$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/f6404bf4-cfbe-301f-9707-5fcc0c9b808e.roa File: f6404bf4-cfbe-301f-9707-5fcc0c9b808e.roa (raw, json) Hash identifier: MBFtb2QbUQn3eF+sPxGLC3gg/TrF9NF0HZWmx6QFXK4= Subject key identifier: 37:CA:55:67:90:15:3A:49:4E:60:53:EE:F0:4F:0E:69:1E:7E:21:E7 Certificate issuer: /CN=8eef875a-c9a4-45e0-9b80-3ea10becad9f Certificate serial: 010D0C9F43285849623393C15316A4DDA0DF91C8 Authority key identifier: DA:17:75:BB:11:3E:F2:6B:F0:F9:5E:6E:89:5C:C3:0E:E0:A8:CA:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/f6404bf4-cfbe-301f-9707-5fcc0c9b808e.roa Signing time: Tue 01 Apr 2025 17:06:58 +0000 ROA not before: Tue 01 Apr 2025 17:06:58 +0000 ROA not after: Mon 30 Jun 2025 17:06:58 +0000 asID: 20259 IP address blocks: 208.82.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:62:33:93:c1:53:16:a4:dd:a0:df:91:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eef875a-c9a4-45e0-9b80-3ea10becad9f Validity Not Before: Apr 1 17:06:58 2025 GMT Not After : Jun 30 17:06:58 2025 GMT Subject: CN=cc1cdee8-6374-4788-8802-713bd19155cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:01:bb:b6:5f:38:07:1f:c1:e3:8a:5c:fd:c2: 33:97:8e:14:bd:9e:b9:62:b2:03:1f:d6:a9:51:bc: 14:bd:fe:fd:3d:79:86:d3:bf:17:4d:bb:9f:97:db: 6a:8f:c1:c3:16:0a:94:37:a9:4c:9c:f9:53:47:d7: 68:e2:d3:dd:07:97:99:60:ce:aa:4f:98:c7:27:f1: ad:eb:f4:14:98:ee:95:31:e4:ed:b8:63:4f:07:bd: 43:db:b3:3f:94:0d:d3:b3:26:cf:bb:55:73:24:0e: 07:25:fa:83:2f:64:1d:dd:1b:18:ac:ec:e2:c2:6a: 49:14:19:d7:cc:89:bd:c4:0e:e1:75:47:a5:21:db: 2d:4b:3f:38:28:e3:68:7d:09:22:b3:a2:3e:dd:cb: 04:70:51:c3:40:5e:12:ee:1f:a1:0e:3d:33:47:a8: ec:43:87:bc:61:57:64:e7:bb:1d:84:6f:52:e6:5f: 2d:ff:16:c3:3e:1a:0e:6d:2a:00:e2:7c:fe:d9:61: 3d:98:30:c1:cd:7e:c8:a6:6f:f2:f2:f3:69:be:55: 85:d4:a4:49:d5:13:9b:73:94:a0:4b:82:29:06:f1: 43:fc:0a:fe:44:fa:3d:1f:33:29:1d:98:df:f3:86: c4:56:f4:35:c4:da:72:b0:1e:3b:5e:71:44:29:93: b3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CA:55:67:90:15:3A:49:4E:60:53:EE:F0:4F:0E:69:1E:7E:21:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/f6404bf4-cfbe-301f-9707-5fcc0c9b808e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.crl X509v3 Authority Key Identifier: keyid:DA:17:75:BB:11:3E:F2:6B:F0:F9:5E:6E:89:5C:C3:0E:E0:A8:CA:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer sbgp-ipAddrBlock: critical IPv4: 208.82.