$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4107dc0c-6d35-3ba5-8b49-9ac86bf71a40.roa File: 4107dc0c-6d35-3ba5-8b49-9ac86bf71a40.roa (raw, json) Hash identifier: b8O9KDLuRKC+1dQeOZoI20gRnsIzVeFIv3rZx+u95CI= Subject key identifier: 08:AF:36:EA:B5:46:BC:1C:DD:89:AB:68:65:C7:77:02:5D:FB:57:95 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499829C6C2CE558ECD95ABB020 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4107dc0c-6d35-3ba5-8b49-9ac86bf71a40.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 64.114.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:c6:c2:ce:55:8e:cd:95:ab:b0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=f6660a73-0e45-4d7b-9a1c-a5d3e96fa7a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c2:3c:eb:29:1b:e8:02:1d:84:34:aa:1b:4f: 73:02:e0:47:46:84:cc:9a:c9:ca:4e:68:78:84:a0: 37:a6:79:12:e3:fc:97:1f:a4:24:63:40:de:23:2c: a6:d7:43:b5:28:ed:89:36:14:f3:45:d2:f6:d6:23: f8:76:cf:42:84:26:05:d9:4c:92:d5:02:95:e2:93: c4:17:45:4f:af:1a:19:33:04:a5:ca:7c:2e:78:22: cd:3d:f5:b3:6a:ad:ce:fc:4b:5a:21:7e:e4:95:8d: 38:fb:83:89:d3:e6:55:77:c6:89:af:38:0f:40:e4: a2:32:eb:bc:75:e0:5d:46:c4:5d:15:91:8b:ae:b4: fc:14:94:2f:1c:e9:42:65:07:09:04:45:1d:fb:87: ba:40:bf:d8:bc:eb:5a:21:9e:74:6c:95:be:53:7d: 2c:00:51:9b:82:74:ad:7a:3f:21:a2:45:e9:e6:57: 9a:25:62:f9:1d:75:33:32:84:76:fa:ef:4d:8e:a4: 62:8c:81:ae:ff:57:5e:87:83:3a:e6:73:8b:d4:bf: 15:42:3e:74:91:45:ef:48:13:18:d2:58:0d:62:a7: 3d:0a:57:f2:bb:58:d5:f8:41:e3:e7:9a:a5:25:a2: 1e:bb:84:24:dc:b9:57:74:29:83:b0:9b:1d:bb:5b: ab:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AF:36:EA:B5:46:BC:1C:DD:89:AB:68:65:C7:77:02:5D:FB:57:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4107dc0c-6d35-3ba5-8b49-9ac86bf71a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 64.114.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:6b:d3:b8:00:c5:9e:d1:bb:3f:b2:9a:aa:0e:2c:1f:40:3f: 8d:ee:77:1c:5a:76:b5:40:81:88:a7:7f:66:ab:bd:e4:b3:3a: 35:d2:98:36:33:4a:f5:34:10:22:b8:60:c0:1a:a1:e8:cc:fa: 0a:43:8a:72:0f:09:78:86:ac:08:57:f3:48:78:b1:81:b4:d7: 1d:1e:a4:86:2a:52:9e:3f:92:ee:c9:2d:aa:4f:82:bf:69:78: 29:de:3d:bb:ea:73:a5:d2:46:86:ab:03:50:99:04:ff:52:c4: 78:92:75:d0:3c:b3:1a:7a:b8:25:6c:b1:9c:a9:08:4e:6f:bb: d6:10:79:0d:d9:96:fd:0d:e9:4c:74:20:e8:30:e6:c8:87:9d: 93:d6:95:00:a3:1b:79:ba:af:8e:70:b5:53:31:70:e5:0d:25: 1e:15:8c:5c:69:61:53:5b:db:12:7b:0f:9b:29:6a:94:34:9d: 4c:0d:ef:6f:16:88:3e:dd:c6:c3:31:1b:3d:67:2f:60:10:3b: 75:ce:c6:8d:ea:e8:8b:ee:4d:24:7d:9d:00:6e:be:c6:dd:1b: 55:f8:33:fb:e5:03:d5:f5:cb:84:93:ba:c4:ce:e3:65:69:87: a6:06:a5:7a:98:53:2c:b5:16:0b:da:84:25:69:6f:70:4f:43: 56:f9:8d:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKcbCzlWOzZWrsCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk ZjY2NjBhNzMtMGU0NS00ZDdiLTlhMWMtYTVkM2U5NmZhN2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssI86ykb6AIdhDSqG09zAuBHRoTMmsnKTmh4 hKA3pnkS4/yXH6QkY0DeIyym10O1KO2JNhTzRdL21iP4ds9ChCYF2UyS1QKV4pPE F0VPrxoZMwSlynwueCLNPfWzaq3O/EtaIX7klY04+4OJ0+ZVd8aJrzgPQOSiMuu8 deBdRsRdFZGLrrT8FJQvHOlCZQcJBEUd+4e6QL/YvOtaIZ50bJW+U30sAFGbgnSt ej8hokXp5leaJWL5HXUzMoR2+u9NjqRijIGu/1deh4M65nOL1L8VQj50kUXvSBMY 0lgNYqc9Clfyu1jV+EHj55qlJaIeu4Qk3LlXdCmDsJsdu1urswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAivNuq1Rrwc3YmraGXHdwJd+1eVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDEwN2RjMGMtNmQzNS0z YmE1LThiNDktOWFjODZiZjcxYTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQHKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALhr07gAxZ7Ruz+ymqoOLB9AP43udxxadrVAgYinf2arveSzOjXSmDYz SvU0ECK4YMAaoejM+gpDinIPCXiGrAhX80h4sYG01x0epIYqUp4/ku7JLapPgr9p eCnePbvqc6XSRoarA1CZBP9SxHiSddA8sxp6uCVssZypCE5vu9YQeQ3Zlv0N6Ux0 IOgw5siHnZPWlQCjG3m6r45wtVMxcOUNJR4VjFxpYVNb2xJ7D5spapQ0nUwN728W iD7dxsMxGz1nL2AQO3XOxo3q6IvuTSR9nQBuvsbdG1X4M/vlA9X1y4STusTO42Vp h6YGpXqYUyy1FgvahCVpb3BPQ1b5jZE= -----END CERTIFICATE-----Generated at Sun Apr 27 20:06:40 2025 by rpki-client