$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8e9d27a1-d5d0-35ce-aea9-0d6c7fa76f14.roa File: 8e9d27a1-d5d0-35ce-aea9-0d6c7fa76f14.roa (raw, json) Hash identifier: JevatyL5iMFY69ocgvXKLmPFe7bQmjXSSIEKd+3RPg4= Subject key identifier: 4A:A3:11:14:E2:51:77:59:C4:27:60:90:B2:F8:26:54:32:47:B8:18 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F43285849A78531E1B88C974A6D26C980 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8e9d27a1-d5d0-35ce-aea9-0d6c7fa76f14.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 36492 IP address blocks: 64.9.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:31:e1:b8:8c:97:4a:6d:26:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=321bcdaf-efad-405e-ad34-8ed31396e1a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e4:40:f5:91:e6:f8:18:05:f8:64:27:df:d7: 62:a7:30:7d:8a:d5:ae:79:db:1e:a1:7b:2b:51:f9: 65:4b:b3:b1:16:7f:2b:51:78:d0:ed:f1:43:6f:cd: bd:77:e5:4b:c7:81:40:c6:48:f4:89:aa:5f:a7:9e: 02:40:49:ac:12:03:ef:ea:18:31:f3:07:fe:8f:a8: c5:14:e1:a0:a0:b1:59:2d:e8:1c:64:89:f0:52:5e: 51:c2:0d:c3:95:ae:00:b7:77:22:11:b2:66:17:9e: 62:11:d3:a5:f9:e3:29:79:7d:82:0f:e8:15:3d:a7: 6b:b7:24:b4:ac:ab:84:ff:d0:74:40:10:bb:bf:39: 33:b1:67:1e:6b:87:0c:73:f2:b3:36:30:9a:77:a2: 54:f6:79:39:4b:77:24:7f:db:b2:2e:d0:ef:82:0b: fc:b6:22:10:b8:b4:1a:67:86:31:33:9b:45:57:95: 23:23:31:f1:c9:bc:c3:ab:0c:51:74:05:57:cd:89: 75:d7:46:8c:a0:08:a3:2d:92:c2:a7:39:1e:35:e4: 83:c9:4b:76:f9:bd:3a:03:3a:2f:6e:7b:68:9a:5c: a4:fa:73:fe:10:09:dc:46:92:a5:78:86:9a:a6:a5: 33:74:19:93:02:7b:d1:64:17:f6:55:10:e7:18:fc: 63:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A3:11:14:E2:51:77:59:C4:27:60:90:B2:F8:26:54:32:47:B8:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8e9d27a1-d5d0-35ce-aea9-0d6c7fa76f14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 64.9.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:98:c8:12:d4:b1:af:23:61:e3:76:52:81:94:9c:35:60:20: 8a:47:a2:b8:14:ee:95:09:05:e7:48:79:c8:e2:de:1c:f3:e7: 73:18:2e:8e:ed:66:4c:4e:0c:99:3f:54:98:06:80:a7:29:42: 7b:63:e9:b9:b3:ef:dc:d9:6f:49:8b:7c:15:d5:df:6d:c3:51: 79:b9:65:e6:62:ca:6a:ab:de:7e:63:ee:34:7b:d6:92:5b:ab: 91:3c:e5:54:16:8d:9f:44:2e:8e:84:c9:df:e7:b3:92:d3:08: 40:25:9b:93:55:cc:5b:49:e2:05:b6:07:a0:b5:b7:09:fc:26: eb:ad:93:06:b4:42:00:2d:6e:85:e7:d5:bc:46:e7:58:09:8b: 27:76:f3:c4:ef:2f:d6:61:5c:1d:e1:31:ac:ef:3d:72:2b:d1: 95:da:c6:f4:b6:34:71:75:8c:34:80:52:fb:7a:85:55:86:0d: 85:71:d9:17:80:8e:4b:57:45:e1:a7:06:cf:d4:31:2f:d2:06: 57:c1:a6:b1:98:97:b0:fb:43:cd:0c:4d:4f:cc:b7:60:20:c6: aa:ed:e1:fd:ab:c5:f1:8f:a0:ad:a6:21:7d:e7:00:51:7d:f7: 0e:82:a6:e2:f3:6a:7e:a1:9e:c3:41:33:78:b7:c4:5f:7e:db: a8:a2:2f:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTHhuIyXSm0myYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MzIxYmNkYWYtZWZhZC00MDVlLWFkMzQtOGVkMzEzOTZlMWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuRA9ZHm+BgF+GQn39dipzB9itWuedseoXsr UfllS7OxFn8rUXjQ7fFDb829d+VLx4FAxkj0iapfp54CQEmsEgPv6hgx8wf+j6jF FOGgoLFZLegcZInwUl5Rwg3Dla4At3ciEbJmF55iEdOl+eMpeX2CD+gVPadrtyS0 rKuE/9B0QBC7vzkzsWcea4cMc/KzNjCad6JU9nk5S3ckf9uyLtDvggv8tiIQuLQa Z4YxM5tFV5UjIzHxybzDqwxRdAVXzYl110aMoAijLZLCpzkeNeSDyUt2+b06Azov bntomlyk+nP+EAncRpKleIaapqUzdBmTAnvRZBf2VRDnGPxjFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqjERTiUXdZxCdgkLL4JlQyR7gYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvOGU5ZDI3YTEtZDVkMC0z NWNlLWFlYTktMGQ2YzdmYTc2ZjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAn6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmYyBLUsa8jYeN2UoGUnDVgIIpHorgU7pUJBedIecji3hzz53MYLo7t ZkxODJk/VJgGgKcpQntj6bmz79zZb0mLfBXV323DUXm5ZeZiymqr3n5j7jR71pJb q5E85VQWjZ9ELo6Eyd/ns5LTCEAlm5NVzFtJ4gW2B6C1twn8Juutkwa0QgAtboXn 1bxG51gJiyd288TvL9ZhXB3hMazvPXIr0ZXaxvS2NHF1jDSAUvt6hVWGDYVx2ReA jktXReGnBs/UMS/SBlfBprGYl7D7Q80MTU/Mt2Agxqrt4f2rxfGPoK2mIX3nAFF9 9w6CpuLzan6hnsNBM3i3xF9+26iiL44= -----END CERTIFICATE-----Generated at Mon May 5 01:46:29 2025 by rpki-client