$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78051ed4-fc44-463a-bcb4-2ff2c20b6193/bb6c4871-ae7a-37a7-9a9d-e0ae42af31c3.roa File: bb6c4871-ae7a-37a7-9a9d-e0ae42af31c3.roa (raw, json) Hash identifier: Vpo+2jo7MkF5BDD5zsKvyAVlwTiFk6DHKJ35KxvlrK8= Subject key identifier: 48:47:46:0C:FC:21:A3:B0:52:58:E6:47:98:7A:28:FF:DE:41:D3:81 Certificate issuer: /CN=78051ed4-fc44-463a-bcb4-2ff2c20b6193 Certificate serial: 010D0C9F432858494CC939FBB2478C1761E55100 Authority key identifier: 23:5A:39:AE:14:7C:3B:47:DA:27:59:80:6B:0A:CE:5B:D3:C7:A1:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78051ed4-fc44-463a-bcb4-2ff2c20b6193.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78051ed4-fc44-463a-bcb4-2ff2c20b6193/bb6c4871-ae7a-37a7-9a9d-e0ae42af31c3.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 398035 IP address blocks: 207.228.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78051ed4-fc44-463a-bcb4-2ff2c20b6193/78051ed4-fc44-463a-bcb4-2ff2c20b6193.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78051ed4-fc44-463a-bcb4-2ff2c20b6193/78051ed4-fc44-463a-bcb4-2ff2c20b6193.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78051ed4-fc44-463a-bcb4-2ff2c20b6193.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:39:fb:b2:47:8c:17:61:e5:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78051ed4-fc44-463a-bcb4-2ff2c20b6193 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=0f0c2bff-e2a8-42eb-ada6-7323e879449b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:63:d5:7c:4c:48:eb:cc:9b:63:1f:47:36:ea: 59:53:7e:0a:e5:a1:64:08:bd:b0:33:39:89:18:18: 68:21:73:ca:5a:7b:78:74:20:4e:98:36:ce:62:57: 14:7d:70:93:ee:5a:29:32:bd:9c:66:5e:71:a8:94: fa:8b:c1:a0:0c:a6:3a:d6:7b:c7:7e:63:29:24:aa: 79:31:e6:80:0a:f2:9c:e3:39:5a:12:f6:b9:65:0d: c7:17:f6:5a:f6:74:70:03:6c:a9:e1:17:a1:56:8f: 70:8b:d5:99:c5:43:3e:84:fc:fb:27:9b:17:88:54: cf:bd:77:d4:5b:52:82:44:22:98:9b:1d:60:60:3c: 14:9c:ab:b1:33:8e:45:b1:c5:55:b1:aa:a5:b4:0c: 13:d5:2d:4e:53:9c:c1:3c:21:93:f9:e6:c5:10:0d: ab:91:b0:49:07:36:77:a8:93:2c:9a:93:c3:87:e0: be:e9:9a:1f:18:f4:c8:96:47:d0:92:a5:cd:46:cb: 8d:5e:c9:02:eb:be:bc:68:da:0c:ca:ff:f6:c7:52: 3f:20:7b:cf:d0:99:30:bd:7e:d2:a0:8f:cd:03:9c: 1f:39:02:b8:58:24:2c:ff:99:db:2c:01:6b:80:79: 57:42:3b:64:1b:dd:03:2a:9a:aa:dd:a3:54:b7:bb: 98:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:47:46:0C:FC:21:A3:B0:52:58:E6:47:98:7A:28:FF:DE:41:D3:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78051ed4-fc44-463a-bcb4-2ff2c20b6193/bb6c4871-ae7a-37a7-9a9d-e0ae42af31c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78051ed4-fc44-463a-bcb4-2ff2c20b6193/78051ed4-fc44-463a-bcb4-2ff2c20b6193.crl X509v3 Authority Key Identifier: keyid:23:5A:39:AE:14:7C:3B:47:DA:27:59:80:6B:0A:CE:5B:D3:C7:A1:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78051ed4-fc44-463a-bcb4-2ff2c20b6193.cer sbgp-ipAddrBlock: critical IPv4: 207.228.