$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/39b2346d-124f-373a-a9a3-41a3ac1e3c78.roa File: 39b2346d-124f-373a-a9a3-41a3ac1e3c78.roa (raw, json) Hash identifier: U+bavcgDJry6LO4s/Sdr1aL7b8KjrkAH38+ojvvhHHo= Subject key identifier: 9A:27:41:B7:0F:1A:5B:1B:4B:F4:36:3D:EC:94:01:FF:84:47:11:2B Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F432858499829D341C6B4EB3E63523480 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/39b2346d-124f-373a-a9a3-41a3ac1e3c78.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 11090 IP address blocks: 198.160.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d3:41:c6:b4:eb:3e:63:52:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=c8a6e62d-a1bf-40bd-afdc-dbabbd9723cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:48:ec:79:fb:39:40:2d:2b:ac:11:cc:72:c1: 90:81:53:03:b8:61:a9:cd:f4:19:0a:78:f8:66:75: 8e:32:18:c7:9c:90:14:30:8a:9b:e8:3c:f9:d4:4f: df:34:0c:22:6f:66:1a:b3:11:20:41:d4:8f:17:cd: 3e:a8:e7:3e:10:3d:81:95:28:ac:6d:5b:ed:bc:3e: f5:5d:b1:37:f9:42:e5:26:34:13:53:f0:2d:66:3b: f0:9c:65:5d:f4:6b:75:a3:a1:b7:a8:be:6b:e1:4a: dd:3f:de:08:97:0e:44:61:de:95:9d:f6:5c:f5:88: bd:5d:f5:79:a3:9a:70:20:6a:95:51:40:e2:ac:6d: 40:80:3f:ee:08:d2:d7:cb:97:7b:e8:b8:a9:e9:a0: 8c:23:5c:94:6e:1d:dc:a5:cc:31:e6:54:e9:0b:5f: 69:fd:1f:f2:35:30:de:04:05:87:f3:0d:39:59:0a: 03:a0:7b:b8:58:df:b8:3f:4c:b4:dd:b7:28:b4:14: bc:96:5d:53:6e:cc:9c:e4:12:12:e6:e1:d8:cd:a0: d1:45:30:dd:7b:f7:21:5b:b5:e2:08:21:7e:6f:cd: 64:a6:f6:8f:23:b4:3c:f2:de:47:1b:99:fc:66:60: bd:f2:cd:35:78:e2:71:a8:9a:97:e0:40:6d:d2:29: ba:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:27:41:B7:0F:1A:5B:1B:4B:F4:36:3D:EC:94:01:FF:84:47:11:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/39b2346d-124f-373a-a9a3-41a3ac1e3c78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 198.160.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:0e:6b:9d:87:f8:c0:b9:a6:89:19:b2:98:ad:de:ae:b9:d4: ce:b5:aa:fb:62:c1:eb:1e:c6:a2:c8:bf:45:1f:f1:4b:01:e5: 3f:1c:ee:4d:25:fc:9f:ab:dc:be:c9:e6:5e:f2:88:b9:ac:ce: 43:fa:bc:de:d5:5e:2f:6a:ae:44:94:84:db:9a:86:90:18:28: 8e:f0:82:3c:af:45:b8:5e:47:2a:a0:24:91:32:35:d9:09:1e: e5:6a:b2:c2:19:ad:a7:75:f5:9f:77:2e:4a:86:ec:b7:46:f0: cf:c2:60:5c:d4:12:a1:90:d7:0e:ef:4d:74:02:72:ec:8c:d9: 2c:15:71:64:34:41:f8:f3:a3:77:d5:af:c7:0d:6b:b5:78:76: e2:ad:c6:f6:82:1b:e6:e3:3b:4a:bb:8a:fc:76:58:80:a8:60: 65:58:9a:b7:40:98:b2:8f:c3:b1:83:af:10:51:95:12:b6:5b: bb:28:ec:b0:78:18:46:48:24:a1:91:99:48:13:35:1b:aa:8b: a8:5d:1e:51:1a:3a:59:2e:73:24:d4:d6:49:7a:f5:1f:9a:47: cc:b7:36:65:c7:32:80:63:33:02:5f:29:55:9b:97:81:b0:b7: 15:83:b4:e2:ac:06:c9:63:ef:fa:22:94:74:48:ed:f1:a1:29: 7b:65:5f:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdNBxrTrPmNSNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk YzhhNmU2MmQtYTFiZi00MGJkLWFmZGMtZGJhYmJkOTcyM2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUjsefs5QC0rrBHMcsGQgVMDuGGpzfQZCnj4 ZnWOMhjHnJAUMIqb6Dz51E/fNAwib2YasxEgQdSPF80+qOc+ED2BlSisbVvtvD71 XbE3+ULlJjQTU/AtZjvwnGVd9Gt1o6G3qL5r4UrdP94Ilw5EYd6VnfZc9Yi9XfV5 o5pwIGqVUUDirG1AgD/uCNLXy5d76Lip6aCMI1yUbh3cpcwx5lTpC19p/R/yNTDe BAWH8w05WQoDoHu4WN+4P0y03bcotBS8ll1Tbsyc5BIS5uHYzaDRRTDde/chW7Xi CCF+b81kpvaPI7Q88t5HG5n8ZmC98s01eOJxqJqX4EBt0im66QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJonQbcPGlsbS/Q2PeyUAf+ERxErMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMzliMjM0NmQtMTI0Zi0z NzNhLWE5YTMtNDFhM2FjMWUzYzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKoOa52H+MC5pokZspit3q651M61qvtiwesexqLIv0Uf8UsB5T8c7k0l /J+r3L7J5l7yiLmszkP6vN7VXi9qrkSUhNuahpAYKI7wgjyvRbheRyqgJJEyNdkJ HuVqssIZrad19Z93LkqG7LdG8M/CYFzUEqGQ1w7vTXQCcuyM2SwVcWQ0Qfjzo3fV r8cNa7V4duKtxvaCG+bjO0q7ivx2WICoYGVYmrdAmLKPw7GDrxBRlRK2W7so7LB4 GEZIJKGRmUgTNRuqi6hdHlEaOlkucyTU1kl69R+aR8y3NmXHMoBjMwJfKVWbl4Gw txWDtOKsBslj7/oilHRI7fGhKXtlXws= -----END CERTIFICATE-----Generated at Mon May 5 09:01:55 2025 by rpki-client