$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/d0192a55-432f-3594-81cd-d16e7579e4e8.roa File: d0192a55-432f-3594-81cd-d16e7579e4e8.roa (raw, json) Hash identifier: ZaUq4Zorm3zNTOPBKbTYmfzkw0xp5KkHPwrodXsOjns= Subject key identifier: 3C:B3:F3:51:F8:03:8E:CE:DF:F8:1A:E2:09:1A:85:51:B9:4F:B0:E2 Certificate issuer: /CN=378928e8-c134-40aa-9858-3838053cbbe9 Certificate serial: 010D0C9F432858494733E65E97B1A3C00D550430 Authority key identifier: 05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/d0192a55-432f-3594-81cd-d16e7579e4e8.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 12261 IP address blocks: 64.253.208.0/22 maxlen: 22 64.253.212.0/22 maxlen: 22 64.253.216.0/22 maxlen: 23 64.253.220.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:e6:5e:97:b1:a3:c0:0d:55:04:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=378928e8-c134-40aa-9858-3838053cbbe9 Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=96bf85ce-e868-40d7-8c95-7fe477cd64f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:91:68:58:01:ea:c3:3f:34:f7:29:31:bd:48: bd:32:b2:03:7d:ee:41:71:f0:ce:cd:67:98:d4:a7: 9c:e5:36:06:c3:5b:a6:76:65:ba:dc:d3:77:59:9c: bc:1b:e6:c3:da:36:f0:34:94:0b:9a:b2:22:b3:60: f0:e8:cb:36:24:42:d8:6f:3d:51:d5:fc:7b:55:c5: ba:4d:d7:69:62:17:0b:7a:35:98:7a:4c:af:b8:06: 6e:d1:66:96:da:81:a0:86:12:3c:57:88:c5:ae:14: cb:c4:24:c7:ba:72:27:45:74:98:7a:88:3e:3d:18: 54:ee:40:07:16:d8:be:86:9c:28:48:c1:b2:d0:97: 34:88:38:9c:35:e2:f2:93:21:ef:77:4c:70:61:c1: a1:f3:0b:da:89:15:1f:c1:17:65:16:4d:ca:99:0e: a4:51:54:84:08:db:d8:13:ed:cb:e2:72:9d:8e:9f: d2:d2:db:55:c7:81:6b:77:3b:e5:f7:ef:c2:c8:a6: de:c4:22:e5:61:5f:cc:a7:47:71:b4:24:b2:5f:19: 44:d1:4a:84:4a:d3:a5:b4:87:dd:83:e2:f2:19:41: 22:93:ae:4a:01:ba:03:ca:64:40:2c:1b:48:ca:05: 65:93:f4:79:2c:87:62:80:6e:54:52:db:d9:ec:c8: 4f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B3:F3:51:F8:03:8E:CE:DF:F8:1A:E2:09:1A:85:51:B9:4F:B0:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/d0192a55-432f-3594-81cd-d16e7579e4e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl X509v3 Authority Key Identifier: keyid:05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer sbgp-ipAddrBlock: critical IPv4: 64.253.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:5d:ee:a5:a7:58:3f:62:18:7b:09:8c:b0:c8:fc:f4:ac:39: a3:c3:fd:22:a1:7d:52:b8:54:db:d5:1b:d8:3d:4d:5b:26:13: 75:12:a0:47:3a:bf:7c:2b:e8:56:a8:e0:d4:62:2b:5b:b6:3a: a4:e3:cf:20:c0:bb:d5:78:26:4e:fd:f7:d3:88:42:4c:f9:1d: ea:4f:1f:43:71:e9:3b:b2:13:8b:93:38:c4:4a:db:06:2b:d6: 3f:a5:8a:29:6d:64:98:b5:41:a9:8c:00:09:55:83:ce:b7:3c: 44:1b:21:98:c8:2d:b2:5e:de:ab:b6:ca:ad:88:3f:26:20:57: 75:1a:e3:b8:3b:a6:59:58:c5:54:74:5c:8d:c5:0d:1a:39:b6: 37:af:7b:b7:57:4e:34:5e:29:06:1e:2f:be:d3:4f:a1:94:24: a2:a0:fe:2e:56:61:a3:31:12:34:0e:5f:ae:59:04:9c:79:d0: 79:83:c5:77:b4:93:d9:cb:02:1f:b2:38:e5:df:46:de:57:0d: 83:19:d2:d9:46:f3:8f:be:95:ec:00:93:f8:a9:91:6e:d2:0f: 68:d8:7c:a1:24:8e:6b:a1:56:d6:68:ab:21:39:b5:13:f8:a9: fb:ad:9a:a2:25:15:10:66:1d:8a:60:f4:77:6d:d1:95:eb:93: 4a:b4:af:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+Zel7GjwA1VBDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc4OTI4ZTgtYzEzNC00MGFhLTk4NTgtMzgzODA1M2Ni YmU5MB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk OTZiZjg1Y2UtZTg2OC00MGQ3LThjOTUtN2ZlNDc3Y2Q2NGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpFoWAHqwz809ykxvUi9MrIDfe5BcfDOzWeY 1Kec5TYGw1umdmW63NN3WZy8G+bD2jbwNJQLmrIis2Dw6Ms2JELYbz1R1fx7VcW6 TddpYhcLejWYekyvuAZu0WaW2oGghhI8V4jFrhTLxCTHunInRXSYeog+PRhU7kAH Fti+hpwoSMGy0Jc0iDicNeLykyHvd0xwYcGh8wvaiRUfwRdlFk3KmQ6kUVSECNvY E+3L4nKdjp/S0ttVx4Frdzvl9+/CyKbexCLlYV/Mp0dxtCSyXxlE0UqEStOltIfd g+LyGUEik65KAboDymRALBtIygVlk/R5LIdigG5UUtvZ7MhPkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyz81H4A47O3/ga4gkahVG5T7DiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNzg5 MjhlOC1jMTM0LTQwYWEtOTg1OC0zODM4MDUzY2JiZTkvZDAxOTJhNTUtNDMyZi0z NTk0LTgxY2QtZDE2ZTc1NzllNGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzc4OTI4ZTgtYzEzNC00MGFhLTk4 NTgtMzgzODA1M2NiYmU5LzM3ODkyOGU4LWMxMzQtNDBhYS05ODU4LTM4MzgwNTNj YmJlOS5jcmwwHwYDVR0jBBgwFoAUBYTnTjebSl6FC+Qck2G4ZCYVGJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNzg5MjhlOC1jMTM0LTQwYWEtOTg1OC0zODM4 MDUzY2JiZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQP3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVd7qWnWD9iGHsJjLDI/PSsOaPD/SKhfVK4VNvVG9g9TVsmE3USoEc6 v3wr6Fao4NRiK1u2OqTjzyDAu9V4Jk7999OIQkz5HepPH0Nx6TuyE4uTOMRK2wYr 1j+liiltZJi1QamMAAlVg863PEQbIZjILbJe3qu2yq2IPyYgV3Ua47g7pllYxVR0 XI3FDRo5tjeve7dXTjReKQYeL77TT6GUJKKg/i5WYaMxEjQOX65ZBJx50HmDxXe0 k9nLAh+yOOXfRt5XDYMZ0tlG84++lewAk/ipkW7SD2jYfKEkjmuhVtZoqyE5tRP4 qfutmqIlFRBmHYpg9Hdt0ZXrk0q0rxw= -----END CERTIFICATE-----Generated at Tue Apr 29 13:35:48 2025 by rpki-client