$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/2fd3fdd0-aa80-3384-8ecf-e0ae01351b79.roa File: 2fd3fdd0-aa80-3384-8ecf-e0ae01351b79.roa (raw, json) Hash identifier: +emqOfHmKASBAtzcrzkeuMBAZBQ3BKfbpPeAWPiSzyU= Subject key identifier: 5F:A8:6D:49:AC:AF:2B:79:6A:39:D1:81:06:88:81:74:76:31:48:04 Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Certificate serial: 010D0C9F43285849A1EF72C2B3009B870A5603C0 Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/2fd3fdd0-aa80-3384-8ecf-e0ae01351b79.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 9009 IP address blocks: 64.79.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:72:c2:b3:00:9b:87:0a:56:03:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=fa2ed551-b198-4d29-ab5d-79e204206582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9a:46:54:56:a6:78:66:72:b1:e5:41:8b:65: 1c:96:d7:66:b2:c1:f7:53:f8:3a:d2:22:14:ca:cd: 7b:15:d7:ac:76:66:7e:2d:99:5e:46:78:9b:e0:1c: 02:b3:9d:d8:2f:5b:d2:ce:e2:3f:9e:16:19:da:25: 11:51:e6:c2:3d:98:a4:01:ed:2e:03:48:0a:db:0b: 3e:88:78:6a:7f:46:4c:55:4f:0d:8a:de:79:61:9d: eb:26:ee:ff:0e:bb:ec:79:92:ff:e3:13:57:ff:04: c1:1b:6e:b9:07:d3:a2:37:d7:ef:7b:58:2c:b1:32: 2e:88:e2:77:e4:8b:71:17:9e:b8:98:06:a5:84:d6: 1a:64:61:e0:2e:94:c8:43:75:63:a3:b0:03:48:64: 1d:80:5c:50:e1:3e:b8:a4:cc:27:ab:8d:b8:d6:a8: bb:6a:2b:f0:49:b7:ef:f8:ab:25:5a:e4:73:32:28: e5:d6:49:cc:5c:6d:98:52:67:5a:15:df:84:a7:bb: 19:4c:46:66:09:50:08:c9:29:0a:a3:f1:e2:ec:1e: f4:bc:92:89:30:0e:08:4c:60:92:c5:33:6d:29:60: 3e:8d:1e:22:4c:58:c9:ea:52:f0:2e:30:79:e1:32: 31:ee:ad:bd:bd:47:15:22:81:c7:cc:7d:68:aa:74: 83:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A8:6D:49:AC:AF:2B:79:6A:39:D1:81:06:88:81:74:76:31:48:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/2fd3fdd0-aa80-3384-8ecf-e0ae01351b79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl X509v3 Authority Key Identifier: keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer sbgp-ipAddrBlock: critical IPv4: 64.79.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:c6:46:b5:37:79:bd:5a:37:9d:ed:8a:b0:f0:4f:bc:b8:f6: 82:9e:eb:af:c3:5a:a6:21:06:b4:ef:d6:c7:a8:a0:ad:62:42: 77:04:42:90:f9:01:45:11:bf:fd:11:ff:35:5f:5c:fb:11:d2: 41:2c:ab:b5:90:1c:b8:77:5b:9c:1a:8f:bc:63:65:97:6a:58: 50:60:09:e9:eb:17:df:8b:8c:9e:26:f3:c2:7c:08:d4:7a:c0: 88:20:1a:c0:82:2a:a3:97:bd:00:3f:b4:6d:23:0c:9c:32:0a: 6a:e3:8c:6c:47:ed:e2:46:6f:24:03:5c:8a:b8:12:13:c6:5c: 36:17:a1:8c:a5:33:c2:c4:f7:18:5a:6b:e8:64:46:e3:9d:06: f7:a2:f5:27:b5:63:6c:dd:49:4c:5b:3f:f7:81:43:2e:75:9c: 1d:fd:d8:86:9b:07:e9:4c:45:60:4f:74:7c:78:3a:d1:8e:7a: 5e:d4:df:3e:70:c6:21:1c:77:7e:85:bd:81:8f:dd:e1:dd:66: 12:05:5c:91:99:54:4a:dc:9e:2c:15:2f:99:f1:a5:41:d3:32: db:d1:9e:9f:25:5d:4a:dc:ac:29:d9:0c:38:1a:c6:dd:5d:38: d4:89:70:0d:27:6b:f3:1f:8e:86:67:fe:60:93:c2:de:55:0d: 7a:dd:78:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh73LCswCbhwpWA8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw ZDcwMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ZmEyZWQ1NTEtYjE5OC00ZDI5LWFiNWQtNzllMjA0MjA2NTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ppGVFameGZyseVBi2UcltdmssH3U/g60iIU ys17FdesdmZ+LZleRnib4BwCs53YL1vSzuI/nhYZ2iURUebCPZikAe0uA0gK2ws+ iHhqf0ZMVU8Nit55YZ3rJu7/DrvseZL/4xNX/wTBG265B9OiN9fve1gssTIuiOJ3 5ItxF564mAalhNYaZGHgLpTIQ3Vjo7ADSGQdgFxQ4T64pMwnq4241qi7aivwSbfv +KslWuRzMijl1knMXG2YUmdaFd+Ep7sZTEZmCVAIySkKo/Hi7B70vJKJMA4ITGCS xTNtKWA+jR4iTFjJ6lLwLjB54TIx7q29vUcVIoHHzH1oqnSDDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+obUmsryt5ajnRgQaIgXR2MUgEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0 OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvMmZkM2ZkZDAtYWE4MC0z Mzg0LThlY2YtZTBhZTAxMzUxYjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1 MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk YzNhNTBkNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQE/mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvGRrU3eb1aN53tirDwT7y49oKe66/DWqYhBrTv1seooK1iQncEQpD5 AUURv/0R/zVfXPsR0kEsq7WQHLh3W5waj7xjZZdqWFBgCenrF9+LjJ4m88J8CNR6 wIggGsCCKqOXvQA/tG0jDJwyCmrjjGxH7eJGbyQDXIq4EhPGXDYXoYylM8LE9xha a+hkRuOdBvei9Se1Y2zdSUxbP/eBQy51nB392IabB+lMRWBPdHx4OtGOel7U3z5w xiEcd36FvYGP3eHdZhIFXJGZVErcniwVL5nxpUHTMtvRnp8lXUrcrCnZDDgaxt1d ONSJcA0na/MfjoZn/mCTwt5VDXrdeGA= -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:05 2025 by rpki-client