$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/85bfc13b-5ca6-3582-84ef-09bdb9bfc4c1.roa File: 85bfc13b-5ca6-3582-84ef-09bdb9bfc4c1.roa (raw, json) Hash identifier: 3CfmrXckx8OfCsx4VaKgmZAOv2V2dw6tZCgtp4uA3D0= Subject key identifier: 1E:23:96:20:EC:DE:73:1D:BA:E5:73:C7:16:9F:99:C5:55:1A:CA:B4 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285849A089D59B1C19F3FE58C6A200 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/85bfc13b-5ca6-3582-84ef-09bdb9bfc4c1.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 213122 IP address blocks: 64.112.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:d5:9b:1c:19:f3:fe:58:c6:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=fb2c791c-900e-4e1b-ad90-f20c6d8a9a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e1:ef:bb:47:2b:74:fd:ea:dc:c4:2c:bc:45: 15:75:27:75:1d:68:e5:4e:2c:03:a5:5d:3e:ea:49: 84:9b:bb:29:39:30:0c:d5:0f:88:ff:54:ff:a1:c9: c6:6f:31:e4:df:d8:57:73:74:f6:96:b5:11:a3:15: 98:57:40:b8:0d:69:bb:9c:31:b0:80:b3:9b:c0:4d: 1e:dd:22:a4:39:08:9b:9e:da:73:ac:ff:03:69:74: df:97:f0:37:a3:3b:28:42:a4:1f:3b:5f:0c:e5:5a: 67:3b:a0:02:cb:2e:d2:49:4c:f0:2c:0c:cf:44:31: f5:cb:b7:ae:07:8b:ea:b2:54:d0:f3:b4:d4:51:6f: 48:a0:97:56:61:6c:d4:11:d9:63:8e:85:ef:10:b8: 8c:73:81:aa:30:e4:66:39:76:a9:c9:06:01:f5:b6: 2c:80:2d:0c:be:77:df:2f:18:73:0e:9a:9f:93:a1: 2c:aa:b9:6a:9c:84:2a:04:91:9d:ba:e8:25:51:2c: 54:6c:29:6c:95:4c:3b:b8:7c:3f:f2:34:bb:7c:98: 51:d5:3b:91:1a:99:9f:2d:48:79:69:aa:f1:e5:51: e7:fc:e0:0a:57:eb:21:1e:56:19:f8:88:4f:98:46: 86:bd:53:b2:63:20:43:19:e3:7d:d3:6e:96:9d:1d: 8c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:23:96:20:EC:DE:73:1D:BA:E5:73:C7:16:9F:99:C5:55:1A:CA:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/85bfc13b-5ca6-3582-84ef-09bdb9bfc4c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 64.112.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:0b:5d:f4:07:24:fa:cf:23:40:4d:63:60:ce:6a:da:64:39: 06:87:4a:6d:e2:50:4c:89:c7:3a:19:7c:22:3a:68:7a:ef:80: 8d:6b:0b:c0:08:32:78:5e:ae:6c:34:b0:41:e4:f5:71:be:50: 34:3e:26:fb:de:46:96:d6:cc:e8:ed:0c:e6:5d:0f:0f:a1:5e: 5e:71:64:26:0e:3a:ad:ad:28:7c:2a:a6:11:29:83:57:8c:d9: 7b:f6:e3:a5:47:94:50:01:df:21:c5:61:42:39:b5:32:26:e0: bf:70:33:43:28:ec:6b:43:8a:a3:d2:69:67:04:a1:28:5f:e5: 86:69:a8:f9:b7:99:3d:06:f4:2d:81:c0:4c:0e:39:35:47:2e: 09:16:6e:10:77:89:b8:7b:5d:e9:35:b7:79:18:d4:4e:52:cb: 56:d3:0a:59:a3:f7:fb:a8:0a:11:22:85:8d:3f:ed:59:06:0d: e6:fd:24:4e:d2:65:58:78:ef:b9:9e:b1:a9:c0:23:b2:69:2a: 6a:18:9c:30:e2:e9:73:35:22:b7:c3:8a:27:7f:28:b4:46:2a: 5e:e5:86:43:a5:42:9d:57:35:11:8b:b0:c1:73:6e:02:ea:c2: c6:47:71:0d:4b:d2:29:42:03:54:8c:d5:98:e1:6f:04:73:82: fd:54:e1:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidWbHBnz/ljGogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk ZmIyYzc5MWMtOTAwZS00ZTFiLWFkOTAtZjIwYzZkOGE5YTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uHvu0crdP3q3MQsvEUVdSd1HWjlTiwDpV0+ 6kmEm7spOTAM1Q+I/1T/ocnGbzHk39hXc3T2lrURoxWYV0C4DWm7nDGwgLObwE0e 3SKkOQibntpzrP8DaXTfl/A3ozsoQqQfO18M5VpnO6ACyy7SSUzwLAzPRDH1y7eu B4vqslTQ87TUUW9IoJdWYWzUEdljjoXvELiMc4GqMORmOXapyQYB9bYsgC0Mvnff LxhzDpqfk6EsqrlqnIQqBJGduuglUSxUbClslUw7uHw/8jS7fJhR1TuRGpmfLUh5 aarx5VHn/OAKV+shHlYZ+IhPmEaGvVOyYyBDGeN9026WnR2M+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4jliDs3nMduuVzxxafmcVVGsq0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvODViZmMxM2ItNWNhNi0z NTgyLTg0ZWYtMDliZGI5YmZjNGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHBWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwLXfQHJPrPI0BNY2DOatpkOQaHSm3iUEyJxzoZfCI6aHrvgI1rC8AI Mnhermw0sEHk9XG+UDQ+JvveRpbWzOjtDOZdDw+hXl5xZCYOOq2tKHwqphEpg1eM 2Xv246VHlFAB3yHFYUI5tTIm4L9wM0Mo7GtDiqPSaWcEoShf5YZpqPm3mT0G9C2B wEwOOTVHLgkWbhB3ibh7Xek1t3kY1E5Sy1bTClmj9/uoChEihY0/7VkGDeb9JE7S ZVh477mesanAI7JpKmoYnDDi6XM1IrfDiid/KLRGKl7lhkOlQp1XNRGLsMFzbgLq wsZHcQ1L0ilCA1SM1ZjhbwRzgv1U4ZI= -----END CERTIFICATE-----Generated at Sat Apr 26 16:44:45 2025 by rpki-client