$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/6817aef8-1d52-3bf2-b409-0ff7a00cc2b7.roa File: 6817aef8-1d52-3bf2-b409-0ff7a00cc2b7.roa (raw, json) Hash identifier: GKt1yUECzRPmTjk7bGUCUaqOkegiGNH0ZWZi3TOvTww= Subject key identifier: 7E:D6:41:CA:C2:8E:E3:72:36:84:AC:6F:EC:66:06:88:B1:CB:05:91 Certificate issuer: /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6 Certificate serial: 010D0C9F432858498C3AB1C11EB1E72DE72F9AC0 Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/6817aef8-1d52-3bf2-b409-0ff7a00cc2b7.roa Signing time: Wed 16 Apr 2025 18:25:15 +0000 ROA not before: Wed 16 Apr 2025 18:25:15 +0000 ROA not after: Tue 15 Jul 2025 18:25:15 +0000 asID: 27539 IP address blocks: 64.68.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:3a:b1:c1:1e:b1:e7:2d:e7:2f:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6 Validity Not Before: Apr 16 18:25:15 2025 GMT Not After : Jul 15 18:25:15 2025 GMT Subject: CN=e8b5c63e-f29b-4435-b2af-367860532979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:76:da:a5:e1:51:55:9c:8d:5d:9e:e0:a1:49: cb:7c:cb:07:39:dd:65:16:b5:26:93:f0:47:7d:01: 35:84:cd:88:36:14:f0:31:6a:1f:f0:a4:0a:13:7b: fa:40:6e:3b:1e:d6:7e:55:fb:87:e8:96:ef:87:b5: 3a:9e:0d:c0:be:33:fe:51:e5:62:72:59:b7:af:64: f0:45:10:fb:64:01:1c:d3:fd:ce:e1:7f:22:fb:b1: be:9f:8f:bf:7d:92:f1:3a:2f:87:29:85:5f:63:e5: b1:20:91:ec:23:c3:4a:f5:3c:af:8e:fe:29:ec:c6: d9:20:84:a0:72:23:51:f3:37:37:0b:e5:05:0d:3a: 58:95:8b:36:94:8f:d6:de:40:5e:01:a5:d2:30:e5: 66:40:cc:d0:19:f8:a5:17:b0:4c:d4:11:64:9d:79: 3e:73:0b:7a:9b:d6:f2:e3:ff:e1:57:e8:2d:75:26: 2f:ee:0f:f5:da:fd:5b:31:04:6a:d0:cd:36:53:99: 51:a6:35:df:fc:fa:5e:28:12:84:8b:70:62:5a:1d: 94:20:a0:c4:dd:fc:3a:36:cc:8b:80:bb:84:7b:6f: 1c:eb:82:58:b6:16:2d:cf:6b:f1:b5:85:12:b5:c5: 08:48:c2:18:7d:ba:2a:96:cc:5b:50:36:fa:b3:48: 2c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D6:41:CA:C2:8E:E3:72:36:84:AC:6F:EC:66:06:88:B1:CB:05:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/6817aef8-1d52-3bf2-b409-0ff7a00cc2b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl X509v3 Authority Key Identifier: keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer sbgp-ipAddrBlock: critical IPv4: 64.68.