$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/8883f6a0-cd35-3a1a-a3cf-dfd8f7e87101.roa File: 8883f6a0-cd35-3a1a-a3cf-dfd8f7e87101.roa (raw, json) Hash identifier: 2oaDZxHnS2GnFkv8hX7Dr5jBLmuxmo2+jyW45+usxEI= Subject key identifier: 4F:2F:7F:F3:8E:21:64:30:F0:EB:12:22:24:B5:65:84:0F:34:70:45 Certificate issuer: /CN=b8a0e292-3e8f-447b-81c6-cedef4747341 Certificate serial: 010D0C9F4328584A00DAC6EA50E4D79AA9D98040 Authority key identifier: 83:A3:6C:9B:30:E5:DE:80:EC:B3:A4:FC:42:E5:52:72:23:88:DA:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/8883f6a0-cd35-3a1a-a3cf-dfd8f7e87101.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 54511 IP address blocks: 64.202.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/b8a0e292-3e8f-447b-81c6-cedef4747341.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/b8a0e292-3e8f-447b-81c6-cedef4747341.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:c6:ea:50:e4:d7:9a:a9:d9:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8a0e292-3e8f-447b-81c6-cedef4747341 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=f1204acf-6c2d-4f7a-a1de-a2e546847ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:09:44:1a:9a:fd:75:c0:12:e5:5d:06:1d:30: 57:44:4b:de:28:ed:9d:fa:1c:c7:6e:e3:28:9b:99: 9f:f9:b9:22:41:49:27:cd:01:56:52:2a:3e:d1:a9: 18:0f:ed:11:96:c6:02:bf:59:d1:86:aa:78:68:e7: f6:a7:99:6c:c2:fd:0f:fb:67:5b:2c:0c:49:e8:27: fa:02:e3:bc:a1:18:e0:c2:e3:d5:bf:c9:9f:ab:3a: b3:dd:c1:95:40:d4:35:0e:12:f6:1c:0d:81:ac:c6: 11:db:61:eb:8b:fa:12:22:fd:5d:34:42:cd:37:46: 93:ac:24:b1:cb:31:96:74:bc:05:b7:e8:99:b0:37: a6:65:46:ec:85:9e:3a:f5:21:3d:90:cd:9f:8f:30: 95:f3:11:98:a9:f0:cc:44:15:26:76:12:63:15:1c: 9b:c2:30:bf:97:b6:45:0c:82:08:e2:f7:2f:18:10: 28:cf:31:62:2b:e7:6b:87:04:cc:60:e5:5a:8d:f0: 8c:84:31:40:7f:5b:25:08:b1:6b:0e:76:ad:b3:9f: 0b:c8:5d:25:81:d3:7c:5c:f0:11:22:61:60:e4:5f: 78:3d:3c:f8:be:82:fe:b2:8b:78:ab:d8:cb:61:b8: 36:c7:9a:9b:23:1e:36:09:e7:28:15:4d:fc:7c:62: 5a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2F:7F:F3:8E:21:64:30:F0:EB:12:22:24:B5:65:84:0F:34:70:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/8883f6a0-cd35-3a1a-a3cf-dfd8f7e87101.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/b8a0e292-3e8f-447b-81c6-cedef4747341.crl X509v3 Authority Key Identifier: keyid:83:A3:6C:9B:30:E5:DE:80:EC:B3:A4:FC:42:E5:52:72:23:88:DA:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer sbgp-ipAddrBlock: critical IPv4: 64.202.