$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/2db12b78-bb60-3bee-8ea6-72b50ff5c07e.roa File: 2db12b78-bb60-3bee-8ea6-72b50ff5c07e.roa (raw, json) Hash identifier: fi1yJbBHliqKdBZvZS31JYHW3mLLHzPs4OD6lITzVV8= Subject key identifier: FE:32:3F:DD:2B:E1:97:51:AD:73:5A:68:7C:85:38:20:A0:CE:89:4A Certificate issuer: /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Certificate serial: 010D0C9F4328584988CF2CAB44AC5A51A6117AC0 Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/2db12b78-bb60-3bee-8ea6-72b50ff5c07e.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 395567 IP address blocks: 64.225.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:2c:ab:44:ac:5a:51:a6:11:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=cf9a62e0-ca09-47ab-a0ca-15258bd8289e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b6:ae:4e:bd:9e:03:53:1d:61:eb:d2:46:68: 47:4c:68:ed:40:6c:97:d9:78:43:32:be:ba:a7:9c: 59:cc:f0:a8:2a:6b:33:bd:36:af:ed:d0:ee:a8:3f: f3:f3:4b:15:67:e1:f4:14:03:02:9b:97:3a:fb:91: bc:62:6a:ba:e6:e9:79:fe:5a:ff:49:69:69:a5:4b: 79:3a:d6:0f:17:2a:2b:28:ed:88:1e:e9:ff:3e:6d: 3d:87:31:82:2c:3d:c5:05:63:32:de:3f:9b:90:56: 9b:74:a5:90:aa:5e:8c:35:36:b5:96:5a:81:d1:c1: b7:a1:7a:05:29:99:06:c9:6b:b5:6f:04:6d:aa:7b: 2a:44:b9:18:19:4c:44:01:06:5d:27:9b:5e:bd:9a: 57:cc:9a:d7:54:26:d2:91:9d:49:94:12:bf:9c:fa: 2d:54:39:d3:7e:29:16:12:b7:73:1f:c4:b4:81:ac: be:04:1d:11:61:bf:47:7e:bf:ef:d3:46:b9:16:1b: 4a:3c:4f:12:ce:96:2f:d8:5d:1c:83:91:fc:22:3b: 23:cc:71:3e:dd:cf:d9:5e:5c:8c:42:b7:24:ac:9c: 48:61:b4:65:8e:f2:7b:9a:97:ac:2c:ce:12:cb:29: e7:4e:85:05:ce:e8:49:b5:d8:df:5e:21:a3:e5:b8: 89:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:32:3F:DD:2B:E1:97:51:AD:73:5A:68:7C:85:38:20:A0:CE:89:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/2db12b78-bb60-3bee-8ea6-72b50ff5c07e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl X509v3 Authority Key Identifier: keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer sbgp-ipAddrBlock: critical IPv4: 64.225.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:56:ea:36:fe:7e:84:09:ae:20:63:5e:fb:66:5f:5a:bc:55: 80:b1:78:56:d5:32:76:6a:a8:d5:0f:5a:2f:00:c3:37:a5:05: b9:5a:ec:9d:93:38:08:b5:60:70:cf:92:fe:b7:db:e2:79:fa: d6:d5:8b:a1:3e:1d:3f:d7:2a:64:7b:9c:3e:ee:be:d4:4f:9c: 10:04:c7:5a:4a:1c:5c:cd:d8:e8:5e:e0:94:a3:81:9c:f3:05: a1:a9:ea:e8:48:af:d2:b4:2a:bc:2a:74:74:e9:7d:23:4a:16: c2:63:d0:cd:0a:91:1c:21:52:91:32:59:af:82:f9:67:cd:c6: 96:d6:ec:ea:e6:03:4d:0e:9d:4e:42:ea:e0:76:23:f5:6c:51: 94:b6:c0:c6:85:8c:fc:6d:68:9d:5c:b9:76:56:3b:72:b0:b0: ee:97:4b:d7:41:24:68:87:8b:5e:3a:0e:a7:00:7e:f7:79:c4: 45:8c:04:10:38:b4:83:23:b9:2f:45:b2:91:35:e3:a5:08:ac: 12:f0:76:25:8e:a5:f5:1d:38:3c:4d:3b:f8:05:3d:7c:74:9a: 77:6e:4e:29:74:b3:f9:a0:99:a5:b3:38:c6:47:c8:d5:ae:53: 22:f6:b2:21:b9:71:55:30:8c:31:d1:d9:e5:5b:ad:0d:b4:18: 62:7e:d1:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzyyrRKxaUaYResAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU3N2I1YWYtYTFiNS00ODU4LWI2MWQtZjA5ZmQ2N2Y3 Y2IzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk Y2Y5YTYyZTAtY2EwOS00N2FiLWEwY2EtMTUyNThiZDgyODllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbauTr2eA1MdYevSRmhHTGjtQGyX2XhDMr66 p5xZzPCoKmszvTav7dDuqD/z80sVZ+H0FAMCm5c6+5G8Ymq65ul5/lr/SWlppUt5 OtYPFyorKO2IHun/Pm09hzGCLD3FBWMy3j+bkFabdKWQql6MNTa1llqB0cG3oXoF KZkGyWu1bwRtqnsqRLkYGUxEAQZdJ5tevZpXzJrXVCbSkZ1JlBK/nPotVDnTfikW ErdzH8S0gay+BB0RYb9Hfr/v00a5FhtKPE8SzpYv2F0cg5H8IjsjzHE+3c/ZXlyM QrckrJxIYbRljvJ7mpesLM4SyynnToUFzuhJtdjfXiGj5biJMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4yP90r4ZdRrXNaaHyFOCCgzolKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3 YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlmZDY3ZjdjYjMvMmRiMTJiNzgtYmI2MC0z YmVlLThlYTYtNzJiNTBmZjVjMDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWU3N2I1YWYtYTFiNS00ODU4LWI2 MWQtZjA5ZmQ2N2Y3Y2IzL2FlNzdiNWFmLWExYjUtNDg1OC1iNjFkLWYwOWZkNjdm N2NiMy5jcmwwHwYDVR0jBBgwFoAUQ8bZZVYwh5KCSgXB185ho81dPhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlm ZDY3ZjdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQOHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFW6jb+foQJriBjXvtmX1q8VYCxeFbVMnZqqNUPWi8AwzelBbla7J2T OAi1YHDPkv632+J5+tbVi6E+HT/XKmR7nD7uvtRPnBAEx1pKHFzN2Ohe4JSjgZzz BaGp6uhIr9K0KrwqdHTpfSNKFsJj0M0KkRwhUpEyWa+C+WfNxpbW7OrmA00OnU5C 6uB2I/VsUZS2wMaFjPxtaJ1cuXZWO3KwsO6XS9dBJGiHi146DqcAfvd5xEWMBBA4 tIMjuS9FspE146UIrBLwdiWOpfUdODxNO/gFPXx0mnduTil0s/mgmaWzOMZHyNWu UyL2siG5cVUwjDHR2eVbrQ20GGJ+0Sw= -----END CERTIFICATE-----Generated at Mon Apr 28 00:03:08 2025 by rpki-client