$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/213ce95b-ff89-3e22-9613-f3475d007e03.roa File: 213ce95b-ff89-3e22-9613-f3475d007e03.roa (raw, json) Hash identifier: kWbzCbax/y9JJeXlRAwJZTMF4dzMfhHRwXCxvRpGWT4= Subject key identifier: 35:4D:50:BA:99:B1:8E:E9:06:53:90:F9:68:08:79:0F:14:92:1A:D5 Certificate issuer: /CN=5c24b227-71d8-4de3-9a17-e538fd673530 Certificate serial: 010D0C9F43285848E2D106CEFEA214CC679AA800 Authority key identifier: 47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/213ce95b-ff89-3e22-9613-f3475d007e03.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 22418 IP address blocks: 64.118.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:06:ce:fe:a2:14:cc:67:9a:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c24b227-71d8-4de3-9a17-e538fd673530 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=09ab3fde-70aa-4275-84d9-7f92758957bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:40:ed:af:a3:2d:1b:cd:bd:32:76:a5:c4:03: 00:34:51:e3:44:fa:ce:e2:a0:ff:b4:55:df:85:6c: e2:ac:ec:ea:16:73:40:76:d3:e1:1b:34:6b:79:42: 91:48:e8:d8:b9:aa:67:de:46:be:a4:4c:d9:3d:a9: 70:c2:93:08:ed:a8:11:83:cf:86:b7:5a:f2:4c:37: 30:77:79:d3:00:36:2a:05:4b:e6:08:16:51:19:f4: 8f:0a:59:d8:10:b8:df:bd:c8:72:62:8a:ce:d1:8a: 7b:81:4f:34:15:81:12:d6:ad:8e:42:04:d5:09:2b: 32:23:b8:9a:ef:d4:7f:a1:93:e6:0a:10:80:4d:6e: 56:72:39:e4:d0:f7:a7:e1:2d:77:d2:33:83:97:c7: be:da:1d:6e:c5:df:48:ca:8b:2a:76:d6:7a:47:66: 41:7a:e8:57:45:d2:fc:07:f7:1a:eb:33:e1:1e:ba: cd:b1:c4:66:b5:a0:a2:1d:fe:e7:6a:b2:c5:e2:a1: e5:26:d3:7b:8f:8d:75:03:f3:ce:10:14:8d:9b:4e: b2:87:85:0e:43:2f:e2:b0:76:00:7d:e3:91:d1:45: 65:a0:cc:49:74:b8:e4:8b:78:d2:00:69:c9:1b:4e: 21:9c:32:4d:21:16:f8:bf:9b:c3:4e:a8:ed:d1:d9: 30:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4D:50:BA:99:B1:8E:E9:06:53:90:F9:68:08:79:0F:14:92:1A:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/213ce95b-ff89-3e22-9613-f3475d007e03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl X509v3 Authority Key Identifier: keyid:47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer sbgp-ipAddrBlock: critical IPv4: 64.118.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:80:96:99:0b:98:8b:76:63:d2:ed:b6:8d:36:ff:27:b8:47: 0d:2c:2e:8f:b5:2b:97:50:75:d3:ff:86:20:ec:5d:9b:c1:3b: 26:c7:0f:f4:51:4f:92:30:05:3c:64:22:83:5a:42:df:fd:f1: 93:22:c8:bf:9f:4d:5e:8a:4d:83:80:73:4a:c5:d8:4c:9e:f5: 48:a4:0e:9c:be:9a:6c:5e:13:91:6a:1f:fc:5d:04:27:96:d3: fc:bf:50:7a:3c:ea:5b:70:47:8c:6d:d1:2d:b8:ff:1d:6e:63: c7:a1:d1:e6:9a:7e:50:00:f4:85:8c:ea:f5:3c:cb:1d:91:69: 86:c0:1d:b3:da:cd:51:06:ac:99:b3:9a:3e:ae:54:dd:1c:e8: e2:77:d2:f3:8b:75:5d:c2:d7:dc:9a:39:59:81:ab:76:8f:c7: 8b:52:98:d8:4e:da:28:c3:0f:9e:1f:8d:47:d0:7f:ab:99:06: 33:98:5d:62:97:d1:1d:ef:49:30:41:fe:08:f5:a2:74:c8:85: cc:2f:d7:0e:ff:7b:55:a9:9b:05:c3:d7:f8:d2:6c:90:ac:3e: 6e:12:32:a9:93:90:f6:15:69:d7:15:d0:e2:76:3a:5b:98:b7: e4:78:4c:66:8f:5b:2a:aa:0e:23:d4:7c:3d:1f:a6:80:ac:31: 99:86:91:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0QbO/qIUzGeaqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMyNGIyMjctNzFkOC00ZGUzLTlhMTctZTUzOGZkNjcz NTMwMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk MDlhYjNmZGUtNzBhYS00Mjc1LTg0ZDktN2Y5Mjc1ODk1N2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUDtr6MtG829MnalxAMANFHjRPrO4qD/tFXf hWzirOzqFnNAdtPhGzRreUKRSOjYuapn3ka+pEzZPalwwpMI7agRg8+Gt1ryTDcw d3nTADYqBUvmCBZRGfSPClnYELjfvchyYorO0Yp7gU80FYES1q2OQgTVCSsyI7ia 79R/oZPmChCATW5Wcjnk0Pen4S130jODl8e+2h1uxd9IyosqdtZ6R2ZBeuhXRdL8 B/ca6zPhHrrNscRmtaCiHf7narLF4qHlJtN7j411A/POEBSNm06yh4UOQy/isHYA feOR0UVloMxJdLjki3jSAGnJG04hnDJNIRb4v5vDTqjt0dkwvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVNULqZsY7pBlOQ+WgIeQ8UkhrVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YzI0 YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4ZmQ2NzM1MzAvMjEzY2U5NWItZmY4OS0z ZTIyLTk2MTMtZjM0NzVkMDA3ZTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWMyNGIyMjctNzFkOC00ZGUzLTlh MTctZTUzOGZkNjczNTMwLzVjMjRiMjI3LTcxZDgtNGRlMy05YTE3LWU1MzhmZDY3 MzUzMC5jcmwwHwYDVR0jBBgwFoAURxw2+fK+zH6557f46lGtvMrC1B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YzI0YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4 ZmQ2NzM1MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHZWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiAlpkLmIt2Y9Ltto02/ye4Rw0sLo+1K5dQddP/hiDsXZvBOybHD/RR T5IwBTxkIoNaQt/98ZMiyL+fTV6KTYOAc0rF2Eye9UikDpy+mmxeE5FqH/xdBCeW 0/y/UHo86ltwR4xt0S24/x1uY8eh0eaaflAA9IWM6vU8yx2RaYbAHbPazVEGrJmz mj6uVN0c6OJ30vOLdV3C19yaOVmBq3aPx4tSmNhO2ijDD54fjUfQf6uZBjOYXWKX 0R3vSTBB/gj1onTIhcwv1w7/e1WpmwXD1/jSbJCsPm4SMqmTkPYVadcV0OJ2OluY t+R4TGaPWyqqDiPUfD0fpoCsMZmGkZ8= -----END CERTIFICATE-----Generated at Mon Apr 28 15:16:18 2025 by rpki-client