$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/0f94adce-ee08-3d1f-952e-320e490ab5fe.roa File: 0f94adce-ee08-3d1f-952e-320e490ab5fe.roa (raw, json) Hash identifier: 8IHIRvhaMDmgp+nEev8vXsdeJa1lk93ozRDkYRfhxvA= Subject key identifier: 7F:FA:12:EB:20:94:77:32:41:52:B6:20:E3:2C:6E:42:3A:61:4E:E0 Certificate issuer: /CN=5dcf6139-5993-4941-a803-3ff450a6149e Certificate serial: 010D0C9F432858495ABEC6FBDAAF19127B89FD80 Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/0f94adce-ee08-3d1f-952e-320e490ab5fe.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 134176 IP address blocks: 64.113.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:c6:fb:da:af:19:12:7b:89:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=63c34d79-5d71-4b5e-9c71-657db8612648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a0:d6:3f:03:f0:34:fb:94:97:05:38:92:d4: a5:00:46:1f:1e:7e:1e:df:1b:4b:51:d4:0a:19:c3: bb:a8:4d:be:95:43:46:8c:04:e1:38:0e:fa:80:11: 11:d0:6b:5d:15:5b:29:5f:8d:7e:df:7b:f3:e4:37: 27:18:22:b7:31:f4:2f:eb:59:20:d8:fb:2f:58:02: af:b2:5f:89:8f:77:52:f7:7f:61:19:fc:55:0a:f4: 88:a5:4e:bb:6e:9d:c8:8e:a1:23:be:4e:54:c8:ca: c9:57:fa:05:70:d4:f3:09:f1:75:f3:9a:c5:3b:b3: c0:ce:ca:17:67:ca:2b:ff:6f:3c:36:fe:b2:ec:7e: 0c:a0:74:35:7c:9a:fe:25:c9:29:2e:e1:c5:52:62: 36:09:fe:1a:89:f5:ae:52:d9:3f:73:82:43:73:b1: ff:4d:30:55:49:b4:a2:df:d5:52:90:a3:c1:26:3d: 38:43:87:c3:0b:02:5a:c9:8b:4a:a2:a8:68:4d:ee: 70:1f:9f:26:80:9e:d7:b5:36:4e:b9:b7:46:35:1f: 0d:38:ca:57:10:55:94:59:e2:99:a9:89:53:58:76: 4b:59:7a:f9:f5:46:c4:bb:e9:15:2c:1a:74:87:eb: 7b:84:ec:42:4b:50:c9:bc:38:d1:64:58:d8:6e:5e: b2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:FA:12:EB:20:94:77:32:41:52:B6:20:E3:2C:6E:42:3A:61:4E:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/0f94adce-ee08-3d1f-952e-320e490ab5fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl X509v3 Authority Key Identifier: keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer sbgp-ipAddrBlock: critical IPv4: 64.113.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:76:17:a0:b8:ef:0e:fb:53:20:ba:2d:e4:09:c4:87:71:c2: f2:57:dd:5f:df:b2:71:8d:e2:a2:0e:de:df:d7:6a:1a:86:93: 36:45:96:c3:81:3c:a0:08:fd:fe:19:04:bd:ff:68:b5:e6:95: ea:77:41:46:b4:9f:4d:18:65:fb:a3:f1:7c:9a:82:e6:76:13: 52:99:fd:2a:1b:02:55:50:76:42:78:ef:37:a7:77:4a:56:e8: 81:32:4a:aa:ff:3c:f1:7b:0a:59:ef:42:1e:74:b1:9a:d9:34: 31:75:21:f7:d0:79:e2:fd:83:14:65:1a:e3:4d:b5:d4:63:6d: 7f:50:10:90:2c:66:f2:34:5d:0a:64:06:5a:7d:3f:8c:36:09: e6:d5:1a:48:eb:74:54:25:81:e0:e8:27:5f:33:e3:d4:da:ff: b0:39:62:2a:2b:37:ce:ac:f4:bd:c4:ac:bf:a5:e4:80:a6:c3: 97:c1:39:b5:18:ab:13:32:b0:c0:38:e5:7f:31:48:4f:d3:ae: 08:20:20:8e:bd:fa:19:06:ca:80:2f:30:cb:fa:a4:e7:31:d5: 83:52:0f:6e:54:57:6f:ff:d6:d3:3b:02:62:72:94:9e:ef:99: fd:f5:80:3f:66:ca:24:96:12:48:46:fb:47:b8:c7:79:34:f3: f2:a1:ce:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavsb72q8ZEnuJ/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZjYxMzktNTk5My00OTQxLWE4MDMtM2ZmNDUwYTYx NDllMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk NjNjMzRkNzktNWQ3MS00YjVlLTljNzEtNjU3ZGI4NjEyNjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqDWPwPwNPuUlwU4ktSlAEYfHn4e3xtLUdQK GcO7qE2+lUNGjAThOA76gBER0GtdFVspX41+33vz5DcnGCK3MfQv61kg2PsvWAKv sl+Jj3dS939hGfxVCvSIpU67bp3IjqEjvk5UyMrJV/oFcNTzCfF185rFO7PAzsoX Z8or/288Nv6y7H4MoHQ1fJr+JckpLuHFUmI2Cf4aifWuUtk/c4JDc7H/TTBVSbSi 39VSkKPBJj04Q4fDCwJayYtKoqhoTe5wH58mgJ7XtTZOubdGNR8NOMpXEFWUWeKZ qYlTWHZLWXr59UbEu+kVLBp0h+t7hOxCS1DJvDjRZFjYbl6ypwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/6EusglHcyQVK2IOMsbkI6YU7gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNm NjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0NTBhNjE0OWUvMGY5NGFkY2UtZWUwOC0z ZDFmLTk1MmUtMzIwZTQ5MGFiNWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWRjZjYxMzktNTk5My00OTQxLWE4 MDMtM2ZmNDUwYTYxNDllLzVkY2Y2MTM5LTU5OTMtNDk0MS1hODAzLTNmZjQ1MGE2 MTQ5ZS5jcmwwHwYDVR0jBBgwFoAULLflCxT6PZa8DBcX1K4/3yZtZm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNmNjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0 NTBhNjE0OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHELMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAR2F6C47w77UyC6LeQJxIdxwvJX3V/fsnGN4qIO3t/XahqGkzZFlsOB PKAI/f4ZBL3/aLXmlep3QUa0n00YZfuj8XyaguZ2E1KZ/SobAlVQdkJ47zend0pW 6IEySqr/PPF7ClnvQh50sZrZNDF1IffQeeL9gxRlGuNNtdRjbX9QEJAsZvI0XQpk Blp9P4w2CebVGkjrdFQlgeDoJ18z49Ta/7A5YiorN86s9L3ErL+l5ICmw5fBObUY qxMysMA45X8xSE/TrgggII69+hkGyoAvMMv6pOcx1YNSD25UV2//1tM7AmJylJ7v mf31gD9myiSWEkhG+0e4x3k08/KhzsY= -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:05 2025 by rpki-client