$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/39e3616a-2c95-33e4-bb9f-abf4e24da626.roa File: 39e3616a-2c95-33e4-bb9f-abf4e24da626.roa (raw, json) Hash identifier: l9gRWp9BeZbyloG5pNCMFeXPduoLsUjZh9qzNxUa8DA= Subject key identifier: EB:AE:D5:92:8D:76:0A:C2:F3:BA:D2:83:6C:C3:F3:68:D3:AE:8A:25 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F432858495ABEE0E2D6C6122C40CD0D00 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/39e3616a-2c95-33e4-bb9f-abf4e24da626.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 22652 IP address blocks: 64.187.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:e0:e2:d6:c6:12:2c:40:cd:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=dbbf4a83-da88-4eca-8b50-44d4e9e4c4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9d:42:c5:72:39:cb:4d:1c:b6:fb:f1:d4:fc: 5d:5f:67:28:46:0c:d0:dc:e3:37:fa:f8:55:2c:79: 53:0b:b1:36:f7:07:21:b8:32:92:21:ec:40:05:30: 1c:3a:b3:fb:95:a1:04:20:df:f7:87:1c:f5:dc:3e: ed:bd:ce:72:65:1a:d1:60:18:a1:ce:7e:2b:b0:53: 93:cd:06:11:0f:e9:86:74:d7:7e:b6:ab:40:1b:d2: cf:42:58:48:12:13:19:9c:50:28:aa:cb:0b:a0:10: 03:4b:e1:79:4c:b9:30:21:f8:e6:f9:61:68:49:07: 89:a2:ca:4e:d4:d1:41:46:c9:c0:80:95:eb:c3:69: bb:47:10:28:09:c7:a6:2e:32:b4:d3:2c:71:1b:31: 44:5a:4b:36:75:32:c3:42:71:5a:fb:23:b8:1e:f9: 65:19:10:95:9a:ac:8c:ed:df:13:b1:29:e4:80:74: 1f:cc:ce:b6:fc:9a:f3:f2:cb:2a:ac:99:72:d5:4f: 72:3e:f1:55:c2:5a:44:92:e0:3f:45:4b:f4:82:37: f3:44:6b:d9:d6:2c:15:cd:59:d2:31:b2:86:cb:37: 3a:83:a6:60:fd:a3:40:aa:39:1e:ff:d1:99:29:45: 53:f2:78:6f:5d:65:a8:4b:84:cd:36:05:c5:31:71: c8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:AE:D5:92:8D:76:0A:C2:F3:BA:D2:83:6C:C3:F3:68:D3:AE:8A:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/39e3616a-2c95-33e4-bb9f-abf4e24da626.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 64.187.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:34:5d:69:5f:9f:11:92:35:a1:b3:b4:e9:ff:53:2f:9a:b3: 05:4e:dd:47:f7:aa:98:bf:5f:f5:24:16:d9:20:3b:52:9f:0b: 8b:d1:41:78:0e:91:16:7a:43:e0:90:92:26:53:2c:3b:21:03: 7f:c4:48:6c:7b:d4:55:41:c1:66:17:84:62:28:a4:98:12:33: fc:61:1c:0f:56:ec:b4:99:fa:46:2f:a0:b8:25:64:ff:13:e4: e6:16:84:fd:5c:a0:65:52:71:06:a5:2f:ea:0e:d1:87:6e:93: b1:19:ba:2b:5e:78:cb:de:0b:5f:b0:ba:aa:8d:96:39:08:ae: 8c:b1:21:ea:4a:8b:2c:ec:63:63:96:1f:8d:10:00:dc:e3:f3: 9c:c7:c9:cc:23:30:a6:dd:3a:cf:b4:c3:f3:ab:bb:92:58:bd: 36:7c:bb:1b:63:6e:83:2d:d7:63:e0:f4:92:a1:30:88:51:eb: fd:48:9b:6e:86:5b:69:f6:10:08:5c:c9:3f:6c:82:c2:c7:d2: 0d:89:4f:b4:85:b9:8a:5b:29:d6:cc:62:47:48:14:89:32:9f: 89:7a:5a:a7:2a:8e:cc:b5:2d:39:17:29:26:75:2e:4e:fe:ee: a2:b8:35:13:ac:e2:0d:ea:d4:e0:49:44:d8:96:ec:49:52:d6: 80:80:41:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavuDi1sYSLEDNDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk ZGJiZjRhODMtZGE4OC00ZWNhLThiNTAtNDRkNGU5ZTRjNGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw51CxXI5y00ctvvx1PxdX2coRgzQ3OM3+vhV LHlTC7E29wchuDKSIexABTAcOrP7laEEIN/3hxz13D7tvc5yZRrRYBihzn4rsFOT zQYRD+mGdNd+tqtAG9LPQlhIEhMZnFAoqssLoBADS+F5TLkwIfjm+WFoSQeJospO 1NFBRsnAgJXrw2m7RxAoCcemLjK00yxxGzFEWks2dTLDQnFa+yO4HvllGRCVmqyM 7d8TsSnkgHQfzM62/Jrz8ssqrJly1U9yPvFVwlpEkuA/RUv0gjfzRGvZ1iwVzVnS MbKGyzc6g6Zg/aNAqjke/9GZKUVT8nhvXWWoS4TNNgXFMXHIhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuu1ZKNdgrC87rSg2zD82jTroolMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMzllMzYxNmEtMmM5NS0z M2U0LWJiOWYtYWJmNGUyNGRhNjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQLu+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEI0XWlfnxGSNaGztOn/Uy+aswVO3Uf3qpi/X/UkFtkgO1KfC4vRQXgO kRZ6Q+CQkiZTLDshA3/ESGx71FVBwWYXhGIopJgSM/xhHA9W7LSZ+kYvoLglZP8T 5OYWhP1coGVScQalL+oO0Yduk7EZuiteeMveC1+wuqqNljkIroyxIepKiyzsY2OW H40QANzj85zHycwjMKbdOs+0w/Oru5JYvTZ8uxtjboMt12Pg9JKhMIhR6/1Im26G W2n2EAhcyT9sgsLH0g2JT7SFuYpbKdbMYkdIFIkyn4l6Wqcqjsy1LTkXKSZ1Lk7+ 7qK4NROs4g3q1OBJRNiW7ElS1oCAQXI= -----END CERTIFICATE-----Generated at Sat May 10 19:12:29 2025 by rpki-client