$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d9f3bf20-4c0b-30a3-9d98-83fda0346614.roa File: d9f3bf20-4c0b-30a3-9d98-83fda0346614.roa (raw, json) Hash identifier: G2xEO5avEBGXu2F3HxfBVTqE8fcEta8gHznpMvJCzwo= Subject key identifier: CF:A9:37:F2:13:56:6D:C6:F4:B3:89:64:76:08:65:F7:D2:CC:D3:3D Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Certificate serial: 010D0C9F4328584981D458192F52BA6EFC4915E0 Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d9f3bf20-4c0b-30a3-9d98-83fda0346614.roa Signing time: Sun 13 Apr 2025 01:00:44 +0000 ROA not before: Sun 13 Apr 2025 01:00:44 +0000 ROA not after: Sat 12 Jul 2025 01:00:44 +0000 asID: 396998 IP address blocks: 64.68.192.0/24 maxlen: 24 2620:49:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:d4:58:19:2f:52:ba:6e:fc:49:15:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Validity Not Before: Apr 13 01:00:44 2025 GMT Not After : Jul 12 01:00:44 2025 GMT Subject: CN=75102022-a17d-4301-b6a6-147a9a1654b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d8:e0:cc:b2:94:38:4b:16:fe:d0:be:8c:2f: 76:eb:05:43:4f:5e:17:6f:af:f9:20:a9:d6:95:8d: 70:21:79:59:ff:f4:87:27:7d:fe:e2:f7:c0:69:80: 1a:98:43:d4:fa:4b:a2:37:ae:bf:a4:53:c9:5b:50: 3e:cf:8b:8f:cd:44:00:70:8e:b3:b2:70:e5:45:bc: 0f:33:ce:78:00:fd:ff:40:79:41:4e:aa:94:48:18: 47:94:df:33:44:c0:4a:8d:4f:4a:4c:42:3e:45:10: 60:8e:63:db:30:b1:39:ac:10:32:c3:46:cb:3d:d2: 48:68:e2:64:26:b8:29:5c:6d:02:45:05:08:ce:f6: 42:2f:51:a0:23:67:50:1d:4f:7d:dd:ab:6a:77:82: a4:ed:ce:2d:9e:03:d1:cb:b4:4d:92:d1:ab:0c:c4: 60:4c:09:4f:d9:e8:aa:7d:78:51:bb:e6:5a:75:45: 88:2e:0c:60:f2:cb:eb:d9:36:09:54:64:77:a2:b8: 5b:ac:85:be:7a:f9:d5:41:a3:0c:9d:75:c2:4b:2b: 9f:63:d1:d8:66:3b:90:62:10:51:a1:53:ea:3e:40: f1:ac:11:f5:b6:1b:57:24:40:b7:63:f5:be:12:52: aa:ee:99:ac:62:4f:b2:e7:00:a5:32:1b:ad:d2:f5: 8a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A9:37:F2:13:56:6D:C6:F4:B3:89:64:76:08:65:F7:D2:CC:D3:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d9f3bf20-4c0b-30a3-9d98-83fda0346614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl X509v3 Authority Key Identifier: keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer sbgp-ipAddrBlock: critical IPv4: 64.68.192.0/24 IPv6: 2620:49:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:15:03:50:5d:fb:32:44:ac:53:7d:da:8b:28:fd:88:8a:69: 2b:f6:ec:73:91:c8:e1:00:09:40:07:4a:3a:3c:cb:2c:56:7b: 92:ed:c9:48:40:ba:01:40:b6:15:ac:f6:33:53:83:a4:5b:d4: 03:14:bd:0e:a2:0f:9d:64:c9:8a:d7:ea:56:40:df:fd:d2:cc: b5:60:e7:dc:92:62:86:e7:43:39:d2:30:ab:4c:c2:67:f1:e4: 02:ff:c8:83:b2:c1:0d:4c:b4:44:4b:dc:a4:1a:ee:2d:37:70: d6:87:b6:75:e0:b0:8d:fe:3f:09:c2:09:8a:91:ac:f5:53:10: 99:22:df:ac:43:3d:58:52:7e:47:08:45:b2:af:58:1e:8f:cc: 53:be:9d:92:53:12:a6:8e:f8:24:38:f7:23:ee:72:9e:13:4e: 4e:ff:fa:b7:0e:da:c0:12:fd:ae:54:3c:43:20:2f:d4:cd:3c: 6d:75:5f:84:97:c0:eb:c2:2e:b8:3a:af:f8:91:9f:15:e5:26: 21:5c:2c:5d:8b:b4:3c:c1:4d:ec:71:c9:51:d2:ef:d3:2d:ee: c6:01:1f:44:ff:0f:04:5b:12:40:86:84:a6:1a:bc:f9:3f:f2: 2c:30:2c:02:86:af:4a:00:3d:3b:34:1e:f7:18:c3:fb:6f:eb: 87:df:d0:7a -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEmB1FgZL1K6bvxJFeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwNzQ5ZWQtNzBlZi00NDdjLWIxN2MtZGE2YmU4ZDdm MzEyMB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk NzUxMDIwMjItYTE3ZC00MzAxLWI2YTYtMTQ3YTlhMTY1NGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNjgzLKUOEsW/tC+jC926wVDT14Xb6/5IKnW lY1wIXlZ//SHJ33+4vfAaYAamEPU+kuiN66/pFPJW1A+z4uPzUQAcI6zsnDlRbwP M854AP3/QHlBTqqUSBhHlN8zRMBKjU9KTEI+RRBgjmPbMLE5rBAyw0bLPdJIaOJk JrgpXG0CRQUIzvZCL1GgI2dQHU993atqd4Kk7c4tngPRy7RNktGrDMRgTAlP2eiq fXhRu+ZadUWILgxg8svr2TYJVGR3orhbrIW+evnVQaMMnXXCSyufY9HYZjuQYhBR oVPqPkDxrBH1thtXJEC3Y/W+ElKq7pmsYk+y5wClMhut0vWKNwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFM+pN/ITVm3G9LOJZHYIZffSzNM9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3 NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThkN2YzMTIvZDlmM2JmMjAtNGMwYi0z MGEzLTlkOTgtODNmZGEwMzQ2NjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDAwNzQ5ZWQtNzBlZi00NDdjLWIx N2MtZGE2YmU4ZDdmMzEyL2QwMDc0OWVkLTcwZWYtNDQ3Yy1iMTdjLWRhNmJlOGQ3 ZjMxMi5jcmwwHwYDVR0jBBgwFoAU9SAVhzNYxRJ4ZGbzsONdivR4eXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZi ZThkN2YzMTIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQETAMA8E AgACMAkDBwAmIABJAAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASBUDUF37MkSsU33aiyj9iIppK/bsc5HI 4QAJQAdKOjzLLFZ7ku3JSEC6AUC2Faz2M1ODpFvUAxS9DqIPnWTJitfqVkDf/dLM tWDn3JJihudDOdIwq0zCZ/HkAv/Ig7LBDUy0REvcpBruLTdw1oe2deCwjf4/CcIJ ipGs9VMQmSLfrEM9WFJ+RwhFsq9YHo/MU76dklMSpo74JDj3I+5ynhNOTv/6tw7a wBL9rlQ8QyAv1M08bXVfhJfA68IuuDqv+JGfFeUmIVwsXYu0PMFN7HHJUdLv0y3u xgEfRP8PBFsSQIaEphq8+T/yLDAsAoavSgA9OzQe9xjD+2/rh9/Qeg== -----END CERTIFICATE-----Generated at Sat Apr 26 19:57:39 2025 by rpki-client