$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/dec8ab73-0262-34e2-a529-54abcb563e1f.roa File: dec8ab73-0262-34e2-a529-54abcb563e1f.roa (raw, json) Hash identifier: 8jpzEpeGMaKiH6QkoTcNZLW/RTwQzMZBaUXlR+RlY3M= Subject key identifier: 8B:FC:A2:A0:D8:8C:06:C3:E1:DF:4A:27:28:03:79:E6:1A:CB:FD:F7 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F43285849C20A218D0A55CE6AB7A5C5D8 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/dec8ab73-0262-34e2-a529-54abcb563e1f.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 18607 IP address blocks: 64.145.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:21:8d:0a:55:ce:6a:b7:a5:c5:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=ba27fbef-b912-482a-949e-22631a9f800d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:db:3f:d1:2d:5b:46:c8:76:f8:85:76:5b:88: 08:74:f8:76:8f:ad:65:5a:42:6a:a7:5d:be:dc:07: 2f:59:39:98:96:6d:ae:47:5e:a3:67:49:c2:dd:48: 6e:0b:ec:6d:a6:55:87:07:ce:0a:94:67:5a:45:9a: 75:0e:e7:e2:c7:94:4a:0f:d4:17:09:54:00:27:f9: 07:54:99:8c:04:c9:59:3f:fb:a0:2f:1a:71:53:a2: 0a:ff:4f:1c:17:31:fc:70:93:33:80:f3:13:fc:f3: 14:be:78:5f:33:46:da:dc:c2:c4:d3:0f:75:6c:77: 48:2b:66:ca:25:71:9d:fa:f2:48:96:19:dd:e0:e2: 3c:af:fe:ad:46:39:85:15:f6:be:75:3c:83:f2:6a: 12:1b:43:d1:27:ef:b9:56:f1:bd:54:c6:81:8d:1a: cd:bc:b8:d7:b1:e7:e4:c7:89:0f:72:c5:36:3c:a2: d4:c3:41:17:96:d7:86:1e:da:7f:77:3d:09:e1:41: a3:62:6d:e9:6c:72:42:b4:cd:74:3e:82:de:7d:aa: 8f:e0:2d:cf:5c:32:1c:a6:a5:46:e3:2d:ac:25:07: 16:fb:dd:3f:1f:98:78:5b:23:3d:86:10:e3:c1:6a: df:43:ec:6f:9a:96:e5:67:ad:b5:b8:f0:39:3a:02: cf:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FC:A2:A0:D8:8C:06:C3:E1:DF:4A:27:28:03:79:E6:1A:CB:FD:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/dec8ab73-0262-34e2-a529-54abcb563e1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 64.145.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:cf:42:bc:08:10:fb:83:ca:05:b6:de:63:8e:1d:27:35:5e: b4:41:f6:fd:4c:69:e7:29:47:bb:ec:42:aa:3e:29:7d:e0:81: 03:9e:ac:9e:be:f1:48:70:e6:80:2e:e3:db:1f:63:71:13:e4: 3d:30:a3:d5:e6:00:e9:07:a5:fd:36:30:a6:58:1a:48:3a:ff: 12:c3:ba:12:2e:ec:43:63:6d:8f:ba:b5:72:b1:ec:01:a6:c4: 29:0b:79:86:e3:94:ae:56:28:79:b8:7d:9f:17:b7:07:a7:91: d6:a7:3f:c0:0e:b9:e1:70:6e:0f:49:fc:28:ec:92:d1:b5:36: df:31:17:72:fb:7e:ce:52:12:f3:45:f1:a9:c8:9d:0e:13:09: 19:c3:9b:19:83:37:81:03:93:ed:34:c0:36:22:8a:82:bd:3e: c7:09:14:05:04:b5:bb:4f:ba:d8:61:52:9a:f5:19:62:04:79: 36:ba:df:e7:00:95:d6:5a:80:d9:57:09:e2:95:ef:d6:21:5e: 3d:bb:97:7a:39:11:43:10:cc:3e:df:14:36:71:5f:2c:00:9d: f5:d9:34:9e:18:d1:f3:e3:ad:cf:c4:8b:4f:d5:8d:ac:71:ef: 3c:df:3c:86:1b:74:46:c7:1c:38:19:00:4e:43:84:03:1c:52: 52:58:72:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCiGNClXOarelxdgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk YmEyN2ZiZWYtYjkxMi00ODJhLTk0OWUtMjI2MzFhOWY4MDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29s/0S1bRsh2+IV2W4gIdPh2j61lWkJqp12+ 3AcvWTmYlm2uR16jZ0nC3UhuC+xtplWHB84KlGdaRZp1Dufix5RKD9QXCVQAJ/kH VJmMBMlZP/ugLxpxU6IK/08cFzH8cJMzgPMT/PMUvnhfM0ba3MLE0w91bHdIK2bK JXGd+vJIlhnd4OI8r/6tRjmFFfa+dTyD8moSG0PRJ++5VvG9VMaBjRrNvLjXsefk x4kPcsU2PKLUw0EXlteGHtp/dz0J4UGjYm3pbHJCtM10PoLefaqP4C3PXDIcpqVG 4y2sJQcW+90/H5h4WyM9hhDjwWrfQ+xvmpblZ621uPA5OgLPcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIv8oqDYjAbD4d9KJygDeeYay/33MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvZGVjOGFiNzMtMDI2Mi0z NGUyLWE1MjktNTRhYmNiNTYzZTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQJFJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfPQrwIEPuDygW23mOOHSc1XrRB9v1MaecpR7vsQqo+KX3ggQOerJ6+ 8Uhw5oAu49sfY3ET5D0wo9XmAOkHpf02MKZYGkg6/xLDuhIu7ENjbY+6tXKx7AGm xCkLeYbjlK5WKHm4fZ8XtwenkdanP8AOueFwbg9J/CjsktG1Nt8xF3L7fs5SEvNF 8anInQ4TCRnDmxmDN4EDk+00wDYiioK9PscJFAUEtbtPuthhUpr1GWIEeTa63+cA ldZagNlXCeKV79YhXj27l3o5EUMQzD7fFDZxXywAnfXZNJ4Y0fPjrc/Ei0/Vjaxx 7zzfPIYbdEbHHDgZAE5DhAMcUlJYcvI= -----END CERTIFICATE-----Generated at Fri May 9 20:35:52 2025 by rpki-client