$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/8766da4d-065f-3c8d-894f-b0a8cad5c77f.roa File: 8766da4d-065f-3c8d-894f-b0a8cad5c77f.roa (raw, json) Hash identifier: AP+9OMwkxGea2ivxAtMSTKvVZO6wJjNE8jT3LmY7X8A= Subject key identifier: ED:BF:B5:64:A3:65:82:E3:EF:C0:8A:DB:15:6F:24:F7:76:15:9E:E5 Certificate issuer: /CN=0be9634a-0674-471a-bb54-7866e12ded7a Certificate serial: 010D0C9F4328584957F40C470CEA7CD6F6F684A0 Authority key identifier: 99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/8766da4d-065f-3c8d-894f-b0a8cad5c77f.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 64.42.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:0c:47:0c:ea:7c:d6:f6:f6:84:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0be9634a-0674-471a-bb54-7866e12ded7a Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=c25e329f-96c9-48e5-bfab-6e9509a1d670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2e:6b:45:c8:fa:45:e2:a0:bd:cf:6a:b8:f9: 73:f4:30:15:e9:7a:28:32:7f:7f:14:0e:7c:a8:a3: 30:58:82:3c:4e:19:b9:b8:93:69:b7:fd:b1:6f:ae: dc:c6:a5:10:c3:b4:11:41:6d:46:27:54:e8:45:06: 76:7a:6c:9a:29:26:95:a4:6d:5b:72:8e:64:c4:9c: b3:2c:6e:a1:d3:d6:a3:de:e2:25:3b:0f:85:14:32: 09:8a:63:41:94:18:db:0b:dc:15:ea:d3:f2:04:01: c6:4f:13:2f:38:ea:26:d8:73:31:b8:36:c5:49:f6: a1:06:7b:8b:59:bf:c2:d7:3c:fe:c6:39:00:8e:17: 21:7d:69:0c:d5:39:be:e4:2e:5e:d8:6e:01:ba:61: f8:26:fb:d1:33:bf:69:51:63:dc:fb:81:51:e0:6e: 27:ff:af:fc:b3:2a:ce:40:65:35:29:ed:d8:0c:71: 98:53:b6:0e:1e:0e:71:0a:65:84:76:cc:3e:5c:d6: b5:01:b6:b3:16:ac:03:71:54:5b:8d:1f:5c:e7:c0: ad:73:d4:13:22:2b:d4:cf:09:f8:2e:3f:3f:5b:0e: 4c:6c:90:66:f4:e7:54:af:79:09:fb:75:19:97:4e: d0:3c:19:4f:eb:22:b4:12:0e:e1:c6:b0:5e:75:82: 3c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:BF:B5:64:A3:65:82:E3:EF:C0:8A:DB:15:6F:24:F7:76:15:9E:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/8766da4d-065f-3c8d-894f-b0a8cad5c77f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl X509v3 Authority Key Identifier: keyid:99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer sbgp-ipAddrBlock: critical IPv4: 64.42.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:22:ba:ee:33:3b:6a:19:c0:a7:6d:8c:87:b9:bc:dd:b4:4d: 5d:9b:3d:c2:64:c4:09:2f:c3:e9:74:32:28:3e:f8:0c:c5:ae: cb:da:a4:6f:16:3a:bd:7c:7b:b3:5b:6f:7f:e0:87:ea:d6:d8: 68:47:f8:38:47:80:b6:4e:58:c3:45:a5:44:36:64:9a:1a:0f: fd:1b:bf:7c:1f:7b:3d:82:f1:03:eb:5d:1b:e0:c5:7e:44:ef: 6b:a6:bc:49:a6:4f:f0:1a:cf:2f:83:08:cf:bc:0c:e4:22:f2: 05:43:43:4a:0a:5a:74:c9:7b:e6:ed:1e:7e:c2:f6:1a:ed:05: 85:5e:74:d8:a2:ed:69:90:cf:36:62:03:c4:68:5d:17:25:dd: f4:b9:83:9d:ec:e1:92:21:7d:c8:7f:46:92:f5:46:9d:c2:d2: de:e2:71:7e:11:27:b7:69:fe:1d:72:45:1f:15:f6:ed:d8:33: 6c:4e:8f:12:cd:4d:18:61:94:6b:09:21:c9:33:c5:1e:0b:1a: 73:63:db:c1:0f:99:53:25:94:05:dd:87:0e:dc:b5:a9:e7:18: d5:da:0b:ca:f5:e1:da:b1:63:49:8c:34:e3:53:1e:b6:69:40: 9f:89:ec:f9:60:db:be:74:3e:bd:2d:9a:32:f0:29:ec:37:d2: 91:a4:02:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9AxHDOp81vb2hKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGJlOTYzNGEtMDY3NC00NzFhLWJiNTQtNzg2NmUxMmRl ZDdhMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk YzI1ZTMyOWYtOTZjOS00OGU1LWJmYWItNmU5NTA5YTFkNjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS5rRcj6ReKgvc9quPlz9DAV6XooMn9/FA58 qKMwWII8Thm5uJNpt/2xb67cxqUQw7QRQW1GJ1ToRQZ2emyaKSaVpG1bco5kxJyz LG6h09aj3uIlOw+FFDIJimNBlBjbC9wV6tPyBAHGTxMvOOom2HMxuDbFSfahBnuL Wb/C1zz+xjkAjhchfWkM1Tm+5C5e2G4BumH4JvvRM79pUWPc+4FR4G4n/6/8syrO QGU1Ke3YDHGYU7YOHg5xCmWEdsw+XNa1AbazFqwDcVRbjR9c58Ctc9QTIivUzwn4 Lj8/Ww5MbJBm9OdUr3kJ+3UZl07QPBlP6yK0Eg7hxrBedYI8CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2/tWSjZYLj78CK2xVvJPd2FZ7lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYmU5 NjM0YS0wNjc0LTQ3MWEtYmI1NC03ODY2ZTEyZGVkN2EvODc2NmRhNGQtMDY1Zi0z YzhkLTg5NGYtYjBhOGNhZDVjNzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGJlOTYzNGEtMDY3NC00NzFhLWJi NTQtNzg2NmUxMmRlZDdhLzBiZTk2MzRhLTA2NzQtNDcxYS1iYjU0LTc4NjZlMTJk ZWQ3YS5jcmwwHwYDVR0jBBgwFoAUmcJzE2fDRji36wpv3V7puIFI97EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYmU5NjM0YS0wNjc0LTQ3MWEtYmI1NC03ODY2 ZTEyZGVkN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCq8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM8iuu4zO2oZwKdtjIe5vN20TV2bPcJkxAkvw+l0Mig++AzFrsvapG8W Or18e7Nbb3/gh+rW2GhH+DhHgLZOWMNFpUQ2ZJoaD/0bv3wfez2C8QPrXRvgxX5E 72umvEmmT/Aazy+DCM+8DOQi8gVDQ0oKWnTJe+btHn7C9hrtBYVedNii7WmQzzZi A8RoXRcl3fS5g53s4ZIhfch/RpL1Rp3C0t7icX4RJ7dp/h1yRR8V9u3YM2xOjxLN TRhhlGsJIckzxR4LGnNj28EPmVMllAXdhw7ctannGNXaC8r14dqxY0mMNONTHrZp QJ+J7Plg2750Pr0tmjLwKew30pGkAo8= -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:25 2025 by rpki-client