$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/f0ef4621-4322-37c8-91e9-239fa3cd5974.roa File: f0ef4621-4322-37c8-91e9-239fa3cd5974.roa (raw, json) Hash identifier: fK6xJrkRp4a0fjljirtOuddV3SA4G2ma91q2eCVKKNE= Subject key identifier: 27:0B:9F:D3:04:68:6F:5C:D5:B1:94:8D:1E:31:2D:5E:01:B9:D0:E0 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F432858494F93E68DE7F46CF58B646C48 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/f0ef4621-4322-37c8-91e9-239fa3cd5974.roa Signing time: Wed 26 Mar 2025 01:00:40 +0000 ROA not before: Wed 26 Mar 2025 01:00:40 +0000 ROA not after: Tue 24 Jun 2025 01:00:40 +0000 asID: 212238 IP address blocks: 64.224.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4f:93:e6:8d:e7:f4:6c:f5:8b:64:6c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Mar 26 01:00:40 2025 GMT Not After : Jun 24 01:00:40 2025 GMT Subject: CN=b9158ece-b174-444f-8ec1-f111d274a42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:26:ac:44:2a:45:ff:98:b3:f3:77:9c:e0:21: 01:ee:b8:35:d2:56:8d:77:25:78:77:f6:ce:87:ff: 11:de:25:e2:f1:a9:29:37:bc:37:7e:47:68:ce:ac: 12:5f:fe:ff:68:c2:df:8c:be:1c:77:8d:e1:3a:15: 8f:7c:d3:7e:aa:fb:93:ab:b1:9a:26:e8:83:f3:d2: 0d:26:ef:25:8e:0c:0a:8b:32:1e:1c:2c:36:e3:67: 9b:e5:5f:be:5a:6c:a8:11:2a:93:1a:b7:2b:2b:a9: 7d:bb:f9:1c:b1:15:a7:97:b4:e4:ca:8c:0a:b1:50: 3a:a7:df:43:4f:62:a5:32:da:78:ac:94:c2:87:a9: 5c:91:5e:e5:63:1f:31:be:6f:7e:d7:4f:5c:f0:83: e5:bd:18:ff:89:4c:2b:c7:e6:d1:75:14:25:39:5d: 85:c9:e4:cb:a2:01:bd:a9:03:52:e5:31:6c:e8:a1: bc:2e:0c:4d:fb:58:52:bf:c2:4a:81:22:21:9c:96: 3e:0c:48:70:c4:95:c6:41:71:82:10:c6:02:98:6b: 42:76:c1:c2:bb:03:21:ff:e7:e5:8e:0c:a7:9f:18: cf:97:6e:18:79:22:a4:44:dc:84:3d:e0:b6:43:e5: 2f:c9:23:a5:4f:37:36:6e:1e:4d:53:ed:4e:7b:59: 7c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0B:9F:D3:04:68:6F:5C:D5:B1:94:8D:1E:31:2D:5E:01:B9:D0:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/f0ef4621-4322-37c8-91e9-239fa3cd5974.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 64.224.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:0c:08:65:0d:f4:c1:19:8a:57:55:8e:fa:4e:eb:9e:a0:6f: 18:ef:48:32:5c:5f:fe:98:98:8e:9c:df:5e:71:c5:83:db:19: 57:2f:8c:85:76:39:cf:75:01:68:30:b7:b9:73:fb:1a:12:0c: 48:95:f1:e8:dc:e6:15:2c:63:7c:88:47:d7:98:da:70:8d:1c: 3c:85:6b:7f:07:6e:01:a6:55:af:69:b0:d4:0d:93:b7:86:8a: 9c:ff:e9:2e:1a:62:ea:4a:f0:59:95:41:d8:85:55:12:45:74: 24:8a:e8:4e:07:1a:01:fe:49:87:94:4e:61:61:d7:55:f3:4a: 85:60:19:9d:dd:28:4e:a9:3e:83:a2:ee:31:25:f3:fa:55:84: 39:43:2e:63:e2:cc:4f:79:80:f1:e5:d5:7f:33:76:fd:47:96: 10:1a:1b:0d:55:e1:8a:3e:43:fc:5e:04:37:8e:ce:ed:e8:f6: 59:1e:5b:59:18:27:71:a1:b0:36:bc:7d:ee:3f:5d:71:d7:3d: 9d:db:7b:4b:94:13:46:ed:fb:90:a1:5e:88:47:35:14:49:ed: b9:cd:1a:8f:9f:2c:5a:b1:51:6c:ab:57:99:68:c4:84:13:98: 37:17:42:63:73:54:64:e2:7a:21:e1:9b:75:0c:41:a8:c7:46: e0:3c:db:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElPk+aN5/Rs9YtkbEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDMyNjAxMDA0MFoXDTI1MDYyNDAxMDA0MFowLzEtMCsGA1UEAxMk YjkxNThlY2UtYjE3NC00NDRmLThlYzEtZjExMWQyNzRhNDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyasRCpF/5iz83ec4CEB7rg10laNdyV4d/bO h/8R3iXi8akpN7w3fkdozqwSX/7/aMLfjL4cd43hOhWPfNN+qvuTq7GaJuiD89IN Ju8ljgwKizIeHCw242eb5V++WmyoESqTGrcrK6l9u/kcsRWnl7TkyowKsVA6p99D T2KlMtp4rJTCh6lckV7lYx8xvm9+109c8IPlvRj/iUwrx+bRdRQlOV2FyeTLogG9 qQNS5TFs6KG8LgxN+1hSv8JKgSIhnJY+DEhwxJXGQXGCEMYCmGtCdsHCuwMh/+fl jgynnxjPl24YeSKkRNyEPeC2Q+UvySOlTzc2bh5NU+1Oe1l8TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcLn9MEaG9c1bGUjR4xLV4BudDgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvZjBlZjQ2MjEtNDMyMi0z N2M4LTkxZTktMjM5ZmEzY2Q1OTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOARMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAMCGUN9MEZildVjvpO656gbxjvSDJcX/6YmI6c315xxYPbGVcvjIV2 Oc91AWgwt7lz+xoSDEiV8ejc5hUsY3yIR9eY2nCNHDyFa38HbgGmVa9psNQNk7eG ipz/6S4aYupK8FmVQdiFVRJFdCSK6E4HGgH+SYeUTmFh11XzSoVgGZ3dKE6pPoOi 7jEl8/pVhDlDLmPizE95gPHl1X8zdv1HlhAaGw1V4Yo+Q/xeBDeOzu3o9lkeW1kY J3GhsDa8fe4/XXHXPZ3be0uUE0bt+5ChXohHNRRJ7bnNGo+fLFqxUWyrV5loxIQT mDcXQmNzVGTieiHhm3UMQajHRuA827o= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:45 2025 by rpki-client