$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/726d2601-d90e-3525-b3c0-20a59786df1f.roa File: 726d2601-d90e-3525-b3c0-20a59786df1f.roa (raw, json) Hash identifier: BXhrK9r9z7PoJnF8BWyV9zTIR7efIBRFY7xC5MzWRAg= Subject key identifier: DD:E7:54:13:7B:92:37:02:D6:A8:43:16:19:74:0F:0E:D5:D2:31:04 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F432858491AA6C6D431937027E7159B80 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/726d2601-d90e-3525-b3c0-20a59786df1f.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 394708 IP address blocks: 216.255.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:c6:d4:31:93:70:27:e7:15:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=35d05077-9dba-4ab1-b90a-25c294b57017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f7:37:3e:a6:7a:14:44:ab:c2:df:d8:bc:05: 26:63:b2:25:52:25:37:25:4d:a2:f9:95:23:83:ac: 12:ab:96:2d:b8:e4:21:c9:d0:ad:b1:f5:d0:b7:fe: b6:91:3f:88:3a:5f:f6:75:34:2e:42:d7:b6:6c:db: c9:57:7d:1b:80:75:b7:04:18:b4:56:4b:64:41:39: 41:de:9f:68:2d:83:e0:d7:4b:18:4d:74:cc:93:0f: fa:c9:32:e5:cd:30:1f:5c:08:86:51:cb:1f:4a:42: 5d:24:aa:a9:fb:29:66:41:13:4b:b5:b9:03:cb:c6: 5c:94:47:e5:3d:d6:20:8f:2c:93:59:bd:c6:77:99: 78:28:a7:8b:9f:51:76:aa:50:33:06:ee:ee:85:df: 5c:a2:d4:87:8a:46:56:a2:5d:18:3e:bf:53:da:0a: 6d:08:3f:23:23:09:43:8c:69:21:e1:9d:18:11:54: a5:ff:d0:ac:3c:2b:84:3e:2a:c9:bf:3d:cf:52:f2: a4:23:a1:da:07:20:e9:4b:b0:a4:50:b6:80:12:e3: 3d:39:40:92:f5:d6:1c:d2:d9:03:54:b6:07:b9:09: 3a:8c:5b:60:9b:5e:a4:8c:a3:78:f8:2a:fb:53:25: 2e:2b:3f:3e:fd:d5:5d:71:71:20:91:96:23:4d:f6: 1e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E7:54:13:7B:92:37:02:D6:A8:43:16:19:74:0F:0E:D5:D2:31:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/726d2601-d90e-3525-b3c0-20a59786df1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 216.255.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:50:50:a0:dc:c5:36:d9:16:12:8a:89:95:0e:47:1b:b4:ed: 42:4a:52:f4:5d:26:e7:97:88:d7:ba:e1:c2:80:b4:91:e5:18: e5:35:8f:94:93:16:17:a1:72:2c:20:c1:59:91:69:fa:4e:07: 6c:3d:64:14:0c:28:e9:35:43:f1:15:8a:52:01:17:2c:91:05: e4:18:47:c8:6e:37:4f:3d:12:58:23:80:3e:da:36:bc:87:8b: c7:ee:2c:ef:f3:da:10:02:d9:e7:df:c6:5d:6d:08:71:28:81: e7:b2:c1:1b:4e:ba:e0:bd:aa:50:0d:5a:79:09:8e:ab:8d:19: 93:17:f7:96:78:a2:23:eb:89:4f:20:9d:73:dc:e8:71:31:6c: 8f:57:c3:95:2f:56:a9:40:d9:fe:3e:e7:a2:46:1a:7a:c9:d7: e4:f9:b3:20:a2:8a:18:8a:88:dd:3a:4f:57:c3:3d:84:e4:75: bf:b4:e4:11:39:99:84:86:8f:38:11:c2:b5:7f:88:be:db:82: 13:ce:8c:70:6e:06:a8:e0:b9:17:70:dd:8c:4b:d5:fc:94:46: 61:77:1e:4a:b3:54:79:86:20:61:9d:10:d3:43:d7:b9:2c:ad: 99:c0:76:17:b3:82:38:b5:0b:e1:1f:d7:eb:d1:61:74:9e:13: 08:aa:f7:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkapsbUMZNwJ+cVm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk MzVkMDUwNzctOWRiYS00YWIxLWI5MGEtMjVjMjk0YjU3MDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfc3PqZ6FESrwt/YvAUmY7IlUiU3JU2i+ZUj g6wSq5YtuOQhydCtsfXQt/62kT+IOl/2dTQuQte2bNvJV30bgHW3BBi0VktkQTlB 3p9oLYPg10sYTXTMkw/6yTLlzTAfXAiGUcsfSkJdJKqp+ylmQRNLtbkDy8ZclEfl PdYgjyyTWb3Gd5l4KKeLn1F2qlAzBu7uhd9cotSHikZWol0YPr9T2gptCD8jIwlD jGkh4Z0YEVSl/9CsPCuEPirJvz3PUvKkI6HaByDpS7CkULaAEuM9OUCS9dYc0tkD VLYHuQk6jFtgm16kjKN4+Cr7UyUuKz8+/dVdcXEgkZYjTfYeFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3nVBN7kjcC1qhDFhl0Dw7V0jEEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvNzI2ZDI2MDEtZDkwZS0z NTI1LWIzYzAtMjBhNTk3ODZkZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2P8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1QUKDcxTbZFhKKiZUORxu07UJKUvRdJueXiNe64cKAtJHlGOU1j5ST FhehciwgwVmRafpOB2w9ZBQMKOk1Q/EVilIBFyyRBeQYR8huN089ElgjgD7aNryH i8fuLO/z2hAC2effxl1tCHEogeeywRtOuuC9qlANWnkJjquNGZMX95Z4oiPriU8g nXPc6HExbI9Xw5UvVqlA2f4+56JGGnrJ1+T5syCiihiKiN06T1fDPYTkdb+05BE5 mYSGjzgRwrV/iL7bghPOjHBuBqjguRdw3YxL1fyURmF3HkqzVHmGIGGdENND17ks rZnAdhezgji1C+Ef1+vRYXSeEwiq9wA= -----END CERTIFICATE-----Generated at Tue Apr 29 08:38:11 2025 by rpki-client