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:7b:f0:45:10:5c:f8:58:c5:e7:0e:54:76:25:28:04:d2:55: 96:ec:30:2e:a5:ad:f4:fe:ec:bf:5f:ec:44:e8:65:bd:da:1f: 38:65:06:b9:a3:73:e6:b1:00:9b:b4:cb:a2:fc:2c:f7:32:5e: 3a:ed:d8:9e:61:1f:54:3e:c1:6a:36:66:87:3c:aa:ff:34:dc: 6e:07:cc:49:9b:4d:df:73:3f:d7:df:f3:56:5b:1c:bc:96:bb: 8a:fa:cd:de:a3:54:e8:a0:ef:aa:c1:5e:f5:29:2a:2f:b0:4a: e3:cf:2a:41:57:8a:8a:f8:34:95:ce:f4:b4:30:35:72:d9:51: 9d:0f:8b:97:8b:26:ac:2a:4b:72:5f:ae:c3:1b:10:87:11:22: 0c:66:bd:ae:90:04:35:7f:52:6f:3e:70:da:89:7f:4e:83:55: 2f:be:3b:3d:4d:94:0d:14:96:32:5e:04:52:87:cc:e3:d0:40: 3e:70:87:35:8a:a3:23:49:c7:55:e6:ad:db:3d:40:87:99:c1: 6c:c8:ab:4f:fc:cf:6f:7f:09:46:a4:14:00:9e:5d:e9:66:1b: 4d:37:72:b7:f2:77:60:1d:cf:bb:04:f7:51:40:f6:ae:d2:c5: 92:b9:58:f0:30:8f:26:f7:18:53:5e:e3:09:a0:f1:4c:e3:f4: 28:c3:17:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyTn7skeMF2HlUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzgwNTFlZDQtZmM0NC00NjNhLWJjYjQtMmZmMmMyMGI2 MTkzMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk MGYwYzJiZmYtZTJhOC00MmViLWFkYTYtNzMyM2U4Nzk0NDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomPVfExI68ybYx9HNupZU34K5aFkCL2wMzmJ GBhoIXPKWnt4dCBOmDbOYlcUfXCT7lopMr2cZl5xqJT6i8GgDKY61nvHfmMpJKp5 MeaACvKc4zlaEva5ZQ3HF/Za9nRwA2yp4RehVo9wi9WZxUM+hPz7J5sXiFTPvXfU W1KCRCKYmx1gYDwUnKuxM45FscVVsaqltAwT1S1OU5zBPCGT+ebFEA2rkbBJBzZ3 qJMsmpPDh+C+6ZofGPTIlkfQkqXNRsuNXskC6768aNoMyv/2x1I/IHvP0JkwvX7S oI/NA5wfOQK4WCQs/5nbLAFrgHlXQjtkG90DKpqq3aNUt7uY+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhHRgz8IaOwUljmR5h6KP/eQdOBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83ODA1 MWVkNC1mYzQ0LTQ2M2EtYmNiNC0yZmYyYzIwYjYxOTMvYmI2YzQ4NzEtYWU3YS0z N2E3LTlhOWQtZTBhZTQyYWYzMWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzgwNTFlZDQtZmM0NC00NjNhLWJj YjQtMmZmMmMyMGI2MTkzLzc4MDUxZWQ0LWZjNDQtNDYzYS1iY2I0LTJmZjJjMjBi NjE5My5jcmwwHwYDVR0jBBgwFoAUI1o5rhR8O0faJ1mAawrOW9PHoa4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83ODA1MWVkNC1mYzQ0LTQ2M2EtYmNiNC0yZmYy YzIwYjYxOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz+TEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZ78EUQXPhYxecOVHYlKATSVZbsMC6lrfT+7L9f7EToZb3aHzhlBrmj c+axAJu0y6L8LPcyXjrt2J5hH1Q+wWo2Zoc8qv803G4HzEmbTd9zP9ff81ZbHLyW u4r6zd6jVOig76rBXvUpKi+wSuPPKkFXior4NJXO9LQwNXLZUZ0Pi5eLJqwqS3Jf rsMbEIcRIgxmva6QBDV/Um8+cNqJf06DVS++Oz1NlA0UljJeBFKHzOPQQD5whzWK oyNJx1Xmrds9QIeZwWzIq0/8z29/CUakFACeXelmG003crfyd2Adz7sE91FA9q7S xZK5WPAwjyb3GFNe4wmg8Uzj9CjDF58= -----END CERTIFICATE-----Generated at Mon Apr 28 18:46:58 2025 by rpki-client