$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/2eff86d5-4a1d-30f9-aea6-6fa923db9776.roa File: 2eff86d5-4a1d-30f9-aea6-6fa923db9776.roa (raw, json) Hash identifier: gWb5eASgU+doHkfbAYc6iVSbIf0FW9LsEmnTbCAXack= Subject key identifier: DB:16:0B:2F:A1:8B:7F:10:1B:3D:16:E8:F2:8A:8A:C9:2B:B5:A6:A9 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F432858491ED6E7D8A9E773A8E1A54130 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/2eff86d5-4a1d-30f9-aea6-6fa923db9776.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 140952 IP address blocks: 64.145.90.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:e7:d8:a9:e7:73:a8:e1:a5:41:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=1fedb95f-59ee-4c20-a111-79c847dd4524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b5:86:e4:71:7b:1a:f4:bd:6c:ad:a9:ed:1a: bd:3f:fc:d4:73:cc:b2:86:f3:d7:6b:ba:26:03:27: e7:53:b6:a8:fc:19:ae:0e:71:f9:e3:18:28:64:df: 29:38:16:0c:98:3a:0a:d4:4c:3c:4c:38:17:14:74: a9:b4:f9:bd:fa:6d:da:19:34:63:d9:7f:d9:4e:24: ef:1b:77:86:2c:f7:ea:e7:57:27:e7:76:64:0d:37: 72:fe:40:0a:a5:53:37:15:a8:35:ef:c3:a8:29:69: 6b:d1:46:27:c4:82:b1:36:16:63:b1:08:a6:ab:99: d2:bb:74:8a:85:ce:f7:84:9b:f7:38:93:d8:7e:60: f6:71:6e:52:4a:c1:ee:c3:2c:d4:b3:3a:2b:f2:e3: d0:0c:3a:28:91:33:b2:10:1f:58:fd:79:5c:f2:2f: e1:e4:22:01:a6:df:bf:98:8e:e6:d5:b9:4e:89:8d: 70:47:fb:62:37:a2:38:66:82:6c:88:d2:56:f6:a8: c7:cd:7b:0d:1e:0b:40:76:63:69:5e:13:97:57:bf: d6:99:88:c0:8d:b2:4f:82:79:54:1d:f9:83:f1:1c: 18:29:ff:6c:53:34:6b:78:7f:86:3d:f9:d4:a1:41: c0:fb:9d:86:4a:b7:b9:7a:c0:85:d5:13:d9:79:3d: 72:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:16:0B:2F:A1:8B:7F:10:1B:3D:16:E8:F2:8A:8A:C9:2B:B5:A6:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/2eff86d5-4a1d-30f9-aea6-6fa923db9776.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 64.145.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:61:79:4f:67:28:f4:08:54:bc:05:e0:f0:e4:26:9e:b1:07: 89:10:66:c8:86:0a:d3:10:94:10:d9:86:f5:2d:dc:b0:0c:96: dc:93:b9:29:9b:59:c2:0f:f3:76:47:af:f7:46:fc:16:0a:ae: 4b:93:94:d4:6e:d7:90:18:f3:48:34:02:95:89:fc:4f:82:44: a7:c8:6b:21:b1:af:5d:87:2b:df:66:2f:8d:9b:8a:b4:a8:a5: 9e:74:9f:89:74:bf:bb:97:5e:eb:3b:02:8d:57:45:db:2b:dd: 85:00:fb:03:15:d8:d7:4e:b7:20:59:6a:a8:68:bf:cd:f8:bb: 34:65:df:38:42:d0:50:01:82:ab:a4:cf:04:69:2a:44:35:3d: 63:93:06:eb:63:02:13:a9:bc:34:d8:12:bc:8d:c6:43:de:04: 63:97:43:c6:fc:50:94:ba:40:40:d1:4c:86:fd:76:0f:2e:91: c0:47:1c:80:d7:51:15:57:f9:9a:f9:c4:a5:96:e7:9e:34:dc: fe:c0:fc:ce:35:11:f7:18:9a:5b:5b:12:47:96:c3:f9:3f:3a: 8d:53:55:8a:e8:d8:b0:e9:79:3a:07:37:cc:19:a0:60:17:d2: 0d:fd:9e:b5:77:50:b7:e9:44:f1:36:da:99:3b:50:90:b7:6c: a3:48:14:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1ufYqedzqOGlQTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk MWZlZGI5NWYtNTllZS00YzIwLWExMTEtNzljODQ3ZGQ0NTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbWG5HF7GvS9bK2p7Rq9P/zUc8yyhvPXa7om AyfnU7ao/BmuDnH54xgoZN8pOBYMmDoK1Ew8TDgXFHSptPm9+m3aGTRj2X/ZTiTv G3eGLPfq51cn53ZkDTdy/kAKpVM3Fag178OoKWlr0UYnxIKxNhZjsQimq5nSu3SK hc73hJv3OJPYfmD2cW5SSsHuwyzUszor8uPQDDookTOyEB9Y/Xlc8i/h5CIBpt+/ mI7m1blOiY1wR/tiN6I4ZoJsiNJW9qjHzXsNHgtAdmNpXhOXV7/WmYjAjbJPgnlU HfmD8RwYKf9sUzRreH+GPfnUoUHA+52GSre5esCF1RPZeT1yAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsWCy+hi38QGz0W6PKKiskrtaapMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvMmVmZjg2ZDUtNGExZC0z MGY5LWFlYTYtNmZhOTIzZGI5Nzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQJFaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhheU9nKPQIVLwF4PDkJp6xB4kQZsiGCtMQlBDZhvUt3LAMltyTuSmb WcIP83ZHr/dG/BYKrkuTlNRu15AY80g0ApWJ/E+CRKfIayGxr12HK99mL42birSo pZ50n4l0v7uXXus7Ao1XRdsr3YUA+wMV2NdOtyBZaqhov834uzRl3zhC0FABgquk zwRpKkQ1PWOTButjAhOpvDTYEryNxkPeBGOXQ8b8UJS6QEDRTIb9dg8ukcBHHIDX URVX+Zr5xKWW55403P7A/M41EfcYmltbEkeWw/k/Oo1TVYro2LDpeToHN8wZoGAX 0g39nrV3ULfpRPE22pk7UJC3bKNIFMk= -----END CERTIFICATE-----Generated at Sun Apr 27 15:57:35 2025 by rpki-client