$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/6861e73e-e2e8-37e1-b70b-ce93935e9526.roa File: 6861e73e-e2e8-37e1-b70b-ce93935e9526.roa (raw, json) Hash identifier: 4Dx/aPf90UV85PdKewTHaAk5bhETPV9Ejovit+BSHDE= Subject key identifier: D3:10:4D:0E:E2:5E:89:CC:BF:6E:E5:2C:98:12:BF:F2:9D:1E:05:95 Certificate issuer: /CN=b8a0e292-3e8f-447b-81c6-cedef4747341 Certificate serial: 010D0C9F4328584921840C89D6213484797A2A56 Authority key identifier: 83:A3:6C:9B:30:E5:DE:80:EC:B3:A4:FC:42:E5:52:72:23:88:DA:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/6861e73e-e2e8-37e1-b70b-ce93935e9526.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 398274 IP address blocks: 64.202.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/b8a0e292-3e8f-447b-81c6-cedef4747341.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/b8a0e292-3e8f-447b-81c6-cedef4747341.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:0c:89:d6:21:34:84:79:7a:2a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8a0e292-3e8f-447b-81c6-cedef4747341 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=ac02bd6d-a4a9-4956-96b9-1f6470bd306c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:ac:7a:c4:b1:48:86:46:5c:91:88:64:de:2c: a5:f2:7b:ab:08:ad:22:c6:63:b3:d0:fd:3d:f9:96: e7:85:80:39:71:ad:36:70:a8:3d:63:c6:36:1e:5e: 40:9c:0c:3d:6e:4d:38:bb:9e:a8:43:19:31:13:20: f8:1a:f5:66:4c:94:ab:7d:da:37:c6:46:39:03:33: ba:51:97:3b:35:90:88:8f:21:39:e7:71:ca:92:dd: 1f:2f:2c:2c:ee:11:76:3d:fd:99:49:90:09:ea:d6: ef:62:7e:a0:0f:1f:69:07:7b:25:d0:0a:32:13:75: 9e:da:ec:2d:de:05:84:71:bf:45:36:f0:19:5e:b6: 31:35:9e:6c:b6:8a:04:9c:29:6c:fc:aa:74:b3:db: c9:06:7c:05:ed:7c:eb:e6:9e:68:42:13:73:4e:eb: 47:6f:de:cf:48:19:b4:85:72:29:39:ee:0f:80:b7: ca:97:29:53:39:49:28:7a:15:27:27:52:1d:32:61: cf:cc:eb:1f:a9:77:2c:3e:63:c0:94:69:6a:ab:40: 9c:7e:b1:90:eb:77:66:9a:27:aa:a4:9f:49:9e:fc: 73:55:13:78:df:27:d5:7b:c6:b9:19:85:88:de:9e: e0:50:1b:43:be:b9:15:02:ff:c7:d5:51:d7:44:6c: ad:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:10:4D:0E:E2:5E:89:CC:BF:6E:E5:2C:98:12:BF:F2:9D:1E:05:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/6861e73e-e2e8-37e1-b70b-ce93935e9526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/b8a0e292-3e8f-447b-81c6-cedef4747341.crl X509v3 Authority Key Identifier: keyid:83:A3:6C:9B:30:E5:DE:80:EC:B3:A4:FC:42:E5:52:72:23:88:DA:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer sbgp-ipAddrBlock: critical IPv4: 64.202.