$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/3e06c13a-87c4-36d1-89be-3cf5da5c5024.roa File: 3e06c13a-87c4-36d1-89be-3cf5da5c5024.roa (raw, json) Hash identifier: 2kdv1C8KF0LrEiPnnHVzIAZxZ+E2AelrXZIlkh9w9Ao= Subject key identifier: DE:07:76:7F:B5:AF:0F:6E:6E:E7:E8:5F:7F:A8:7E:1C:A8:D8:A9:15 Certificate issuer: /CN=7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7 Certificate serial: 010D0C9F43285849287E60138F7DE5EF41F82580 Authority key identifier: 77:DC:D2:23:7A:87:58:BC:36:EC:B0:C2:E2:C5:FE:82:8B:CE:9B:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/3e06c13a-87c4-36d1-89be-3cf5da5c5024.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 3561 IP address blocks: 204.239.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:60:13:8f:7d:e5:ef:41:f8:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=9822e83d-ffef-487c-8b99-f261024cd4b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5a:37:46:f1:19:1e:78:6e:f7:65:57:4e:69: bc:77:01:d2:29:7c:c7:f1:58:9e:6a:db:1d:91:22: ab:f3:69:18:d2:8e:a4:b3:c8:ac:0d:cf:77:55:56: 25:7a:26:86:48:c0:56:df:5b:6c:5f:0d:ee:22:d1: d3:8c:61:70:13:99:94:9d:2f:52:46:71:5c:94:2a: 60:1f:22:34:c8:4e:d4:bc:e9:b2:4d:f7:ba:81:e3: d6:da:c2:ae:d3:fe:09:9a:2f:52:a0:3e:b0:e4:a9: d3:f2:d0:94:1f:c7:de:71:a8:ee:c7:c2:9d:a1:7e: 1f:8e:df:15:0b:15:ea:97:65:17:c7:7d:e0:29:14: e3:0b:bf:c3:b1:5c:43:95:f8:89:60:1e:b4:09:05: c5:04:5a:f1:ce:13:c0:ca:a9:bc:e0:58:cb:16:ef: 9d:19:9d:75:3a:c9:d0:94:a3:19:0b:81:97:0c:be: 25:bb:25:9c:3d:1b:df:db:df:12:4a:6a:b4:e3:59: 2a:43:84:3e:31:77:a4:3a:12:bc:60:76:7c:c1:f7: b0:99:5a:93:01:18:d3:f1:0e:e0:06:42:cd:b3:52: 62:66:e9:9a:8e:07:91:df:7a:70:82:58:d8:29:07: 70:23:bc:4c:97:0f:4a:5e:79:9d:b8:51:7a:11:c9: 02:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:07:76:7F:B5:AF:0F:6E:6E:E7:E8:5F:7F:A8:7E:1C:A8:D8:A9:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/3e06c13a-87c4-36d1-89be-3cf5da5c5024.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.crl X509v3 Authority Key Identifier: keyid:77:DC:D2:23:7A:87:58:BC:36:EC:B0:C2:E2:C5:FE:82:8B:CE:9B:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.cer sbgp-ipAddrBlock: critical IPv4: 204.239.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:1d:8f:41:6f:e7:34:2b:4d:56:9f:12:f2:42:7f:c2:e1:c3: ce:01:ea:39:d3:2c:0b:b2:a4:d6:52:32:b1:db:13:56:b5:04: a9:c8:b4:95:37:e4:9e:16:a6:09:9c:b2:ae:48:01:14:92:d3: 51:ff:e0:d7:d5:be:89:d9:cb:f6:4a:62:8b:39:40:38:18:12: c0:5b:51:15:87:3e:37:da:16:53:3e:a6:a9:6b:e6:98:4b:4a: 31:db:ab:78:48:a7:b0:f5:bf:e5:d0:90:06:1d:7a:68:c2:b1: 51:f8:9a:d3:e1:31:84:b7:21:65:36:78:15:ed:89:8f:b9:e8: 14:34:d7:53:fa:ab:64:63:a9:73:e0:72:0e:bc:6c:f3:69:27: f0:fe:2a:5d:a0:ad:ca:3d:03:7f:3b:73:23:2e:eb:08:4b:f2: f4:5b:3f:1e:63:88:ec:0b:85:3a:0c:41:48:b8:fb:c2:51:79: 53:f3:9d:cd:bc:bb:a2:3d:6a:fe:0b:f8:4f:ee:63:a0:e6:ee: 15:9f:38:07:09:61:a8:97:e4:15:e0:a0:88:3e:65:d3:ae:25: bb:e5:a6:1c:96:fd:d0:7d:d5:e5:13:67:67:74:52:42:6e:42: 27:f9:6e:5a:5e:a5:6a:e9:be:fd:11:f7:7a:10:76:cf:db:da: ab:a4:6d:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofmATj33l70H4JYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JjNmFiOWEtNTEwMy00Y2Y4LWI0YTItYzMwNDUyOTJj NWQ3MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk OTgyMmU4M2QtZmZlZi00ODdjLThiOTktZjI2MTAyNGNkNGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1o3RvEZHnhu92VXTmm8dwHSKXzH8Vieatsd kSKr82kY0o6ks8isDc93VVYleiaGSMBW31tsXw3uItHTjGFwE5mUnS9SRnFclCpg HyI0yE7UvOmyTfe6gePW2sKu0/4Jmi9SoD6w5KnT8tCUH8fecajux8KdoX4fjt8V CxXql2UXx33gKRTjC7/DsVxDlfiJYB60CQXFBFrxzhPAyqm84FjLFu+dGZ11OsnQ lKMZC4GXDL4luyWcPRvf298SSmq041kqQ4Q+MXekOhK8YHZ8wfewmVqTARjT8Q7g BkLNs1JiZumajgeR33pwgljYKQdwI7xMlw9KXnmduFF6EckCgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4Hdn+1rw9ubufoX3+ofhyo2KkVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YmM2 YWI5YS01MTAzLTRjZjgtYjRhMi1jMzA0NTI5MmM1ZDcvM2UwNmMxM2EtODdjNC0z NmQxLTg5YmUtM2NmNWRhNWM1MDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2JjNmFiOWEtNTEwMy00Y2Y4LWI0 YTItYzMwNDUyOTJjNWQ3LzdiYzZhYjlhLTUxMDMtNGNmOC1iNGEyLWMzMDQ1Mjky YzVkNy5jcmwwHwYDVR0jBBgwFoAUd9zSI3qHWLw27LDC4sX+govOm/owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YmM2YWI5YS01MTAzLTRjZjgtYjRhMi1jMzA0 NTI5MmM1ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzO/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQdj0Fv5zQrTVafEvJCf8Lhw84B6jnTLAuypNZSMrHbE1a1BKnItJU3 5J4Wpgmcsq5IARSS01H/4NfVvonZy/ZKYos5QDgYEsBbURWHPjfaFlM+pqlr5phL SjHbq3hIp7D1v+XQkAYdemjCsVH4mtPhMYS3IWU2eBXtiY+56BQ011P6q2RjqXPg cg68bPNpJ/D+Kl2grco9A387cyMu6whL8vRbPx5jiOwLhToMQUi4+8JReVPznc28 u6I9av4L+E/uY6Dm7hWfOAcJYaiX5BXgoIg+ZdOuJbvlphyW/dB91eUTZ2d0UkJu Qif5blpepWrpvv0R93oQds/b2qukbZM= -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:28 2025 by rpki-client