$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f7eb29ed-7f5d-3956-96de-8b15da880d7b.roa File: f7eb29ed-7f5d-3956-96de-8b15da880d7b.roa (raw, json) Hash identifier: hCwFcOgb+ObKSykQQ/I1UYaQ4wUaGIyaWdphYPaVeK4= Subject key identifier: 55:62:A2:16:06:1D:9D:59:D6:88:B5:63:E2:B9:0A:DF:A2:B9:49:96 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584949FE8DD0FF4C315EEAA9F300 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f7eb29ed-7f5d-3956-96de-8b15da880d7b.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 13414 IP address blocks: 64.63.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:8d:d0:ff:4c:31:5e:ea:a9:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=032653de-d536-43c1-bfb4-8e67481d6a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d0:37:6d:44:b8:38:2c:10:1c:d0:60:ed:78: 30:a1:bc:40:09:4a:54:50:0f:96:73:38:60:21:6f: 06:1a:7b:56:97:d9:99:ff:4a:24:70:40:98:1b:ec: 23:33:c2:f5:87:a9:0d:b4:30:c6:83:95:1b:71:44: 78:7b:2e:55:8b:92:de:89:31:35:52:85:b1:77:2f: 82:83:34:74:a5:df:47:a5:9f:ef:c7:05:d7:6c:9d: 32:8f:14:d3:6d:8c:31:e6:67:83:1a:25:c6:68:78: 3e:fe:45:9e:3e:ba:c6:51:b1:dd:51:94:c5:fa:53: ef:ba:b9:28:c8:56:64:2b:97:b0:c3:ee:e9:fb:d7: 4e:4e:d8:bb:fd:d2:d8:91:35:f8:c0:aa:57:83:3d: 55:f1:19:ab:2c:54:8a:fc:b4:19:2a:bf:85:47:fc: b0:af:9a:c8:4f:89:a3:0c:a3:cd:21:e0:4e:ff:87: af:91:87:57:eb:e1:81:af:46:3d:b5:57:39:2a:66: e7:8c:d3:34:94:1d:3e:7f:8f:df:eb:de:d4:98:03: 39:e3:b9:5f:1f:1e:fa:85:a3:58:06:b5:3e:98:71: 1a:25:81:2e:4a:e0:06:79:fb:46:4c:34:cc:1d:6d: 87:21:ef:56:36:c2:ce:81:2d:35:ec:7b:18:33:49: 9b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:62:A2:16:06:1D:9D:59:D6:88:B5:63:E2:B9:0A:DF:A2:B9:49:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f7eb29ed-7f5d-3956-96de-8b15da880d7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 64.63.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:c2:43:bd:70:19:f3:03:a4:ba:b0:60:a0:e9:5e:5b:56:3c: ee:9f:8f:54:36:52:98:b2:55:d6:cd:24:81:53:0d:2f:fb:1c: 8f:34:47:e9:80:4a:6a:28:c1:0c:25:de:e1:95:70:36:67:34: 85:00:1f:f0:1e:59:4c:f4:fb:8f:ff:13:f8:b3:cd:d9:36:02: 30:57:d9:48:a3:f5:c4:ba:36:e1:a9:74:4c:19:40:72:f5:96: 25:02:70:b0:01:f3:3a:9f:3d:28:38:34:0f:e8:1d:fd:c5:23: 3f:49:03:4b:c3:ab:c7:61:0b:46:07:73:29:d3:eb:85:16:84: 51:11:43:06:ef:49:11:33:ce:34:20:c3:52:8d:76:01:f5:08: 45:94:86:c8:7d:da:a9:10:58:f1:30:c1:14:91:78:4a:ad:d6: 55:e9:2b:9f:ee:c9:fb:1f:e1:b9:4f:8e:72:44:7b:b1:07:e7: fa:74:01:ab:0a:05:4f:32:02:38:85:9b:13:a4:cc:52:20:cc: aa:55:e4:cc:3a:cd:cb:69:aa:20:fa:92:b0:30:6c:3d:80:dc: 28:0f:e2:4a:be:c5:ad:ae:d2:8b:46:66:3e:da:fb:09:c9:e6: 79:67:4e:6b:38:c2:5f:e3:c0:ba:28:5e:d7:d0:19:55:95:10: 0b:86:87:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/o3Q/0wxXuqp8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk MDMyNjUzZGUtZDUzNi00M2MxLWJmYjQtOGU2NzQ4MWQ2YTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdA3bUS4OCwQHNBg7XgwobxACUpUUA+Wczhg IW8GGntWl9mZ/0okcECYG+wjM8L1h6kNtDDGg5UbcUR4ey5Vi5LeiTE1UoWxdy+C gzR0pd9HpZ/vxwXXbJ0yjxTTbYwx5meDGiXGaHg+/kWePrrGUbHdUZTF+lPvurko yFZkK5eww+7p+9dOTti7/dLYkTX4wKpXgz1V8RmrLFSK/LQZKr+FR/ywr5rIT4mj DKPNIeBO/4evkYdX6+GBr0Y9tVc5KmbnjNM0lB0+f4/f697UmAM547lfHx76haNY BrU+mHEaJYEuSuAGeftGTDTMHW2HIe9WNsLOgS017HsYM0mb2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFViohYGHZ1Z1oi1Y+K5Ct+iuUmWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZjdlYjI5ZWQtN2Y1ZC0z OTU2LTk2ZGUtOGIxNWRhODgwZDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILCQ71wGfMDpLqwYKDpXltWPO6fj1Q2UpiyVdbNJIFTDS/7HI80R+mA SmoowQwl3uGVcDZnNIUAH/AeWUz0+4//E/izzdk2AjBX2Uij9cS6NuGpdEwZQHL1 liUCcLAB8zqfPSg4NA/oHf3FIz9JA0vDq8dhC0YHcynT64UWhFERQwbvSREzzjQg w1KNdgH1CEWUhsh92qkQWPEwwRSReEqt1lXpK5/uyfsf4blPjnJEe7EH5/p0AasK BU8yAjiFmxOkzFIgzKpV5Mw6zctpqiD6krAwbD2A3CgP4kq+xa2u0otGZj7a+wnJ 5nlnTms4wl/jwLooXtfQGVWVEAuGh7c= -----END CERTIFICATE-----Generated at Tue Apr 29 16:02:35 2025 by rpki-client