$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/90baf39c-08b6-3fcd-9def-6e8d976d4dfa.roa File: 90baf39c-08b6-3fcd-9def-6e8d976d4dfa.roa (raw, json) Hash identifier: /KmkwsayF+ZXcOV3Lvez7CkrOFKB5PZ9H4hhybxdXyE= Subject key identifier: 10:52:66:8C:80:15:89:13:AB:9B:01:1D:0B:3A:5F:34:D7:74:9C:FC Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Certificate serial: 010D0C9F4328584961B9A39A72C71E2D44154E00 Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/90baf39c-08b6-3fcd-9def-6e8d976d4dfa.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 1239 IP address blocks: 64.40.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:a3:9a:72:c7:1e:2d:44:15:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=8ba3cb9e-1fc9-4090-a12a-32bea5a1de7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0a:72:b9:21:c7:9f:65:55:b1:f7:35:57:57: 2f:f4:f6:63:19:ee:4e:bc:52:6e:f9:92:21:8c:80: 16:a7:ac:d5:fa:ed:ac:41:85:88:fa:a2:12:d3:b1: 08:a7:5b:42:66:05:e1:75:7f:59:18:6d:8d:9d:10: 29:95:a9:ab:57:0d:c9:a1:76:dd:e6:45:ee:9b:b9: 84:df:9d:e7:71:bb:77:45:41:13:72:b9:40:ec:0c: d7:4f:e7:7f:50:48:18:db:38:5e:68:01:27:30:83: 7b:c9:35:5e:8a:fb:0e:0b:82:86:11:6b:42:4b:0d: 7b:63:f1:0a:ca:65:43:73:eb:43:cf:dc:4e:1e:45: fe:6e:86:d7:e6:49:d8:82:07:6b:07:3b:2a:43:4d: d0:b5:9f:25:af:d3:af:3b:47:ed:20:3f:2c:8b:90: 7a:28:a7:bc:2a:6d:df:d5:32:25:a5:65:0f:26:e0: ad:e0:c9:0c:2a:64:1c:e3:99:b7:bf:98:51:d8:ae: 7d:94:f5:63:59:6a:56:34:a1:04:79:d3:98:d5:f9: 70:10:5b:86:93:59:ab:b3:cd:6a:c2:ad:9a:80:01: 99:aa:0c:de:62:6d:8f:26:ad:32:7b:d9:dc:9d:8a: 49:4d:2b:bb:23:23:e3:7d:2c:e8:28:15:3f:a7:b4: fe:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:52:66:8C:80:15:89:13:AB:9B:01:1D:0B:3A:5F:34:D7:74:9C:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/90baf39c-08b6-3fcd-9def-6e8d976d4dfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl X509v3 Authority Key Identifier: keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer sbgp-ipAddrBlock: critical IPv4: 64.40.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:f6:de:b5:c5:2d:b4:83:56:9c:08:5d:00:cf:d2:f8:78:5f: cd:10:27:74:41:38:b0:7a:60:d9:96:28:dc:5f:4b:d4:cf:48: 07:e2:60:4c:f8:12:54:51:9e:84:70:ac:bd:68:05:d4:39:1e: 37:18:56:c8:53:46:c1:64:60:83:4c:55:bc:17:3a:fb:1f:47: ce:a8:63:9d:fc:b7:11:79:5d:42:21:25:3d:63:80:4e:68:9a: 7c:17:52:fc:2c:0c:a0:82:e7:a0:2e:d6:9b:d6:6d:48:9d:f1: f2:cb:52:94:a0:4c:3f:eb:5c:8c:93:c9:77:d1:5f:b2:d2:de: 3d:b4:32:b6:40:e1:0e:95:d2:bb:00:95:95:3f:cf:c9:e6:6b: c8:64:01:dd:3a:8b:eb:21:3e:1a:f9:87:01:e6:8f:90:f7:df: 14:22:77:44:5e:46:05:3f:31:de:1f:da:ca:4c:73:23:dd:a2: 59:05:28:1d:6c:c8:fa:f6:7d:c8:5f:40:08:26:f0:6f:d9:27: a9:c8:07:50:9a:ce:c5:18:30:21:95:d6:67:bd:b5:e2:27:ef: ca:38:ff:d7:d5:6b:ed:8f:22:99:57:73:d6:13:d8:22:77:c1: 61:1f:13:ae:54:80:ab:b3:a9:ec:37:0a:12:e9:2c:fe:80:cf: ab:41:0e:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuaOacsceLUQVTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk NWVlMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk OGJhM2NiOWUtMWZjOS00MDkwLWExMmEtMzJiZWE1YTFkZTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwpyuSHHn2VVsfc1V1cv9PZjGe5OvFJu+ZIh jIAWp6zV+u2sQYWI+qIS07EIp1tCZgXhdX9ZGG2NnRAplamrVw3JoXbd5kXum7mE 353ncbt3RUETcrlA7AzXT+d/UEgY2zheaAEnMIN7yTVeivsOC4KGEWtCSw17Y/EK ymVDc+tDz9xOHkX+bobX5knYggdrBzsqQ03QtZ8lr9OvO0ftID8si5B6KKe8Km3f 1TIlpWUPJuCt4MkMKmQc45m3v5hR2K59lPVjWWpWNKEEedOY1flwEFuGk1mrs81q wq2agAGZqgzeYm2PJq0ye9ncnYpJTSu7IyPjfSzoKBU/p7T+8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBSZoyAFYkTq5sBHQs6XzTXdJz8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5 MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvOTBiYWYzOWMtMDhiNi0z ZmNkLTlkZWYtNmU4ZDk3NmQ0ZGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4 Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1 YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCiYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGv23rXFLbSDVpwIXQDP0vh4X80QJ3RBOLB6YNmWKNxfS9TPSAfiYEz4 ElRRnoRwrL1oBdQ5HjcYVshTRsFkYINMVbwXOvsfR86oY538txF5XUIhJT1jgE5o mnwXUvwsDKCC56Au1pvWbUid8fLLUpSgTD/rXIyTyXfRX7LS3j20MrZA4Q6V0rsA lZU/z8nma8hkAd06i+shPhr5hwHmj5D33xQid0ReRgU/Md4f2spMcyPdolkFKB1s yPr2fchfQAgm8G/ZJ6nIB1CazsUYMCGV1me9teIn78o4/9fVa+2PIplXc9YT2CJ3 wWEfE65UgKuzqew3ChLpLP6Az6tBDsY= -----END CERTIFICATE-----Generated at Sat Apr 26 17:45:11 2025 by rpki-client