$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bd273475-ae2c-31d4-a1a1-612a8be36924.roa File: bd273475-ae2c-31d4-a1a1-612a8be36924.roa (raw, json) Hash identifier: 3I8VAMkk7TqSSPuYz6GMIbBljd3Xmq6Kwra0VW5gaL0= Subject key identifier: B1:7E:70:D8:6B:05:09:57:C1:A9:4E:B6:80:71:A7:E8:64:4C:CA:75 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849955F1E18BF290FCE91CB2200 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bd273475-ae2c-31d4-a1a1-612a8be36924.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 64.114.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:1e:18:bf:29:0f:ce:91:cb:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=ce5d5291-db20-4515-907c-b638c5b78d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1b:4a:c6:70:31:87:77:9d:be:76:56:fa:14: c6:1f:92:2d:36:39:b8:3c:74:bd:44:b3:f6:7c:aa: bd:c0:f3:70:8d:42:3f:85:4f:6e:f5:fc:57:94:94: d2:b7:41:81:de:8c:07:a0:d5:49:2e:f5:cf:67:41: 54:70:88:f6:7f:7c:c1:c6:81:10:ac:97:c3:a1:0b: e8:96:c3:07:57:cf:a4:11:59:a2:99:48:9d:c2:9f: d9:90:e3:83:89:99:4c:b3:cd:7a:ad:b6:ee:9d:f9: 2c:e6:00:53:72:54:c2:61:10:f9:64:47:45:8d:5b: 92:13:cd:4c:1b:d1:fb:8c:b0:fc:63:81:38:48:d1: cb:58:83:49:71:97:7c:af:7e:6c:ef:32:41:6f:b9: f3:95:3d:b4:fe:cf:8c:f8:0b:33:02:7e:1a:55:d7: 6a:3c:80:26:fc:85:03:3c:a9:12:df:2a:34:96:ee: d0:e8:86:99:cf:e7:ec:32:ae:af:7d:2e:e9:a9:ad: 91:10:18:e1:a8:f3:fd:52:d3:bd:b6:da:79:c9:d2: 93:e1:03:2b:5e:82:9c:80:d7:b6:11:32:5e:47:3b: 92:bc:5a:05:ba:e8:92:a7:35:ae:33:b2:50:01:56: 2c:6c:0f:0e:2a:a6:b6:9b:8c:68:48:ba:f8:91:c9: e1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7E:70:D8:6B:05:09:57:C1:A9:4E:B6:80:71:A7:E8:64:4C:CA:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bd273475-ae2c-31d4-a1a1-612a8be36924.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 64.114.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:49:3d:90:7b:eb:08:01:f0:bb:a2:95:c8:ec:6a:c2:1f:d4: c8:51:83:a3:ef:25:a7:52:e7:a1:a7:f1:03:86:b9:a6:87:69: 05:f4:18:94:10:3f:fc:01:b3:df:27:8b:91:7d:14:5e:fc:ad: 90:35:5f:88:a8:7f:07:1e:9c:95:ee:ac:94:db:91:6a:70:02: 1a:d6:77:fe:07:fe:5f:c3:ce:57:57:9c:74:f1:5e:77:16:2d: a7:ce:e6:54:bd:a3:cd:6b:6a:1b:76:40:74:59:05:2b:58:79: cc:4c:ff:62:47:f5:41:f2:4a:7d:82:f2:16:fb:84:80:fe:57: 33:69:84:68:0d:09:4f:6a:0d:a9:34:7b:df:55:f9:3c:ef:ba: c0:23:3b:84:d0:01:38:5b:e6:31:de:d7:bf:34:5e:91:e5:22: c5:04:5b:32:d0:4c:43:31:3c:3d:de:72:2e:28:8e:8a:74:61: 9f:86:47:41:2d:e2:dc:ac:ee:6f:fb:5e:10:ec:b6:fc:62:a6: 60:4e:a1:4c:6b:38:2e:31:43:c7:82:02:fd:da:25:fd:d7:02: 0f:13:b7:e7:86:1e:db:ef:4e:44:cd:05:56:3d:18:9c:53:00: 6c:08:96:75:0f:bd:85:0e:fe:b9:26:49:e2:bd:6b:55:8a:0a: ef:c6:5e:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXx4YvykPzpHLIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk Y2U1ZDUyOTEtZGIyMC00NTE1LTkwN2MtYjYzOGM1Yjc4ZDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6htKxnAxh3edvnZW+hTGH5ItNjm4PHS9RLP2 fKq9wPNwjUI/hU9u9fxXlJTSt0GB3owHoNVJLvXPZ0FUcIj2f3zBxoEQrJfDoQvo lsMHV8+kEVmimUidwp/ZkOODiZlMs816rbbunfks5gBTclTCYRD5ZEdFjVuSE81M G9H7jLD8Y4E4SNHLWINJcZd8r35s7zJBb7nzlT20/s+M+AszAn4aVddqPIAm/IUD PKkS3yo0lu7Q6IaZz+fsMq6vfS7pqa2REBjhqPP9UtO9ttp5ydKT4QMrXoKcgNe2 ETJeRzuSvFoFuuiSpzWuM7JQAVYsbA8OKqa2m4xoSLr4kcnhNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLF+cNhrBQlXwalOtoBxp+hkTMp1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYmQyNzM0NzUtYWUyYy0z MWQ0LWExYTEtNjEyYThiZTM2OTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHIlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxJPZB76wgB8LuilcjsasIf1MhRg6PvJadS56Gn8QOGuaaHaQX0GJQQ P/wBs98ni5F9FF78rZA1X4iofwcenJXurJTbkWpwAhrWd/4H/l/DzldXnHTxXncW LafO5lS9o81raht2QHRZBStYecxM/2JH9UHySn2C8hb7hID+VzNphGgNCU9qDak0 e99V+TzvusAjO4TQAThb5jHe1780XpHlIsUEWzLQTEMxPD3eci4ojop0YZ+GR0Et 4tys7m/7XhDstvxipmBOoUxrOC4xQ8eCAv3aJf3XAg8Tt+eGHtvvTkTNBVY9GJxT AGwIlnUPvYUO/rkmSeK9a1WKCu/GXo0= -----END CERTIFICATE-----Generated at Sat Apr 26 22:39:15 2025 by rpki-client