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:6d:5b:bb:c4:90:8a:63:59:23:fe:1d:66:a8:cd:5e:f5:63: 30:e6:de:5c:0a:f0:50:9d:db:d9:69:2d:cb:dc:b9:79:65:d7: 80:e0:2b:f7:35:f2:31:96:99:31:63:d5:85:c0:d3:71:bd:91: 5f:34:f6:4d:40:22:38:de:f5:87:b9:44:82:68:80:84:98:49: 51:30:cd:71:b5:c1:d5:e4:9d:f2:e0:d5:b4:e6:bb:03:f4:29: 65:b2:a7:e8:fc:2f:01:7f:45:fd:46:0a:dd:17:65:d7:68:84: 5f:93:56:ae:17:61:4b:f6:7d:8b:8d:7e:bb:f4:d3:2d:90:3b: c3:cf:2c:c2:4e:69:72:7e:e0:fd:1a:8e:00:1d:19:06:3d:e9: 9d:4d:a7:b7:ea:ac:fb:df:dc:60:73:25:d7:8e:56:91:74:2b: 3d:d0:ab:8e:94:87:47:ec:c3:d5:92:be:12:8f:1e:d5:59:b1: 94:d2:9a:0f:6a:86:e7:e3:2f:50:cd:63:63:e2:05:23:c1:2e: c4:28:1b:66:c0:7a:a2:6b:0b:93:21:86:03:8b:ff:29:4f:8f: 24:90:3b:dd:19:24:7b:0e:ad:b2:2f:ab:3e:3c:9f:33:f3:1f: 97:0f:b1:e3:9a:82:d0:e7:69:6b:3d:5e:20:4e:17:fb:65:7f: bb:bf:91:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2sbqUOTXmqnZgEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhhMGUyOTItM2U4Zi00NDdiLTgxYzYtY2VkZWY0NzQ3 MzQxMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk ZjEyMDRhY2YtNmMyZC00ZjdhLWExZGUtYTJlNTQ2ODQ3ZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAlEGpr9dcAS5V0GHTBXREveKO2d+hzHbuMo m5mf+bkiQUknzQFWUio+0akYD+0RlsYCv1nRhqp4aOf2p5lswv0P+2dbLAxJ6Cf6 AuO8oRjgwuPVv8mfqzqz3cGVQNQ1DhL2HA2BrMYR22Hri/oSIv1dNELNN0aTrCSx yzGWdLwFt+iZsDemZUbshZ469SE9kM2fjzCV8xGYqfDMRBUmdhJjFRybwjC/l7ZF DIII4vcvGBAozzFiK+drhwTMYOVajfCMhDFAf1slCLFrDnats58LyF0lgdN8XPAR ImFg5F94PTz4voL+sot4q9jLYbg2x5qbIx42CecoFU38fGJaNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8vf/OOIWQw8OsSIiS1ZYQPNHBFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iOGEw ZTI5Mi0zZThmLTQ0N2ItODFjNi1jZWRlZjQ3NDczNDEvODg4M2Y2YTAtY2QzNS0z YTFhLWEzY2YtZGZkOGY3ZTg3MTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjhhMGUyOTItM2U4Zi00NDdiLTgx YzYtY2VkZWY0NzQ3MzQxL2I4YTBlMjkyLTNlOGYtNDQ3Yi04MWM2LWNlZGVmNDc0 NzM0MS5jcmwwHwYDVR0jBBgwFoAUg6NsmzDl3oDss6T8QuVSciOI2g8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iOGEwZTI5Mi0zZThmLTQ0N2ItODFjNi1jZWRl ZjQ3NDczNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQMrcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhtW7vEkIpjWSP+HWaozV71YzDm3lwK8FCd29lpLcvcuXll14DgK/c1 8jGWmTFj1YXA03G9kV809k1AIjje9Ye5RIJogISYSVEwzXG1wdXknfLg1bTmuwP0 KWWyp+j8LwF/Rf1GCt0XZddohF+TVq4XYUv2fYuNfrv00y2QO8PPLMJOaXJ+4P0a jgAdGQY96Z1Np7fqrPvf3GBzJdeOVpF0Kz3Qq46Uh0fsw9WSvhKPHtVZsZTSmg9q hufjL1DNY2PiBSPBLsQoG2bAeqJrC5MhhgOL/ylPjySQO90ZJHsOrbIvqz48nzPz H5cPseOagtDnaWs9XiBOF/tlf7u/ka8= -----END CERTIFICATE-----Generated at Sun Jun 15 21:43:04 2025 by rpki-client