$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/be8fc6de-01c8-350c-a49d-dc5cb7dccb3b.roa File: be8fc6de-01c8-350c-a49d-dc5cb7dccb3b.roa (raw, json) Hash identifier: pqddp0xDQRNS3sMND2x+jN8nnYysRjEhzZG5ot4PHl8= Subject key identifier: A1:9E:4A:D6:3C:6F:93:AE:CD:54:D4:01:74:FD:A5:49:1A:83:93:3B Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858499829BF23433514DC06912380 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/be8fc6de-01c8-350c-a49d-dc5cb7dccb3b.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 18785 IP address blocks: 216.106.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:bf:23:43:35:14:dc:06:91:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=14e9428d-eaa2-4d86-8e2c-826d5275d771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9b:03:04:72:de:72:2e:cf:55:d5:39:68:f0: fe:5c:69:c6:fa:3f:ec:be:bf:78:d6:98:96:2c:58: 96:b2:64:33:9b:5d:08:2a:14:34:91:02:cc:20:e1: 15:c8:01:41:23:75:41:cb:5e:cd:05:69:5c:ff:db: 6e:ad:cd:99:29:a3:9f:78:d1:44:04:98:85:b0:2b: 52:13:01:4d:aa:83:b8:72:a6:6d:ab:e3:d3:65:7a: a0:96:25:ab:b6:67:f6:ae:22:50:1b:d6:0a:e0:78: 5d:db:c3:c5:19:14:87:81:bb:7c:f2:73:b9:54:5f: e6:7c:c4:32:8f:63:48:7c:7d:ac:b5:cf:c2:3b:c0: e7:82:ab:0d:08:61:b3:a5:a0:17:96:08:36:ce:b0: c3:5f:32:c5:cd:65:4d:8f:af:3b:00:52:78:92:ef: a3:00:3f:87:be:1d:95:25:01:65:3c:25:2c:79:5c: 30:bc:82:c9:60:df:85:e4:95:71:f3:48:9a:e1:0e: 8f:c7:41:f6:db:4d:a5:86:44:d3:62:00:ba:5e:5f: 86:34:d9:41:1b:37:51:8a:0d:13:e5:d4:43:12:82: e0:c4:5a:78:54:13:58:f9:4d:a4:5f:6d:06:07:b2: 8d:23:72:89:fb:2f:d1:7b:3e:ae:85:01:c9:1c:bf: 5c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9E:4A:D6:3C:6F:93:AE:CD:54:D4:01:74:FD:A5:49:1A:83:93:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/be8fc6de-01c8-350c-a49d-dc5cb7dccb3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.106.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:4b:48:af:5a:29:80:c3:87:37:ca:42:b0:c5:42:7e:fa:7d: fe:2c:d7:66:2c:ba:4f:01:7e:c9:fd:2e:fe:11:93:86:d9:e9: 91:7d:6a:95:76:d9:a4:8b:d8:71:4d:40:69:e1:48:a9:af:31: a9:ba:ba:13:fd:56:e5:36:6d:cb:a2:ac:fa:c4:0f:2d:75:72: 3e:bf:a0:c5:e0:de:65:f1:52:f3:42:f6:39:1a:3a:49:42:23: 46:52:dd:2a:df:3c:d3:83:e6:01:65:5a:c2:d7:26:5a:a4:b6: 5e:52:83:11:43:02:8e:a2:5e:2c:2e:fc:dc:41:8b:2c:89:94: 32:5c:00:d7:bc:7a:51:af:67:72:36:70:20:12:40:52:ea:a2: 66:0e:24:d7:1d:ac:9f:09:3d:f0:e5:a7:fa:00:1f:b9:3d:d8: c9:4e:1d:40:f0:8e:48:2d:66:87:dc:1e:cc:b9:16:8e:43:a2: 25:b9:87:10:be:a0:c1:ea:c3:e8:70:f4:55:15:2f:75:5f:4c: e9:92:24:27:b1:25:ae:04:13:26:e9:47:c8:a6:68:d1:37:5c: 25:8b:fc:2c:0a:25:78:f7:bd:f4:9e:91:ed:cb:fe:37:36:c9: 6a:cc:dd:c4:59:30:4d:39:18:d6:f9:43:1d:84:ee:6e:92:da: c4:7a:a1:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKb8jQzUU3AaRI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk MTRlOTQyOGQtZWFhMi00ZDg2LThlMmMtODI2ZDUyNzVkNzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5sDBHLeci7PVdU5aPD+XGnG+j/svr941piW LFiWsmQzm10IKhQ0kQLMIOEVyAFBI3VBy17NBWlc/9turc2ZKaOfeNFEBJiFsCtS EwFNqoO4cqZtq+PTZXqgliWrtmf2riJQG9YK4Hhd28PFGRSHgbt88nO5VF/mfMQy j2NIfH2stc/CO8DngqsNCGGzpaAXlgg2zrDDXzLFzWVNj687AFJ4ku+jAD+Hvh2V JQFlPCUseVwwvILJYN+F5JVx80ia4Q6Px0H2202lhkTTYgC6Xl+GNNlBGzdRig0T 5dRDEoLgxFp4VBNY+U2kX20GB7KNI3KJ+y/Rez6uhQHJHL9c6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGeStY8b5OuzVTUAXT9pUkag5M7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYmU4ZmM2ZGUtMDFjOC0z NTBjLWE0OWQtZGM1Y2I3ZGNjYjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Gr8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVLSK9aKYDDhzfKQrDFQn76ff4s12Ysuk8Bfsn9Lv4Rk4bZ6ZF9apV2 2aSL2HFNQGnhSKmvMam6uhP9VuU2bcuirPrEDy11cj6/oMXg3mXxUvNC9jkaOklC I0ZS3SrfPNOD5gFlWsLXJlqktl5SgxFDAo6iXiwu/NxBiyyJlDJcANe8elGvZ3I2 cCASQFLqomYOJNcdrJ8JPfDlp/oAH7k92MlOHUDwjkgtZofcHsy5Fo5DoiW5hxC+ oMHqw+hw9FUVL3VfTOmSJCexJa4EEybpR8imaNE3XCWL/CwKJXj3vfSeke3L/jc2 yWrM3cRZME05GNb5Qx2E7m6S2sR6oS4= -----END CERTIFICATE-----Generated at Mon Apr 28 13:20:16 2025 by rpki-client