$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060/da8a4bf6-d3c9-3ad3-a825-0519a8133130.roa File: da8a4bf6-d3c9-3ad3-a825-0519a8133130.roa (raw, json) Hash identifier: SEkQxd7o3l2mXlbPvrJZXlV4Mp+b3TR97yiNpPIBf0k= Subject key identifier: 03:71:88:39:C5:24:24:8B:59:51:B7:18:BC:40:5A:51:40:50:CB:58 Certificate issuer: /CN=3b70bdb6-9776-4d39-8f28-b4a225eb2060 Certificate serial: 010D0C9F43285849998F3CB68B20F73DDC89CC00 Authority key identifier: E6:26:AE:76:3C:3B:91:4E:3E:1D:46:9D:BB:AD:32:FD:B3:08:3E:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060/da8a4bf6-d3c9-3ad3-a825-0519a8133130.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 398406 IP address blocks: 216.250.226.0/23 maxlen: 23 216.250.226.0/24 maxlen: 24 216.250.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060/3b70bdb6-9776-4d39-8f28-b4a225eb2060.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060/3b70bdb6-9776-4d39-8f28-b4a225eb2060.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:3c:b6:8b:20:f7:3d:dc:89:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b70bdb6-9776-4d39-8f28-b4a225eb2060 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=9788a41c-4183-417b-8913-2e38d599e09d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b9:d0:25:18:57:40:47:85:54:1b:c5:2e:7e: fe:b3:72:49:1c:5c:c1:0c:4f:07:ce:9b:bf:60:31: 9e:66:dc:27:6a:ca:42:22:79:f3:f7:40:93:ea:c0: 62:57:e8:12:64:4b:52:4d:17:d2:a4:42:a6:ae:1b: 9c:38:96:21:01:82:ca:8b:7e:1c:94:36:1a:20:39: 9d:c2:f1:f6:fd:7e:2a:e1:85:4d:49:3f:c4:66:f3: 38:04:76:83:50:b0:07:86:44:2b:9f:1a:56:61:a4: 3e:b7:f9:32:06:cc:05:1d:2a:16:ab:81:a2:e7:e6: d1:6d:08:34:bb:6f:c3:2c:9c:78:dc:3b:1d:cc:8a: be:9a:c5:90:d8:e9:d6:9c:ec:df:43:d6:23:62:d7: 7e:70:a3:20:22:b1:bf:b8:d2:30:ac:c5:bc:c6:c8: 16:90:4f:ca:cd:8a:1f:cd:a8:4b:59:df:e8:8d:47: 24:1a:79:8a:14:3a:25:55:68:f0:a9:a5:42:01:82: 51:73:26:b2:2b:92:6d:ac:d1:6d:f0:d6:f9:48:01: 3a:c6:2e:5c:51:06:9d:40:c1:19:d8:11:c7:c0:79: fd:52:97:43:20:a8:c4:fb:3c:3a:aa:88:75:99:d0: ce:96:0f:fa:62:60:3f:62:a4:58:8c:3b:d3:42:1a: 39:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:71:88:39:C5:24:24:8B:59:51:B7:18:BC:40:5A:51:40:50:CB:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060/da8a4bf6-d3c9-3ad3-a825-0519a8133130.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060/3b70bdb6-9776-4d39-8f28-b4a225eb2060.crl X509v3 Authority Key Identifier: keyid:E6:26:AE:76:3C:3B:91:4E:3E:1D:46:9D:BB:AD:32:FD:B3:08:3E:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3b70bdb6-9776-4d39-8f28-b4a225eb2060.cer sbgp-ipAddrBlock: critical IPv4: 216.250.