$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/30c2c6c8-d695-3d54-b0c3-7bad94805e5d.roa File: 30c2c6c8-d695-3d54-b0c3-7bad94805e5d.roa (raw, json) Hash identifier: 5Bf5Km7uegmPzkVMDsQ8GGZkZ4GvhLS910j2YbIXdK4= Subject key identifier: 9F:88:2E:00:6A:FE:95:CC:F9:27:45:59:7E:90:44:CC:99:B9:42:48 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F43285849ABB4A03736D8B6C321254B00 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/30c2c6c8-d695-3d54-b0c3-7bad94805e5d.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 11090 IP address blocks: 64.4.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:a0:37:36:d8:b6:c3:21:25:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=ae6cf90f-392a-4ac9-8f28-08aac8aa332f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d6:51:c2:e1:52:9d:d4:21:a1:3c:43:df:68: d8:3b:cf:4f:af:b9:88:cd:4a:b8:f5:d3:c3:28:ba: 77:35:ee:77:c0:3c:61:cb:fa:46:ba:0d:f8:ae:6a: 56:d8:c6:30:43:8a:ac:a3:e2:29:58:2a:09:94:0c: 7e:36:8b:f7:a9:17:19:b8:6a:77:0c:a0:a7:b6:57: 6c:d8:35:d5:36:2b:f8:10:4d:ae:56:7b:05:57:f9: 55:aa:a3:fe:29:db:ff:62:48:c9:1e:3c:a7:0a:2a: fb:ec:a9:4b:25:11:b9:20:7f:e5:f3:00:4d:30:a1: f0:75:a9:92:b3:0a:3b:a1:1a:54:49:de:30:8f:a1: 7f:10:34:4a:38:e2:83:87:ec:12:38:c7:d9:e0:d3: 1e:c8:0d:9d:22:6d:47:ae:ef:2e:d6:40:32:af:00: 3c:85:25:37:6f:db:3e:bc:2a:6d:d1:5d:e8:63:60: 54:79:98:75:9b:63:15:04:e5:cd:56:f5:c1:a1:0d: 90:61:ac:47:2f:7b:9d:bc:f3:9b:bb:47:eb:5f:87: 33:ba:d3:43:fa:a5:73:c0:4d:b4:d7:c1:c9:f9:fa: 7f:62:5e:ad:9c:c8:ae:b5:14:9b:96:88:76:97:13: e2:8c:e3:c7:70:07:5b:65:31:24:c6:b5:76:ea:07: 3b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:88:2E:00:6A:FE:95:CC:F9:27:45:59:7E:90:44:CC:99:B9:42:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/30c2c6c8-d695-3d54-b0c3-7bad94805e5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:44:92:34:75:98:d3:91:b3:e7:c8:4d:60:e5:a8:d8:02:73: a7:9d:d5:6e:a0:02:91:e9:4f:fa:24:f4:14:96:a9:23:4d:a0: 5b:11:6d:c2:85:c9:19:14:83:39:b4:dc:be:17:4d:3b:be:9e: 68:74:b6:91:59:28:84:20:9b:67:71:6c:c5:52:c6:4c:70:9f: 07:2b:28:f1:d8:10:a7:a2:f1:e6:7b:39:9b:28:4b:44:5b:bd: ad:14:3a:7a:57:65:7f:2b:90:71:fe:08:16:35:f7:63:ef:04: 55:05:a7:ea:1a:57:8d:27:5d:8d:15:5c:27:d4:9d:2c:2a:e7: dd:75:64:09:0f:22:a7:3a:04:bb:23:8e:9c:66:8d:08:ef:97: df:69:72:0f:ab:95:d3:7d:f9:e4:d7:44:6a:75:99:5c:8e:f6: 72:8d:5e:f2:ab:29:4e:e0:fe:46:3d:bb:f5:27:42:c4:c0:ca: e6:ab:83:9c:46:0c:31:4d:6e:f9:62:5d:79:82:dd:5e:62:07: 5e:32:8c:58:e0:a6:dc:8e:9e:19:63:a3:63:2a:86:df:f4:32: 15:b0:cc:04:a7:0a:9c:dc:70:d5:c7:8b:c6:8b:e1:24:da:3b: 28:ca:ab:cd:b1:4c:16:c1:bd:55:8a:31:f7:a9:95:73:8c:a7: ad:66:6e:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKA3Nti2wyElSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk YWU2Y2Y5MGYtMzkyYS00YWM5LThmMjgtMDhhYWM4YWEzMzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydZRwuFSndQhoTxD32jYO89Pr7mIzUq49dPD KLp3Ne53wDxhy/pGug34rmpW2MYwQ4qso+IpWCoJlAx+Nov3qRcZuGp3DKCntlds 2DXVNiv4EE2uVnsFV/lVqqP+Kdv/YkjJHjynCir77KlLJRG5IH/l8wBNMKHwdamS swo7oRpUSd4wj6F/EDRKOOKDh+wSOMfZ4NMeyA2dIm1Hru8u1kAyrwA8hSU3b9s+ vCpt0V3oY2BUeZh1m2MVBOXNVvXBoQ2QYaxHL3udvPObu0frX4czutND+qVzwE20 18HJ+fp/Yl6tnMiutRSbloh2lxPijOPHcAdbZTEkxrV26gc7tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+ILgBq/pXM+SdFWX6QRMyZuUJIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMzBjMmM2YzgtZDY5NS0z ZDU0LWIwYzMtN2JhZDk0ODA1ZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQAToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpEkjR1mNORs+fITWDlqNgCc6ed1W6gApHpT/ok9BSWqSNNoFsRbcKF yRkUgzm03L4XTTu+nmh0tpFZKIQgm2dxbMVSxkxwnwcrKPHYEKei8eZ7OZsoS0Rb va0UOnpXZX8rkHH+CBY192PvBFUFp+oaV40nXY0VXCfUnSwq5911ZAkPIqc6BLsj jpxmjQjvl99pcg+rldN9+eTXRGp1mVyO9nKNXvKrKU7g/kY9u/UnQsTAyuarg5xG DDFNbvliXXmC3V5iB14yjFjgptyOnhljo2Mqht/0MhWwzASnCpzccNXHi8aL4STa OyjKq82xTBbBvVWKMfeplXOMp61mbk4= -----END CERTIFICATE-----Generated at Tue May 6 18:57:52 2025 by rpki-client