$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1df4ab6b-60bd-30a4-9978-6b8a20d5490b.roa File: 1df4ab6b-60bd-30a4-9978-6b8a20d5490b.roa (raw, json) Hash identifier: wFVPHlHSPk9jeuEuRT8NoqJ8x32MkTWVIrb1SZ5o3Yw= Subject key identifier: 10:9F:DB:6C:F5:7B:D2:ED:32:CA:94:B2:04:8C:A2:59:83:15:9A:39 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F432858495ABEE0C8C874C1EF22E66320 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1df4ab6b-60bd-30a4-9978-6b8a20d5490b.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 22652 IP address blocks: 64.187.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:e0:c8:c8:74:c1:ef:22:e6:63:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=2e40cbed-864b-4f23-8086-9cb39d860b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:32:de:0d:53:31:29:cf:42:fe:68:34:ea:01: bd:a7:91:06:61:15:d8:25:d0:1d:f1:c5:70:85:c4: 99:1d:35:fc:d3:a9:21:b7:c5:25:96:6c:bd:01:00: 44:3d:31:4e:7c:c5:e7:a7:89:ed:fb:94:82:ff:66: 43:10:d5:37:75:7b:53:77:f6:04:68:d5:60:80:ee: d3:9f:7a:36:fc:3a:fa:b1:2a:73:44:25:78:c8:fa: ca:3e:db:89:e0:17:46:11:91:99:19:0a:65:ef:66: b9:33:67:27:14:41:2e:25:7e:8f:96:de:4f:36:2f: 8f:ba:81:7c:d0:43:d7:b5:01:46:6b:fc:1b:1f:ad: b6:f3:4d:36:27:98:db:d7:9b:b8:e8:81:9f:fa:1d: 5a:33:12:f1:c0:4e:ee:89:7a:5c:d7:a3:c0:a2:d7: 0c:16:dd:60:37:d4:b6:2f:46:f0:6b:30:4a:a3:fb: 59:49:b5:b8:4c:cf:cc:40:82:11:be:62:69:ff:55: 1c:f7:90:61:ff:c7:10:0e:21:48:7e:6c:7b:92:e4: 42:a5:c3:ce:b0:29:7a:9e:0e:a5:b3:ff:f7:b4:bf: 73:db:fc:26:c4:e6:f9:ac:7c:5e:41:cf:05:e1:6c: 7b:3c:a9:a0:2a:67:42:07:a0:e3:f6:b5:32:02:83: 13:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:9F:DB:6C:F5:7B:D2:ED:32:CA:94:B2:04:8C:A2:59:83:15:9A:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1df4ab6b-60bd-30a4-9978-6b8a20d5490b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 64.187.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:d5:42:27:d0:f8:a2:b8:10:d6:1e:a0:ef:a1:55:a3:31:2c: f2:01:ed:09:33:7c:94:73:8e:ef:dc:f5:1c:30:d0:84:b5:be: 00:a1:7a:b8:2c:a1:49:5c:36:14:c5:66:5f:ee:f6:47:95:68: 82:61:c1:84:7c:ca:0c:95:6e:40:a7:5b:79:da:cb:0a:dc:91: 69:ea:89:34:e3:9a:b4:eb:10:ad:19:86:aa:c7:c5:27:2f:82: e0:5a:3c:27:21:49:de:44:d3:f5:ee:8e:f4:fe:e7:20:1b:0c: 48:4a:6d:3c:1f:28:0d:ea:e2:59:cf:d9:a1:6e:7a:c1:b6:50: 5b:96:fd:27:c0:8c:05:e7:b1:ad:98:6f:9f:05:62:e4:59:27: 91:66:cf:c7:ed:b1:d4:ab:0f:3e:60:6e:4b:4b:4d:46:99:1c: aa:96:8e:cd:df:61:d8:76:99:bf:70:4b:fb:ae:1b:9f:55:f7: da:8f:6a:e1:32:2d:6c:79:11:a1:6b:c7:34:b5:5f:7f:21:eb: ff:8f:88:d7:ea:39:dd:37:e1:b9:31:87:95:93:4b:c7:86:d8: 02:62:c2:2e:37:be:3f:c7:f7:fb:98:87:ec:06:5d:72:cd:d5: 3e:4e:b5:e0:01:e2:8a:60:3d:27:4f:93:00:b3:15:3a:74:07: 0e:37:3e:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavuDIyHTB7yLmYyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk MmU0MGNiZWQtODY0Yi00ZjIzLTgwODYtOWNiMzlkODYwYjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTLeDVMxKc9C/mg06gG9p5EGYRXYJdAd8cVw hcSZHTX806kht8Ullmy9AQBEPTFOfMXnp4nt+5SC/2ZDENU3dXtTd/YEaNVggO7T n3o2/Dr6sSpzRCV4yPrKPtuJ4BdGEZGZGQpl72a5M2cnFEEuJX6Plt5PNi+PuoF8 0EPXtQFGa/wbH6228002J5jb15u46IGf+h1aMxLxwE7uiXpc16PAotcMFt1gN9S2 L0bwazBKo/tZSbW4TM/MQIIRvmJp/1Uc95Bh/8cQDiFIfmx7kuRCpcPOsCl6ng6l s//3tL9z2/wmxOb5rHxeQc8F4Wx7PKmgKmdCB6Dj9rUyAoMTcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCf22z1e9LtMsqUsgSMolmDFZo5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMWRmNGFiNmItNjBiZC0z MGE0LTk5NzgtNmI4YTIwZDU0OTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQLu4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILVQifQ+KK4ENYeoO+hVaMxLPIB7QkzfJRzju/c9Rww0IS1vgChergs oUlcNhTFZl/u9keVaIJhwYR8ygyVbkCnW3naywrckWnqiTTjmrTrEK0ZhqrHxScv guBaPCchSd5E0/XujvT+5yAbDEhKbTwfKA3q4lnP2aFuesG2UFuW/SfAjAXnsa2Y b58FYuRZJ5Fmz8ftsdSrDz5gbktLTUaZHKqWjs3fYdh2mb9wS/uuG59V99qPauEy LWx5EaFrxzS1X38h6/+PiNfqOd034bkxh5WTS8eG2AJiwi43vj/H9/uYh+wGXXLN 1T5OteAB4opgPSdPkwCzFTp0Bw43PlY= -----END CERTIFICATE-----Generated at Sun May 11 15:26:32 2025 by rpki-client