$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/a678354e-0b52-32f7-b1e6-88207fcc400d.roa File: a678354e-0b52-32f7-b1e6-88207fcc400d.roa (raw, json) Hash identifier: Fkqf1enQNx6RePbBJSKaW67bWVJuwGEGG0YBwZuKOk4= Subject key identifier: 97:C4:1F:F0:34:93:84:27:21:C7:1D:6B:D1:93:80:8A:25:39:20:F2 Certificate issuer: /CN=926b4ddf-17df-417e-972b-c86cc410fed2 Certificate serial: 010D0C9F432858496FAF08FD7B21D93878E6C260 Authority key identifier: 10:57:31:6E:07:F8:5A:4F:36:73:23:D3:F2:37:89:9E:36:C0:BE:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/a678354e-0b52-32f7-b1e6-88207fcc400d.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 16509 IP address blocks: 64.56.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/926b4ddf-17df-417e-972b-c86cc410fed2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/926b4ddf-17df-417e-972b-c86cc410fed2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:08:fd:7b:21:d9:38:78:e6:c2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=926b4ddf-17df-417e-972b-c86cc410fed2 Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=88c4908b-fa41-4767-a348-3f2fc4d8b595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:64:da:ca:43:fb:a8:f6:54:93:a9:c7:1f:b0: 5c:f9:e1:67:a8:16:51:10:92:8f:15:34:8a:a9:55: 6c:a2:dd:e5:a7:ce:e7:5e:c7:d6:16:d1:53:ca:bc: 57:8d:7b:e3:63:64:35:f3:3e:b6:de:8b:46:95:16: 5f:93:0b:d5:22:d4:26:1e:68:a5:42:12:79:bc:45: df:12:b0:bf:91:f5:7e:b9:9f:65:c6:63:5b:7b:d8: c8:13:6a:ff:dd:9f:6c:c4:d5:59:03:0a:d0:34:ea: c2:5d:bd:42:50:18:3f:ad:e4:39:c5:af:50:02:8a: a5:04:a4:99:1e:ec:68:50:00:4a:9a:51:ae:05:50: 74:fa:be:de:e9:76:f9:a8:62:a1:e1:02:69:b8:81: 09:e2:d2:d1:5d:62:69:00:72:73:de:11:46:68:3a: 4a:16:8a:b0:bc:a7:ad:d9:df:2a:f4:4d:52:fa:6a: 99:94:51:90:3f:97:c8:fc:5e:2e:ff:f0:78:21:d0: 10:75:1e:4b:e1:30:e6:59:8f:bb:e7:c7:57:2c:d7: 49:df:1e:95:ac:10:40:d1:05:4b:da:09:fd:69:06: b0:1e:a7:71:b4:47:a0:59:eb:40:0e:4c:99:e7:61: ff:42:dc:21:db:16:08:24:9d:77:25:ac:aa:90:85: 74:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C4:1F:F0:34:93:84:27:21:C7:1D:6B:D1:93:80:8A:25:39:20:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/a678354e-0b52-32f7-b1e6-88207fcc400d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/926b4ddf-17df-417e-972b-c86cc410fed2.crl X509v3 Authority Key Identifier: keyid:10:57:31:6E:07:F8:5A:4F:36:73:23:D3:F2:37:89:9E:36:C0:BE:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2.cer sbgp-ipAddrBlock: critical IPv4: 64.56.