$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/88479a7a-2aaa-3469-bf73-a6b9d5c2d2e8.roa File: 88479a7a-2aaa-3469-bf73-a6b9d5c2d2e8.roa (raw, json) Hash identifier: 95aIRwcOqp7MoG+5GR7kS5O9dEhu0k5qVuYbjUXFL5Y= Subject key identifier: 59:6A:93:12:D4:9F:55:CA:D0:34:3C:C0:43:D9:DC:03:12:62:B9:31 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F43285849AA4F69919A15D978BD7E5100 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/88479a7a-2aaa-3469-bf73-a6b9d5c2d2e8.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 55293 IP address blocks: 64.4.160.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:69:91:9a:15:d9:78:bd:7e:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=a91592c7-b3c1-453c-8ae1-6f88eacc04f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bd:95:3f:9b:82:8c:37:44:24:59:71:00:b7: 76:d6:bd:64:15:f7:89:f8:9f:bf:a0:2b:cd:da:15: 70:9a:d2:13:2a:dd:c5:ae:74:dd:54:f1:bf:c2:96: 74:62:cb:d8:44:40:b0:02:af:08:2c:a2:7c:d3:30: ff:d4:7a:e0:ea:77:d4:9b:bd:eb:b4:70:18:ad:8f: 63:d1:1e:be:36:d8:1c:a9:0e:82:c5:9d:61:ab:38: bc:a0:0e:30:0e:fe:96:9e:b9:55:d0:84:06:f8:dd: da:24:0b:fd:30:87:21:5b:36:5c:da:14:f1:52:13: 65:3b:4a:91:98:3e:04:8f:05:ba:ae:68:d1:04:3f: c9:fd:b5:9e:b3:28:4a:33:ce:06:23:fd:3f:d2:5c: 94:bb:4b:c4:63:03:ba:07:2a:4b:2c:4a:cc:53:12: 50:60:5f:6b:fa:34:a4:dc:45:ef:4a:aa:60:2a:96: 14:45:14:bf:bd:51:bd:ee:1e:ce:47:0d:ad:25:06: d0:10:5c:9f:0c:1b:42:63:8f:bf:70:bc:fc:8e:c2: ff:b9:2b:80:b1:a8:34:9d:39:65:6c:6a:98:af:62: f8:f0:03:fa:96:af:ee:4e:05:5c:7c:41:11:2d:06: 8a:5a:9b:7e:cc:9c:70:ab:80:b8:d6:f6:bd:f8:6a: 10:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:6A:93:12:D4:9F:55:CA:D0:34:3C:C0:43:D9:DC:03:12:62:B9:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/88479a7a-2aaa-3469-bf73-a6b9d5c2d2e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 64.4.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:39:b9:f4:72:ae:d2:37:75:89:7d:26:4d:da:19:f5:67:73: ad:74:6d:51:7a:f4:7a:df:73:1d:d2:77:f8:0b:e1:09:c0:ca: 37:90:cc:c4:3a:27:bf:d4:aa:42:ba:b5:6e:69:e6:6d:a4:a6: bd:e1:c0:00:59:de:8f:b1:84:e4:55:7f:6a:c1:7b:04:45:63: c6:fb:ac:23:75:d6:69:ad:4b:02:38:b2:8c:eb:40:40:47:fb: 72:ba:70:98:33:89:69:ee:9c:1f:2e:96:9b:b2:91:72:f4:ea: 90:ab:b8:be:7d:14:4f:4d:bb:49:d3:8c:ed:5d:f7:ef:af:2d: f1:a0:3a:0a:d8:cf:2c:1d:3e:99:00:64:7b:30:f5:57:2b:df: fe:c3:df:07:fb:b7:d3:95:28:ce:99:b1:2f:7f:4a:1d:8e:6d: f0:e1:5f:81:07:be:05:bf:be:df:fa:fe:97:1d:a6:52:ab:19: e5:e1:54:34:8e:fc:c7:6f:63:87:59:4b:5e:ff:97:e0:e1:5a: d1:3b:46:20:f8:71:d2:13:70:86:fa:5b:26:73:7b:3e:36:72: 79:4f:dc:10:d3:85:63:46:3e:70:1c:16:48:b7:ab:23:11:48: 43:4f:6b:74:24:ca:57:21:08:24:2e:22:73:e9:7e:71:f1:74: d6:d8:26:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT2mRmhXZeL1+UQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk YTkxNTkyYzctYjNjMS00NTNjLThhZTEtNmY4OGVhY2MwNGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb2VP5uCjDdEJFlxALd21r1kFfeJ+J+/oCvN 2hVwmtITKt3FrnTdVPG/wpZ0YsvYRECwAq8ILKJ80zD/1Hrg6nfUm73rtHAYrY9j 0R6+NtgcqQ6CxZ1hqzi8oA4wDv6WnrlV0IQG+N3aJAv9MIchWzZc2hTxUhNlO0qR mD4EjwW6rmjRBD/J/bWesyhKM84GI/0/0lyUu0vEYwO6BypLLErMUxJQYF9r+jSk 3EXvSqpgKpYURRS/vVG97h7ORw2tJQbQEFyfDBtCY4+/cLz8jsL/uSuAsag0nTll bGqYr2L48AP6lq/uTgVcfEERLQaKWpt+zJxwq4C41va9+GoQ5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlqkxLUn1XK0DQ8wEPZ3AMSYrkxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvODg0NzlhN2EtMmFhYS0z NDY5LWJmNzMtYTZiOWQ1YzJkMmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQASgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE85ufRyrtI3dYl9Jk3aGfVnc610bVF69Hrfcx3Sd/gL4QnAyjeQzMQ6 J7/UqkK6tW5p5m2kpr3hwABZ3o+xhORVf2rBewRFY8b7rCN11mmtSwI4sozrQEBH +3K6cJgziWnunB8ulpuykXL06pCruL59FE9Nu0nTjO1d9++vLfGgOgrYzywdPpkA ZHsw9Vcr3/7D3wf7t9OVKM6ZsS9/Sh2ObfDhX4EHvgW/vt/6/pcdplKrGeXhVDSO /MdvY4dZS17/l+DhWtE7RiD4cdITcIb6WyZzez42cnlP3BDThWNGPnAcFki3qyMR SENPa3QkylchCCQuInPpfnHxdNbYJtk= -----END CERTIFICATE-----Generated at Sun Apr 27 15:24:57 2025 by rpki-client