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:35:c8:db:6d:f6:30:02:33:73:cd:fa:00:08:cd:d3:11:2f: c9:8c:da:ac:7b:b1:6a:03:3e:6e:3a:3c:e3:fd:a2:de:68:00: bc:1c:80:24:34:0e:be:f8:4f:b9:01:cf:80:f3:cd:37:85:f2: 67:62:a5:73:7e:f0:70:a5:b1:96:08:8e:db:6c:d2:96:2c:e5: 6a:01:ea:66:6e:db:1d:b9:25:9b:c2:6a:56:5b:85:9d:8b:19: de:f7:c9:7e:a5:01:db:a6:65:05:5c:18:98:d5:ca:ff:27:27: 5e:57:50:48:98:11:dc:f0:73:c4:5d:05:2b:be:f9:36:b4:93: b7:f4:41:8e:74:76:39:fd:19:a5:bc:24:87:1c:92:ab:f4:5f: fc:1d:ea:29:fc:4e:1a:4a:fe:ee:20:dd:1b:c8:a7:a3:37:9e: 92:26:ed:79:db:b3:f5:ea:8e:a1:b9:9b:74:80:0c:d4:fa:43: 45:c6:d5:ab:cb:aa:5a:35:49:b8:90:9b:13:cc:c3:5d:85:13: c4:e9:b8:68:72:78:2d:bf:15:08:b7:01:4a:f3:a9:6c:c8:dd: be:b5:83:10:3f:47:1b:d7:20:c8:6b:1c:35:59:ef:3b:d1:ab: d4:c9:4b:93:7c:23:6f:51:3c:28:70:23:cc:1d:24:65:76:11: 11:6d:bd:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZjzy2iyD3PdyJzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I3MGJkYjYtOTc3Ni00ZDM5LThmMjgtYjRhMjI1ZWIy MDYwMB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk OTc4OGE0MWMtNDE4My00MTdiLTg5MTMtMmUzOGQ1OTllMDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbnQJRhXQEeFVBvFLn7+s3JJHFzBDE8Hzpu/ YDGeZtwnaspCInnz90CT6sBiV+gSZEtSTRfSpEKmrhucOJYhAYLKi34clDYaIDmd wvH2/X4q4YVNST/EZvM4BHaDULAHhkQrnxpWYaQ+t/kyBswFHSoWq4Gi5+bRbQg0 u2/DLJx43DsdzIq+msWQ2OnWnOzfQ9YjYtd+cKMgIrG/uNIwrMW8xsgWkE/KzYof zahLWd/ojUckGnmKFDolVWjwqaVCAYJRcyayK5JtrNFt8Nb5SAE6xi5cUQadQMEZ 2BHHwHn9UpdDIKjE+zw6qoh1mdDOlg/6YmA/YqRYjDvTQho5BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANxiDnFJCSLWVG3GLxAWlFAUMtYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zYjcw YmRiNi05Nzc2LTRkMzktOGYyOC1iNGEyMjVlYjIwNjAvZGE4YTRiZjYtZDNjOS0z YWQzLWE4MjUtMDUxOWE4MTMzMTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2I3MGJkYjYtOTc3Ni00ZDM5LThm MjgtYjRhMjI1ZWIyMDYwLzNiNzBiZGI2LTk3NzYtNGQzOS04ZjI4LWI0YTIyNWVi MjA2MC5jcmwwHwYDVR0jBBgwFoAU5iaudjw7kU4+HUadu60y/bMIPnIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zYjcwYmRiNi05Nzc2LTRkMzktOGYyOC1iNGEy MjVlYjIwNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2PriMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABs1yNtt9jACM3PN+gAIzdMRL8mM2qx7sWoDPm46POP9ot5oALwcgCQ0 Dr74T7kBz4DzzTeF8mdipXN+8HClsZYIjtts0pYs5WoB6mZu2x25JZvCalZbhZ2L Gd73yX6lAdumZQVcGJjVyv8nJ15XUEiYEdzwc8RdBSu++Ta0k7f0QY50djn9GaW8 JIcckqv0X/wd6in8ThpK/u4g3RvIp6M3npIm7Xnbs/XqjqG5m3SADNT6Q0XG1avL qlo1SbiQmxPMw12FE8TpuGhyeC2/FQi3AUrzqWzI3b61gxA/RxvXIMhrHDVZ7zvR q9TJS5N8I29RPChwI8wdJGV2ERFtvV4= -----END CERTIFICATE-----Generated at Mon Apr 28 15:39:59 2025 by rpki-client