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:36:1d:16:d8:9c:38:a9:b9:e0:a1:03:5c:ff:78:1f:f1:4c: 13:fe:5a:53:4e:de:90:dd:8d:20:fe:1d:58:04:1e:98:33:94: ca:19:69:29:ea:1a:c7:24:f6:1b:42:79:17:12:62:11:76:78: b8:ce:6d:48:cd:61:ff:58:3e:19:88:7e:1c:a2:ee:53:ea:cf: bd:e3:73:6e:3d:82:7f:f7:27:69:cc:34:29:2f:e5:ff:2e:5b: 60:48:8d:68:cf:3a:f2:db:f8:3a:b8:55:8e:ba:ac:5e:ab:86: d9:1d:7f:21:05:7a:fc:10:42:b7:fe:1a:05:91:45:6e:0b:cb: 02:ed:58:3a:e3:0a:86:18:e3:47:c6:9e:9a:bd:37:18:d0:76: 5a:d6:d3:e7:80:c2:83:e2:c5:c2:3a:ad:fa:a6:be:20:e6:7e: 1b:5f:13:5d:d6:ea:a9:74:e3:8a:99:15:1d:08:9f:24:fb:73: 01:ac:5a:f4:20:63:40:90:20:47:c4:ed:e5:5d:64:6a:fd:0c: 2f:e5:fb:d2:1c:4b:4c:f2:49:7e:3a:30:5c:d8:41:a4:86:38: 1f:d0:e2:d2:a5:48:82:0f:83:b0:d5:04:e4:c0:f9:15:ec:f8: da:60:29:68:93:66:86:dc:8f:78:13:d5:cb:8b:1f:b2:f3:c7: eb:dc:d2:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrwj9eyHZOHjmwmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI2YjRkZGYtMTdkZi00MTdlLTk3MmItYzg2Y2M0MTBm ZWQyMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk ODhjNDkwOGItZmE0MS00NzY3LWEzNDgtM2YyZmM0ZDhiNTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWTaykP7qPZUk6nHH7Bc+eFnqBZREJKPFTSK qVVsot3lp87nXsfWFtFTyrxXjXvjY2Q18z623otGlRZfkwvVItQmHmilQhJ5vEXf ErC/kfV+uZ9lxmNbe9jIE2r/3Z9sxNVZAwrQNOrCXb1CUBg/reQ5xa9QAoqlBKSZ HuxoUABKmlGuBVB0+r7e6Xb5qGKh4QJpuIEJ4tLRXWJpAHJz3hFGaDpKFoqwvKet 2d8q9E1S+mqZlFGQP5fI/F4u//B4IdAQdR5L4TDmWY+758dXLNdJ3x6VrBBA0QVL 2gn9aQawHqdxtEegWetADkyZ52H/Qtwh2xYIJJ13JayqkIV0jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfEH/A0k4QnIccda9GTgIolOSDyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MjZi NGRkZi0xN2RmLTQxN2UtOTcyYi1jODZjYzQxMGZlZDIvYTY3ODM1NGUtMGI1Mi0z MmY3LWIxZTYtODgyMDdmY2M0MDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTI2YjRkZGYtMTdkZi00MTdlLTk3 MmItYzg2Y2M0MTBmZWQyLzkyNmI0ZGRmLTE3ZGYtNDE3ZS05NzJiLWM4NmNjNDEw ZmVkMi5jcmwwHwYDVR0jBBgwFoAUEFcxbgf4Wk82cyPT8jeJnjbAvrowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MjZiNGRkZi0xN2RmLTQxN2UtOTcyYi1jODZj YzQxMGZlZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDjXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADo2HRbYnDipueChA1z/eB/xTBP+WlNO3pDdjSD+HVgEHpgzlMoZaSnq Gsck9htCeRcSYhF2eLjObUjNYf9YPhmIfhyi7lPqz73jc249gn/3J2nMNCkv5f8u W2BIjWjPOvLb+Dq4VY66rF6rhtkdfyEFevwQQrf+GgWRRW4LywLtWDrjCoYY40fG npq9NxjQdlrW0+eAwoPixcI6rfqmviDmfhtfE13W6ql044qZFR0InyT7cwGsWvQg Y0CQIEfE7eVdZGr9DC/l+9IcS0zySX46MFzYQaSGOB/Q4tKlSIIPg7DVBOTA+RXs +NpgKWiTZobcj3gT1cuLH7Lzx+vc0jg= -----END CERTIFICATE-----Generated at Sat Apr 26 19:24:16 2025 by rpki-client