$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0af33e37-3fbd-37d4-ae50-a7e7f28fa9ca.roa File: 0af33e37-3fbd-37d4-ae50-a7e7f28fa9ca.roa (raw, json) Hash identifier: Wj6l4csu2ROQlQlfXR/UokXbEJ16CIx01u8A9AUg+bI= Subject key identifier: 41:3C:28:BD:0B:78:55:BB:8B:A9:EB:09:46:E1:D6:42:C8:5D:09:F7 Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F43285848F22C657FBC4FF7E36E905800 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0af33e37-3fbd-37d4-ae50-a7e7f28fa9ca.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 24439 IP address blocks: 64.86.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:65:7f:bc:4f:f7:e3:6e:90:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=d09dec5f-dba5-4af4-89c3-9c7ba7cd6979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c4:df:37:d6:a4:28:d8:ec:52:f5:c6:b2:41: 28:b9:69:39:b6:1d:05:2a:fb:a2:34:30:12:10:fe: e1:21:cb:77:54:0d:27:85:3e:aa:03:43:b8:eb:2a: cb:f2:08:80:a8:98:80:df:9c:a7:c4:d5:d1:92:07: d4:58:af:be:da:c8:48:ce:7d:c5:a0:22:8d:ce:cb: 30:6f:67:f5:e4:a5:2f:6a:0c:99:46:a2:1f:2b:cc: 6c:95:b2:3e:5e:09:fc:b3:38:ba:bc:a9:22:24:04: 2b:51:fb:b7:8c:aa:81:3a:1c:1c:d3:8b:43:28:5b: 0f:27:73:a6:50:22:e0:64:b7:4f:de:fe:8c:22:a7: 99:e1:22:d4:1a:3c:63:9e:8e:79:03:44:15:0d:ef: ad:64:dc:4b:7c:a5:e9:1b:bc:5c:4d:e7:fd:1c:a2: 42:f5:24:d1:fa:13:8d:6d:e4:d8:61:27:89:28:6b: da:42:1e:78:63:e4:9c:6a:32:e4:98:b6:e8:eb:ce: 60:5b:81:5e:ee:4b:b5:2c:16:3b:d5:b2:1d:51:7f: 26:7f:72:22:22:5c:de:be:9c:4c:42:34:b5:64:df: f0:66:7b:e5:a6:0b:28:42:1f:ae:18:64:66:9e:54: 35:37:76:a5:a9:28:21:25:4d:db:5e:c1:b9:24:1e: 0f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3C:28:BD:0B:78:55:BB:8B:A9:EB:09:46:E1:D6:42:C8:5D:09:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0af33e37-3fbd-37d4-ae50-a7e7f28fa9ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 64.86.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:83:d1:de:d4:e6:ee:11:e0:28:43:4a:1d:09:09:95:32:6f: 7f:60:47:71:a9:b5:e3:04:bf:9f:d4:70:f8:96:ad:41:32:89: 8d:1e:c5:24:da:72:9e:8a:bb:0a:32:d4:78:af:2b:4c:dd:03: b6:bd:8c:7e:f3:95:77:1a:8a:8f:de:7a:66:69:c4:2d:d5:0e: c2:28:a5:ec:cc:bb:c8:e9:75:26:05:ed:7d:8a:be:52:05:39: b4:4a:06:0d:7e:eb:73:27:c7:e2:18:3a:f5:49:b9:91:da:19: e0:81:8d:1a:a1:aa:84:ea:13:ca:03:82:27:d5:14:f2:a1:e6: b2:c8:25:69:f6:a4:10:d3:19:17:fc:61:45:0a:a5:04:34:d9: 5d:17:d1:49:2f:83:c3:dd:b1:a1:75:e0:e7:3d:18:2d:52:80: b2:8c:8c:e1:9e:c6:36:28:a1:ba:ec:95:f0:f0:8f:1c:ea:72: ee:2e:ca:ab:9b:85:3b:83:0e:17:0d:f6:97:dd:b4:df:7a:cd: ea:93:8f:ce:53:71:ae:26:ba:63:9a:55:07:de:96:5b:92:53: 3a:48:4e:36:fa:42:9a:18:2e:7f:a6:d9:9b:7b:fa:ac:3f:ac: da:0e:47:3e:05:97:97:ec:2c:ec:32:a7:68:80:3a:20:01:75: 0e:27:3b:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGV/vE/3426QWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ZDA5ZGVjNWYtZGJhNS00YWY0LTg5YzMtOWM3YmE3Y2Q2OTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsTfN9akKNjsUvXGskEouWk5th0FKvuiNDAS EP7hIct3VA0nhT6qA0O46yrL8giAqJiA35ynxNXRkgfUWK++2shIzn3FoCKNzssw b2f15KUvagyZRqIfK8xslbI+Xgn8szi6vKkiJAQrUfu3jKqBOhwc04tDKFsPJ3Om UCLgZLdP3v6MIqeZ4SLUGjxjno55A0QVDe+tZNxLfKXpG7xcTef9HKJC9STR+hON beTYYSeJKGvaQh54Y+ScajLkmLbo685gW4Fe7ku1LBY71bIdUX8mf3IiIlzevpxM QjS1ZN/wZnvlpgsoQh+uGGRmnlQ1N3alqSghJU3bXsG5JB4PPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEE8KL0LeFW7i6nrCUbh1kLIXQn3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvMGFmMzNlMzctM2ZiZC0z N2Q0LWFlNTAtYTdlN2YyOGZhOWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFYXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiD0d7U5u4R4ChDSh0JCZUyb39gR3GpteMEv5/UcPiWrUEyiY0exSTa cp6Kuwoy1HivK0zdA7a9jH7zlXcaio/eemZpxC3VDsIopezMu8jpdSYF7X2KvlIF ObRKBg1+63Mnx+IYOvVJuZHaGeCBjRqhqoTqE8oDgifVFPKh5rLIJWn2pBDTGRf8 YUUKpQQ02V0X0Ukvg8PdsaF14Oc9GC1SgLKMjOGexjYoobrslfDwjxzqcu4uyqub hTuDDhcN9pfdtN96zeqTj85Tca4mumOaVQfelluSUzpITjb6QpoYLn+m2Zt7+qw/ rNoORz4Fl5fsLOwyp2iAOiABdQ4nOxo= -----END CERTIFICATE-----Generated at Mon Apr 28 02:03:58 2025 by rpki-client