$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/378569c9-d696-3fef-8aac-cd7b7915a9fd.roa File: 378569c9-d696-3fef-8aac-cd7b7915a9fd.roa (raw, json) Hash identifier: jy2B8o8Yt8pUcpxIjcFen9R1YxM3Ojz8mKrXxRjJazQ= Subject key identifier: F7:5C:BC:05:1E:C5:EE:E6:F1:42:F6:F0:6D:A8:B0:A4:6E:16:FE:07 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F432858499DBF381C95E1434FC429BF08 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/378569c9-d696-3fef-8aac-cd7b7915a9fd.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 11090 IP address blocks: 216.152.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:38:1c:95:e1:43:4f:c4:29:bf:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=199dc7ea-ea9d-4c2d-a468-b03a6d71e3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:59:78:eb:7c:47:7a:57:ab:fe:3e:ed:75:6d: f7:70:ef:cf:51:7a:4d:34:fd:02:b7:1b:86:60:32: 94:35:a4:09:b3:45:fe:a1:50:8f:dd:82:97:15:d0: 0a:06:92:c1:38:47:02:42:1b:d7:ad:ca:d9:c7:98: 3e:b2:cc:71:11:71:d9:97:75:71:be:9a:97:0c:a7: 0a:8f:9a:e0:b6:92:67:18:ce:4a:69:0d:7c:35:33: 17:b1:93:ec:5d:e8:b1:07:e4:85:1e:f0:38:53:8b: 67:0e:7d:20:43:f2:a7:2b:05:41:5c:85:26:cd:18: 80:5e:5a:4e:47:c6:15:0a:26:e9:e3:89:f3:8b:dc: 01:d4:a2:9d:d4:4e:27:14:93:4a:01:8a:8a:b5:03: bf:c9:f8:a3:f4:9d:55:26:d3:2a:19:68:48:dd:d6: 7b:73:c5:e2:a3:e2:96:52:0f:c0:89:f7:a7:51:c6: f8:b4:50:7c:4d:dc:66:18:f2:c7:a2:7d:64:b9:de: a5:51:d0:27:a6:7d:02:e1:fb:18:af:8f:b9:c5:04: 9f:d5:01:58:94:e4:0b:39:a0:af:36:99:56:ee:ff: 46:d7:7a:0d:2e:2e:ee:bb:64:42:e6:99:dd:0f:08: 87:0e:fb:3e:94:df:d6:2a:df:73:12:c3:b1:bc:ef: 46:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:5C:BC:05:1E:C5:EE:E6:F1:42:F6:F0:6D:A8:B0:A4:6E:16:FE:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/378569c9-d696-3fef-8aac-cd7b7915a9fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.152.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:72:52:72:a6:2d:ad:86:3a:0b:ac:ee:3d:6e:9f:bb:93:de: f1:50:b2:17:a0:c7:21:8f:e5:8a:c3:6d:be:c5:5b:63:e4:bc: 06:d7:16:7d:a3:01:6d:71:97:7d:b6:86:13:6b:c1:e8:17:de: e9:e7:bf:40:2f:58:94:dc:8c:4f:78:dc:51:55:45:fa:3e:99: 7c:6b:35:0c:57:3c:ce:20:cb:d1:46:30:22:16:a9:f5:f0:23: 6e:1d:a3:6e:8a:c7:ec:ce:1d:44:14:5b:3d:48:6f:7c:38:7d: fe:8d:28:24:5e:19:7b:a2:21:5f:9b:04:cd:a8:57:a3:cd:0d: 39:10:a7:07:80:1f:ab:63:ca:b4:f0:6c:c6:7a:81:c5:da:32: c8:bd:cc:a5:6e:9c:33:74:a1:a6:9a:cd:f9:b4:6b:79:2e:65: dd:43:c0:79:d0:8d:b3:07:9e:20:37:d2:3b:d3:16:3e:53:55: d0:4c:43:78:8e:09:31:9f:7f:32:a9:b3:2a:da:82:ed:e8:46: de:0b:f4:f6:db:01:b6:9c:83:0b:13:c8:81:33:e1:33:91:7b: ec:b8:38:99:cf:6e:bc:10:b4:ac:5f:88:47:34:36:ac:3c:ab: 0b:96:04:ae:73:67:0f:6a:c0:64:85:f0:af:b8:d4:d9:dc:dd: 67:3c:43:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzgcleFDT8QpvwgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MTk5ZGM3ZWEtZWE5ZC00YzJkLWE0NjgtYjAzYTZkNzFlM2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ll463xHeler/j7tdW33cO/PUXpNNP0CtxuG YDKUNaQJs0X+oVCP3YKXFdAKBpLBOEcCQhvXrcrZx5g+ssxxEXHZl3VxvpqXDKcK j5rgtpJnGM5KaQ18NTMXsZPsXeixB+SFHvA4U4tnDn0gQ/KnKwVBXIUmzRiAXlpO R8YVCibp44nzi9wB1KKd1E4nFJNKAYqKtQO/yfij9J1VJtMqGWhI3dZ7c8Xio+KW Ug/AifenUcb4tFB8TdxmGPLHon1kud6lUdAnpn0C4fsYr4+5xQSf1QFYlOQLOaCv NplW7v9G13oNLi7uu2RC5pndDwiHDvs+lN/WKt9zEsOxvO9GrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdcvAUexe7m8UL28G2osKRuFv4HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMzc4NTY5YzktZDY5Ni0z ZmVmLThhYWMtY2Q3Yjc5MTVhOWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2JiwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpyUnKmLa2GOgus7j1un7uT3vFQshegxyGP5YrDbb7FW2PkvAbXFn2j AW1xl322hhNrwegX3unnv0AvWJTcjE943FFVRfo+mXxrNQxXPM4gy9FGMCIWqfXw I24do26Kx+zOHUQUWz1Ib3w4ff6NKCReGXuiIV+bBM2oV6PNDTkQpweAH6tjyrTw bMZ6gcXaMsi9zKVunDN0oaaazfm0a3kuZd1DwHnQjbMHniA30jvTFj5TVdBMQ3iO CTGffzKpsyragu3oRt4L9PbbAbacgwsTyIEz4TORe+y4OJnPbrwQtKxfiEc0Nqw8 qwuWBK5zZw9qwGSF8K+41Nnc3Wc8Q/0= -----END CERTIFICATE-----Generated at Wed May 7 21:43:43 2025 by rpki-client