$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/376f1606-d35e-3cb6-b663-26b1e90c408b.roa File: 376f1606-d35e-3cb6-b663-26b1e90c408b.roa (raw, json) Hash identifier: cItGrTCWSGaqvYfMU06l+MmlQt2zTY3qEsxdOrAnN+g= Subject key identifier: 85:57:3C:09:7F:8B:DC:92:DF:64:46:3D:4E:22:3E:0F:98:E1:EB:0B Certificate issuer: /CN=da733fda-b405-4eb1-adbe-811e8f7eacd4 Certificate serial: 010D0C9F43285849955F25F0AC12236928111490 Authority key identifier: CF:9A:BF:04:C8:42:8F:3F:52:AA:0D:50:E8:C7:7B:D2:75:46:E5:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/376f1606-d35e-3cb6-b663-26b1e90c408b.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 55159 IP address blocks: 64.89.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:25:f0:ac:12:23:69:28:11:14:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da733fda-b405-4eb1-adbe-811e8f7eacd4 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=055510d6-8d62-4545-a32a-1eeaa391ec1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b6:37:f6:2f:04:08:53:68:cd:b6:67:53:3c: 7a:49:5a:c5:a2:b1:0d:31:a6:ef:98:30:00:a4:c2: 16:b0:20:6b:07:7a:4a:dd:f6:fe:0b:4c:6d:ec:de: 03:db:95:76:c2:f8:d1:33:8c:56:54:bc:9f:a0:9b: 71:c4:6a:0b:ce:39:1c:c0:0c:5c:98:70:48:62:cd: d0:3f:09:fc:aa:55:1d:77:f8:c6:9b:4a:b4:79:ca: 5e:2a:5b:58:84:ae:dd:59:41:88:26:77:29:ed:b6: 26:4a:7d:b6:93:b3:52:18:2b:b8:5c:96:41:1e:2f: d3:17:4c:8c:76:a9:64:c1:51:57:1a:55:52:31:76: ad:e8:7b:66:ad:e1:7c:0a:ec:0d:45:71:49:b0:98: 18:3c:8e:31:48:db:8d:32:cb:97:bf:81:aa:b3:54: c8:07:8f:f7:33:46:8a:25:9c:6f:28:f8:89:79:ed: f5:43:1f:eb:08:eb:d6:3b:14:ad:46:43:66:3c:06: 75:72:d3:f9:ab:26:02:d6:0e:f9:5b:30:88:8d:4a: 4d:c7:eb:6f:f8:88:bc:b9:c5:b0:27:d2:f3:08:5e: 3c:fa:0a:09:bf:eb:98:33:a8:28:27:b0:83:5a:48: fe:d3:b0:b6:39:f7:00:97:82:3d:6d:34:36:36:e7: fe:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:57:3C:09:7F:8B:DC:92:DF:64:46:3D:4E:22:3E:0F:98:E1:EB:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/376f1606-d35e-3cb6-b663-26b1e90c408b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.crl X509v3 Authority Key Identifier: keyid:CF:9A:BF:04:C8:42:8F:3F:52:AA:0D:50:E8:C7:7B:D2:75:46:E5:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4.cer sbgp-ipAddrBlock: critical IPv4: 64.89.