$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa File: 8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa (raw, json) Hash identifier: +bleGbdKoE5RZgPAK4p0xRfnf5I0XQdpaRTZpDq9Lqw= Subject key identifier: E5:83:F6:39:FD:F5:08:9F:2C:0A:80:DC:01:A8:BB:E0:77:BC:18:40 Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F43285849BF3F664F206627BD440826C0 Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 16509 IP address blocks: 64.29.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:66:4f:20:66:27:bd:44:08:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=de498701-ec91-4f3e-acfd-e8fe5a7744f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7a:68:f2:b6:03:90:a0:3d:41:fb:e1:0d:7b: 2b:bc:e1:c2:cc:5e:da:c6:32:04:84:e9:6d:02:7c: 7c:b8:2d:e1:cf:eb:4c:d6:1f:17:a0:b0:af:6c:05: 25:c8:b3:88:1c:32:22:10:6b:e9:3b:87:81:29:62: 37:42:3f:92:e3:fc:70:39:a1:e3:a8:aa:3c:e1:73: 2d:96:92:c7:59:cb:7a:22:74:86:f9:bf:3d:05:5a: c1:cb:57:b6:77:5c:ff:8f:b3:7a:5c:7c:b9:fd:f9: 6e:f7:0e:33:0a:01:86:ab:60:11:6a:e4:07:04:40: 29:21:f8:96:34:0f:30:5d:bc:ac:db:86:59:85:45: 43:aa:c6:a5:db:38:97:d5:37:44:1b:45:a7:e8:f8: 40:d6:0d:97:c5:52:4c:55:de:20:75:87:83:88:b4: 97:40:56:18:ff:ae:35:76:ac:3d:c3:a8:05:9b:be: e7:7b:86:ca:d9:29:f7:16:0a:1f:14:89:09:59:fb: 43:0a:f8:36:9d:95:5d:e6:a7:6b:e3:86:01:dc:b9: b3:42:7d:84:4e:7e:26:4d:90:0c:ac:9c:09:e0:09: 80:b1:fc:eb:56:fc:e8:72:35:91:10:fc:81:3b:f1: 03:a1:50:04:13:4a:00:26:47:15:42:ac:b6:73:3e: f4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:83:F6:39:FD:F5:08:9F:2C:0A:80:DC:01:A8:BB:E0:77:BC:18:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv4: 64.29.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:26:cc:99:be:2d:04:75:70:ed:da:ce:b7:49:c4:d3:0d:6d: 2c:15:97:bc:b7:2e:3d:c5:55:c5:3c:a4:31:3e:39:80:86:82: 9a:dd:50:fb:d2:c6:38:06:11:82:e8:d8:5a:84:92:d8:95:0d: e8:e8:16:05:52:2f:91:c2:ef:1a:4d:50:fc:3a:ce:2f:9a:a5: 20:9a:68:af:5f:ce:05:0a:d0:23:11:dc:15:24:07:f7:b0:8e: b4:7f:44:3d:10:70:16:d4:bc:01:14:62:03:50:db:73:cd:df: ae:c8:e0:2d:ce:82:83:3f:01:a0:36:15:75:3b:fe:3a:45:98: 26:87:60:ee:8d:5c:a9:ff:7b:81:95:b4:d2:65:db:50:1a:66: d2:8c:c1:19:09:ba:0a:ac:65:a9:65:e4:8b:dc:d8:fc:9e:be: 42:95:89:18:ca:32:2d:31:dc:63:da:71:bd:ef:06:ce:5b:3e: 33:41:e1:f4:0f:6e:ef:04:1f:e0:dc:f0:0f:8a:ca:01:f8:c3: 51:dd:34:f1:9f:36:a4:ae:3a:04:04:84:ca:84:b4:b7:9f:cf: 64:47:85:eb:a0:d0:d9:15:14:10:b3:da:cb:22:d8:3b:d8:3e: 58:13:30:e4:37:47:5c:1d:89:55:c4:c4:0b:fa:0c:b3:45:3e: 30:7a:d2:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P2ZPIGYnvUQIJsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZGU0OTg3MDEtZWM5MS00ZjNlLWFjZmQtZThmZTVhNzc0NGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXpo8rYDkKA9QfvhDXsrvOHCzF7axjIEhOlt Anx8uC3hz+tM1h8XoLCvbAUlyLOIHDIiEGvpO4eBKWI3Qj+S4/xwOaHjqKo84XMt lpLHWct6InSG+b89BVrBy1e2d1z/j7N6XHy5/flu9w4zCgGGq2ARauQHBEApIfiW NA8wXbys24ZZhUVDqsal2ziX1TdEG0Wn6PhA1g2XxVJMVd4gdYeDiLSXQFYY/641 dqw9w6gFm77ne4bK2Sn3FgofFIkJWftDCvg2nZVd5qdr44YB3LmzQn2ETn4mTZAM rJwJ4AmAsfzrVvzocjWREPyBO/EDoVAEE0oAJkcVQqy2cz70DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWD9jn99QifLAqA3AGou+B3vBhAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvOGE1YjhiMzgtZDRiNy0z YjQ4LWE4YWMtZWYyOTM4YjExOTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQB0RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkmzJm+LQR1cO3azrdJxNMNbSwVl7y3Lj3FVcU8pDE+OYCGgprdUPvS xjgGEYLo2FqEktiVDejoFgVSL5HC7xpNUPw6zi+apSCaaK9fzgUK0CMR3BUkB/ew jrR/RD0QcBbUvAEUYgNQ23PN367I4C3OgoM/AaA2FXU7/jpFmCaHYO6NXKn/e4GV tNJl21AaZtKMwRkJugqsZall5Ivc2PyevkKViRjKMi0x3GPacb3vBs5bPjNB4fQP bu8EH+Dc8A+KygH4w1HdNPGfNqSuOgQEhMqEtLefz2RHheug0NkVFBCz2ssi2DvY PlgTMOQ3R1wdiVXExAv6DLNFPjB60is= -----END CERTIFICATE-----Generated at Sat May 10 05:19:39 2025 by rpki-client