$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/1240df73-c51c-3ee8-876b-f6ef5d6e3e60.roa File: 1240df73-c51c-3ee8-876b-f6ef5d6e3e60.roa (raw, json) Hash identifier: 366g22lRixmHqp3OUUo3UCIi7zskz3pZFWx/PHhVTsk= Subject key identifier: 18:B9:CD:36:4C:25:8F:FD:FE:89:45:B4:43:98:06:AB:9F:78:19:E0 Certificate issuer: /CN=be0c0ba3-5f5d-4f25-9828-23e3dd604ee7 Certificate serial: 010D0C9F432858498E648CC3FE1063B503910790 Authority key identifier: A0:F0:66:F4:C5:4F:A7:E9:1B:46:F2:18:3D:DC:96:F7:F7:D3:2B:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/1240df73-c51c-3ee8-876b-f6ef5d6e3e60.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 399194 IP address blocks: 172.81.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:8c:c3:fe:10:63:b5:03:91:07:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0c0ba3-5f5d-4f25-9828-23e3dd604ee7 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=963aabe8-375d-41a2-ae46-b90bcb59e6e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:09:50:23:4d:95:d7:58:ca:d1:43:81:ad:d8: a6:85:75:5e:11:94:e8:32:36:01:39:38:7a:37:22: d2:96:78:8f:eb:7d:34:7d:7b:5c:18:ac:d1:c9:6d: f6:f1:34:29:eb:dc:f8:14:7b:9d:a8:2f:9f:a8:49: 52:af:69:1f:0a:1b:9f:e5:d8:44:75:e5:2f:99:ba: 06:27:0c:71:53:ee:b2:36:45:4c:3f:80:73:2f:ab: b9:aa:4d:1a:44:cd:a6:52:6a:46:ce:97:a9:ef:f3: a0:92:bb:5b:cb:4a:de:f3:2a:d9:0b:53:ed:88:46: 49:ba:65:e2:2d:b4:1e:fe:c8:7a:26:1c:7b:13:fd: 80:7c:74:28:1d:57:f1:59:bd:b6:f4:68:24:77:a9: 3b:9a:8d:26:47:8c:90:b5:03:7e:9e:dd:4c:34:33: 65:48:bb:c9:ff:e2:71:e1:d5:b4:63:1e:10:cf:d1: de:87:73:29:65:c9:b3:bd:49:22:ce:5b:12:bf:72: 01:35:50:30:d0:27:14:ba:1b:6a:05:b0:f2:61:98: bc:4f:bc:dc:5a:2b:1b:86:3e:4a:27:ac:13:6b:5e: 8b:ca:82:5d:9c:91:99:9a:df:7e:ac:af:81:8a:96: bf:87:d2:af:28:be:7b:a9:29:8a:db:fb:65:99:dc: 87:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B9:CD:36:4C:25:8F:FD:FE:89:45:B4:43:98:06:AB:9F:78:19:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/1240df73-c51c-3ee8-876b-f6ef5d6e3e60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.crl X509v3 Authority Key Identifier: keyid:A0:F0:66:F4:C5:4F:A7:E9:1B:46:F2:18:3D:DC:96:F7:F7:D3:2B:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.cer sbgp-ipAddrBlock: critical IPv4: 172.81.