$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/ba1ddc35-6239-3b2d-a037-5bd53ebd1f84.roa File: ba1ddc35-6239-3b2d-a037-5bd53ebd1f84.roa (raw, json) Hash identifier: KmKka9oJHsW7b89D0l51VX48uI3G5p6mbaHRlx3r4mk= Subject key identifier: 08:50:02:28:9C:C9:44:BA:8A:13:E6:73:C3:5C:7B:AB:56:18:E7:B4 Certificate issuer: /CN=4279ddf8-3e66-45cf-8955-452fbe652c0c Certificate serial: 010D0C9F43285849BF3F591F7B6A64727A2FDC40 Authority key identifier: CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/ba1ddc35-6239-3b2d-a037-5bd53ebd1f84.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 27425 IP address blocks: 64.32.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:59:1f:7b:6a:64:72:7a:2f:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4279ddf8-3e66-45cf-8955-452fbe652c0c Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=96838f22-3e30-4c40-a543-b1140a4cedeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:84:78:9a:17:79:48:07:91:60:8d:a4:48:39: 76:51:8e:66:dd:12:f3:e5:4a:e9:20:3a:48:4a:23: f1:59:99:03:47:76:d0:5b:4a:8f:b4:fe:21:8a:f2: ee:fb:4f:e1:67:af:5d:08:be:01:ac:4d:55:bc:c3: 0f:f3:ce:b1:6c:0a:19:e0:ff:99:16:65:3d:56:a0: f5:66:f4:65:b5:f0:38:18:a4:e3:7f:0e:d8:e4:4b: ef:db:cf:31:68:8e:ae:f9:ea:12:de:49:12:31:41: 54:98:56:5d:ca:43:14:e2:00:ff:e9:58:3d:d1:9e: 52:b5:e1:d4:36:c8:72:8c:94:67:28:ca:61:53:97: 2c:29:48:c2:96:06:d2:e3:46:36:3c:92:72:41:7f: f4:1e:0e:ed:a8:5a:ba:be:1a:e7:62:9d:74:ae:37: bf:27:be:2b:26:dc:65:02:be:9c:ae:27:16:f6:a9: 38:48:27:ff:23:09:53:4f:77:44:c2:f5:52:36:5d: 73:37:df:55:42:12:e0:45:67:81:f1:30:8a:cd:b4: 56:8d:02:8c:fa:0d:ea:29:4f:c2:9d:0a:8f:9a:f6: 19:ab:8f:10:90:4a:20:5a:76:87:ca:fa:c3:06:f8: 99:b8:0a:82:a1:b5:e6:bd:b1:b4:9e:bb:77:16:af: 0e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:50:02:28:9C:C9:44:BA:8A:13:E6:73:C3:5C:7B:AB:56:18:E7:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/ba1ddc35-6239-3b2d-a037-5bd53ebd1f84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.crl X509v3 Authority Key Identifier: keyid:CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer sbgp-ipAddrBlock: critical IPv4: 64.32.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:89:0d:af:a3:92:ad:0a:ab:a8:b1:be:55:15:70:ca:ba:52: 8c:e2:b7:7d:84:5f:a0:2f:eb:cc:1b:92:eb:a7:28:ef:16:06: 44:80:81:b7:77:70:19:18:71:46:23:9f:c3:5d:88:1b:72:c7: cf:c5:50:04:9c:e8:33:4e:15:51:0e:2c:c1:63:4b:48:75:58: a3:94:da:67:6f:29:7c:43:a8:50:8f:bc:6d:1f:e3:fb:93:c1: 38:f4:24:96:52:cc:aa:59:b4:f0:17:fe:a8:35:d8:30:ef:dd: bc:0a:65:c4:b7:d4:da:f2:5a:36:9f:42:50:d0:27:8c:b5:bc: 51:37:51:b4:fa:84:2c:a1:bb:09:54:28:7d:e6:5b:a2:07:b5: ac:af:b2:a0:ee:a9:ba:d6:29:ab:8c:9a:43:bc:56:0b:63:67: cb:4b:7b:6d:52:fb:5a:ba:c3:18:2a:f9:d4:02:47:66:cf:23: 20:c2:48:74:3d:9e:3a:e0:e3:33:23:5c:06:ab:8b:a8:11:a6: 91:b8:7e:30:35:9c:01:88:ee:52:45:df:02:9e:32:2b:66:b8: 56:69:cf:eb:a5:44:7e:65:1b:c4:f3:71:1e:2f:9e:4f:10:b3: 5c:d9:5f:d1:ca:bd:e7:bb:97:0e:da:5e:44:87:9e:e2:f7:58: 10:38:ef:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P1kfe2pkcnov3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI3OWRkZjgtM2U2Ni00NWNmLTg5NTUtNDUyZmJlNjUy YzBjMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk OTY4MzhmMjItM2UzMC00YzQwLWE1NDMtYjExNDBhNGNlZGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YR4mhd5SAeRYI2kSDl2UY5m3RLz5UrpIDpI SiPxWZkDR3bQW0qPtP4hivLu+0/hZ69dCL4BrE1VvMMP886xbAoZ4P+ZFmU9VqD1 ZvRltfA4GKTjfw7Y5Evv288xaI6u+eoS3kkSMUFUmFZdykMU4gD/6Vg90Z5SteHU NshyjJRnKMphU5csKUjClgbS40Y2PJJyQX/0Hg7tqFq6vhrnYp10rje/J74rJtxl Ar6cricW9qk4SCf/IwlTT3dEwvVSNl1zN99VQhLgRWeB8TCKzbRWjQKM+g3qKU/C nQqPmvYZq48QkEogWnaHyvrDBviZuAqCobXmvbG0nrt3Fq8OOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhQAiicyUS6ihPmc8Nce6tWGOe0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80Mjc5 ZGRmOC0zZTY2LTQ1Y2YtODk1NS00NTJmYmU2NTJjMGMvYmExZGRjMzUtNjIzOS0z YjJkLWEwMzctNWJkNTNlYmQxZjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDI3OWRkZjgtM2U2Ni00NWNmLTg5 NTUtNDUyZmJlNjUyYzBjLzQyNzlkZGY4LTNlNjYtNDVjZi04OTU1LTQ1MmZiZTY1 MmMwYy5jcmwwHwYDVR0jBBgwFoAUyqJkG6e3TH6KYINPDkK7eKRQ8IQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80Mjc5ZGRmOC0zZTY2LTQ1Y2YtODk1NS00NTJm YmU2NTJjMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQCAmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyJDa+jkq0Kq6ixvlUVcMq6Uozit32EX6Av68wbkuunKO8WBkSAgbd3 cBkYcUYjn8NdiBtyx8/FUASc6DNOFVEOLMFjS0h1WKOU2mdvKXxDqFCPvG0f4/uT wTj0JJZSzKpZtPAX/qg12DDv3bwKZcS31NryWjafQlDQJ4y1vFE3UbT6hCyhuwlU KH3mW6IHtayvsqDuqbrWKauMmkO8VgtjZ8tLe21S+1q6wxgq+dQCR2bPIyDCSHQ9 njrg4zMjXAari6gRppG4fjA1nAGI7lJF3wKeMitmuFZpz+ulRH5lG8TzcR4vnk8Q s1zZX9HKvee7lw7aXkSHnuL3WBA476I= -----END CERTIFICATE-----Generated at Sun May 11 09:14:43 2025 by rpki-client