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:c2:21:60:b3:02:40:10:61:62:04:65:d8:ec:fc:c1:6c:d0: d5:dc:87:90:83:b7:ca:9f:eb:f1:56:ed:f4:2c:71:4f:53:ab: 80:d4:a5:66:96:93:f4:59:88:aa:d4:30:89:66:e9:b4:20:3b: 55:9b:7b:c2:1c:9b:d9:8a:0b:69:b3:ca:38:1b:6e:03:1f:80: 1d:de:d8:4d:29:fe:38:bf:fc:ea:d1:f8:a3:fd:01:8b:03:d9: b7:fa:f9:62:eb:83:f4:0e:2c:ad:04:ed:5d:9a:37:db:be:ee: 2e:98:7d:a0:03:69:b2:13:d4:02:8c:1c:41:c9:af:26:5d:f8: 54:a4:a9:01:a8:19:a3:d2:91:f5:ea:87:e2:9f:7a:d4:21:c3: 83:cd:ee:d7:67:d1:44:08:db:d5:18:05:8f:24:75:1a:5d:ed: f2:6d:19:5b:60:d8:04:9a:32:59:7c:29:17:5b:91:e3:ff:5a: 0a:42:14:de:99:e0:c2:c2:9e:92:7c:ff:4d:8a:36:15:81:70: e6:bc:5a:c3:58:7f:cc:22:10:5e:41:7e:91:95:b7:64:7c:65: c6:06:70:b4:ae:95:5d:f5:cc:af:4e:a8:05:47:3e:a4:6d:bb: f9:23:ae:aa:bf:89:96:3f:9a:1d:3f:da:69:35:07:ea:b1:9c: ca:b2:45:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEliM5PBUxak3aDfkcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVlZjg3NWEtYzlhNC00NWUwLTliODAtM2VhMTBiZWNh ZDlmMB4XDTI1MDQwMTE3MDY1OFoXDTI1MDYzMDE3MDY1OFowLzEtMCsGA1UEAxMk Y2MxY2RlZTgtNjM3NC00Nzg4LTg4MDItNzEzYmQxOTE1NWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwG7tl84Bx/B44pc/cIzl44UvZ65YrIDH9ap UbwUvf79PXmG078XTbufl9tqj8HDFgqUN6lMnPlTR9do4tPdB5eZYM6qT5jHJ/Gt 6/QUmO6VMeTtuGNPB71D27M/lA3TsybPu1VzJA4HJfqDL2Qd3RsYrOziwmpJFBnX zIm9xA7hdUelIdstSz84KONofQkis6I+3csEcFHDQF4S7h+hDj0zR6jsQ4e8YVdk 57sdhG9S5l8t/xbDPhoObSoA4nz+2WE9mDDBzX7Ipm/y8vNpvlWF1KRJ1RObc5Sg S4IpBvFD/Ar+RPo9HzMpHZjf84bEVvQ1xNpysB47XnFEKZOzMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfKVWeQFTpJTmBT7vBPDmkefiHnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZWVm ODc1YS1jOWE0LTQ1ZTAtOWI4MC0zZWExMGJlY2FkOWYvZjY0MDRiZjQtY2ZiZS0z MDFmLTk3MDctNWZjYzBjOWI4MDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGVlZjg3NWEtYzlhNC00NWUwLTli ODAtM2VhMTBiZWNhZDlmLzhlZWY4NzVhLWM5YTQtNDVlMC05YjgwLTNlYTEwYmVj YWQ5Zi5jcmwwHwYDVR0jBBgwFoAU2hd1uxE+8mvw+V5uiVzDDuCoynIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZWVmODc1YS1jOWE0LTQ1ZTAtOWI4MC0zZWEx MGJlY2FkOWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FJEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/CIWCzAkAQYWIEZdjs/MFs0NXch5CDt8qf6/FW7fQscU9Tq4DUpWaW k/RZiKrUMIlm6bQgO1Wbe8Icm9mKC2mzyjgbbgMfgB3e2E0p/ji//OrR+KP9AYsD 2bf6+WLrg/QOLK0E7V2aN9u+7i6YfaADabIT1AKMHEHJryZd+FSkqQGoGaPSkfXq h+KfetQhw4PN7tdn0UQI29UYBY8kdRpd7fJtGVtg2ASaMll8KRdbkeP/WgpCFN6Z 4MLCnpJ8/02KNhWBcOa8WsNYf8wiEF5BfpGVt2R8ZcYGcLSulV31zK9OqAVHPqRt u/kjrqq/iZY/mh0/2mk1B+qxnMqyRTc= -----END CERTIFICATE-----Generated at Fri May 9 01:48:36 2025 by rpki-client