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:69:4d:bf:46:e2:31:49:91:ed:df:7c:66:ec:b0:6a:05:4f: 05:87:26:d3:b1:56:3e:dc:dc:74:a7:53:12:a2:6f:1c:61:37: 5f:21:46:a3:b4:1f:93:c3:9c:0a:a9:9e:2f:d4:5d:a7:34:71: 11:e1:92:73:69:9f:a7:da:57:b6:6d:70:ad:57:b8:5c:13:9d: 65:2c:5c:1b:c1:42:aa:76:e0:97:ce:a2:22:cf:5a:80:0e:fd: 31:ee:35:ac:a1:2e:e0:00:52:c7:ff:c6:7a:24:47:4d:2f:bd: 06:76:b7:7d:db:bf:52:c0:c2:72:f5:bd:26:7e:94:75:e8:48: be:fd:b5:eb:3a:a8:9d:3c:fb:cd:c2:df:2d:b0:0b:cc:2d:bd: 5a:14:5e:e1:40:d4:b4:fc:b7:b8:3f:5d:a9:c5:cf:4e:7b:ed: e1:a9:1a:1d:d2:91:3f:a0:39:03:54:ee:be:0f:3a:91:0b:b7: ab:17:d8:be:5a:d4:b8:57:a3:c0:5c:c3:8b:88:35:52:53:67: c3:aa:52:fc:76:51:1a:a0:ca:e8:ff:1d:46:cf:6c:5b:ef:04: c2:a4:5d:1e:2e:23:f2:bc:65:49:2b:cd:bf:55:d1:e8:99:12: 64:d0:bc:fc:90:16:1a:0e:9f:cb:4c:dc:46:43:85:f0:92:56: bb:36:95:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZIzD/hBjtQORB5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUwYzBiYTMtNWY1ZC00ZjI1LTk4MjgtMjNlM2RkNjA0 ZWU3MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk OTYzYWFiZTgtMzc1ZC00MWEyLWFlNDYtYjkwYmNiNTllNmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQlQI02V11jK0UOBrdimhXVeEZToMjYBOTh6 NyLSlniP6300fXtcGKzRyW328TQp69z4FHudqC+fqElSr2kfChuf5dhEdeUvmboG JwxxU+6yNkVMP4BzL6u5qk0aRM2mUmpGzpep7/Ogkrtby0re8yrZC1PtiEZJumXi LbQe/sh6Jhx7E/2AfHQoHVfxWb229Ggkd6k7mo0mR4yQtQN+nt1MNDNlSLvJ/+Jx 4dW0Yx4Qz9Heh3MpZcmzvUkizlsSv3IBNVAw0CcUuhtqBbDyYZi8T7zcWisbhj5K J6wTa16LyoJdnJGZmt9+rK+Bipa/h9KvKL57qSmK2/tlmdyHmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBi5zTZMJY/9/olFtEOYBqufeBngMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZTBj MGJhMy01ZjVkLTRmMjUtOTgyOC0yM2UzZGQ2MDRlZTcvMTI0MGRmNzMtYzUxYy0z ZWU4LTg3NmItZjZlZjVkNmUzZTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmUwYzBiYTMtNWY1ZC00ZjI1LTk4 MjgtMjNlM2RkNjA0ZWU3L2JlMGMwYmEzLTVmNWQtNGYyNS05ODI4LTIzZTNkZDYw NGVlNy5jcmwwHwYDVR0jBBgwFoAUoPBm9MVPp+kbRvIYPdyW9/fTK4swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZTBjMGJhMy01ZjVkLTRmMjUtOTgyOC0yM2Uz ZGQ2MDRlZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVpTb9G4jFJke3ffGbssGoFTwWHJtOxVj7c3HSnUxKibxxhN18hRqO0 H5PDnAqpni/UXac0cRHhknNpn6faV7ZtcK1XuFwTnWUsXBvBQqp24JfOoiLPWoAO /THuNayhLuAAUsf/xnokR00vvQZ2t33bv1LAwnL1vSZ+lHXoSL79tes6qJ08+83C 3y2wC8wtvVoUXuFA1LT8t7g/XanFz0577eGpGh3SkT+gOQNU7r4POpELt6sX2L5a 1LhXo8Bcw4uINVJTZ8OqUvx2URqgyuj/HUbPbFvvBMKkXR4uI/K8ZUkrzb9V0eiZ EmTQvPyQFhoOn8tM3EZDhfCSVrs2lTU= -----END CERTIFICATE-----Generated at Fri May 9 17:03:46 2025 by rpki-client