$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/bb120513-c816-385c-a3d5-45ae6fdc2108.roa File: bb120513-c816-385c-a3d5-45ae6fdc2108.roa (raw, json) Hash identifier: op3v5mFvnX89KElPElHVcq5EKIcODDSm+Y5pM4SID84= Subject key identifier: 8E:C1:00:30:44:AB:F8:88:28:B5:21:E7:6A:3B:1A:86:15:09:DC:1D Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F43285849B14A0ED5AA81F7067D484640 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/bb120513-c816-385c-a3d5-45ae6fdc2108.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 33724 IP address blocks: 64.136.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:0e:d5:aa:81:f7:06:7d:48:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=27afee1d-26db-400e-a085-4a1a0af31813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c7:46:a6:40:a0:03:1f:90:8f:57:8d:a1:28: 5a:26:99:a9:54:03:5d:a4:7d:b2:1a:b3:01:cb:fe: bb:eb:df:74:86:f7:33:15:53:82:8a:7c:c5:19:69: 1a:48:e8:5a:56:17:79:23:c5:ef:f5:5b:6e:16:36: 0a:1a:47:83:08:a5:ee:3a:8a:54:2f:fb:16:6a:6a: f6:5d:77:8f:e9:0c:1a:28:03:de:16:b2:77:ed:3a: 7b:72:01:11:5e:cc:0c:7b:f2:e5:51:e4:e9:25:c4: 63:ed:2f:14:81:54:31:46:bb:2d:02:1f:0d:9e:ba: ce:9f:42:e2:50:78:24:ff:d3:77:ea:f1:80:95:3d: 87:75:fa:65:8f:70:ec:e4:61:ac:9e:85:9b:57:35: 86:ba:12:b1:4e:74:d1:ab:7a:eb:e0:42:46:90:44: 38:2d:cf:f4:55:77:e2:d1:15:89:1a:9f:16:32:48: ea:f9:12:24:d4:e7:12:7e:80:33:54:7b:01:6e:80: 7f:a0:20:15:ef:47:01:0a:b2:2f:f6:22:c7:29:8b: 2e:fd:5f:05:d5:a6:46:d3:19:7b:40:64:97:b0:0a: ee:b1:6f:8a:7f:80:05:e6:c3:12:0c:fd:07:52:03: 84:8d:b6:26:46:45:c0:ef:61:42:93:0f:d3:15:15: b8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C1:00:30:44:AB:F8:88:28:B5:21:E7:6A:3B:1A:86:15:09:DC:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/bb120513-c816-385c-a3d5-45ae6fdc2108.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv4: 64.136.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:69:5a:a5:ed:17:dc:b2:f5:d5:8a:dc:1f:69:bc:0b:4a:ec: 14:89:20:74:c8:0b:5d:69:3c:56:04:e3:19:3e:0c:a8:58:0e: 04:01:d6:7d:9b:f4:a1:7a:88:d0:9d:dc:50:10:03:64:f4:3f: de:28:9c:8f:5c:2d:f9:70:0b:0d:5e:5f:99:b7:0e:d0:76:ea: a9:c8:8a:b6:20:32:b7:fe:a4:9b:9a:96:59:64:44:7f:7e:81: 72:ba:8c:17:59:d0:05:8f:fa:fb:d7:bd:03:d5:78:94:41:ad: 75:65:c1:0c:77:f6:9b:04:9a:69:04:20:0b:68:a2:65:78:74: 22:46:91:a7:11:15:1e:a5:cd:3c:28:c9:1d:a7:16:b4:85:8f: fc:fb:06:39:99:fe:31:89:53:69:a6:84:3b:c4:6d:53:1a:98: 77:b8:a4:18:5e:4d:af:ce:c2:1e:69:6b:10:ca:03:53:f3:09: 37:17:74:3c:1f:70:5e:6d:71:d8:ba:19:4e:04:bc:64:2a:5d: 25:1d:e9:9c:94:de:0b:20:20:4b:a1:19:23:cf:b2:8a:b9:ad: a8:df:54:ea:8d:d6:52:6c:55:b0:b3:c8:3e:e5:fb:44:da:45: c9:ae:ac:3a:93:be:7c:7a:b1:fe:92:bb:b0:b4:03:be:0b:53: 40:70:27:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSg7VqoH3Bn1IRkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MjdhZmVlMWQtMjZkYi00MDBlLWEwODUtNGExYTBhZjMxODEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8dGpkCgAx+Qj1eNoShaJpmpVANdpH2yGrMB y/676990hvczFVOCinzFGWkaSOhaVhd5I8Xv9VtuFjYKGkeDCKXuOopUL/sWamr2 XXeP6QwaKAPeFrJ37Tp7cgERXswMe/LlUeTpJcRj7S8UgVQxRrstAh8NnrrOn0Li UHgk/9N36vGAlT2Hdfplj3Ds5GGsnoWbVzWGuhKxTnTRq3rr4EJGkEQ4Lc/0VXfi 0RWJGp8WMkjq+RIk1OcSfoAzVHsBboB/oCAV70cBCrIv9iLHKYsu/V8F1aZG0xl7 QGSXsArusW+Kf4AF5sMSDP0HUgOEjbYmRkXA72FCkw/TFRW4uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7BADBEq/iIKLUh52o7GoYVCdwdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvYmIxMjA1MTMtYzgxNi0z ODVjLWEzZDUtNDVhZTZmZGMyMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQIhiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRpWqXtF9yy9dWK3B9pvAtK7BSJIHTIC11pPFYE4xk+DKhYDgQB1n2b 9KF6iNCd3FAQA2T0P94onI9cLflwCw1eX5m3DtB26qnIirYgMrf+pJualllkRH9+ gXK6jBdZ0AWP+vvXvQPVeJRBrXVlwQx39psEmmkEIAtoomV4dCJGkacRFR6lzTwo yR2nFrSFj/z7BjmZ/jGJU2mmhDvEbVMamHe4pBheTa/Owh5paxDKA1PzCTcXdDwf cF5tcdi6GU4EvGQqXSUd6ZyU3gsgIEuhGSPPsoq5rajfVOqN1lJsVbCzyD7l+0Ta RcmurDqTvnx6sf6Su7C0A74LU0BwJy4= -----END CERTIFICATE-----Generated at Sat May 10 22:16:12 2025 by rpki-client