$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/df938649-fe0c-3f68-86dd-87b8933d0a23.roa File: df938649-fe0c-3f68-86dd-87b8933d0a23.roa (raw, json) Hash identifier: XWXrx3KEmuV53/JSTJySGYWOLoSL+iigmo5vcbXWdtA= Subject key identifier: 32:FF:46:28:89:8F:3A:E3:19:CD:EE:91:AE:BA:8A:A8:19:E9:74:D8 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F432858498E6483A4A53E7A75CF32B200 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/df938649-fe0c-3f68-86dd-87b8933d0a23.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 36352 IP address blocks: 64.20.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:83:a4:a5:3e:7a:75:cf:32:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=e04fb8b6-83f4-4def-a72c-4d6c4b3667c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7d:ad:43:3c:b1:4c:b7:9a:c4:61:49:ae:cb: 45:90:df:16:b6:3b:26:ca:4e:e5:de:2c:bb:a7:64: 47:e0:1d:e0:4f:13:1f:b9:3d:4a:62:a5:35:28:3a: 04:9b:80:f2:50:a7:d1:24:44:26:72:77:4c:b7:dc: 0a:01:a8:07:2a:c3:ee:ae:56:8b:c1:56:ef:09:ad: 64:5c:75:dd:07:67:c9:b1:a6:ed:0f:c6:98:4a:d6: 68:ff:67:7f:bf:ad:14:40:e8:a2:87:16:68:19:f5: 1f:af:7b:e2:b9:3c:f4:65:5c:23:0a:b4:4a:1f:35: 7e:9c:25:1f:59:f2:4b:a1:5a:dd:0c:79:44:64:50: 20:6d:3e:f1:8d:09:a5:78:1c:ca:26:e7:73:c3:5b: e3:5b:7a:39:88:94:7e:7f:2f:09:25:30:26:dd:fa: 56:62:23:69:99:b4:a2:a0:8f:e9:46:82:99:29:ff: 5b:d5:8f:13:5c:ee:e5:86:f0:c9:e5:e2:2e:b1:ad: 08:93:a5:9d:5d:e7:d8:72:73:67:6e:d6:d7:0d:06: 58:42:8b:6d:c0:14:d6:af:c7:fb:f2:65:f7:39:eb: ba:82:21:51:04:23:2b:99:31:28:4c:c3:ec:5a:52: 95:b8:56:b3:bb:e8:e8:8f:1a:27:39:7e:0e:9e:21: 69:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FF:46:28:89:8F:3A:E3:19:CD:EE:91:AE:BA:8A:A8:19:E9:74:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/df938649-fe0c-3f68-86dd-87b8933d0a23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 64.20.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:a2:c3:63:7b:a1:f4:26:db:39:fe:41:02:45:16:0e:b2:bc: 4f:81:21:19:88:d6:89:4d:2c:f9:06:dd:4f:6e:16:fc:63:06: 8e:70:90:8f:ca:83:c0:36:a5:69:1b:ff:67:8d:c8:61:b6:48: c3:53:f2:ea:01:7b:ad:f8:51:96:22:1a:96:a1:7e:f9:30:c9: 9b:98:60:8c:52:07:8f:2d:a4:38:66:df:5d:41:81:9e:f1:3e: 70:47:cc:1f:ee:76:f6:e8:c1:74:87:f2:25:c9:c2:2b:37:81: eb:83:ee:15:3c:eb:e5:d4:b3:b9:07:5c:d6:25:8c:7b:2c:d1: 32:03:0d:d9:25:45:62:c8:1c:8d:48:82:de:87:20:9c:95:1a: 03:54:6f:a6:39:c7:12:d6:3f:d6:0d:be:42:d9:db:b2:45:ea: fd:b0:cc:92:d1:a7:a5:09:c9:99:5a:ac:b3:de:af:47:c8:59: fa:81:30:34:86:d9:d0:d1:0f:86:fe:42:79:91:3a:83:f3:69: 5b:e4:17:4f:0f:b4:6b:d6:85:17:c2:c5:48:19:65:61:af:cc: 80:2e:96:f0:76:fe:17:7b:f4:de:b6:51:9d:f2:38:e4:ee:22: 50:74:4a:d5:dc:46:55:2e:70:f2:85:99:4b:81:6f:10:94:db: 71:43:20:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZIOkpT56dc8ysgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk ZTA0ZmI4YjYtODNmNC00ZGVmLWE3MmMtNGQ2YzRiMzY2N2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi32tQzyxTLeaxGFJrstFkN8Wtjsmyk7l3iy7 p2RH4B3gTxMfuT1KYqU1KDoEm4DyUKfRJEQmcndMt9wKAagHKsPurlaLwVbvCa1k XHXdB2fJsabtD8aYStZo/2d/v60UQOiihxZoGfUfr3viuTz0ZVwjCrRKHzV+nCUf WfJLoVrdDHlEZFAgbT7xjQmleBzKJudzw1vjW3o5iJR+fy8JJTAm3fpWYiNpmbSi oI/pRoKZKf9b1Y8TXO7lhvDJ5eIusa0Ik6WdXefYcnNnbtbXDQZYQottwBTWr8f7 8mX3Oeu6giFRBCMrmTEoTMPsWlKVuFazu+jojxonOX4OniFpfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDL/RiiJjzrjGc3uka66iqgZ6XTYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvZGY5Mzg2NDktZmUwYy0z ZjY4LTg2ZGQtODdiODkzM2QwYTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBTRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOiw2N7ofQm2zn+QQJFFg6yvE+BIRmI1olNLPkG3U9uFvxjBo5wkI/K g8A2pWkb/2eNyGG2SMNT8uoBe634UZYiGpahfvkwyZuYYIxSB48tpDhm311BgZ7x PnBHzB/udvbowXSH8iXJwis3geuD7hU86+XUs7kHXNYljHss0TIDDdklRWLIHI1I gt6HIJyVGgNUb6Y5xxLWP9YNvkLZ27JF6v2wzJLRp6UJyZlarLPer0fIWfqBMDSG 2dDRD4b+QnmROoPzaVvkF08PtGvWhRfCxUgZZWGvzIAulvB2/hd79N62UZ3yOOTu IlB0StXcRlUucPKFmUuBbxCU23FDIH0= -----END CERTIFICATE-----Generated at Sat Apr 26 16:24:03 2025 by rpki-client