$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d6bd4971-c452-3482-abd1-ea7b5b2a7001.roa File: d6bd4971-c452-3482-abd1-ea7b5b2a7001.roa (raw, json) Hash identifier: MapJEQ0cMxOdwhZbkyGDTPiVAWgN3icjmbTwqYRlcZc= Subject key identifier: 25:BE:ED:CC:E4:C2:EF:6F:72:5A:37:F3:79:E3:38:8A:32:74:3F:25 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F43285849674EEF69E1D433D4CDE7D580 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d6bd4971-c452-3482-abd1-ea7b5b2a7001.roa Signing time: Thu 03 Apr 2025 13:01:02 +0000 ROA not before: Thu 03 Apr 2025 13:01:02 +0000 ROA not after: Wed 02 Jul 2025 13:01:02 +0000 asID: 32181 IP address blocks: 64.224.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:4e:ef:69:e1:d4:33:d4:cd:e7:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Apr 3 13:01:02 2025 GMT Not After : Jul 2 13:01:02 2025 GMT Subject: CN=4d130af8-d9ed-4152-99cc-4414c282f0b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a6:ac:8d:cf:96:4f:e6:7c:8b:9b:d6:df:f0: ca:f0:a9:9a:7c:4d:2b:50:ad:d3:c2:e7:52:32:91: 7b:41:f5:72:a1:56:04:61:15:e4:9b:2b:c4:bb:3d: 1d:4e:fc:66:a4:40:6c:a2:b6:f6:f9:5c:7a:49:d0: 8b:df:2e:7e:46:83:ea:9d:6b:c5:e0:ca:f0:5a:8c: ff:86:84:09:db:83:71:a9:2e:75:98:80:35:de:06: a1:1d:52:a5:60:e6:fc:b2:a3:73:27:40:65:bd:92: ee:cb:f9:cd:28:48:46:42:b0:f7:34:69:d9:eb:f3: 2a:99:2f:21:77:d9:7a:fb:f4:b7:b0:88:09:74:01: 49:c2:6f:be:34:d9:9e:66:a6:67:19:4a:1d:1e:e0: 51:31:01:37:23:a1:28:21:de:2c:c3:5a:5c:4c:48: 6a:6d:66:df:46:c2:b5:6d:ca:c9:7b:70:1a:cc:87: 29:89:ab:dd:93:8e:ab:4f:1d:26:02:b4:39:ee:87: 06:e8:0c:de:40:4c:64:30:fa:2a:61:f2:16:f7:f2: db:26:76:30:ce:c9:2c:11:ce:c8:89:b2:70:e3:01: 6e:7b:2b:a3:44:1f:46:d5:bf:cc:bb:87:91:a4:c9: 73:df:07:35:07:4c:e5:57:e9:9f:73:2b:a3:0f:55: 1c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:BE:ED:CC:E4:C2:EF:6F:72:5A:37:F3:79:E3:38:8A:32:74:3F:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d6bd4971-c452-3482-abd1-ea7b5b2a7001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 64.224.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:fb:76:41:36:42:5b:db:d2:38:9e:7e:28:cb:5b:f5:dd:67: b2:55:a2:8b:15:85:a1:b7:a4:49:a9:7a:e3:14:97:2b:6b:06: a4:f7:e8:c0:ba:41:1b:c6:10:98:75:6e:08:10:b6:30:51:8b: 37:fc:e5:f3:4b:da:98:3d:8c:af:9c:2e:8d:bf:ef:b7:69:2c: ba:6c:32:25:54:9c:87:83:d8:30:f2:84:ca:82:98:78:90:f1: 08:b4:2d:64:54:42:2d:a7:39:03:e4:80:aa:50:4d:f3:b2:ea: 14:c6:66:51:e0:8d:01:ce:d8:23:0d:86:6d:fe:df:4c:de:57: d3:07:42:59:f1:e7:1c:83:a1:de:2a:fc:2e:c2:74:5f:4d:bb: 0e:72:ea:e1:d1:7a:94:70:5b:82:d7:13:c3:e6:0b:6e:8d:3f: 5e:38:76:ff:fd:91:5d:6e:db:1d:1e:6f:88:c1:5a:05:7b:5a: 62:17:02:6d:0d:f1:22:f1:fd:7f:ca:6f:c2:7c:b9:77:26:40: db:08:ad:82:7c:44:b9:bf:1d:1f:fd:2a:e4:5e:d8:22:09:49: dc:bd:ec:ce:64:aa:c3:1a:3d:c1:73:ad:2d:cf:9e:41:43:8b: 12:74:66:61:d9:7c:12:f6:c9:bf:be:e2:7e:50:27:25:dc:43: f5:41:89:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElnTu9p4dQz1M3n1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDQwMzEzMDEwMloXDTI1MDcwMjEzMDEwMlowLzEtMCsGA1UEAxMk NGQxMzBhZjgtZDllZC00MTUyLTk5Y2MtNDQxNGMyODJmMGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKasjc+WT+Z8i5vW3/DK8KmafE0rUK3TwudS MpF7QfVyoVYEYRXkmyvEuz0dTvxmpEBsorb2+Vx6SdCL3y5+RoPqnWvF4MrwWoz/ hoQJ24NxqS51mIA13gahHVKlYOb8sqNzJ0BlvZLuy/nNKEhGQrD3NGnZ6/MqmS8h d9l6+/S3sIgJdAFJwm++NNmeZqZnGUodHuBRMQE3I6EoId4sw1pcTEhqbWbfRsK1 bcrJe3AazIcpiavdk46rTx0mArQ57ocG6AzeQExkMPoqYfIW9/LbJnYwzsksEc7I ibJw4wFueyujRB9G1b/Mu4eRpMlz3wc1B0zlV+mfcyujD1UcIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCW+7czkwu9vclo383njOIoydD8lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvZDZiZDQ5NzEtYzQ1Mi0z NDgyLWFiZDEtZWE3YjViMmE3MDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/7dkE2Qlvb0jiefijLW/XdZ7JVoosVhaG3pEmpeuMUlytrBqT36MC6 QRvGEJh1bggQtjBRizf85fNL2pg9jK+cLo2/77dpLLpsMiVUnIeD2DDyhMqCmHiQ 8Qi0LWRUQi2nOQPkgKpQTfOy6hTGZlHgjQHO2CMNhm3+30zeV9MHQlnx5xyDod4q /C7CdF9Nuw5y6uHRepRwW4LXE8PmC26NP144dv/9kV1u2x0eb4jBWgV7WmIXAm0N 8SLx/X/Kb8J8uXcmQNsIrYJ8RLm/HR/9KuRe2CIJSdy97M5kqsMaPcFzrS3PnkFD ixJ0ZmHZfBL2yb++4n5QJyXcQ/VBiWQ= -----END CERTIFICATE-----Generated at Mon Apr 28 08:22:56 2025 by rpki-client