$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/1c64bc7d-a302-3320-bca5-35577df76424.roa File: 1c64bc7d-a302-3320-bca5-35577df76424.roa (raw, json) Hash identifier: 6DRBXCAa0uV3Lazibz1Q6jshFyblE2EPaXRc1Jshc2M= Subject key identifier: 0A:54:17:57:2C:B8:E0:51:91:C3:BD:BB:E5:49:1E:B0:99:24:3D:26 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F432858492CB223FA0CCAF2D16B2A26C0 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/1c64bc7d-a302-3320-bca5-35577df76424.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 13768 IP address blocks: 64.34.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:23:fa:0c:ca:f2:d1:6b:2a:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=48cc0485-515f-4bfa-8b88-d55087c0199c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e2:a9:95:e4:c0:7a:e0:a8:8b:79:ae:19:14: 0d:a9:37:6e:1a:22:f4:78:37:3f:0d:a9:44:80:9d: bd:f0:17:42:5d:5e:ad:6b:91:fb:3d:2e:d8:47:a0: 80:fe:07:ea:1d:24:c4:73:60:cf:d7:56:04:62:20: 2e:51:7c:69:08:a3:36:cb:8c:c4:e8:69:e9:13:e8: a7:d0:f5:2f:28:42:17:02:f9:0c:56:22:63:5d:fb: 11:b2:23:3b:a1:05:72:34:b7:10:29:0a:ef:3c:db: 42:25:cc:9d:58:e7:e9:f7:b9:58:b2:09:92:f6:e0: c4:3e:f4:ef:52:8b:9d:63:3e:a4:90:e1:15:5c:74: f9:26:fc:0c:9e:a0:c6:f8:b6:56:fb:aa:ef:e4:ce: 64:2e:64:c2:a3:5b:7d:83:56:3a:df:14:99:bb:80: 37:17:99:ba:8a:41:9d:89:50:24:e7:12:67:1c:b3: 2d:80:17:bf:5e:6e:aa:15:4d:ba:fe:d3:e9:69:c1: 8a:7a:2b:b4:09:b6:86:2d:19:0e:7f:1d:a2:74:fb: b7:b4:e2:7a:97:f3:28:10:f6:9f:d3:2b:b2:8b:42: 82:8a:73:73:7a:b4:0d:e1:ff:9f:4c:e1:29:13:72: 64:6c:22:4e:01:f3:15:bd:3e:f5:6e:35:6a:e2:57: 62:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:54:17:57:2C:B8:E0:51:91:C3:BD:BB:E5:49:1E:B0:99:24:3D:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/1c64bc7d-a302-3320-bca5-35577df76424.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.34.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:94:c8:4e:dd:7f:00:b4:94:ba:5c:33:94:e1:9e:c8:bb:41: 45:08:46:5c:9b:05:80:5c:82:a8:01:01:1b:b7:b5:29:1d:fb: 11:ea:b6:1c:4b:51:fe:98:dc:a6:90:47:fe:7d:8c:84:04:15: 95:9e:36:dc:e5:89:b8:b1:03:2f:85:5d:b3:c7:36:51:55:9c: ec:e8:38:6c:d3:50:1f:43:3f:b1:b8:9c:b9:98:8e:34:e4:7c: b7:b0:ef:e4:75:5f:dc:76:bc:93:26:89:6e:96:1a:ec:6d:d0: 13:93:4a:31:2c:95:55:1f:06:4a:a9:78:f8:1f:d2:9e:3e:c9: 7d:1a:ce:80:b6:25:3f:85:28:16:fe:0b:51:4f:fa:08:8f:32: a5:76:3b:7a:ff:d8:db:12:c0:ad:e7:6b:95:ef:f7:dc:3d:7a: b6:15:33:6b:0f:40:db:91:9a:53:01:9f:13:5b:90:94:78:18: c9:b0:3a:4e:0a:27:ed:e5:9b:8f:f4:19:c0:18:9c:f9:81:50: 03:71:19:8b:1e:e1:df:be:43:5d:77:68:c1:d7:42:80:b6:99: b2:43:f8:c1:77:82:61:0e:b4:d8:37:8f:4b:0e:81:d7:f6:90: e4:b9:13:6b:d6:ab:41:3b:23:93:d4:7c:a1:33:55:ed:81:84: 2b:d1:51:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssiP6DMry0WsqJsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NDhjYzA0ODUtNTE1Zi00YmZhLThiODgtZDU1MDg3YzAxOTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeKpleTAeuCoi3muGRQNqTduGiL0eDc/DalE gJ298BdCXV6ta5H7PS7YR6CA/gfqHSTEc2DP11YEYiAuUXxpCKM2y4zE6GnpE+in 0PUvKEIXAvkMViJjXfsRsiM7oQVyNLcQKQrvPNtCJcydWOfp97lYsgmS9uDEPvTv UoudYz6kkOEVXHT5JvwMnqDG+LZW+6rv5M5kLmTCo1t9g1Y63xSZu4A3F5m6ikGd iVAk5xJnHLMtgBe/Xm6qFU26/tPpacGKeiu0CbaGLRkOfx2idPu3tOJ6l/MoEPaf 0yuyi0KCinNzerQN4f+fTOEpE3JkbCJOAfMVvT71bjVq4ldiWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApUF1csuOBRkcO9u+VJHrCZJD0mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvMWM2NGJjN2QtYTMwMi0z MzIwLWJjYTUtMzU1NzdkZjc2NDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQCKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOUyE7dfwC0lLpcM5Thnsi7QUUIRlybBYBcgqgBARu3tSkd+xHqthxL Uf6Y3KaQR/59jIQEFZWeNtzlibixAy+FXbPHNlFVnOzoOGzTUB9DP7G4nLmYjjTk fLew7+R1X9x2vJMmiW6WGuxt0BOTSjEslVUfBkqpePgf0p4+yX0azoC2JT+FKBb+ C1FP+giPMqV2O3r/2NsSwK3na5Xv99w9erYVM2sPQNuRmlMBnxNbkJR4GMmwOk4K J+3lm4/0GcAYnPmBUANxGYse4d++Q113aMHXQoC2mbJD+MF3gmEOtNg3j0sOgdf2 kOS5E2vWq0E7I5PUfKEzVe2BhCvRUUI= -----END CERTIFICATE-----Generated at Sun Apr 27 01:34:07 2025 by rpki-client