$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/505ae51d-60fe-3e1f-88a6-c80e6170b4d8.roa File: 505ae51d-60fe-3e1f-88a6-c80e6170b4d8.roa (raw, json) Hash identifier: Y2vaBSAZxU9XexjweSA24LplKj12rE94fak8AFl9d/k= Subject key identifier: 74:4E:5C:97:E8:DC:3A:66:49:FB:63:58:9A:D6:77:5C:6A:C7:A0:D5 Certificate issuer: /CN=3b83d5bd-d1f5-4f10-b856-389ebf4a62dc Certificate serial: 010D0C9F432858498E6488B4C9F0F1F56B3A5450 Authority key identifier: 4F:BF:D5:D7:B3:DD:D2:CB:F7:C7:EA:9C:1A:CE:98:DA:DA:48:B8:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/505ae51d-60fe-3e1f-88a6-c80e6170b4d8.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 30144 IP address blocks: 208.85.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:88:b4:c9:f0:f1:f5:6b:3a:54:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b83d5bd-d1f5-4f10-b856-389ebf4a62dc Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=9933dfa7-2065-46e5-bf84-0124d22f9c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cc:12:52:9c:80:47:11:f2:09:f8:17:fb:21: e4:4d:da:48:ef:00:6f:fe:e6:03:bf:a4:11:11:49: c6:04:1d:55:85:3a:fa:d2:75:f9:f8:58:2d:a6:8b: 2e:cf:35:6b:87:6e:85:23:70:14:8c:8b:bf:32:28: ef:c0:98:99:10:a9:09:f0:ad:4f:83:f3:02:fd:6e: f6:68:85:08:44:c9:16:ad:2e:d3:c2:f7:d5:2d:b6: 3b:8e:7b:78:2e:3f:0b:2e:c4:24:e6:47:b8:77:95: 2b:41:c3:9f:08:0d:d5:f4:7b:8e:31:9d:db:65:eb: 53:a4:fb:7e:1d:58:6c:34:58:78:3d:61:66:19:1e: 2c:8b:84:a0:69:2e:df:77:73:90:94:36:1d:0d:f6: d2:5b:2a:7c:32:db:29:aa:38:fd:ce:1c:33:1a:2b: 81:97:a1:2f:20:db:2d:53:de:1b:17:e5:68:7b:28: bc:55:33:b1:b1:10:e3:01:90:ea:ed:a7:08:30:19: 84:ae:f9:b6:1f:47:4f:c5:7a:f8:7a:c9:0b:bc:98: 93:ca:61:a0:e1:24:19:ec:cd:23:38:e2:ad:03:fc: b6:cc:9f:e4:c6:e7:4f:82:34:5c:61:1b:bc:13:60: 60:68:c2:c1:9c:53:16:cc:02:70:ee:52:48:e0:4a: 17:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:4E:5C:97:E8:DC:3A:66:49:FB:63:58:9A:D6:77:5C:6A:C7:A0:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/505ae51d-60fe-3e1f-88a6-c80e6170b4d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.crl X509v3 Authority Key Identifier: keyid:4F:BF:D5:D7:B3:DD:D2:CB:F7:C7:EA:9C:1A:CE:98:DA:DA:48:B8:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer sbgp-ipAddrBlock: critical IPv4: 208.85.