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:72:41:e2:14:4f:a5:0c:4b:2f:59:e0:b3:a6:a9:4b:3f:c6: 9d:c1:3b:07:4b:55:9d:a2:82:38:f5:14:bd:38:64:41:38:e2: 2a:1a:7f:d8:d3:18:3f:c3:fe:c0:dd:2d:55:28:ec:6d:90:59: 96:df:6b:6a:4a:de:c5:1d:70:13:3f:17:ce:48:44:f1:66:dc: fb:fc:1f:94:40:06:37:45:ee:d8:c7:2f:01:35:d3:00:04:e9: 14:b9:a2:5b:f2:14:46:69:56:82:7e:9a:ec:e1:66:b7:71:f9: 1e:b4:37:8a:f8:73:a6:fb:28:73:ef:17:bf:e3:de:36:fa:9a: ff:a2:2f:12:5f:03:99:c7:66:89:51:52:5f:6b:6a:8c:de:10: c5:c6:bd:36:21:b0:7e:3a:48:3c:a0:10:91:81:d3:2e:14:24: bc:0c:fc:a8:b4:dd:02:4a:37:c0:9c:d9:62:23:8c:1f:f9:ba: eb:51:06:00:fb:8a:ed:35:29:0d:69:fd:e4:cc:7e:b7:74:b3: 6c:2b:1c:90:5d:b3:2b:19:d7:4d:e4:14:56:f8:a5:3e:c8:4c: e7:ad:04:4b:1a:9a:a8:70:aa:97:74:2b:c7:05:4d:2d:23:58: dd:87:1d:93:5e:29:cd:40:a0:59:12:69:dc:7c:be:a0:a3:08: c6:52:16:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhAyJ1iE0hHl6KlYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhhMGUyOTItM2U4Zi00NDdiLTgxYzYtY2VkZWY0NzQ3 MzQxMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk YWMwMmJkNmQtYTRhOS00OTU2LTk2YjktMWY2NDcwYmQzMDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+qx6xLFIhkZckYhk3iyl8nurCK0ixmOz0P09 +ZbnhYA5ca02cKg9Y8Y2Hl5AnAw9bk04u56oQxkxEyD4GvVmTJSrfdo3xkY5AzO6 UZc7NZCIjyE553HKkt0fLyws7hF2Pf2ZSZAJ6tbvYn6gDx9pB3sl0AoyE3We2uwt 3gWEcb9FNvAZXrYxNZ5stooEnCls/Kp0s9vJBnwF7Xzr5p5oQhNzTutHb97PSBm0 hXIpOe4PgLfKlylTOUkoehUnJ1IdMmHPzOsfqXcsPmPAlGlqq0CcfrGQ63dmmieq pJ9JnvxzVRN43yfVe8a5GYWI3p7gUBtDvrkVAv/H1VHXRGytfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMQTQ7iXonMv27lLJgSv/KdHgWVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iOGEw ZTI5Mi0zZThmLTQ0N2ItODFjNi1jZWRlZjQ3NDczNDEvNjg2MWU3M2UtZTJlOC0z N2UxLWI3MGItY2U5MzkzNWU5NTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjhhMGUyOTItM2U4Zi00NDdiLTgx YzYtY2VkZWY0NzQ3MzQxL2I4YTBlMjkyLTNlOGYtNDQ3Yi04MWM2LWNlZGVmNDc0 NzM0MS5jcmwwHwYDVR0jBBgwFoAUg6NsmzDl3oDss6T8QuVSciOI2g8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iOGEwZTI5Mi0zZThmLTQ0N2ItODFjNi1jZWRl ZjQ3NDczNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMrZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVyQeIUT6UMSy9Z4LOmqUs/xp3BOwdLVZ2igjj1FL04ZEE44ioaf9jT GD/D/sDdLVUo7G2QWZbfa2pK3sUdcBM/F85IRPFm3Pv8H5RABjdF7tjHLwE10wAE 6RS5olvyFEZpVoJ+muzhZrdx+R60N4r4c6b7KHPvF7/j3jb6mv+iLxJfA5nHZolR Ul9raozeEMXGvTYhsH46SDygEJGB0y4UJLwM/Ki03QJKN8Cc2WIjjB/5uutRBgD7 iu01KQ1p/eTMfrd0s2wrHJBdsysZ103kFFb4pT7ITOetBEsamqhwqpd0K8cFTS0j WN2HHZNeKc1AoFkSadx8vqCjCMZSFvI= -----END CERTIFICATE-----Generated at Mon Apr 28 11:16:56 2025 by rpki-client