$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/add0a9ff-c124-381c-9d60-5f74979be3f7.roa File: add0a9ff-c124-381c-9d60-5f74979be3f7.roa (raw, json) Hash identifier: tW43bt3IJwPygMiNJfrYYstE3fUvzgD4AnfiVv1P0pY= Subject key identifier: 5B:C0:16:7A:86:6C:6F:10:3E:EE:BD:C6:24:45:94:C0:8E:B1:98:6E Certificate issuer: /CN=afc2bf64-2cba-4362-8b12-56844da30e4e Certificate serial: 010D0C9F43285848F0C66BECA8C0678CFD935B00 Authority key identifier: 43:5D:5A:CD:27:CD:09:AF:C9:76:63:2C:28:78:AF:73:FA:9F:5F:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/add0a9ff-c124-381c-9d60-5f74979be3f7.roa Signing time: Thu 20 Feb 2025 02:00:40 +0000 ROA not before: Thu 20 Feb 2025 02:00:40 +0000 ROA not after: Wed 21 May 2025 01:00:40 +0000 asID: 14343 IP address blocks: 64.26.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f0:c6:6b:ec:a8:c0:67:8c:fd:93:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc2bf64-2cba-4362-8b12-56844da30e4e Validity Not Before: Feb 20 02:00:40 2025 GMT Not After : May 21 01:00:40 2025 GMT Subject: CN=c6acc0d0-b828-4a05-81e4-d6b4c9b0847f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:64:d7:49:5c:68:c4:8c:fd:f1:01:33:9f:1e: 26:82:e7:7e:9c:04:0a:45:5b:81:4c:20:b1:83:e7: 5d:43:21:ff:4b:73:77:07:9e:4a:1d:ab:58:ad:1b: 62:bb:98:ce:ca:38:7d:2d:b8:47:f4:72:ae:55:82: 10:d8:2d:18:7d:a3:9f:01:cc:7f:14:ae:af:ee:30: 50:c7:44:a1:da:de:f1:ac:4f:bf:e2:cd:b1:3f:61: 81:02:6b:0d:66:9b:04:bf:d9:0e:8c:32:6f:c6:ad: 81:10:48:fd:73:c8:04:bf:da:20:9d:ff:f4:f5:e5: a4:99:75:ed:64:08:5f:fe:15:86:d9:8d:e7:86:bc: a6:84:53:54:eb:ab:e8:a9:28:a2:1e:b9:4f:0f:64: 8b:08:dd:ce:18:43:1f:a0:ff:ad:f6:92:27:2b:22: 7f:66:ae:6d:24:0b:ca:da:10:24:cf:a7:88:d8:45: fa:fe:42:59:bf:18:81:2a:10:99:5d:36:3b:7a:99: 20:52:cf:88:ca:72:04:97:46:66:11:99:7d:6b:75: 64:04:53:9c:51:68:5f:81:21:c9:74:98:c7:63:a9: 90:1e:8f:d1:0b:26:58:ff:cc:11:22:42:01:ea:1e: c0:f9:85:0f:0f:25:97:32:24:af:01:93:b2:52:62: f5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C0:16:7A:86:6C:6F:10:3E:EE:BD:C6:24:45:94:C0:8E:B1:98:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/add0a9ff-c124-381c-9d60-5f74979be3f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.crl X509v3 Authority Key Identifier: keyid:43:5D:5A:CD:27:CD:09:AF:C9:76:63:2C:28:78:AF:73:FA:9F:5F:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e.cer sbgp-ipAddrBlock: critical IPv4: 64.26.