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:ae:c5:c3:a8:4f:dc:b7:89:cf:ee:38:d3:d9:35:26:64:ce: 50:59:58:76:1c:38:9f:88:a9:92:99:b4:fd:2e:cb:fb:b9:ee: 60:89:1a:e9:05:b2:d6:6d:25:17:b8:9e:60:10:d7:3e:d5:c2: 24:4e:d0:0b:ab:48:57:87:15:28:d8:79:60:11:d5:8e:01:7a: 1c:e8:2a:f4:73:6d:ef:76:52:66:fd:88:f5:ae:2c:ca:2f:37: 0d:5f:93:d6:a7:6c:3d:50:36:75:01:a0:f2:17:5b:df:d7:e0: 5b:00:68:9c:e8:16:46:32:22:01:6e:77:5d:aa:76:8a:e9:6c: 8b:10:a3:b4:d2:aa:28:56:b2:a8:0e:6e:25:b9:71:2e:d5:90: cb:af:c1:0e:8e:26:ca:82:4e:4d:8f:72:82:19:98:a8:b8:cb: e7:f5:9f:32:42:d3:17:80:dc:61:e3:de:5c:20:ed:32:52:ef: 57:57:a4:23:68:d3:02:52:ef:d9:2b:b6:94:28:3c:4b:96:fe: 00:a4:25:82:cf:0c:93:3c:68:59:2c:94:a2:e6:fd:24:7a:05: db:f2:2f:fc:9f:9c:8c:d0:0b:d2:f8:a9:2a:b2:0e:9e:9c:87: 92:fb:81:71:06:53:0a:93:e1:67:c9:32:98:8f:55:f1:dc:a7: 38:a6:fb:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXyXwrBIjaSgRFJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE3MzNmZGEtYjQwNS00ZWIxLWFkYmUtODExZThmN2Vh Y2Q0MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk MDU1NTEwZDYtOGQ2Mi00NTQ1LWEzMmEtMWVlYWEzOTFlYzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirY39i8ECFNozbZnUzx6SVrForENMabvmDAA pMIWsCBrB3pK3fb+C0xt7N4D25V2wvjRM4xWVLyfoJtxxGoLzjkcwAxcmHBIYs3Q Pwn8qlUdd/jGm0q0ecpeKltYhK7dWUGIJncp7bYmSn22k7NSGCu4XJZBHi/TF0yM dqlkwVFXGlVSMXat6HtmreF8CuwNRXFJsJgYPI4xSNuNMsuXv4Gqs1TIB4/3M0aK JZxvKPiJee31Qx/rCOvWOxStRkNmPAZ1ctP5qyYC1g75WzCIjUpNx+tv+Ii8ucWw J9LzCF48+goJv+uYM6goJ7CDWkj+07C2OfcAl4I9bTQ2Nuf+9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVXPAl/i9yS32RGPU4iPg+Y4esLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kYTcz M2ZkYS1iNDA1LTRlYjEtYWRiZS04MTFlOGY3ZWFjZDQvMzc2ZjE2MDYtZDM1ZS0z Y2I2LWI2NjMtMjZiMWU5MGM0MDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGE3MzNmZGEtYjQwNS00ZWIxLWFk YmUtODExZThmN2VhY2Q0L2RhNzMzZmRhLWI0MDUtNGViMS1hZGJlLTgxMWU4Zjdl YWNkNC5jcmwwHwYDVR0jBBgwFoAUz5q/BMhCjz9Sqg1Q6Md70nVG5TgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kYTczM2ZkYS1iNDA1LTRlYjEtYWRiZS04MTFl OGY3ZWFjZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQFmoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFquxcOoT9y3ic/uONPZNSZkzlBZWHYcOJ+IqZKZtP0uy/u57mCJGukF stZtJRe4nmAQ1z7VwiRO0AurSFeHFSjYeWAR1Y4BehzoKvRzbe92Umb9iPWuLMov Nw1fk9anbD1QNnUBoPIXW9/X4FsAaJzoFkYyIgFud12qdorpbIsQo7TSqihWsqgO biW5cS7VkMuvwQ6OJsqCTk2PcoIZmKi4y+f1nzJC0xeA3GHj3lwg7TJS71dXpCNo 0wJS79krtpQoPEuW/gCkJYLPDJM8aFkslKLm/SR6BdvyL/yfnIzQC9L4qSqyDp6c h5L7gXEGUwqT4WfJMpiPVfHcpzim+0o= -----END CERTIFICATE-----Generated at Mon Apr 28 00:11:57 2025 by rpki-client