$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/031ed816-d716-387e-bcc2-eecd10719c63.roa File: 031ed816-d716-387e-bcc2-eecd10719c63.roa (raw, json) Hash identifier: SOhla2RG2OTQ4RCPhn0CDL0j1EXShkP9DmZlYgGFVa8= Subject key identifier: 23:C0:61:1A:B9:C2:B4:55:75:25:CC:25:B9:C3:06:D5:02:0B:D3:AC Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A089D58BE611CEB9E31296C0 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/031ed816-d716-387e-bcc2-eecd10719c63.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 213122 IP address blocks: 64.112.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d5:8b:e6:11:ce:b9:e3:12:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=47b7812f-4ca5-4ae5-97de-69a9819b5c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:68:b3:1a:c0:2f:31:c5:0c:34:c1:2b:f8:ab: 9e:54:ca:84:cf:a1:0b:fb:ce:b4:17:eb:23:5f:8a: 81:e8:fe:40:bd:62:13:03:af:09:47:2e:1b:cc:9f: 31:cc:40:c8:dc:14:71:bd:32:f5:3f:5c:9a:fe:9b: 83:91:f0:62:5c:04:7b:ec:8a:ad:92:b0:46:fe:21: a7:a0:0a:19:fc:34:cb:56:c6:b3:30:b1:c6:12:d9: b6:61:ad:30:c2:11:2d:c2:a5:36:51:71:f8:95:64: 5e:ab:10:df:1a:25:8d:b1:3b:09:cc:5f:ac:64:c1: 8e:f3:16:08:8d:70:c1:d0:7d:86:9f:1b:11:0a:9e: 58:6a:f5:6c:e1:d3:ac:ba:a0:5e:de:4e:9f:dc:c3: 8b:c5:5e:02:5e:5b:a4:ce:94:5d:f5:ad:2f:4d:ff: e8:23:46:36:e9:f2:04:ed:03:74:b8:49:4e:ad:89: f9:8b:7c:be:c9:83:47:79:55:7a:bf:bf:5b:be:51: 01:9b:3c:2e:0c:51:98:b9:56:e0:63:ec:4c:cf:4e: 41:ce:f7:c4:76:37:3c:90:39:81:35:08:62:c6:4a: a5:6c:d5:24:4b:79:59:fd:0d:51:2b:6f:3b:ba:e1: 37:a2:ae:ee:1f:cb:9d:1e:2d:f5:04:11:cd:a8:91: 4a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C0:61:1A:B9:C2:B4:55:75:25:CC:25:B9:C3:06:D5:02:0B:D3:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/031ed816-d716-387e-bcc2-eecd10719c63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 64.112.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:1b:67:f7:9e:81:7b:b5:95:cd:7a:0c:84:45:68:09:28:ed: c6:04:93:cf:40:88:f8:2a:bf:6c:c2:2d:db:28:21:0d:12:bc: 47:f8:1e:2f:da:1d:61:d3:33:77:9d:97:7f:e8:70:6c:35:94: c6:55:88:d2:4c:6d:e0:3f:5c:d9:dd:4f:75:80:b5:0a:eb:73: 2b:f6:aa:18:e9:97:d2:36:17:2a:b3:b4:5b:65:e2:f5:ac:30: 79:ec:5b:56:fb:b6:56:49:78:cd:64:9c:ee:de:5a:dd:8c:4a: 0d:43:87:0b:54:92:c2:93:12:18:87:dc:61:e3:08:09:ae:8c: 61:9c:51:f2:0c:17:b6:29:4a:a2:bf:f0:fa:91:95:48:42:1e: f0:28:16:3c:4d:c6:fa:d3:95:3f:47:7c:b4:98:4e:e7:16:34: ec:00:eb:3b:86:f2:77:d3:30:fb:d6:55:03:0d:44:a7:80:85: 66:dd:f0:d3:a3:3e:aa:11:46:db:ad:fa:62:0e:0a:fc:7d:3f: 2b:79:84:ab:9c:ce:da:a4:ba:4f:59:65:9f:6f:e4:14:9d:4e: 25:d6:41:ce:0d:37:52:58:e9:51:c4:67:b2:6a:67:f2:f8:46: 6a:38:5b:85:b6:06:4f:03:da:f0:b6:26:fa:5a:91:8d:91:45: 05:5b:34:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidWL5hHOueMSlsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk NDdiNzgxMmYtNGNhNS00YWU1LTk3ZGUtNjlhOTgxOWI1YzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGizGsAvMcUMNMEr+KueVMqEz6EL+860F+sj X4qB6P5AvWITA68JRy4bzJ8xzEDI3BRxvTL1P1ya/puDkfBiXAR77IqtkrBG/iGn oAoZ/DTLVsazMLHGEtm2Ya0wwhEtwqU2UXH4lWReqxDfGiWNsTsJzF+sZMGO8xYI jXDB0H2GnxsRCp5YavVs4dOsuqBe3k6f3MOLxV4CXlukzpRd9a0vTf/oI0Y26fIE 7QN0uElOrYn5i3y+yYNHeVV6v79bvlEBmzwuDFGYuVbgY+xMz05BzvfEdjc8kDmB NQhixkqlbNUkS3lZ/Q1RK287uuE3oq7uH8udHi31BBHNqJFK6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPAYRq5wrRVdSXMJbnDBtUCC9OsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvMDMxZWQ4MTYtZDcxNi0z ODdlLWJjYzItZWVjZDEwNzE5YzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHBVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUbZ/eegXu1lc16DIRFaAko7cYEk89AiPgqv2zCLdsoIQ0SvEf4Hi/a HWHTM3edl3/ocGw1lMZViNJMbeA/XNndT3WAtQrrcyv2qhjpl9I2FyqztFtl4vWs MHnsW1b7tlZJeM1knO7eWt2MSg1DhwtUksKTEhiH3GHjCAmujGGcUfIMF7YpSqK/ 8PqRlUhCHvAoFjxNxvrTlT9HfLSYTucWNOwA6zuG8nfTMPvWVQMNRKeAhWbd8NOj PqoRRtut+mIOCvx9Pyt5hKucztqkuk9ZZZ9v5BSdTiXWQc4NN1JY6VHEZ7JqZ/L4 Rmo4W4W2Bk8D2vC2JvpakY2RRQVbNH0= -----END CERTIFICATE-----Generated at Sat Apr 26 16:20:21 2025 by rpki-client