$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/bc33f2eb-1941-30fb-a335-e2b8b6873632.roa File: bc33f2eb-1941-30fb-a335-e2b8b6873632.roa (raw, json) Hash identifier: YZWD9rpoZFOQuKiHq7ehKS1ypnBtERKYLzHP1laQbBk= Subject key identifier: 1E:91:C3:8F:F1:25:D9:49:29:68:7A:B5:69:B1:D1:9D:EF:24:59:4E Certificate issuer: /CN=29c6a19e-a83c-43ad-8d10-68daeb160033 Certificate serial: 010D0C9F432858498769B0F02B47C2F135BD7A80 Authority key identifier: 45:8B:83:8A:98:13:A0:1F:97:D7:3D:75:9F:15:74:D6:DD:BD:6A:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/bc33f2eb-1941-30fb-a335-e2b8b6873632.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 3257 IP address blocks: 64.93.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:b0:f0:2b:47:c2:f1:35:bd:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29c6a19e-a83c-43ad-8d10-68daeb160033 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=76050a00-dc9d-4b4b-9a11-a4c9123f82f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fa:8b:20:00:82:55:be:54:6c:e4:d1:20:f9: 4f:e3:c2:1a:26:76:a7:aa:21:f5:72:0a:55:37:fd: 1f:7c:47:61:af:65:47:36:c0:60:6c:16:de:66:49: 3e:e0:08:d1:18:18:54:07:4e:c0:28:e2:51:a4:39: bb:a3:0a:92:f9:ef:f3:37:b7:b1:81:4e:07:87:c9: 7c:4b:74:0f:68:c7:b2:32:f3:ef:dc:28:10:1a:e5: e7:cc:cf:6b:b4:28:e8:21:69:04:87:e6:bd:4b:3a: 91:d8:eb:fe:18:da:88:5c:48:9e:d9:76:c1:85:d9: 54:5a:73:ec:3e:32:b1:d4:16:37:d1:3d:23:74:b4: 36:13:13:14:15:22:06:42:44:25:cd:2c:83:3b:b9: b8:c9:78:df:0a:00:07:05:d3:63:40:70:5c:b7:0f: 46:f9:06:aa:2d:8e:d4:9a:9b:07:b6:53:c0:ea:4a: 6b:18:22:af:5a:bc:f0:6d:13:82:68:44:c0:59:a2: a7:7d:66:8a:cb:2d:44:d2:98:49:06:19:37:04:c6: e1:66:67:30:a3:ed:a5:75:c2:33:c8:d3:3f:d5:17: 0d:f6:09:71:d2:67:32:74:d5:f4:c1:9b:f9:72:1d: 97:78:57:62:27:72:05:45:97:9b:b2:6b:3c:39:10: f1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:91:C3:8F:F1:25:D9:49:29:68:7A:B5:69:B1:D1:9D:EF:24:59:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/bc33f2eb-1941-30fb-a335-e2b8b6873632.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.crl X509v3 Authority Key Identifier: keyid:45:8B:83:8A:98:13:A0:1F:97:D7:3D:75:9F:15:74:D6:DD:BD:6A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer sbgp-ipAddrBlock: critical IPv4: 64.93.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:39:7a:58:68:0c:0c:bc:fa:36:b3:59:9d:2d:e4:81:67:88: b9:57:c3:7b:4c:5f:cc:89:8a:e4:ba:51:df:52:26:c6:b7:a8: ce:1a:8b:7c:5c:3c:13:8f:fa:6b:1b:a7:ba:ea:02:e3:de:58: 21:f8:9f:a2:89:d8:2e:fc:68:e8:db:9c:bc:e8:1f:14:5c:55: d7:a3:0b:ce:0a:b3:06:c5:0e:ea:7c:1e:16:c3:9e:18:cd:81: 87:28:62:1e:85:a7:17:56:ec:12:26:c8:15:e1:95:84:e6:14: 97:c0:de:85:32:ba:3a:2a:13:e7:2f:22:f0:34:9c:fb:57:94: 9b:9d:94:75:ee:a1:01:30:b2:a1:a5:8f:34:be:e8:f6:e5:74: f5:fd:98:42:75:2d:3b:e4:c7:b8:f1:b2:f4:ea:e6:5c:7a:71: a3:5d:7a:e6:f4:10:3a:19:60:09:d4:ee:90:cb:d9:3d:0f:ef: 87:2c:43:36:aa:6a:ea:a4:bb:a5:c3:8f:43:4e:db:f4:10:67: 0e:3b:b4:7d:3a:9b:4d:70:42:9b:11:03:50:96:bd:a1:f3:dd: 4b:da:b1:42:8d:fb:7e:72:e5:fd:f5:40:24:ec:9f:e0:ed:1a: 8b:db:d0:b2:8d:33:76:bd:46:48:a8:a9:a9:93:b6:55:e1:7b: 8b:57:5f:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHabDwK0fC8TW9eoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjljNmExOWUtYTgzYy00M2FkLThkMTAtNjhkYWViMTYw MDMzMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk NzYwNTBhMDAtZGM5ZC00YjRiLTlhMTEtYTRjOTEyM2Y4MmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/qLIACCVb5UbOTRIPlP48IaJnanqiH1cgpV N/0ffEdhr2VHNsBgbBbeZkk+4AjRGBhUB07AKOJRpDm7owqS+e/zN7exgU4Hh8l8 S3QPaMeyMvPv3CgQGuXnzM9rtCjoIWkEh+a9SzqR2Ov+GNqIXEie2XbBhdlUWnPs PjKx1BY30T0jdLQ2ExMUFSIGQkQlzSyDO7m4yXjfCgAHBdNjQHBctw9G+QaqLY7U mpsHtlPA6kprGCKvWrzwbROCaETAWaKnfWaKyy1E0phJBhk3BMbhZmcwo+2ldcIz yNM/1RcN9glx0mcydNX0wZv5ch2XeFdiJ3IFRZebsms8ORDxFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6Rw4/xJdlJKWh6tWmx0Z3vJFlOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yOWM2 YTE5ZS1hODNjLTQzYWQtOGQxMC02OGRhZWIxNjAwMzMvYmMzM2YyZWItMTk0MS0z MGZiLWEzMzUtZTJiOGI2ODczNjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjljNmExOWUtYTgzYy00M2FkLThk MTAtNjhkYWViMTYwMDMzLzI5YzZhMTllLWE4M2MtNDNhZC04ZDEwLTY4ZGFlYjE2 MDAzMy5jcmwwHwYDVR0jBBgwFoAURYuDipgToB+X1z11nxV01t29atEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yOWM2YTE5ZS1hODNjLTQzYWQtOGQxMC02OGRh ZWIxNjAwMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQF1UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFw5elhoDAy8+jazWZ0t5IFniLlXw3tMX8yJiuS6Ud9SJsa3qM4ai3xc PBOP+msbp7rqAuPeWCH4n6KJ2C78aOjbnLzoHxRcVdejC84KswbFDup8HhbDnhjN gYcoYh6FpxdW7BImyBXhlYTmFJfA3oUyujoqE+cvIvA0nPtXlJudlHXuoQEwsqGl jzS+6PbldPX9mEJ1LTvkx7jxsvTq5lx6caNdeub0EDoZYAnU7pDL2T0P74csQzaq auqku6XDj0NO2/QQZw47tH06m01wQpsRA1CWvaHz3UvasUKN+35y5f31QCTsn+Dt Govb0LKNM3a9RkioqamTtlXhe4tXX4k= -----END CERTIFICATE-----Generated at Mon May 5 07:00:43 2025 by rpki-client