$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/400c0738-5d51-3d90-bd87-79c08fe6e27a.roa File: 400c0738-5d51-3d90-bd87-79c08fe6e27a.roa (raw, json) Hash identifier: 9D0B79q00/d4PjGNz2DsWzKWOunFhnuj6+BLlLLr4EA= Subject key identifier: 4E:92:A9:EE:4B:7B:AA:AD:09:64:12:19:EF:C9:33:9B:E8:21:95:55 Certificate issuer: /CN=f29fac19-e536-4e67-a788-6a1d4483389f Certificate serial: 010D0C9F43285848EC96967309761C6142CCA320 Authority key identifier: DB:6D:43:CE:3D:45:18:70:71:B4:83:AB:35:B7:D2:65:A6:1C:F6:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/400c0738-5d51-3d90-bd87-79c08fe6e27a.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 397715 IP address blocks: 64.4.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/f29fac19-e536-4e67-a788-6a1d4483389f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/f29fac19-e536-4e67-a788-6a1d4483389f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:96:73:09:76:1c:61:42:cc:a3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29fac19-e536-4e67-a788-6a1d4483389f Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=bea8c6f9-081c-49f6-8895-4f2d74c04055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a1:ae:67:6b:16:6e:40:73:d4:b6:40:de:ea: 66:b1:4c:46:04:c4:a3:14:c3:25:9a:b0:9f:2a:07: d0:2f:73:2d:53:79:c1:9b:15:f1:b2:a7:aa:54:15: 46:f9:e6:d5:67:ef:f3:d7:48:ec:db:ed:0e:9a:93: 99:dc:bb:7d:0c:ba:2f:3b:d5:50:8d:ba:00:69:91: 52:17:d4:ae:da:87:ee:97:5e:7c:bb:a8:d9:80:16: b9:56:4d:00:6d:c7:45:01:05:ff:8f:cb:ba:55:be: ad:0f:15:f4:11:b9:5a:5e:b1:36:38:c8:7f:c6:76: de:7e:d9:03:ff:62:5d:9f:ea:6b:98:2a:38:e9:4f: 99:0e:28:7d:22:82:21:dd:cb:52:18:ef:a8:de:43: 61:12:36:70:9e:58:2f:0e:95:0a:2f:5e:92:c2:51: 53:7d:43:db:fc:b4:ee:7b:79:e4:09:d7:61:30:c2: c0:38:86:93:6c:16:bf:5e:02:27:a8:8a:f0:fc:34: f9:5b:e6:df:9a:46:02:66:fb:5c:c5:18:50:83:34: f4:a7:e5:05:92:b9:7a:bd:c8:6d:75:a6:ce:0a:32: b4:82:f1:8a:a5:7f:ae:6e:4d:cc:03:67:85:d6:8d: 47:02:44:0c:1c:62:e8:3a:66:77:c7:97:c6:97:96: d0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:92:A9:EE:4B:7B:AA:AD:09:64:12:19:EF:C9:33:9B:E8:21:95:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/400c0738-5d51-3d90-bd87-79c08fe6e27a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/f29fac19-e536-4e67-a788-6a1d4483389f.crl X509v3 Authority Key Identifier: keyid:DB:6D:43:CE:3D:45:18:70:71:B4:83:AB:35:B7:D2:65:A6:1C:F6:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f.cer sbgp-ipAddrBlock: critical IPv4: 64.4.