$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/2a4e3ad6-f6ba-30b9-a4c5-b4d8db106425.roa File: 2a4e3ad6-f6ba-30b9-a4c5-b4d8db106425.roa (raw, json) Hash identifier: xtKJ9cmnzEupHjkJL1Az4v1VweMco0sqwm9wURIPzP4= Subject key identifier: D4:6B:46:D6:D6:D6:63:24:58:E6:80:11:9F:89:0C:6F:85:62:97:64 Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F43285848E9CBDFA9B87A09DA7F145200 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/2a4e3ad6-f6ba-30b9-a4c5-b4d8db106425.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 13807 IP address blocks: 64.64.144.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:df:a9:b8:7a:09:da:7f:14:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=6c84f025-797d-43ca-b6d0-193636bed297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e5:55:1e:4c:62:6c:88:5d:a1:10:1c:de:0b: 6c:36:2f:b9:e9:86:74:86:ad:46:9b:08:05:06:2c: 0d:fd:59:eb:cd:17:77:0e:fa:fc:52:fa:e9:61:a8: 52:be:00:a3:b7:88:7f:26:fc:bc:63:2f:70:78:23: dc:80:cb:05:79:2d:4f:89:14:47:af:cb:52:c6:e3: 4f:7b:00:0a:ad:3f:84:2b:62:31:8c:a9:01:16:91: 03:e4:65:58:de:4d:8e:7e:fa:f6:1f:3f:52:51:c7: 5f:3a:1d:9d:e0:e0:dc:c5:6e:76:90:a9:f5:fa:ff: 68:1f:94:86:69:5e:e0:7c:51:75:cb:b8:a0:32:87: 50:90:15:14:99:a4:02:66:9e:6b:ca:77:80:dc:b1: 7c:3a:19:47:a0:af:e6:f2:d5:52:c0:0d:90:21:10: 55:db:a6:2a:af:96:a4:c3:24:af:90:af:85:ae:ee: bb:30:62:dc:58:af:67:90:e8:46:73:0d:c3:19:0c: c7:92:f1:8e:e2:3e:cb:8f:f6:2c:18:fe:1b:9f:20: 9e:8c:c9:53:32:86:7a:ff:6e:26:60:61:6b:c4:3e: 09:50:a2:0f:27:bf:98:66:89:91:48:ed:0a:8b:e4: 08:14:9f:46:c6:b3:52:d6:79:7a:d6:f0:83:af:eb: b0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6B:46:D6:D6:D6:63:24:58:E6:80:11:9F:89:0C:6F:85:62:97:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/2a4e3ad6-f6ba-30b9-a4c5-b4d8db106425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv4: 64.64.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:bd:8a:28:37:04:32:6d:03:af:3b:32:5b:39:c1:39:6f:5b: d6:64:77:c4:ad:0b:c7:86:72:b6:21:4a:b4:b1:70:5a:74:48: 16:d2:76:43:42:74:59:c6:49:bf:af:e3:23:c0:38:e3:b7:cc: 7e:8f:7e:6a:ff:f3:a6:d3:17:5e:a3:e3:36:5c:9d:e7:43:9f: 79:ac:69:57:0c:dc:12:19:f0:d9:8e:21:1e:0b:cf:0b:2f:17: ed:3e:02:98:8e:91:1a:58:fe:c4:47:50:0d:04:78:0d:f8:cf: da:dc:c0:c7:2a:c9:b4:df:95:89:6e:09:f6:82:d3:b0:47:54: dc:20:8f:41:9a:10:f9:3a:c9:7a:b9:36:6a:5c:22:0f:8a:79: 81:ad:24:64:ea:2d:3d:22:f6:5d:50:ef:4f:6b:07:2d:4e:f0: a8:5b:1c:9d:df:0c:df:9e:da:c3:d8:1c:b3:81:fb:9d:89:e4: fc:3a:9c:29:9b:1a:8c:1b:58:df:8d:94:d0:45:8d:0e:1b:8b: 3e:97:51:42:81:81:9a:61:7c:00:42:49:b1:7a:8e:f1:61:7d: 23:70:7e:72:93:66:48:eb:51:45:f0:25:c7:ec:7c:61:85:0c: 70:a7:87:b0:2e:df:a3:67:0e:ed:a2:d0:ff:5a:e2:31:9b:da: eb:4a:7c:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy9+puHoJ2n8UUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk NmM4NGYwMjUtNzk3ZC00M2NhLWI2ZDAtMTkzNjM2YmVkMjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOVVHkxibIhdoRAc3gtsNi+56YZ0hq1GmwgF BiwN/VnrzRd3Dvr8UvrpYahSvgCjt4h/Jvy8Yy9weCPcgMsFeS1PiRRHr8tSxuNP ewAKrT+EK2IxjKkBFpED5GVY3k2Ofvr2Hz9SUcdfOh2d4ODcxW52kKn1+v9oH5SG aV7gfFF1y7igModQkBUUmaQCZp5ryneA3LF8OhlHoK/m8tVSwA2QIRBV26Yqr5ak wySvkK+Fru67MGLcWK9nkOhGcw3DGQzHkvGO4j7Lj/YsGP4bnyCejMlTMoZ6/24m YGFrxD4JUKIPJ7+YZomRSO0Ki+QIFJ9GxrNS1nl61vCDr+uwkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRrRtbW1mMkWOaAEZ+JDG+FYpdkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvMmE0ZTNhZDYtZjZiYS0z MGI5LWE0YzUtYjRkOGRiMTA2NDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQECQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGy9iig3BDJtA687Mls5wTlvW9Zkd8StC8eGcrYhSrSxcFp0SBbSdkNC dFnGSb+v4yPAOOO3zH6Pfmr/86bTF16j4zZcnedDn3msaVcM3BIZ8NmOIR4Lzwsv F+0+ApiOkRpY/sRHUA0EeA34z9rcwMcqybTflYluCfaC07BHVNwgj0GaEPk6yXq5 NmpcIg+KeYGtJGTqLT0i9l1Q709rBy1O8KhbHJ3fDN+e2sPYHLOB+52J5Pw6nCmb GowbWN+NlNBFjQ4biz6XUUKBgZphfABCSbF6jvFhfSNwfnKTZkjrUUXwJcfsfGGF DHCnh7Au36NnDu2i0P9a4jGb2utKfI8= -----END CERTIFICATE-----Generated at Sat Apr 12 00:01:26 2025 by rpki-client