$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8235dfbe-b3ab-3735-aab7-c2955069fad0.roa File: 8235dfbe-b3ab-3735-aab7-c2955069fad0.roa (raw, json) Hash identifier: qlU7QpT8vJHhgkPlV6bFyQmckBtvFw2EiCaAHvsizt4= Subject key identifier: B8:37:ED:13:0A:8B:12:FB:72:85:09:F3:BB:B6:A5:D1:5F:55:A5:C9 Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F432858492CAE89EEC9D801E6E61D95C0 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8235dfbe-b3ab-3735-aab7-c2955069fad0.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 68.71.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:89:ee:c9:d8:01:e6:e6:1d:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=8a3f07f7-f27e-4572-89c7-f8e4fd574ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5b:52:45:31:49:65:4b:8f:0d:58:d9:bb:b5: a7:7e:ef:24:82:1b:5b:a3:3d:68:f2:8b:7e:24:d6: a0:4d:1f:60:32:1e:b9:2d:d2:b2:80:60:cb:99:cb: cb:bd:16:a7:62:58:2b:2c:88:8d:1d:e1:ee:4d:db: f5:c8:fb:21:08:6a:da:0d:b9:e3:d1:9c:e2:ab:d7: 24:40:1c:c8:dc:ae:43:dc:e6:b9:36:6c:ee:7f:d0: 09:36:9e:51:07:62:21:62:56:01:0c:d1:2c:fd:c1: ac:3e:9c:98:8b:09:8d:3a:91:93:5b:93:33:e2:be: 2b:74:80:7e:81:5c:bc:4e:b2:1d:ed:b0:92:3d:fc: bb:11:6d:83:8c:1f:27:63:8e:dd:84:f8:ce:27:ad: 9e:92:a1:93:16:f9:12:67:52:e7:c5:61:c7:26:34: 67:7a:1f:f3:bb:c9:4a:1c:25:71:1d:84:3f:ca:62: cf:f2:38:3d:73:aa:01:aa:9a:76:30:d2:23:8e:52: 8b:59:77:5f:45:90:c5:07:72:2d:17:1c:62:4a:0f: da:99:23:46:e9:85:f7:2e:81:ef:78:6d:70:d2:df: 8f:38:a2:be:b0:bd:0d:36:df:8d:0a:90:31:26:eb: 60:97:31:83:e8:b4:7e:d4:9f:96:90:62:51:5f:2b: 20:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:37:ED:13:0A:8B:12:FB:72:85:09:F3:BB:B6:A5:D1:5F:55:A5:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8235dfbe-b3ab-3735-aab7-c2955069fad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:3b:b9:14:ed:c5:bd:47:d3:87:c2:3a:86:87:0a:ad:00:ea: 3b:2f:1d:cd:d9:93:54:77:81:0b:28:36:0e:25:6d:88:aa:f0: ab:ba:c1:f5:f1:c5:61:8f:44:b8:5a:fc:f5:ea:0a:4f:17:61: c0:f0:1b:31:07:b1:20:e7:ba:82:0f:79:bb:c7:36:f9:ef:ba: f7:66:e9:cf:ad:6b:67:97:8e:00:e4:5c:95:de:48:b9:97:2b: b2:df:af:e4:53:c4:6a:bd:7e:fd:e5:f6:41:6c:20:1f:3c:b0: 52:d8:b1:eb:cd:c6:30:73:5b:66:1b:6c:9c:71:26:43:f6:e1: f8:b2:de:49:d7:ef:65:ab:5a:e6:21:75:ba:b9:94:aa:c5:bb: 49:35:09:a3:b6:e1:45:3b:3a:15:3d:9c:9a:ef:3a:82:95:c2: 81:be:d7:bb:64:c6:f8:f0:26:b0:64:a3:32:30:05:08:14:c5: c4:d3:d6:95:1b:3a:18:ca:52:e1:0e:be:b3:de:2b:d9:01:0f: f5:62:2b:e9:3e:12:a4:4e:cd:5c:19:48:06:dc:26:8d:a9:1c: 74:17:c1:a1:56:d0:5f:ca:c8:80:06:f1:40:fd:4b:f7:6d:1b: d8:56:2e:08:95:b8:d6:d4:6e:ae:7e:2b:2d:4e:10:07:1f:18: 4e:03:2f:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksronuydgB5uYdlcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk OGEzZjA3ZjctZjI3ZS00NTcyLTg5YzctZjhlNGZkNTc0YWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVtSRTFJZUuPDVjZu7Wnfu8kghtboz1o8ot+ JNagTR9gMh65LdKygGDLmcvLvRanYlgrLIiNHeHuTdv1yPshCGraDbnj0Zziq9ck QBzI3K5D3Oa5Nmzuf9AJNp5RB2IhYlYBDNEs/cGsPpyYiwmNOpGTW5Mz4r4rdIB+ gVy8TrId7bCSPfy7EW2DjB8nY47dhPjOJ62ekqGTFvkSZ1LnxWHHJjRneh/zu8lK HCVxHYQ/ymLP8jg9c6oBqpp2MNIjjlKLWXdfRZDFB3ItFxxiSg/amSNG6YX3LoHv eG1w0t+POKK+sL0NNt+NCpAxJutglzGD6LR+1J+WkGJRXysg4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLg37RMKixL7coUJ87u2pdFfVaXJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvODIzNWRmYmUtYjNhYi0z NzM1LWFhYjctYzI5NTUwNjlmYWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBREfkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACU7uRTtxb1H04fCOoaHCq0A6jsvHc3Zk1R3gQsoNg4lbYiq8Ku6wfXx xWGPRLha/PXqCk8XYcDwGzEHsSDnuoIPebvHNvnvuvdm6c+ta2eXjgDkXJXeSLmX K7Lfr+RTxGq9fv3l9kFsIB88sFLYsevNxjBzW2YbbJxxJkP24fiy3knX72WrWuYh dbq5lKrFu0k1CaO24UU7OhU9nJrvOoKVwoG+17tkxvjwJrBkozIwBQgUxcTT1pUb OhjKUuEOvrPeK9kBD/ViK+k+EqROzVwZSAbcJo2pHHQXwaFW0F/KyIAG8UD9S/dt G9hWLgiVuNbUbq5+Ky1OEAcfGE4DL/w= -----END CERTIFICATE-----Generated at Sat Apr 26 19:14:30 2025 by rpki-client