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:90:1c:39:91:ac:06:73:fd:57:5f:90:ff:6c:de:35:9a:d2: 7d:63:92:77:d0:4c:b7:63:2e:be:ba:57:b2:23:b5:2f:ae:03: 97:67:96:f2:47:e7:92:80:91:89:fb:0d:e4:e8:8e:c2:bb:4e: 0a:4f:41:9a:33:ce:02:a2:a8:01:8e:f8:e5:e6:d1:3d:08:48: b3:f7:15:3c:77:5b:ce:8a:2c:0b:52:90:d7:cf:cb:88:49:2a: 0a:08:ea:6b:a5:46:fc:5c:59:6c:f4:33:2b:22:e4:13:8d:ea: db:24:cc:e6:81:46:ea:b4:da:cf:67:fd:47:70:b2:84:78:a6: 41:da:51:58:58:e3:e5:6f:17:18:32:e0:1a:c5:fd:8e:eb:9c: c0:39:c3:08:21:02:38:c9:28:f2:fd:6c:a2:e2:72:e9:44:e3: 62:19:5e:73:12:57:3a:b3:ec:5d:04:b5:c5:f7:1c:31:64:2a: 05:8f:d6:31:ec:b1:2e:7a:c9:7c:0a:7d:3f:2e:5e:7f:57:c3: 60:1f:b1:41:c4:22:88:22:ad:c8:9a:0c:4c:c6:82:47:be:43: 6e:d8:a0:81:38:cd:95:de:ad:a4:4b:04:83:ef:52:bb:32:82: 4d:0d:56:a8:e1:e5:b4:0b:af:6d:9a:51:95:80:66:c3:50:af: be:64:e1:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslpZzCXYcYULMoyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI5ZmFjMTktZTUzNi00ZTY3LWE3ODgtNmExZDQ0ODMz ODlmMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk YmVhOGM2ZjktMDgxYy00OWY2LTg4OTUtNGYyZDc0YzA0MDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqGuZ2sWbkBz1LZA3upmsUxGBMSjFMMlmrCf KgfQL3MtU3nBmxXxsqeqVBVG+ebVZ+/z10js2+0OmpOZ3Lt9DLovO9VQjboAaZFS F9Su2oful158u6jZgBa5Vk0AbcdFAQX/j8u6Vb6tDxX0EblaXrE2OMh/xnbeftkD /2Jdn+prmCo46U+ZDih9IoIh3ctSGO+o3kNhEjZwnlgvDpUKL16SwlFTfUPb/LTu e3nkCddhMMLAOIaTbBa/XgInqIrw/DT5W+bfmkYCZvtcxRhQgzT0p+UFkrl6vcht dabOCjK0gvGKpX+ubk3MA2eF1o1HAkQMHGLoOmZ3x5fGl5bQGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6Sqe5Le6qtCWQSGe/JM5voIZVVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMjlm YWMxOS1lNTM2LTRlNjctYTc4OC02YTFkNDQ4MzM4OWYvNDAwYzA3MzgtNWQ1MS0z ZDkwLWJkODctNzljMDhmZTZlMjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjI5ZmFjMTktZTUzNi00ZTY3LWE3 ODgtNmExZDQ0ODMzODlmL2YyOWZhYzE5LWU1MzYtNGU2Ny1hNzg4LTZhMWQ0NDgz Mzg5Zi5jcmwwHwYDVR0jBBgwFoAU221Dzj1FGHBxtIOrNbfSZaYc9mswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMjlmYWMxOS1lNTM2LTRlNjctYTc4OC02YTFk NDQ4MzM4OWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQASvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6QHDmRrAZz/VdfkP9s3jWa0n1jknfQTLdjLr66V7IjtS+uA5dnlvJH 55KAkYn7DeTojsK7TgpPQZozzgKiqAGO+OXm0T0ISLP3FTx3W86KLAtSkNfPy4hJ KgoI6mulRvxcWWz0Mysi5BON6tskzOaBRuq02s9n/UdwsoR4pkHaUVhY4+VvFxgy 4BrF/Y7rnMA5wwghAjjJKPL9bKLiculE42IZXnMSVzqz7F0EtcX3HDFkKgWP1jHs sS56yXwKfT8uXn9Xw2AfsUHEIogirciaDEzGgke+Q27YoIE4zZXeraRLBIPvUrsy gk0NVqjh5bQLr22aUZWAZsNQr75k4eI= -----END CERTIFICATE-----Generated at Mon Apr 28 15:10:04 2025 by rpki-client