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:d7:25:f5:11:f0:02:e5:d7:8e:7a:04:c8:5c:37:9a:c1:c7: 71:ef:23:d1:9e:20:34:75:a0:9b:24:49:f0:9d:fe:b6:02:f6: 95:0e:e7:e3:b0:3d:f4:2c:8b:05:03:1e:5e:37:64:16:bd:69: a5:25:ba:f9:c1:70:15:a8:0f:dd:00:2a:82:5d:4b:02:b6:2c: a2:0f:64:3b:07:d7:f7:9a:bf:a6:40:e8:6c:9a:5d:09:2b:41: 1f:b8:7b:89:8b:c7:c2:15:31:4d:db:70:68:82:ae:18:f9:9f: 8f:34:8a:f8:0a:65:61:3d:a7:c7:08:c8:a7:4c:f1:ab:7f:91: 63:f4:ec:02:2a:e4:01:f6:82:5c:75:cc:85:52:ed:74:64:7f: f3:30:c9:16:89:b1:da:56:a3:dc:3a:47:aa:4c:75:16:20:e3: fd:5e:a4:07:2d:82:6e:e8:b4:a5:13:c0:f8:2e:5f:6e:79:ca: 59:6f:59:d4:5e:a2:be:78:a1:b3:45:d3:6f:32:1b:48:cd:c3: cf:a1:ce:7f:05:6a:4e:d5:52:cb:8c:0d:ce:96:ef:27:ea:cf: f0:c3:5f:c0:5b:ce:92:d4:9c:30:e7:ed:c3:f9:d7:c6:09:1a: 2b:72:b1:e9:c4:54:ad:d1:92:67:76:54:9d:a1:19:0d:2d:52: b2:6a:89:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZIi0yfDx9Ws6VFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I4M2Q1YmQtZDFmNS00ZjEwLWI4NTYtMzg5ZWJmNGE2 MmRjMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk OTkzM2RmYTctMjA2NS00NmU1LWJmODQtMDEyNGQyMmY5YzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8wSUpyARxHyCfgX+yHkTdpI7wBv/uYDv6QR EUnGBB1VhTr60nX5+FgtposuzzVrh26FI3AUjIu/MijvwJiZEKkJ8K1Pg/MC/W72 aIUIRMkWrS7TwvfVLbY7jnt4Lj8LLsQk5ke4d5UrQcOfCA3V9HuOMZ3bZetTpPt+ HVhsNFh4PWFmGR4si4SgaS7fd3OQlDYdDfbSWyp8Mtspqjj9zhwzGiuBl6EvINst U94bF+Voeyi8VTOxsRDjAZDq7acIMBmErvm2H0dPxXr4eskLvJiTymGg4SQZ7M0j OOKtA/y2zJ/kxudPgjRcYRu8E2BgaMLBnFMWzAJw7lJI4EoX2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHROXJfo3DpmSftjWJrWd1xqx6DVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYjgz ZDViZC1kMWY1LTRmMTAtYjg1Ni0zODllYmY0YTYyZGMvNTA1YWU1MWQtNjBmZS0z ZTFmLTg4YTYtYzgwZTYxNzBiNGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2I4M2Q1YmQtZDFmNS00ZjEwLWI4 NTYtMzg5ZWJmNGE2MmRjLzNiODNkNWJkLWQxZjUtNGYxMC1iODU2LTM4OWViZjRh NjJkYy5jcmwwHwYDVR0jBBgwFoAUT7/V17Pd0sv3x+qcGs6Y2tpIuHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYjgzZDViZC1kMWY1LTRmMTAtYjg1Ni0zODll YmY0YTYyZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDXJfUR8ALl1456BMhcN5rBx3HvI9GeIDR1oJskSfCd/rYC9pUO5+Ow PfQsiwUDHl43ZBa9aaUluvnBcBWoD90AKoJdSwK2LKIPZDsH1/eav6ZA6GyaXQkr QR+4e4mLx8IVMU3bcGiCrhj5n480ivgKZWE9p8cIyKdM8at/kWP07AIq5AH2glx1 zIVS7XRkf/MwyRaJsdpWo9w6R6pMdRYg4/1epActgm7otKUTwPguX255yllvWdRe or54obNF028yG0jNw8+hzn8Fak7VUsuMDc6W7yfqz/DDX8BbzpLUnDDn7cP518YJ GitysenEVK3Rkmd2VJ2hGQ0tUrJqiVw= -----END CERTIFICATE-----Generated at Sun Apr 27 18:23:57 2025 by rpki-client