40:33:f5:b4: 03:48:d4:f1:67:67:53:68:8c:96:21:24:97:41:74: 78:7b:86:95:68:1d:a9:d4:6b:f9:87:1a:88:83:bf: 72:99:8b:70:ef:f1:67:c9:69:dd:3a:06:39:b4:7c: ac:53:5e:23:17:78:fe:28:dc:cb:8e:4c:5b:f5:b3: 7b:6a:99:f0:d5:9d:04:a2:b6:03:44:3c:30:af:3f: 08:44:ff:a1:6e:ae:93:90:9c:38:eb:77:77:8f:7f: a7:20:14:b5:19:06:31:e6:fe:0a:7d:0c:1a:fe:b3: f7:14:80:dd:32:e1:62:cc:9d:ee:70:08:ea:2a:93: 62:66:4f:56:70:8c:d5:c1:85:50:42:d1:8d:1f:63: 6f:15:a3:1c:4e:20:5e:f8:57:c7:44:51:85:ff:57: b0:38:02:98:b9:9f:dd:07:5e:b7:7e:9f:55:2b:b3: b8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6E:32:F3:79:FE:4F:27:C2:4F:69:24:38:6B:5E:50:75:36:EA:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/4329ba6e-6e0a-3138-98ed-2d011364b519.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.crl X509v3 Authority Key Identifier: keyid:3D:F8:45:F1:26:71:A6:9C:56:6C:DE:41:7A:35:28:C5:81:AF:52:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.cer sbgp-ipAddrBlock: critical IPv4: 64.79.64.0/19 173.45.64.0/18 173.244.160.0/19 207.182.128.0/19 209.190.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:7a:a6:99:90:a3:22:33:6c:41:3a:17:80:a6:5d:1c:9c:f6: 41:cb:61:b5:6f:34:a0:25:64:00:e6:c7:2c:0f:be:cf:13:74: d4:47:06:de:b3:eb:c0:ef:fd:75:ef:22:a9:c2:47:ff:5e:e8: 4a:0c:0c:91:ce:87:2c:af:43:03:bb:ef:1c:c3:9f:22:51:d9: 50:60:f8:99:48:d9:6d:b1:41:78:77:f6:97:38:41:ec:c9:9c: 51:75:37:b7:b5:96:8a:f3:40:4c:53:98:77:46:b3:d0:51:90: eb:ad:15:95:34:12:69:8e:3c:03:d2:ca:2d:2f:58:ed:b9:ac: c2:cd:1f:e1:4f:db:1a:20:ab:5b:ba:4c:39:b3:39:17:61:fd: bd:3d:c5:43:f4:09:16:98:0a:06:84:18:96:60:11:3b:a6:68: 19:43:6d:a2:e6:af:0d:ed:39:b3:92:a5:26:71:36:9d:ce:54: 9a:d1:27:ea:28:27:4e:3c:82:d0:82:5e:63:0c:b9:b0:b4:44: 47:43:65:55:e1:1b:67:98:a6:54:f1:e8:f3:36:2f:3b:59:29: c7:43:e7:74:a4:00:0a:30:e1:d6:dc:e3:ba:38:99:bc:51:64: 59:a0:f7:7f:ba:73:45:30:66:a6:e9:7e:50:5b:24:7f:d3:b3: 6a:0a:34:9e -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWElavuPMvoIrOkeoRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y1ZTRjYWEtMmVhNy00NjAyLWEzYjAtNWM5ZmNkMmU1 NGU2MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk Y2JjNzQ4OGUtODQ5Ni00ZThlLTkzNzEtY2IxZmU0Y2U2MzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVAe7lSVHvnyD8ZhhjpurMm9qtav1gxoRv7g nXp+ltahCs8JGYQBQc6z++0LkVZtKtWUgpzqaWmoGT0Iu2NCRX+yVSHkPnl2zrJJ suEwWwIe5JZsK0Az9bQDSNTxZ2dTaIyWISSXQXR4e4aVaB2p1Gv5hxqIg79ymYtw 7/FnyWndOgY5tHysU14jF3j+KNzLjkxb9bN7apnw1Z0EorYDRDwwrz8IRP+hbq6T kJw463d3j3+nIBS1GQYx5v4KfQwa/rP3FIDdMuFizJ3ucAjqKpNiZk9WcIzVwYVQ QtGNH2NvFaMcTiBe+FfHRFGF/1ewOAKYuZ/dB163fp9VK7O4+QIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFDRuMvN5/k8nwk9pJDhrXlB1NuofMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ZjVl NGNhYS0yZWE3LTQ2MDItYTNiMC01YzlmY2QyZTU0ZTYvNDMyOWJhNmUtNmUwYS0z MTM4LTk4ZWQtMmQwMTEzNjRiNTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2Y1ZTRjYWEtMmVhNy00NjAyLWEz YjAtNWM5ZmNkMmU1NGU2LzdmNWU0Y2FhLTJlYTctNDYwMi1hM2IwLTVjOWZjZDJl NTRlNi5jcmwwHwYDVR0jBBgwFoAUPfhF8SZxppxWbN5BejUoxYGvUmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ZjVlNGNhYS0yZWE3LTQ2MDItYTNiMC01Yzlm Y2QyZTU0ZTYuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQFQE9AAwQG rS1AAwQFrfSgAwQFz7aAAwQH0b4AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJ96ppmQoyIzbEE6F4CmXRyc 9kHLYbVvNKAlZADmxywPvs8TdNRHBt6z68Dv/XXvIqnCR/9e6EoMDJHOhyyvQwO7 7xzDnyJR2VBg+JlI2W2xQXh39pc4QezJnFF1N7e1lorzQExTmHdGs9BRkOutFZU0 EmmOPAPSyi0vWO25rMLNH+FP2xogq1u6TDmzORdh/b09xUP0CRaYCgaEGJZgETum aBlDbaLmrw3tObOSpSZxNp3OVJrRJ+ooJ048gtCCXmMMubC0REdDZVXhG2eYplTx 6PM2LztZKcdD53SkAAow4dbc47o4mbxRZFmg93+6c0UwZqbpflBbJH/Ts2oKNJ4= -----END CERTIFICATE-----Generated at Tue Apr 8 21:01:16 2025 by rpki-client