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:c2:bb:66:35:b2:bc:51:8e:ad:87:48:a8:2d:d2:81:e3:0b: 57:21:52:81:d1:2a:28:1f:b0:e6:49:3f:7c:96:23:87:d2:83: 17:ad:a9:55:6e:8b:cf:78:4b:07:fb:ba:79:f9:36:2e:1e:a1: d4:3c:ef:01:a3:10:ab:91:9c:70:87:85:07:24:21:13:79:9c: f9:b3:87:cd:91:1e:8c:be:d5:6d:97:a3:af:7c:e7:0c:72:68: 5c:8d:a1:8c:90:65:e5:c3:1f:f1:5f:30:c0:ed:85:50:8e:24: 71:21:46:f5:f4:17:27:bc:ec:cc:16:79:ba:d3:5a:a2:94:bf: f9:59:35:9a:dc:13:1d:bb:e8:cd:d0:26:09:90:04:20:8d:50: 78:67:c9:30:50:b1:e9:8a:f1:1f:f3:0f:61:91:9a:4e:a5:4c: e3:de:13:3e:b8:a8:18:56:e7:53:66:55:3f:cc:2c:c1:78:d2: 89:4c:68:a4:6e:aa:76:e7:ee:67:73:5c:92:d1:cb:29:4d:6e: 0d:a5:b2:96:9b:6c:98:86:62:3d:6f:00:a9:09:d4:84:0a:e6: a2:2f:28:fe:22:aa:e3:1f:93:54:59:22:81:e1:b5:d2:8c:13: 1c:eb:dc:8c:b8:27:de:33:b7:c4:29:8a:32:89:68:7a:2d:ab: 39:18:ef:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmMOrHBHrHnLecvmsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY0YTUzMDQtOTc0ZC00Yzg2LTk4MjktMmY0ZDhkYzli OWI2MB4XDTI1MDQxNjE4MjUxNVoXDTI1MDcxNTE4MjUxNVowLzEtMCsGA1UEAxMk ZThiNWM2M2UtZjI5Yi00NDM1LWIyYWYtMzY3ODYwNTMyOTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHbapeFRVZyNXZ7goUnLfMsHOd1lFrUmk/BH fQE1hM2INhTwMWof8KQKE3v6QG47HtZ+VfuH6Jbvh7U6ng3AvjP+UeViclm3r2Tw RRD7ZAEc0/3O4X8i+7G+n4+/fZLxOi+HKYVfY+WxIJHsI8NK9Tyvjv4p7MbZIISg ciNR8zc3C+UFDTpYlYs2lI/W3kBeAaXSMOVmQMzQGfilF7BM1BFknXk+cwt6m9by 4//hV+gtdSYv7g/12v1bMQRq0M02U5lRpjXf/PpeKBKEi3BiWh2UIKDE3fw6NsyL gLuEe28c64JYthYtz2vxtYUStcUISMIYfboqlsxbUDb6s0gsGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7WQcrCjuNyNoSsb+xmBoixywWRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80NjRh NTMwNC05NzRkLTRjODYtOTgyOS0yZjRkOGRjOWI5YjYvNjgxN2FlZjgtMWQ1Mi0z YmYyLWI0MDktMGZmN2EwMGNjMmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDY0YTUzMDQtOTc0ZC00Yzg2LTk4 MjktMmY0ZDhkYzliOWI2LzQ2NGE1MzA0LTk3NGQtNGM4Ni05ODI5LTJmNGQ4ZGM5 YjliNi5jcmwwHwYDVR0jBBgwFoAUcgemEPwzJXUhFkgvpE9t1tV3MNUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80NjRhNTMwNC05NzRkLTRjODYtOTgyOS0yZjRk OGRjOWI5YjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQEQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvCu2Y1srxRjq2HSKgt0oHjC1chUoHRKigfsOZJP3yWI4fSgxetqVVu i894Swf7unn5Ni4eodQ87wGjEKuRnHCHhQckIRN5nPmzh82RHoy+1W2Xo6985wxy aFyNoYyQZeXDH/FfMMDthVCOJHEhRvX0Fye87MwWebrTWqKUv/lZNZrcEx276M3Q JgmQBCCNUHhnyTBQsemK8R/zD2GRmk6lTOPeEz64qBhW51NmVT/MLMF40olMaKRu qnbn7mdzXJLRyylNbg2lspabbJiGYj1vAKkJ1IQK5qIvKP4iquMfk1RZIoHhtdKM Exzr3Iy4J94zt8QpijKJaHotqzkY7+c= -----END CERTIFICATE-----Generated at Mon Apr 28 06:23:26 2025 by rpki-client