$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/51171ce1-4744-3002-83cc-b3e710a78499.roa File: 51171ce1-4744-3002-83cc-b3e710a78499.roa (raw, json) Hash identifier: 6GjH4ypKVUxmnDYemyh8W1ZqbJ2PQNl+ZQhr71kz4as= Subject key identifier: E1:BB:C7:FD:C3:1D:98:5D:E8:04:59:A8:72:04:92:C2:5E:56:4F:D3 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F43285849A784E058A4122D88A2A58C60 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/51171ce1-4744-3002-83cc-b3e710a78499.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 36492 IP address blocks: 64.9.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e0:58:a4:12:2d:88:a2:a5:8c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=3191b708-083e-4f5b-b5f7-25295e0ceecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:02:b7:b0:99:b1:79:bb:08:75:fa:11:44:55: f7:52:b5:ef:c7:09:e4:44:4e:d6:cf:1a:16:84:8b: 18:a1:83:a9:ca:72:35:01:88:4f:37:bf:23:6c:d7: 94:03:67:6b:ed:24:2d:e5:67:d7:26:2b:f3:b9:66: 1c:51:d5:af:e8:69:54:02:6d:5a:00:7a:98:85:e3: c9:e2:35:d3:7b:06:3d:38:fc:f3:5d:d7:5a:62:e3: 23:93:59:c9:e9:40:46:74:94:51:1f:bc:65:17:26: 17:04:c6:dd:e0:1d:0a:c1:9b:68:6d:bf:d0:aa:59: 8d:fb:dc:f6:58:2a:f0:15:ef:e2:e1:3c:bd:e7:6a: e6:d5:e9:cf:98:ed:a7:a2:5b:52:63:85:4b:a0:16: 79:f7:5e:34:07:ed:c2:3e:41:a9:f8:87:b9:62:8b: 41:9a:0f:b1:8d:86:bb:3d:b2:db:75:57:9e:b4:f5: 56:b2:9f:f3:52:71:28:8a:c1:61:9d:82:bd:5c:1e: d6:d4:4c:1a:a2:33:e6:6a:68:0c:01:1c:f0:39:45: 28:01:a1:2f:91:7e:2e:88:70:5f:43:6a:e0:99:f5: 56:b3:85:5e:ae:e2:58:ee:0d:33:48:7b:da:9b:44: b6:52:e4:b2:d6:26:ad:02:8b:ff:46:34:18:38:52: 22:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:BB:C7:FD:C3:1D:98:5D:E8:04:59:A8:72:04:92:C2:5E:56:4F:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/51171ce1-4744-3002-83cc-b3e710a78499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 64.9.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:1b:d9:4e:ce:17:a0:16:a7:1c:88:58:d9:00:55:2d:a9:57: 71:f2:07:5d:47:c1:72:34:06:09:c2:92:0f:03:28:c9:13:38: 8c:58:9f:b2:56:d2:65:1f:98:6b:dc:fd:73:10:89:19:b9:9a: 6a:3e:0e:c9:ca:95:50:d1:66:42:54:38:f3:fe:cf:8f:76:db: 0b:eb:1f:ac:c6:ed:67:15:e4:f9:aa:9f:a4:9e:4c:a3:de:64: 5a:06:23:e3:bb:54:ed:99:20:8d:81:da:6c:d3:2c:98:8d:a8: 0d:0a:f6:52:62:9e:32:84:f9:35:86:02:2d:ea:bd:01:7b:9d: f2:73:8e:25:6c:87:eb:4d:71:ff:0d:49:03:b1:b0:80:53:2f: f1:66:12:d0:6d:64:84:0e:c9:d2:9f:dd:13:b8:91:0c:e2:70: ac:64:64:63:67:cc:21:46:b5:bd:52:60:03:13:1c:96:44:5c: e1:25:6d:08:80:48:4e:81:3d:63:5a:45:18:73:82:1f:c4:02: 07:a8:da:de:65:b4:cd:bb:ab:3f:1f:2f:fb:8c:6d:07:26:ac: e7:7c:16:7a:e4:28:28:86:49:c1:eb:2d:b3:ef:ff:d3:d1:86: 4b:a5:e7:77:7c:44:f4:17:68:a7:64:7b:04:60:63:5d:60:da: 88:a8:27:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOBYpBItiKKljGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MzE5MWI3MDgtMDgzZS00ZjViLWI1ZjctMjUyOTVlMGNlZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgK3sJmxebsIdfoRRFX3UrXvxwnkRE7WzxoW hIsYoYOpynI1AYhPN78jbNeUA2dr7SQt5WfXJivzuWYcUdWv6GlUAm1aAHqYhePJ 4jXTewY9OPzzXddaYuMjk1nJ6UBGdJRRH7xlFyYXBMbd4B0KwZtobb/QqlmN+9z2 WCrwFe/i4Ty952rm1enPmO2noltSY4VLoBZ59140B+3CPkGp+Ie5YotBmg+xjYa7 PbLbdVeetPVWsp/zUnEoisFhnYK9XB7W1EwaojPmamgMARzwOUUoAaEvkX4uiHBf Q2rgmfVWs4VeruJY7g0zSHvam0S2UuSy1iatAov/RjQYOFIifwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOG7x/3DHZhd6ARZqHIEksJeVk/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNTExNzFjZTEtNDc0NC0z MDAyLTgzY2MtYjNlNzEwYTc4NDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAn/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwb2U7OF6AWpxyIWNkAVS2pV3HyB11HwXI0BgnCkg8DKMkTOIxYn7JW 0mUfmGvc/XMQiRm5mmo+DsnKlVDRZkJUOPP+z4922wvrH6zG7WcV5Pmqn6SeTKPe ZFoGI+O7VO2ZII2B2mzTLJiNqA0K9lJinjKE+TWGAi3qvQF7nfJzjiVsh+tNcf8N SQOxsIBTL/FmEtBtZIQOydKf3RO4kQzicKxkZGNnzCFGtb1SYAMTHJZEXOElbQiA SE6BPWNaRRhzgh/EAgeo2t5ltM27qz8fL/uMbQcmrOd8FnrkKCiGScHrLbPv/9PR hkul53d8RPQXaKdkewRgY11g2oioJ/c= -----END CERTIFICATE-----Generated at Sun Apr 27 04:14:06 2025 by rpki-client