$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be3cd95f-5dcc-301b-8970-aa9b7b048b63.roa File: be3cd95f-5dcc-301b-8970-aa9b7b048b63.roa (raw, json) Hash identifier: m1LimljEiuWOWFoWsw0QFxaocmjaeuzh2OghX+o9xps= Subject key identifier: 9E:22:13:CB:75:DC:A3:68:24:29:8F:28:D3:AC:CC:B4:84:DD:3D:2D Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Certificate serial: 010D0C9F432858497279B36DDA1E97A93D413940 Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be3cd95f-5dcc-301b-8970-aa9b7b048b63.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 393336 IP address blocks: 64.40.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:b3:6d:da:1e:97:a9:3d:41:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=70d69a4a-cacb-4211-a2e5-d6fe2eb067d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:60:de:47:9d:a0:97:3c:c9:b3:f8:60:c3:1a: 23:95:14:46:33:39:b2:a4:d8:1e:6e:e2:a1:25:5b: c1:27:51:43:be:46:a8:9f:7b:23:8a:63:9f:b7:bf: 64:6a:a9:12:f2:54:de:c3:32:56:98:fc:4f:0b:09: fb:c7:ce:52:61:99:12:35:b4:52:15:d7:86:1d:35: bc:f1:78:bf:37:aa:1b:f2:cd:95:b9:45:36:b1:47: 04:e7:3a:f4:ca:9c:c0:97:1d:15:82:db:fa:c3:52: ad:74:7b:3d:33:c2:cd:db:55:7d:b6:ff:77:81:2a: c0:99:9d:fb:2a:6b:48:d2:ad:ad:c6:0c:76:ba:35: 5c:be:fe:20:48:e2:3b:99:4a:1f:76:07:41:86:54: e2:20:75:00:78:df:82:dc:89:af:26:a0:33:a7:04: 89:f8:3f:ed:f1:76:09:ed:c5:f1:46:24:d7:78:b0: c9:ac:ea:58:78:ca:2f:59:c1:9e:ef:71:df:45:f6: 04:7c:51:99:cf:23:6e:83:86:ce:10:0d:2c:6f:1d: 9b:fd:54:c3:a9:5e:7c:9b:e0:a7:22:84:cd:cd:cb: 99:80:dd:43:fc:dc:0f:ab:04:c3:1b:74:1e:13:3f: eb:4a:e3:44:b0:c8:1f:66:09:38:f5:83:fe:68:a9: 51:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:22:13:CB:75:DC:A3:68:24:29:8F:28:D3:AC:CC:B4:84:DD:3D:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be3cd95f-5dcc-301b-8970-aa9b7b048b63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl X509v3 Authority Key Identifier: keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer sbgp-ipAddrBlock: critical IPv4: 64.40.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:73:81:f8:dd:68:38:e1:2a:92:15:42:7f:cd:f6:ae:63:7b: 35:b6:b7:4f:9c:d8:50:54:90:5f:91:cb:d4:90:e4:0e:8a:00: d3:0c:bf:5a:c5:ea:e3:f2:05:c2:71:c1:e1:20:bc:a0:7c:69: 0b:82:a2:c4:6e:f4:ee:52:d1:5e:01:b5:54:ce:53:ba:18:ca: 4f:11:a2:1f:4d:bf:5b:84:a4:f4:35:42:8f:a9:aa:48:1d:a2: 74:bc:5d:ce:3b:44:cc:3f:80:be:83:b6:67:6a:eb:91:f4:d2: 43:5d:3c:c7:85:02:1a:a2:8a:9d:d8:bc:85:7d:93:c4:c2:4c: ab:c0:e9:e6:ce:75:c9:1f:f8:ba:6b:4f:ef:1d:a1:81:ff:07: a9:48:e5:3b:47:4c:fd:d0:17:97:d7:9d:e7:05:a2:ae:25:d1: c6:a9:cd:d2:e7:e0:7a:c4:52:e2:d5:a3:57:59:3c:84:c7:13: b8:a2:d8:69:5d:a7:cf:8d:13:8e:fc:da:9e:8e:f9:11:cf:ea: e6:6d:77:a6:49:d3:b2:1c:d0:18:fa:33:ce:be:63:e4:7e:02: 8d:db:80:e3:8a:ed:a9:cd:37:d8:86:d2:fd:e0:e5:0b:f5:b8: 89:f3:56:9a:07:64:ad:8b:80:c5:4a:33:59:6e:0c:38:5c:a0: 66:2a:1f:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyebNt2h6XqT1BOUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0 ZWE5MB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk NzBkNjlhNGEtY2FjYi00MjExLWEyZTUtZDZmZTJlYjA2N2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2DeR52glzzJs/hgwxojlRRGMzmypNgebuKh JVvBJ1FDvkaon3sjimOft79kaqkS8lTewzJWmPxPCwn7x85SYZkSNbRSFdeGHTW8 8Xi/N6ob8s2VuUU2sUcE5zr0ypzAlx0Vgtv6w1KtdHs9M8LN21V9tv93gSrAmZ37 KmtI0q2txgx2ujVcvv4gSOI7mUofdgdBhlTiIHUAeN+C3ImvJqAzpwSJ+D/t8XYJ 7cXxRiTXeLDJrOpYeMovWcGe73HfRfYEfFGZzyNug4bOEA0sbx2b/VTDqV58m+Cn IoTNzcuZgN1D/NwPqwTDG3QeEz/rSuNEsMgfZgk49YP+aKlREQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4iE8t13KNoJCmPKNOszLSE3T0tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvYmUzY2Q5NWYtNWRjYy0z MDFiLTg5NzAtYWE5YjdiMDQ4YjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3 MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5 ZGI3YzRlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCgbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpzgfjdaDjhKpIVQn/N9q5jezW2t0+c2FBUkF+Ry9SQ5A6KANMMv1rF 6uPyBcJxweEgvKB8aQuCosRu9O5S0V4BtVTOU7oYyk8Roh9Nv1uEpPQ1Qo+pqkgd onS8Xc47RMw/gL6Dtmdq65H00kNdPMeFAhqiip3YvIV9k8TCTKvA6ebOdckf+Lpr T+8doYH/B6lI5TtHTP3QF5fXnecFoq4l0capzdLn4HrEUuLVo1dZPITHE7ii2Gld p8+NE4782p6O+RHP6uZtd6ZJ07Ic0Bj6M86+Y+R+Ao3bgOOK7anNN9iG0v3g5Qv1 uInzVpoHZK2LgMVKM1luDDhcoGYqH5E= -----END CERTIFICATE-----Generated at Thu Apr 17 03:19:00 2025 by rpki-client