$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8618e32f-aaad-326d-bc28-9f5a3dfa0916.roa File: 8618e32f-aaad-326d-bc28-9f5a3dfa0916.roa (raw, json) Hash identifier: gDBQt1K3/OHbMcx+oF2lWzpFx87KJ2EJq1gcpja3BoM= Subject key identifier: E0:A8:CD:1D:7F:1B:F0:3A:20:F0:74:B5:55:11:A7:AD:6D:90:04:9B Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584981D458A96409D2E917F2EDC0 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8618e32f-aaad-326d-bc28-9f5a3dfa0916.roa Signing time: Sun 13 Apr 2025 01:00:44 +0000 ROA not before: Sun 13 Apr 2025 01:00:44 +0000 ROA not after: Sat 12 Jul 2025 01:00:44 +0000 asID: 13768 IP address blocks: 65.39.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:d4:58:a9:64:09:d2:e9:17:f2:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Apr 13 01:00:44 2025 GMT Not After : Jul 12 01:00:44 2025 GMT Subject: CN=4d0a8fc7-e64e-452f-b576-5e39070ac320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:75:a9:ae:57:29:cf:16:d5:71:b5:51:d5:e3: 18:d1:ce:ad:c3:9b:84:b9:39:25:42:6e:19:d5:bb: 5b:80:e6:39:32:ff:1c:b4:bf:fd:41:1a:af:49:a7: ea:2c:0e:5c:3b:ff:ff:00:6b:39:93:ef:78:02:06: c5:67:cc:9c:51:69:1e:6b:e6:86:1f:aa:c4:58:5f: f4:99:be:7c:86:c2:52:03:c3:9e:9a:e5:5a:17:8f: fb:15:b1:92:5e:06:8e:ae:81:a2:0e:c3:53:d8:af: dd:64:7a:1a:0a:0e:78:b6:3b:7b:58:f8:49:35:e6: 6a:9c:2a:38:95:bf:34:a2:af:6d:00:94:0f:24:c3: c2:51:dd:d3:8d:8f:59:45:72:64:6c:43:07:41:45: 1b:42:3d:cd:8c:24:ea:dd:4f:39:78:9e:0e:92:73: 33:97:a3:f5:5d:0c:23:8d:45:a3:c3:6a:d5:60:ef: 8d:ba:42:f7:3f:f3:e8:10:08:24:d1:03:c2:26:76: 10:f5:87:a1:f8:ca:c7:00:85:16:50:2f:af:ff:60: 39:5a:89:6b:8c:50:c9:2e:e8:f5:8e:d4:4d:e1:5b: f2:55:dd:60:71:9a:1a:8a:f1:41:58:71:7e:fc:4b: 37:8b:04:84:a1:6b:af:40:14:05:62:2b:f2:85:0a: 8b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A8:CD:1D:7F:1B:F0:3A:20:F0:74:B5:55:11:A7:AD:6D:90:04:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8618e32f-aaad-326d-bc28-9f5a3dfa0916.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 65.39.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:4b:a7:04:39:86:a5:dc:c5:a3:55:bb:c1:d0:99:d0:1f:9b: ac:cc:dd:4f:dd:15:a1:bd:a0:91:80:b8:57:fc:f1:68:8e:d3: ac:ba:dd:5b:12:6f:b2:3e:2c:19:c4:bc:ef:50:48:60:b5:94: e4:1a:17:43:ec:af:84:22:23:c0:45:b7:1e:f0:52:aa:f5:36: c0:b4:a1:8a:29:1b:21:d8:e1:7c:37:30:94:b0:a9:1d:01:9b: a1:71:2e:ab:f9:b9:e5:0c:ae:95:56:45:ba:aa:ad:bc:c0:94: 77:3a:aa:8e:27:0c:97:e9:d1:af:0e:31:00:21:8b:c7:97:a1: 68:0a:69:6b:19:83:29:2d:68:01:93:12:05:17:9d:13:83:e1: cf:db:2c:ee:df:87:d7:fb:51:c6:c9:ed:dc:94:22:4c:cc:97: 7e:e0:5f:30:65:e8:3b:d7:38:64:9b:e8:4c:07:98:1d:32:ae: ef:49:ac:75:dc:6a:6a:97:98:99:f7:dc:2a:04:f8:d2:74:69: b1:92:65:45:da:ea:b5:64:8b:6f:65:89:bf:2a:c6:5c:0b:0f: 54:37:21:3e:9c:c5:c6:25:9d:07:48:d7:6d:5f:ee:6c:a6:d3: 1b:03:96:cb:55:0c:16:a9:2f:26:eb:0e:a1:50:45:88:07:4c: 69:34:fb:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmB1FipZAnS6Rfy7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk NGQwYThmYzctZTY0ZS00NTJmLWI1NzYtNWUzOTA3MGFjMzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXWprlcpzxbVcbVR1eMY0c6tw5uEuTklQm4Z 1btbgOY5Mv8ctL/9QRqvSafqLA5cO///AGs5k+94AgbFZ8ycUWkea+aGH6rEWF/0 mb58hsJSA8OemuVaF4/7FbGSXgaOroGiDsNT2K/dZHoaCg54tjt7WPhJNeZqnCo4 lb80oq9tAJQPJMPCUd3TjY9ZRXJkbEMHQUUbQj3NjCTq3U85eJ4OknMzl6P1XQwj jUWjw2rVYO+NukL3P/PoEAgk0QPCJnYQ9Yeh+MrHAIUWUC+v/2A5WolrjFDJLuj1 jtRN4VvyVd1gcZoaivFBWHF+/Es3iwSEoWuvQBQFYivyhQqLfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCozR1/G/A6IPB0tVURp61tkASbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvODYxOGUzMmYtYWFhZC0z MjZkLWJjMjgtOWY1YTNkZmEwOTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQSfAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtLpwQ5hqXcxaNVu8HQmdAfm6zM3U/dFaG9oJGAuFf88WiO06y63VsS b7I+LBnEvO9QSGC1lOQaF0Psr4QiI8BFtx7wUqr1NsC0oYopGyHY4Xw3MJSwqR0B m6FxLqv5ueUMrpVWRbqqrbzAlHc6qo4nDJfp0a8OMQAhi8eXoWgKaWsZgyktaAGT EgUXnROD4c/bLO7fh9f7UcbJ7dyUIkzMl37gXzBl6DvXOGSb6EwHmB0yru9JrHXc amqXmJn33CoE+NJ0abGSZUXa6rVki29lib8qxlwLD1Q3IT6cxcYlnQdI121f7mym 0xsDlstVDBapLybrDqFQRYgHTGk0+24= -----END CERTIFICATE-----Generated at Sun Apr 27 16:29:56 2025 by rpki-client