$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bef06e49-a62b-35b4-b63d-855e5a9e3052.roa File: bef06e49-a62b-35b4-b63d-855e5a9e3052.roa (raw, json) Hash identifier: oMLb1S9ur71Nuk7F4lWMDwCMQM87+RE7PbENfrbB0WE= Subject key identifier: 35:58:1E:36:03:14:3F:98:00:B9:E8:95:B8:FD:14:7E:BD:D3:AD:91 Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584953C408BFD8926E086AB19C40 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bef06e49-a62b-35b4-b63d-855e5a9e3052.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 7029 IP address blocks: 64.86.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:08:bf:d8:92:6e:08:6a:b1:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=312cac6b-bfec-416f-906a-d545ba7843c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:94:98:10:66:5f:20:01:b8:73:bd:6f:98:2e: f1:1a:28:56:1f:aa:d1:d5:45:dc:20:0b:f2:4b:48: 47:35:a7:3d:e5:92:d7:b4:95:ae:29:0f:65:b6:08: 23:94:eb:41:d4:c5:76:0a:c5:6b:04:60:b2:9e:b6: 3c:e4:84:eb:14:0f:01:d6:53:63:59:5a:ec:d1:1c: ed:70:22:f6:f5:60:5e:ee:11:c3:ce:98:b3:0a:2e: a9:78:00:21:0a:23:18:c4:63:46:85:f6:9c:65:51: 0d:18:35:a1:86:bb:1f:c3:66:cf:f1:21:61:06:01: cc:40:91:37:34:01:4e:1b:4a:58:9b:3c:45:01:5f: c3:7d:bf:1b:c4:cc:3b:fe:6d:10:71:ae:7a:9d:12: e4:a4:6a:9c:6b:f4:00:ea:c8:cf:d1:51:a8:c5:5d: 91:03:55:07:e5:a4:e8:72:a8:22:a8:7f:7c:d9:b6: 34:73:00:87:60:9a:e6:3d:f5:43:5a:27:2a:83:62: bb:f0:30:ac:7c:e6:e8:0c:e4:3b:27:44:fa:cd:23: a7:32:2a:a3:a4:85:ea:67:91:24:2f:14:9a:49:f4: 71:76:41:f0:32:a3:f8:1c:11:27:df:33:9c:df:ac: 4e:09:15:9f:14:fb:37:7e:0d:65:92:55:02:3c:ae: 61:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:58:1E:36:03:14:3F:98:00:B9:E8:95:B8:FD:14:7E:BD:D3:AD:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bef06e49-a62b-35b4-b63d-855e5a9e3052.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 64.86.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:2a:54:be:e7:b9:58:c9:ba:80:44:51:79:21:1a:20:5d:fc: ec:b8:38:22:fc:e7:09:b2:b5:2d:3e:48:2c:48:25:4a:45:c2: c2:c7:04:f9:28:df:2c:c1:95:59:5c:bf:97:bd:74:0b:13:3c: 2a:8a:87:73:ff:3c:fd:fc:1d:d2:e6:ba:95:89:e7:c6:0d:76: 6b:1c:4e:b2:f5:ef:e6:1a:7f:4d:8f:0c:e8:5d:79:c6:31:4c: 60:e3:e3:7d:44:f6:02:56:50:da:c8:fe:a2:c3:00:8e:b9:45: 03:fe:9f:2d:8f:f4:1b:21:b0:30:05:b9:eb:bf:66:29:35:0f: e4:6b:84:c4:ec:6c:f5:7f:9e:17:c0:45:18:4e:ee:77:82:00: b2:0e:4a:c1:3a:18:11:37:98:11:6b:a8:c7:53:ab:6c:4b:98: 81:21:ae:50:2b:37:35:09:7a:ff:9e:cb:f3:ad:22:d7:b5:e6: 15:f0:2e:5d:cb:6e:91:4c:31:f2:15:fa:0f:70:ef:9a:ee:e6: bb:f9:57:51:79:6c:96:a7:1d:b0:de:90:7f:32:5c:c5:c8:0c: 18:fd:de:ca:02:24:8c:fd:80:7e:aa:a7:d1:69:16:1f:c9:01: 99:90:62:8a:24:4b:74:ee:9f:61:16:34:a5:50:0c:c3:64:2c: 63:5e:6b:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxAi/2JJuCGqxnEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk MzEyY2FjNmItYmZlYy00MTZmLTkwNmEtZDU0NWJhNzg0M2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5SYEGZfIAG4c71vmC7xGihWH6rR1UXcIAvy S0hHNac95ZLXtJWuKQ9ltggjlOtB1MV2CsVrBGCynrY85ITrFA8B1lNjWVrs0Rzt cCL29WBe7hHDzpizCi6peAAhCiMYxGNGhfacZVENGDWhhrsfw2bP8SFhBgHMQJE3 NAFOG0pYmzxFAV/Dfb8bxMw7/m0Qca56nRLkpGqca/QA6sjP0VGoxV2RA1UH5aTo cqgiqH982bY0cwCHYJrmPfVDWicqg2K78DCsfOboDOQ7J0T6zSOnMiqjpIXqZ5Ek LxSaSfRxdkHwMqP4HBEn3zOc36xOCRWfFPs3fg1lklUCPK5hgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVYHjYDFD+YALnolbj9FH69062RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvYmVmMDZlNDktYTYyYi0z NWI0LWI2M2QtODU1ZTVhOWUzMDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0qVL7nuVjJuoBEUXkhGiBd/Oy4OCL85wmytS0+SCxIJUpFwsLHBPko 3yzBlVlcv5e9dAsTPCqKh3P/PP38HdLmupWJ58YNdmscTrL17+Yaf02PDOhdecYx TGDj431E9gJWUNrI/qLDAI65RQP+ny2P9BshsDAFueu/Zik1D+RrhMTsbPV/nhfA RRhO7neCALIOSsE6GBE3mBFrqMdTq2xLmIEhrlArNzUJev+ey/OtIte15hXwLl3L bpFMMfIV+g9w75ru5rv5V1F5bJanHbDekH8yXMXIDBj93soCJIz9gH6qp9FpFh/J AZmQYookS3Tun2EWNKVQDMNkLGNea1c= -----END CERTIFICATE-----Generated at Mon Apr 28 11:47:48 2025 by rpki-client