$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/6d76fa3f-7cbd-3821-aa27-07a71ccac26b.roa File: 6d76fa3f-7cbd-3821-aa27-07a71ccac26b.roa (raw, json) Hash identifier: VltLrqCvjlaJ8zSyb8L+fcWrULCxMNZZ2uh03msryV4= Subject key identifier: 37:7E:D1:72:6F:A1:D8:21:88:C7:22:D3:FF:FC:40:99:99:CA:49:D5 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F432858491AA6CF2501C7B8F810E07380 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/6d76fa3f-7cbd-3821-aa27-07a71ccac26b.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 394708 IP address blocks: 209.173.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:cf:25:01:c7:b8:f8:10:e0:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=675a0e2d-6009-4861-a04f-3c5630ae16ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e3:9b:b4:9e:bc:a1:25:d6:0a:10:03:fa:a4: e2:37:55:5e:d7:5e:61:c2:41:b1:de:0b:a6:09:38: b9:b5:97:77:10:cb:a6:e5:98:d0:4e:4c:29:a2:0e: 46:b9:4c:c6:af:92:e0:81:8e:3e:e1:18:53:5a:f7: a2:00:a7:4a:33:2a:93:e8:de:a3:42:2a:c9:72:af: a4:59:a9:99:48:ae:82:5b:57:0b:b2:0e:e3:0d:62: 38:3d:80:c3:dc:85:43:18:85:b6:e0:d4:d6:9a:50: 01:89:4e:01:fb:a4:42:6c:26:0b:04:57:d7:a8:e5: ab:3d:4b:30:da:ba:7a:45:cf:87:17:58:a5:84:92: bf:96:75:b8:cc:f5:d1:36:1c:26:59:5d:dd:2e:b3: d7:77:89:12:76:10:95:c9:39:b3:d4:0e:f3:0f:c4: 4f:c2:35:c9:a4:66:4f:51:28:10:4e:fb:cc:b7:60: 06:aa:6f:e5:b6:44:90:57:cb:81:11:a6:da:e4:84: 6e:66:59:bb:42:81:27:e7:60:4e:3f:ae:9d:aa:88: ed:fe:5d:b7:30:88:5b:6f:bd:85:f5:23:50:fa:c7: b0:cd:01:70:4d:5c:93:44:8d:39:bf:78:c3:fc:49: f9:e0:4a:d6:21:8b:5e:2b:57:6d:87:5c:19:93:68: 31:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7E:D1:72:6F:A1:D8:21:88:C7:22:D3:FF:FC:40:99:99:CA:49:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/6d76fa3f-7cbd-3821-aa27-07a71ccac26b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 209.173.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:18:2e:08:e3:9c:5a:23:46:00:bb:a4:9a:13:94:eb:08:cc: ed:8f:b1:9f:04:07:2d:53:53:a0:75:c6:ad:4d:8e:f3:53:a1: f0:ca:49:d3:41:56:c0:13:22:12:6a:15:ae:d2:e0:f6:60:2b: 1e:a1:ce:56:23:1d:ae:88:79:4c:d1:cf:45:e6:20:68:f3:ea: cf:e6:d7:60:e8:90:e7:cf:94:35:51:a3:39:8a:db:cb:79:94: 88:58:d8:db:53:cf:ec:99:51:4c:bb:ac:18:f2:ae:40:40:53: f5:f8:64:b8:79:05:14:22:8c:e4:36:4d:2d:d7:0e:71:b5:4f: f6:a6:a4:2e:e7:ce:76:d0:c8:37:4c:78:af:17:ad:9b:16:17: fd:ff:3a:4c:34:cc:50:44:a9:1c:cf:55:65:61:7f:88:45:06: 0f:9f:49:cd:ad:97:e5:de:83:b3:19:30:bc:76:b3:41:41:b4: 1b:32:20:02:ae:ad:bf:b9:52:48:53:bc:c5:55:0f:1e:4a:6d: 38:9c:b5:0d:80:16:e5:19:ba:d5:8c:ee:8a:26:3c:da:46:8e: 20:da:2a:7e:3c:d5:bb:6f:67:7b:65:73:99:a3:b9:0e:78:76: 35:15:31:b3:51:98:34:b7:5e:aa:03:e6:f6:87:54:c2:96:e0: e3:01:f1:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaps8lAce4+BDgc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk Njc1YTBlMmQtNjAwOS00ODYxLWEwNGYtM2M1NjMwYWUxNmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eObtJ68oSXWChAD+qTiN1Ve115hwkGx3gum CTi5tZd3EMum5ZjQTkwpog5GuUzGr5LggY4+4RhTWveiAKdKMyqT6N6jQirJcq+k WamZSK6CW1cLsg7jDWI4PYDD3IVDGIW24NTWmlABiU4B+6RCbCYLBFfXqOWrPUsw 2rp6Rc+HF1ilhJK/lnW4zPXRNhwmWV3dLrPXd4kSdhCVyTmz1A7zD8RPwjXJpGZP USgQTvvMt2AGqm/ltkSQV8uBEaba5IRuZlm7QoEn52BOP66dqojt/l23MIhbb72F 9SNQ+sewzQFwTVyTRI05v3jD/En54ErWIYteK1dth1wZk2gx5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDd+0XJvodghiMci0//8QJmZyknVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvNmQ3NmZhM2YtN2NiZC0z ODIxLWFhMjctMDdhNzFjY2FjMjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0a28MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYYLgjjnFojRgC7pJoTlOsIzO2PsZ8EBy1TU6B1xq1NjvNTofDKSdNB VsATIhJqFa7S4PZgKx6hzlYjHa6IeUzRz0XmIGjz6s/m12DokOfPlDVRozmK28t5 lIhY2NtTz+yZUUy7rBjyrkBAU/X4ZLh5BRQijOQ2TS3XDnG1T/ampC7nznbQyDdM eK8XrZsWF/3/Okw0zFBEqRzPVWVhf4hFBg+fSc2tl+Xeg7MZMLx2s0FBtBsyIAKu rb+5UkhTvMVVDx5KbTictQ2AFuUZutWM7oomPNpGjiDaKn481btvZ3tlc5mjuQ54 djUVMbNRmDS3XqoD5vaHVMKW4OMB8a8= -----END CERTIFICATE-----Generated at Sun Apr 27 22:10:46 2025 by rpki-client