$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/349473bf-2e3b-3135-9474-6245da8b2e08.roa File: 349473bf-2e3b-3135-9474-6245da8b2e08.roa (raw, json) Hash identifier: lxVdDDTbFo2bnMbwRroAqjBzrSuFBgPcz9xaJI+Nk3o= Subject key identifier: 69:A9:18:88:D1:57:57:45:F1:FA:22:89:A7:BE:BC:BF:F0:41:0A:62 Certificate issuer: /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Certificate serial: 010D0C9F432858496FAF0D22ECBD52020E0E8540 Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/349473bf-2e3b-3135-9474-6245da8b2e08.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 20454 IP address blocks: 64.38.192.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:0d:22:ec:bd:52:02:0e:0e:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=e33e4095-8238-4355-9c64-019bfcb09c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9c:e3:a4:eb:01:0f:54:c5:0e:6d:de:b1:ac: b9:c4:db:13:4b:14:cc:c1:f3:31:d7:3d:7c:84:8f: d8:f5:e7:2b:27:0d:9c:ec:f4:2a:5f:80:a5:4d:78: 0d:3c:db:57:7f:80:60:4f:6b:00:33:1a:02:16:97: 30:e8:1b:88:dc:ed:e5:87:65:24:03:57:93:15:04: c9:e4:da:db:f9:00:24:40:a5:67:63:58:06:db:2f: 8b:f5:42:79:30:8b:58:8d:0f:0d:31:aa:43:e2:0b: 18:72:4b:03:ec:23:a1:54:f7:a3:8d:d7:94:d6:fa: 09:0f:dc:5e:60:70:bf:23:3a:56:70:ca:9c:c7:21: f4:56:c7:a2:d7:27:38:45:14:c2:08:eb:40:a1:0c: 09:b3:81:8b:2a:ef:9c:7c:9b:1f:81:4d:fc:8d:f1: d8:8f:46:66:33:f8:55:98:e6:e9:df:f1:d3:24:b3: 60:90:1b:1d:08:ec:eb:14:c0:0e:66:7b:23:bb:ca: 80:3d:54:aa:de:84:71:90:85:a4:b7:ba:4e:68:0f: 77:f3:62:f8:c7:10:e9:8a:05:c5:02:15:41:34:3a: cd:11:42:31:21:c3:5a:94:fb:43:f1:f7:bb:4d:98: 9b:a5:9b:50:18:3a:c1:22:18:e8:0b:94:4f:f4:a5: 51:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A9:18:88:D1:57:57:45:F1:FA:22:89:A7:BE:BC:BF:F0:41:0A:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/349473bf-2e3b-3135-9474-6245da8b2e08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl X509v3 Authority Key Identifier: keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer sbgp-ipAddrBlock: critical IPv4: 64.38.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:a0:b7:68:5b:4f:2c:42:ff:b3:19:1c:10:3f:36:fd:02:fc: 64:0d:1a:aa:92:a9:39:d7:00:38:78:83:e0:29:88:ab:9f:92: 01:e9:d8:18:13:50:b6:19:ee:97:2d:00:27:47:4f:04:b0:a2: 24:ca:c3:d5:70:15:23:87:21:f9:83:9b:3a:01:87:d2:ae:38: 39:11:97:e2:ca:39:fa:ef:0b:c4:1d:7b:e2:f9:f6:0a:0e:7a: 51:84:6e:a5:d0:d2:5b:8e:42:e8:b3:06:ba:27:1b:06:d8:b0: 59:3d:c0:e0:da:29:6c:89:71:f8:a8:39:d2:4a:58:f9:f0:52: dd:70:22:83:6d:5e:94:dc:41:1f:9d:0e:fd:8b:d2:66:d3:78: de:76:bb:67:a7:56:8a:f4:9a:dd:3a:20:a5:f3:c1:93:68:4e: e9:dd:66:f5:6f:67:34:35:15:80:90:2b:b6:f6:c9:e0:19:2e: 98:93:4a:1f:d8:28:e9:e1:aa:24:6a:0a:a9:f8:0a:c5:8c:ec: 2f:83:5b:a5:cc:09:f4:f0:2c:fd:9d:ad:7d:e9:94:e9:a6:35: c3:37:9a:84:03:0c:e7:b8:38:32:d3:92:2d:5b:1f:ca:a2:17: 50:a3:28:b0:1b:10:71:38:d1:b0:9c:f4:11:86:e6:64:2e:f7: 31:64:7d:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrw0i7L1SAg4OhUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAyMzEzZTYtNTZiZi00ZmQ4LWFlMGQtYzllMDU3ZDNi Mzk4MB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk ZTMzZTQwOTUtODIzOC00MzU1LTljNjQtMDE5YmZjYjA5YzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJzjpOsBD1TFDm3esay5xNsTSxTMwfMx1z18 hI/Y9ecrJw2c7PQqX4ClTXgNPNtXf4BgT2sAMxoCFpcw6BuI3O3lh2UkA1eTFQTJ 5Nrb+QAkQKVnY1gG2y+L9UJ5MItYjQ8NMapD4gsYcksD7COhVPejjdeU1voJD9xe YHC/IzpWcMqcxyH0Vsei1yc4RRTCCOtAoQwJs4GLKu+cfJsfgU38jfHYj0ZmM/hV mObp3/HTJLNgkBsdCOzrFMAOZnsju8qAPVSq3oRxkIWkt7pOaA9382L4xxDpigXF AhVBNDrNEUIxIcNalPtD8fe7TZibpZtQGDrBIhjoC5RP9KVRLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmpGIjRV1dF8foiiae+vL/wQQpiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIz MTNlNi01NmJmLTRmZDgtYWUwZC1jOWUwNTdkM2IzOTgvMzQ5NDczYmYtMmUzYi0z MTM1LTk0NzQtNjI0NWRhOGIyZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODAyMzEzZTYtNTZiZi00ZmQ4LWFl MGQtYzllMDU3ZDNiMzk4LzgwMjMxM2U2LTU2YmYtNGZkOC1hZTBkLWM5ZTA1N2Qz YjM5OC5jcmwwHwYDVR0jBBgwFoAU6Nx8ybbq227grPfqrNCHZurVu2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIzMTNlNi01NmJmLTRmZDgtYWUwZC1jOWUw NTdkM2IzOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQCbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKgt2hbTyxC/7MZHBA/Nv0C/GQNGqqSqTnXADh4g+ApiKufkgHp2BgT ULYZ7pctACdHTwSwoiTKw9VwFSOHIfmDmzoBh9KuODkRl+LKOfrvC8Qde+L59goO elGEbqXQ0luOQuizBronGwbYsFk9wODaKWyJcfioOdJKWPnwUt1wIoNtXpTcQR+d Dv2L0mbTeN52u2enVor0mt06IKXzwZNoTundZvVvZzQ1FYCQK7b2yeAZLpiTSh/Y KOnhqiRqCqn4CsWM7C+DW6XMCfTwLP2drX3plOmmNcM3moQDDOe4ODLTki1bH8qi F1CjKLAbEHE40bCc9BGG5mQu9zFkfcM= -----END CERTIFICATE-----Generated at Sat Apr 26 23:09:51 2025 by rpki-client