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:c5:db:31:de:75:c8:09:51:73:bb:cc:24:af:9d:a3:99:53: fc:1b:ca:ca:f3:ca:7f:90:53:3e:d1:76:01:fb:92:90:44:24: b5:72:e0:18:37:29:fb:71:c2:e0:21:b0:4e:12:8e:76:81:0c: ed:31:59:ca:97:b5:80:e8:52:06:3c:5b:e3:9f:bc:09:79:dd: 45:ba:b2:90:58:6e:9c:5b:fc:f2:ca:41:59:d6:ec:18:98:72: 62:1b:fa:19:44:8d:0d:fb:ba:e3:eb:ea:18:e8:e2:55:0f:ed: af:32:fb:63:e3:cb:dc:de:db:26:09:ff:f0:64:4b:3e:0f:c8: f9:45:c0:81:72:6d:c9:a1:bd:b2:5b:83:be:fc:00:6c:d0:61: c4:49:bf:91:cc:d5:c8:50:74:37:59:9f:eb:05:0a:24:81:41: 22:10:b7:dc:12:4c:0d:ed:70:e9:72:8c:ea:4e:c3:fe:6b:6b: 83:c3:b5:c4:9a:0b:0b:6f:7f:9d:f1:31:b5:e6:4f:11:0e:dd: b8:bb:ce:ac:45:96:12:c9:68:d1:85:dd:43:98:2e:f1:a1:10: 47:5c:8a:17:a6:48:48:45:34:96:9c:47:27:8f:c3:b3:79:6e: 34:cf:68:4e:71:3a:0b:49:b5:7a:74:82:d6:02:f3:b8:f2:06: 44:c5:e7:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjwxmvsqMBnjP2TWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjMmJmNjQtMmNiYS00MzYyLThiMTItNTY4NDRkYTMw ZTRlMB4XDTI1MDIyMDAyMDA0MFoXDTI1MDUyMTAxMDA0MFowLzEtMCsGA1UEAxMk YzZhY2MwZDAtYjgyOC00YTA1LTgxZTQtZDZiNGM5YjA4NDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmTXSVxoxIz98QEznx4mgud+nAQKRVuBTCCx g+ddQyH/S3N3B55KHatYrRtiu5jOyjh9LbhH9HKuVYIQ2C0YfaOfAcx/FK6v7jBQ x0Sh2t7xrE+/4s2xP2GBAmsNZpsEv9kOjDJvxq2BEEj9c8gEv9ognf/09eWkmXXt ZAhf/hWG2Y3nhrymhFNU66voqSiiHrlPD2SLCN3OGEMfoP+t9pInKyJ/Zq5tJAvK 2hAkz6eI2EX6/kJZvxiBKhCZXTY7epkgUs+IynIEl0ZmEZl9a3VkBFOcUWhfgSHJ dJjHY6mQHo/RCyZY/8wRIkIB6h7A+YUPDyWXMiSvAZOyUmL1yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvAFnqGbG8QPu69xiRFlMCOsZhuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZmMy YmY2NC0yY2JhLTQzNjItOGIxMi01Njg0NGRhMzBlNGUvYWRkMGE5ZmYtYzEyNC0z ODFjLTlkNjAtNWY3NDk3OWJlM2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWZjMmJmNjQtMmNiYS00MzYyLThi MTItNTY4NDRkYTMwZTRlL2FmYzJiZjY0LTJjYmEtNDM2Mi04YjEyLTU2ODQ0ZGEz MGU0ZS5jcmwwHwYDVR0jBBgwFoAUQ11azSfNCa/JdmMsKHivc/qfX0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZmMyYmY2NC0yY2JhLTQzNjItOGIxMi01Njg0 NGRhMzBlNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBrkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPF2zHedcgJUXO7zCSvnaOZU/wbysrzyn+QUz7RdgH7kpBEJLVy4Bg3 KftxwuAhsE4SjnaBDO0xWcqXtYDoUgY8W+OfvAl53UW6spBYbpxb/PLKQVnW7BiY cmIb+hlEjQ37uuPr6hjo4lUP7a8y+2Pjy9ze2yYJ//BkSz4PyPlFwIFybcmhvbJb g778AGzQYcRJv5HM1chQdDdZn+sFCiSBQSIQt9wSTA3tcOlyjOpOw/5ra4PDtcSa Cwtvf53xMbXmTxEO3bi7zqxFlhLJaNGF3UOYLvGhEEdcihemSEhFNJacRyePw7N5 bjTPaE5xOgtJtXp0gtYC87jyBkTF5wI= -----END CERTIFICATE-----Generated at Fri May 9 17:57:12 2025 by rpki-client