$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/00f8a6c8-82bf-3cc1-ab5a-16e66b6ff897.roa File: 00f8a6c8-82bf-3cc1-ab5a-16e66b6ff897.roa (raw, json) Hash identifier: ixJBGujRb4ciBbFUnM9jxlQaaLd3nKv2O7hAJApreBE= Subject key identifier: 29:02:27:35:60:D1:F2:18:73:A3:44:AD:15:30:85:A1:51:6B:5C:20 Certificate issuer: /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf Certificate serial: 010D0C9F43285849BF3F6514B67CF540921E8FC0 Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/00f8a6c8-82bf-3cc1-ab5a-16e66b6ff897.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 397041 IP address blocks: 64.112.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:65:14:b6:7c:f5:40:92:1e:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=e96d00cc-59e5-4969-9a86-4900e19db4ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e2:02:b3:0e:1a:37:55:ca:31:3e:fb:7c:cb: 9f:91:54:02:34:20:02:35:a8:6b:39:bf:a9:9a:a8: cd:2f:26:22:0c:40:7b:8d:02:33:99:e9:e2:2e:85: 98:0c:ef:97:90:03:2f:8a:f2:a5:47:f9:41:5f:f2: 01:d1:f2:89:a1:0c:36:1c:20:54:d6:97:1f:9d:97: 12:04:a3:6b:a8:dc:a9:e2:bd:3b:6c:f9:59:a8:d0: 0e:21:e3:f4:46:d2:e0:5b:7b:58:83:62:01:a8:bd: 81:77:8b:9c:59:52:00:f9:00:00:03:34:28:40:ad: 6d:7d:1e:71:ef:ed:e9:27:ae:23:b7:04:43:22:ad: 67:5b:b8:03:a8:92:df:b2:a3:d1:16:63:12:ab:20: 6e:87:5f:7f:28:c6:de:01:6d:7f:83:4a:56:cd:bd: 12:f9:a6:08:cb:9b:85:07:eb:65:20:24:7d:c0:93: 74:a8:65:de:a0:39:93:20:70:84:fe:57:69:6f:4a: 30:69:89:c5:1b:c3:c1:e9:9d:41:8e:ce:fc:4d:f6: b9:57:6d:e6:88:3d:c4:fe:81:de:f1:a8:30:e6:82: b7:37:c8:7b:d8:11:5f:51:65:92:4a:6e:9b:2d:a5: 0e:76:a5:65:a0:47:45:f0:41:d0:bd:25:a9:4c:69: f5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:02:27:35:60:D1:F2:18:73:A3:44:AD:15:30:85:A1:51:6B:5C:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/00f8a6c8-82bf-3cc1-ab5a-16e66b6ff897.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl X509v3 Authority Key Identifier: keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer sbgp-ipAddrBlock: critical IPv4: 64.112.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:4b:bf:c7:27:7f:74:fd:e3:a3:f3:16:69:2c:2c:33:e6:79: b1:d4:ba:78:d2:33:03:40:1d:7b:95:9d:25:68:5b:79:ba:9f: 05:0a:77:0b:bf:c8:69:3e:0f:78:74:0f:48:a0:5e:39:80:df: 5f:2b:a6:57:98:06:c7:21:a8:54:f4:f1:16:a1:cf:9e:b7:de: 44:d1:e1:f6:c2:1c:19:b8:a3:87:f7:6c:50:52:79:23:87:02: e4:37:48:04:be:4e:89:ba:5b:b4:ad:a4:26:e8:11:f9:91:6f: 86:8a:bf:2e:ea:d1:33:68:81:ba:23:1e:b0:6f:3c:fb:a9:bb: a3:15:1a:20:d7:24:5e:fa:7e:dc:8f:24:23:77:bb:9b:bc:9d: 53:b4:58:a8:3a:ca:e5:10:0e:c3:3b:3c:98:0d:75:d6:08:fc: e8:46:07:a2:39:e5:87:50:15:33:ce:17:71:f4:d7:23:19:f0: 75:c1:4d:f3:2c:f0:04:d8:05:4b:27:5a:0d:9c:2c:0a:41:34: 1e:fd:80:95:7a:28:51:fb:54:cc:f3:b6:33:26:c6:54:26:cd: 32:3b:c5:10:e8:01:16:57:9c:b1:0c:b8:bf:c0:a9:91:c5:48: c1:62:56:86:b4:bd:44:f5:8e:0d:f3:a9:d0:ea:7b:00:b4:e6: 53:3c:a1:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P2UUtnz1QJIej8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTJiNzllYzAtZGMzYi00YWUwLWFjOWEtYmU1ZTQ0MGNm M2JmMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZTk2ZDAwY2MtNTllNS00OTY5LTlhODYtNDkwMGUxOWRiNGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+ICsw4aN1XKMT77fMufkVQCNCACNahrOb+p mqjNLyYiDEB7jQIzmeniLoWYDO+XkAMvivKlR/lBX/IB0fKJoQw2HCBU1pcfnZcS BKNrqNyp4r07bPlZqNAOIeP0RtLgW3tYg2IBqL2Bd4ucWVIA+QAAAzQoQK1tfR5x 7+3pJ64jtwRDIq1nW7gDqJLfsqPRFmMSqyBuh19/KMbeAW1/g0pWzb0S+aYIy5uF B+tlICR9wJN0qGXeoDmTIHCE/ldpb0owaYnFG8PB6Z1Bjs78Tfa5V23miD3E/oHe 8agw5oK3N8h72BFfUWWSSm6bLaUOdqVloEdF8EHQvSWpTGn19wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkCJzVg0fIYc6NErRUwhaFRa1wgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMmI3 OWVjMC1kYzNiLTRhZTAtYWM5YS1iZTVlNDQwY2YzYmYvMDBmOGE2YzgtODJiZi0z Y2MxLWFiNWEtMTZlNjZiNmZmODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTJiNzllYzAtZGMzYi00YWUwLWFj OWEtYmU1ZTQ0MGNmM2JmLzEyYjc5ZWMwLWRjM2ItNGFlMC1hYzlhLWJlNWU0NDBj ZjNiZi5jcmwwHwYDVR0jBBgwFoAUCSgDghQhqZyoQ+WjADdHhNEkZ1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xMmI3OWVjMC1kYzNiLTRhZTAtYWM5YS1iZTVl NDQwY2YzYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHB5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRLv8cnf3T946PzFmksLDPmebHUunjSMwNAHXuVnSVoW3m6nwUKdwu/ yGk+D3h0D0igXjmA318rpleYBschqFT08Rahz5633kTR4fbCHBm4o4f3bFBSeSOH AuQ3SAS+Tom6W7StpCboEfmRb4aKvy7q0TNogbojHrBvPPupu6MVGiDXJF76ftyP JCN3u5u8nVO0WKg6yuUQDsM7PJgNddYI/OhGB6I55YdQFTPOF3H01yMZ8HXBTfMs 8ATYBUsnWg2cLApBNB79gJV6KFH7VMzztjMmxlQmzTI7xRDoARZXnLEMuL/AqZHF SMFiVoa0vUT1jg3zqdDqewC05lM8oQI= -----END CERTIFICATE-----Generated at Wed May 7 08:30:01 2025 by rpki-client