$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa File: 4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa (raw, json) Hash identifier: zMVTCDqvMnQYy7HRJVNsnyKGeSM9hm4eyFLxoYfpwes= Subject key identifier: 62:56:47:86:C9:99:60:53:3F:5B:A7:91:09:DB:0D:EE:6B:11:20:46 Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584950F9628EF84C08B8F1A17C80 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 395092 IP address blocks: 64.28.236.0/23 maxlen: 24 172.96.136.0/22 maxlen: 24 2607:a680:3::/48 maxlen: 48 2607:a680:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:62:8e:f8:4c:08:b8:f1:a1:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=86025c3a-fddf-41e8-942b-09a1c95aa0e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:bd:2f:e1:b1:23:0c:86:a2:2b:ec:b3:8e:32: 4c:55:f8:9f:1f:1b:c8:7a:36:ff:87:c9:14:07:17: cd:cb:74:e2:05:c3:3b:e6:38:74:71:10:18:7d:6d: 37:ab:52:f2:97:0f:d1:da:6a:c9:b6:14:45:27:ef: d6:c6:bd:1f:c4:36:6f:98:c6:60:3a:ae:57:a4:3d: 78:51:7b:2f:98:11:91:70:7f:63:c4:e6:0b:f9:5c: 5c:6a:20:b7:79:77:6d:a5:bd:d4:21:5d:b5:cb:e2: 31:f3:51:7a:5c:34:c2:6d:3e:b5:ae:5a:9c:a4:96: 61:4f:33:aa:cd:ee:77:40:60:a6:b8:98:58:73:bb: 80:fa:4f:43:a9:61:0a:97:80:70:09:4d:7d:a3:86: bf:42:f2:c9:ee:95:ca:09:5a:85:e6:69:54:a0:cb: 81:d3:1f:f5:71:d0:d6:96:20:3f:9f:79:ba:bd:76: 50:08:0a:eb:80:a5:dc:e4:25:3d:4b:bc:44:5a:e1: 1f:50:71:4e:85:b6:bf:46:7d:c1:92:04:ba:98:a5: 23:c6:f2:ca:28:93:7a:ef:fb:90:f3:28:42:1b:8f: 24:e2:67:a7:32:4e:80:cf:35:d6:b9:6a:b5:49:94: d4:ce:fe:af:10:f3:10:44:1d:36:05:20:59:47:c1: 58:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:56:47:86:C9:99:60:53:3F:5B:A7:91:09:DB:0D:EE:6B:11:20:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 64.28.236.0/23 172.96.136.0/22 IPv6: 2607:a680:3::/48 2607:a680:7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:24:12:e4:ba:82:34:cf:50:f8:32:89:0a:dc:f9:06:e4:5e: 28:43:ab:da:29:dc:83:28:63:f6:8e:45:1e:14:75:a6:82:14: 9a:2a:1f:40:1c:eb:21:ba:6b:b2:8f:25:db:84:ab:e4:6f:58: 1d:d3:62:7a:23:0f:a1:ab:8f:b5:d5:ca:27:a9:2f:92:d1:6a: 83:65:e1:b9:aa:a7:36:e9:72:9b:a4:37:c9:c7:3d:1f:38:5f: ed:fc:57:e0:0f:6a:44:a8:38:03:78:2d:8b:da:6f:eb:6a:7b: 7d:24:a6:2e:4a:45:7f:92:34:6c:96:30:d8:36:9f:b0:9d:5d: 8c:08:24:7e:95:98:9a:dc:55:10:8d:e6:5c:c2:90:ac:df:df: cf:f2:cf:5a:1b:16:4e:ae:20:07:a3:06:70:44:e7:1a:81:c8: 84:dd:1e:c6:89:30:1a:cb:2a:40:37:1c:c1:a4:7d:5d:28:37: 04:cb:66:60:5f:cf:df:97:00:27:2c:11:6f:1d:9e:2d:43:54: 45:87:bc:e8:97:eb:39:d4:a8:43:76:a3:08:95:8c:bd:b7:63: fb:a6:94:04:c5:41:dd:24:d1:d2:d3:45:b5:41:c8:f7:c8:bc: e0:e6:a9:81:a4:e5:34:90:55:da:3c:ad:43:a7:cc:29:77:c3: 1f:af:cd:1c -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWElQ+WKO+EwIuPGhfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk ODYwMjVjM2EtZmRkZi00MWU4LTk0MmItMDlhMWM5NWFhMGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5r0v4bEjDIaiK+yzjjJMVfifHxvIejb/h8kU BxfNy3TiBcM75jh0cRAYfW03q1Lylw/R2mrJthRFJ+/Wxr0fxDZvmMZgOq5XpD14 UXsvmBGRcH9jxOYL+VxcaiC3eXdtpb3UIV21y+Ix81F6XDTCbT61rlqcpJZhTzOq ze53QGCmuJhYc7uA+k9DqWEKl4BwCU19o4a/QvLJ7pXKCVqF5mlUoMuB0x/1cdDW liA/n3m6vXZQCArrgKXc5CU9S7xEWuEfUHFOhba/Rn3BkgS6mKUjxvLKKJN67/uQ 8yhCG48k4menMk6AzzXWuWq1SZTUzv6vEPMQRB02BSBZR8FYWQIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFGJWR4bJmWBTP1unkQnbDe5rESBGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvNGZjYjZlOTctNTM2OS0z NWU0LTg0ZjktYjZlNTdjMTg1MTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQBQBzsAwQC rGCIMBgEAgACMBIDBwAmB6aAAAMDBwAmB6aAAAcwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADCQS5LqCNM9Q +DKJCtz5BuReKEOr2incgyhj9o5FHhR1poIUmiofQBzrIbprso8l24Sr5G9YHdNi eiMPoauPtdXKJ6kvktFqg2XhuaqnNulym6Q3ycc9Hzhf7fxX4A9qRKg4A3gti9pv 62p7fSSmLkpFf5I0bJYw2DafsJ1djAgkfpWYmtxVEI3mXMKQrN/fz/LPWhsWTq4g B6MGcETnGoHIhN0exokwGssqQDccwaR9XSg3BMtmYF/P35cAJywRbx2eLUNURYe8 6JfrOdSoQ3ajCJWMvbdj+6aUBMVB3STR0tNFtUHI98i84OapgaTlNJBV2jytQ6fM KXfDH6/NHA== -----END CERTIFICATE-----Generated at Sun Apr 27 22:20:07 2025 by rpki-client