$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ac18ad68-7a7a-38c0-8866-f14b39a8a037.roa File: ac18ad68-7a7a-38c0-8866-f14b39a8a037.roa (raw, json) Hash identifier: VAwB5qTRnfdXOxmnJa+/nOGi/zssBOFG4v7HZv9wzMo= Subject key identifier: A6:94:1C:9D:3F:54:82:C9:92:C5:B4:BE:56:FE:F4:34:D2:06:82:E6 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285848F926D874066E4368048A0740 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ac18ad68-7a7a-38c0-8866-f14b39a8a037.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 397787 IP address blocks: 64.62.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:d8:74:06:6e:43:68:04:8a:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=5e9ac4db-312e-4af5-b114-93f26d8a30c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d3:e0:30:0b:64:c7:48:6c:06:df:60:29:07: 22:3c:9e:76:e2:62:6e:89:00:d4:c0:a4:ab:a7:bd: 53:34:c3:e4:bc:0f:93:47:74:d4:95:c7:15:34:9a: 17:35:60:7c:d3:e2:e1:89:a7:7f:cf:2e:a9:46:89: 40:e8:93:39:6e:26:a2:71:31:57:17:1f:c1:ce:99: 4b:4d:5a:0f:e5:b4:dc:b9:23:bb:48:68:f4:f2:b6: 99:53:f4:0d:e1:0e:f0:21:02:8b:eb:b6:0c:b8:9a: 28:66:a8:26:5c:0f:18:32:d2:1d:95:ce:d9:74:d4: e2:5d:79:93:6b:a8:90:9a:4e:41:fb:df:78:8a:da: 5c:51:2d:18:4f:7c:19:8c:72:dd:c4:81:7e:06:a0: ba:08:85:f2:fd:4d:f7:92:2b:68:5e:68:f9:29:10: f8:ad:e4:e4:6b:89:c4:87:3f:ae:18:49:bc:d4:af: 12:5d:18:58:0b:0b:98:41:84:26:fc:17:38:b9:0d: 8f:e2:25:32:04:3f:3d:d8:0d:fe:73:59:de:d8:bb: aa:3a:51:68:f0:36:40:b3:d8:87:62:fd:e2:0a:88: 27:2a:88:4c:24:d1:4b:26:0d:73:ba:09:41:56:78: 9f:5d:c4:7f:c6:92:a7:84:81:ff:a4:d4:2c:14:de: 34:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:94:1C:9D:3F:54:82:C9:92:C5:B4:BE:56:FE:F4:34:D2:06:82:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ac18ad68-7a7a-38c0-8866-f14b39a8a037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 64.62.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:bf:1a:e7:6d:70:01:6d:be:6e:7a:b2:6a:ad:2f:5e:10:4b: c4:03:1f:31:53:0c:ee:a2:d1:c1:bc:c2:3a:52:f3:7c:9e:48: e3:0d:be:77:cc:39:67:9b:2d:93:e1:48:d1:c3:7b:5e:42:8c: 29:2a:74:ae:8f:4a:ab:f6:12:3c:42:32:62:ba:8d:2b:16:f9: 4c:39:f3:4a:08:16:36:08:7c:56:84:09:e4:4a:43:b4:33:b2: 8c:3a:65:54:8b:0c:3c:81:23:72:75:06:f3:08:43:a2:4f:c2: 97:02:2e:01:e8:02:3a:05:f8:63:22:58:a8:ef:be:5e:ae:6d: 35:36:c1:18:ae:fe:af:ea:41:2e:35:da:9a:cb:f9:2e:72:30: 81:f9:e5:3e:cd:fe:a1:65:43:20:d4:2f:e1:03:65:48:db:74: bb:68:45:72:31:aa:a5:88:c6:8e:ba:4c:86:90:ef:15:9f:9f: 5c:05:e0:45:b2:e6:f0:12:4a:ae:a5:0b:8b:90:32:51:a1:d8: 87:c8:b8:42:75:8d:61:8e:ad:0a:67:9c:c8:79:7d:60:e4:b4: 21:d6:bd:b9:eb:fb:75:13:bb:e3:31:0e:d9:07:af:94:d5:7d: b1:9d:21:f0:5c:58:75:9a:fc:10:bc:31:33:02:26:99:37:86: 5d:7f:96:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5Jth0Bm5DaASKB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NWU5YWM0ZGItMzEyZS00YWY1LWIxMTQtOTNmMjZkOGEzMGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tPgMAtkx0hsBt9gKQciPJ524mJuiQDUwKSr p71TNMPkvA+TR3TUlccVNJoXNWB80+Lhiad/zy6pRolA6JM5biaicTFXFx/BzplL TVoP5bTcuSO7SGj08raZU/QN4Q7wIQKL67YMuJooZqgmXA8YMtIdlc7ZdNTiXXmT a6iQmk5B+994itpcUS0YT3wZjHLdxIF+BqC6CIXy/U33kitoXmj5KRD4reTka4nE hz+uGEm81K8SXRhYCwuYQYQm/Bc4uQ2P4iUyBD892A3+c1ne2LuqOlFo8DZAs9iH Yv3iCognKohMJNFLJg1zuglBVnifXcR/xpKnhIH/pNQsFN40lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKaUHJ0/VILJksW0vlb+9DTSBoLmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWMxOGFkNjgtN2E3YS0z OGMwLTg4NjYtZjE0YjM5YThhMDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD6qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEC/GudtcAFtvm56smqtL14QS8QDHzFTDO6i0cG8wjpS83yeSOMNvnfM OWebLZPhSNHDe15CjCkqdK6PSqv2EjxCMmK6jSsW+Uw580oIFjYIfFaECeRKQ7Qz sow6ZVSLDDyBI3J1BvMIQ6JPwpcCLgHoAjoF+GMiWKjvvl6ubTU2wRiu/q/qQS41 2prL+S5yMIH55T7N/qFlQyDUL+EDZUjbdLtoRXIxqqWIxo66TIaQ7xWfn1wF4EWy 5vASSq6lC4uQMlGh2IfIuEJ1jWGOrQpnnMh5fWDktCHWvbnr+3UTu+MxDtkHr5TV fbGdIfBcWHWa/BC8MTMCJpk3hl1/lhc= -----END CERTIFICATE-----Generated at Fri Apr 4 17:51:16 2025 by rpki-client