$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/4e7d8a90-78e9-308a-898b-13d40c2410ea.roa File: 4e7d8a90-78e9-308a-898b-13d40c2410ea.roa (raw, json) Hash identifier: syhLIAJxcer5qIUojO6Tph0UB5IDlpoOdtcln8VWo/A= Subject key identifier: 60:76:73:BD:37:DF:03:EB:E0:79:85:DB:18:39:A9:1F:B1:59:10:9D Certificate issuer: /CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85 Certificate serial: 010D0C9F43285848E59BC27360561404C0977800 Authority key identifier: 76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/4e7d8a90-78e9-308a-898b-13d40c2410ea.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 6327 IP address blocks: 64.59.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:c2:73:60:56:14:04:c0:97:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=80ba1088-e8f1-4f59-be19-3e2906dd4304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bc:b2:0c:67:fe:34:fb:d4:4d:07:4f:91:88: 65:3b:39:93:7f:d6:b9:32:36:d9:78:a3:b7:67:62: f7:6e:3a:94:63:8e:41:6e:7a:69:db:29:b8:dd:1e: 10:a9:8f:bb:ad:cd:96:e9:5f:eb:c4:73:d0:a8:a4: 38:67:bd:26:ba:36:91:a6:9d:da:24:d7:91:be:be: f7:74:f1:5e:db:05:2d:0b:69:e4:b1:30:f5:6c:94: 12:f7:55:3c:e9:41:3b:87:08:d2:7a:da:e4:1e:98: 5b:dd:37:d4:6a:a4:8e:6b:92:5b:7a:f8:3e:99:42: e8:e8:cc:7f:c2:a0:de:59:d3:99:0d:5e:dd:7b:2b: fb:62:9f:f1:eb:3d:e3:66:86:be:48:48:e5:f3:e6: 7f:99:a7:d4:58:ba:11:ac:65:f1:53:5e:c1:29:78: a2:eb:6f:1f:7e:8d:a3:a9:ef:e7:01:45:73:80:29: f8:89:8a:4f:47:dd:c4:2c:b5:d8:15:d6:f3:3b:3d: 9e:df:c5:98:3b:41:2e:de:76:ac:f3:3b:96:f4:d6: 56:a0:76:cf:2d:24:6d:4e:89:32:70:59:5b:af:76: 21:e9:ed:10:d1:f3:e4:36:c8:52:45:a4:b2:85:75: 3b:5f:79:18:e5:7d:2c:5c:aa:49:01:92:0a:eb:dd: b3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:76:73:BD:37:DF:03:EB:E0:79:85:DB:18:39:A9:1F:B1:59:10:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/4e7d8a90-78e9-308a-898b-13d40c2410ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl X509v3 Authority Key Identifier: keyid:76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer sbgp-ipAddrBlock: critical IPv4: 64.59.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:f2:de:fc:32:b0:46:a2:61:0b:77:20:92:2b:a7:9c:83:c4: 08:0d:5f:37:b5:8d:21:57:af:d2:2e:15:3f:2d:42:37:57:b8: dd:cd:90:fd:a3:07:1e:ad:3b:14:e7:24:96:87:7e:ba:4b:bb: ba:7f:b8:ff:4c:b7:cb:d0:00:1b:d1:7f:ba:1e:90:90:7b:c0: c9:50:1e:b5:d6:fb:a8:81:10:d6:6b:8e:90:59:d4:b2:a2:d4: df:82:65:f7:66:b9:7b:95:e4:1a:fb:4a:83:91:f7:53:93:6d: 1d:fe:d4:ce:6c:3e:e7:b0:20:f0:b7:df:60:63:de:62:37:46: c8:d4:2b:a0:5a:e5:b4:45:91:d0:26:0c:68:07:c5:70:34:e3: bb:ee:d6:ab:7f:09:6d:42:88:c0:b8:de:e0:8b:6b:4f:b9:bd: 09:6d:a0:5a:39:6e:07:61:8d:0a:02:90:97:b5:f0:db:19:62: b7:47:bc:10:38:d4:d5:74:e3:25:33:95:99:38:c6:d1:c2:0f: 7b:2c:8e:e7:d4:43:71:9a:ed:d1:d9:aa:53:06:a2:fe:a6:a2: cd:6a:ca:62:7d:68:4d:62:45:7c:cd:b1:bf:b9:46:a8:26:02: 31:eb:3e:05:89:31:1a:99:8d:0d:49:d3:3b:c7:86:28:f6:09: 37:c5:ca:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm8JzYFYUBMCXeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmOWEzZmMtM2E4Yy00N2U0LTkxZmEtZDc4MDhiMDZh ZTg1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ODBiYTEwODgtZThmMS00ZjU5LWJlMTktM2UyOTA2ZGQ0MzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7yyDGf+NPvUTQdPkYhlOzmTf9a5MjbZeKO3 Z2L3bjqUY45Bbnpp2ym43R4QqY+7rc2W6V/rxHPQqKQ4Z70mujaRpp3aJNeRvr73 dPFe2wUtC2nksTD1bJQS91U86UE7hwjSetrkHphb3TfUaqSOa5Jbevg+mULo6Mx/ wqDeWdOZDV7deyv7Yp/x6z3jZoa+SEjl8+Z/mafUWLoRrGXxU17BKXii628ffo2j qe/nAUVzgCn4iYpPR93ELLXYFdbzOz2e38WYO0Eu3nas8zuW9NZWoHbPLSRtToky cFlbr3Yh6e0Q0fPkNshSRaSyhXU7X3kY5X0sXKpJAZIK692zuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGB2c7033wPr4HmF2xg5qR+xWRCdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWY5 YTNmYy0zYThjLTQ3ZTQtOTFmYS1kNzgwOGIwNmFlODUvNGU3ZDhhOTAtNzhlOS0z MDhhLTg5OGItMTNkNDBjMjQxMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFmOWEzZmMtM2E4Yy00N2U0LTkx ZmEtZDc4MDhiMDZhZTg1L2FhZjlhM2ZjLTNhOGMtNDdlNC05MWZhLWQ3ODA4YjA2 YWU4NS5jcmwwHwYDVR0jBBgwFoAUdg0UkffgTh768ACPZCs6jJ4PzkYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWY5YTNmYy0zYThjLTQ3ZTQtOTFmYS1kNzgw OGIwNmFlODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQDuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHry3vwysEaiYQt3IJIrp5yDxAgNXze1jSFXr9IuFT8tQjdXuN3NkP2j Bx6tOxTnJJaHfrpLu7p/uP9Mt8vQABvRf7oekJB7wMlQHrXW+6iBENZrjpBZ1LKi 1N+CZfdmuXuV5Br7SoOR91OTbR3+1M5sPuewIPC332Bj3mI3RsjUK6Ba5bRFkdAm DGgHxXA047vu1qt/CW1CiMC43uCLa0+5vQltoFo5bgdhjQoCkJe18NsZYrdHvBA4 1NV04yUzlZk4xtHCD3ssjufUQ3Ga7dHZqlMGov6mos1qymJ9aE1iRXzNsb+5Rqgm AjHrPgWJMRqZjQ1J0zvHhij2CTfFyvk= -----END CERTIFICATE-----Generated at Sat Apr 12 01:47:37 2025 by rpki-client