$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3b268d14-7ec3-3f3c-a0d6-ac2a669c6060.roa File: 3b268d14-7ec3-3f3c-a0d6-ac2a669c6060.roa (raw, json) Hash identifier: JslOG3ahbacBRCvM/7EdK1MrPEfn//0FuOAQl6echqc= Subject key identifier: 1E:7A:8F:58:41:91:18:3C:F3:19:56:3F:2F:64:7A:AF:52:C5:BE:6F Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F432858499DBF380187299E2EBAF4D700 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3b268d14-7ec3-3f3c-a0d6-ac2a669c6060.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 11090 IP address blocks: 216.152.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:38:01:87:29:9e:2e:ba:f4:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=c84f5b71-5836-49ba-9779-65e132783cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:37:1a:3c:59:49:39:c7:b4:07:d6:da:cf:fc: 52:3a:5f:62:0b:82:01:6b:75:9f:eb:48:85:46:0c: 0c:69:9b:7c:c0:d7:b6:16:52:d8:5c:97:e8:6e:94: 3b:65:e7:2d:ee:38:cd:96:7a:94:a5:46:86:24:2f: c3:d1:be:ed:59:49:b7:9a:85:e6:78:40:6a:c4:a2: 63:2b:56:2b:70:66:c1:fb:55:51:e9:28:7f:cd:fd: 1d:57:a7:ff:7c:5a:d1:72:fc:24:7e:7e:72:8d:0b: a9:c1:a0:b4:ca:c3:a7:70:4d:b7:21:59:5d:bb:65: 39:76:fb:8b:54:6e:2f:58:b2:ba:94:60:01:3a:62: 75:12:f3:83:61:23:6c:24:a7:b5:67:41:e3:9d:b0: 9c:8a:c8:2c:1d:80:d6:c8:9f:a0:ae:44:ad:6d:76: fa:8b:8e:71:b3:db:31:1e:75:29:02:de:00:93:7c: 50:fe:30:7d:bd:b3:86:58:72:3c:10:13:ed:67:ba: dc:c4:05:19:3c:40:e5:0c:6f:e1:26:f8:30:3f:ed: b0:b5:68:2e:10:9d:d2:6b:f9:a3:14:77:b2:eb:26: df:68:c8:f7:41:9b:b2:92:71:2a:f7:36:0b:38:67: 54:0b:a9:ca:cc:70:d3:bf:8b:06:86:dd:12:58:90: 20:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7A:8F:58:41:91:18:3C:F3:19:56:3F:2F:64:7A:AF:52:C5:BE:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3b268d14-7ec3-3f3c-a0d6-ac2a669c6060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.152.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:a9:db:06:05:94:53:ce:33:78:e4:cd:9c:23:0c:7e:09:64: 9f:89:c1:6d:77:ef:56:a4:5d:ec:29:6a:61:f6:c5:2d:09:53: df:6f:36:8e:07:57:d1:31:a2:1b:b2:50:3c:8f:fa:af:b4:ae: 0a:99:3d:02:44:ed:44:03:af:22:a9:6d:49:76:51:30:9b:2b: c5:44:df:06:1b:1a:60:32:65:f4:36:88:aa:24:60:48:4b:7d: ef:0e:14:e7:2d:c2:ef:56:c2:63:13:f3:95:cf:6d:93:8d:8d: 8d:51:3c:94:85:2c:98:d0:cc:e4:f2:78:36:35:c2:e2:01:5a: e1:4e:22:09:21:37:1a:fc:f9:d1:01:55:ca:ff:c8:e0:ac:5b: 9e:9b:ca:40:23:c3:26:61:8b:7b:48:12:99:85:af:fa:93:4a: ce:18:d8:b4:63:b7:61:66:c2:ce:1d:12:4e:2e:1d:4b:4a:93: 5f:6b:73:cd:8d:4f:bf:03:77:08:a8:e5:dc:b5:d8:f4:36:f8: 62:75:ae:8b:bb:be:62:80:01:e9:9b:5a:de:ee:38:e1:46:29: 0c:d1:7e:76:91:d7:e5:cc:a5:23:2f:4a:1f:a7:f2:29:6e:8e: c3:50:3e:a9:e0:8c:48:5f:43:7c:89:95:19:10:4b:bd:49:44: 03:86:06:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzgBhymeLrr01wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk Yzg0ZjViNzEtNTgzNi00OWJhLTk3NzktNjVlMTMyNzgzY2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTcaPFlJOce0B9baz/xSOl9iC4IBa3Wf60iF RgwMaZt8wNe2FlLYXJfobpQ7Zect7jjNlnqUpUaGJC/D0b7tWUm3moXmeEBqxKJj K1YrcGbB+1VR6Sh/zf0dV6f/fFrRcvwkfn5yjQupwaC0ysOncE23IVldu2U5dvuL VG4vWLK6lGABOmJ1EvODYSNsJKe1Z0HjnbCcisgsHYDWyJ+grkStbXb6i45xs9sx HnUpAt4Ak3xQ/jB9vbOGWHI8EBPtZ7rcxAUZPEDlDG/hJvgwP+2wtWguEJ3Sa/mj FHey6ybfaMj3QZuyknEq9zYLOGdUC6nKzHDTv4sGht0SWJAgNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB56j1hBkRg88xlWPy9keq9Sxb5vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvM2IyNjhkMTQtN2VjMy0z ZjNjLWEwZDYtYWMyYTY2OWM2MDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Ji0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2p2wYFlFPOM3jkzZwjDH4JZJ+JwW1371akXewpamH2xS0JU99vNo4H V9ExohuyUDyP+q+0rgqZPQJE7UQDryKpbUl2UTCbK8VE3wYbGmAyZfQ2iKokYEhL fe8OFOctwu9WwmMT85XPbZONjY1RPJSFLJjQzOTyeDY1wuIBWuFOIgkhNxr8+dEB Vcr/yOCsW56bykAjwyZhi3tIEpmFr/qTSs4Y2LRjt2Fmws4dEk4uHUtKk19rc82N T78Ddwio5dy12PQ2+GJ1rou7vmKAAembWt7uOOFGKQzRfnaR1+XMpSMvSh+n8ilu jsNQPqngjEhfQ3yJlRkQS71JRAOGBiU= -----END CERTIFICATE-----Generated at Wed May 7 01:05:51 2025 by rpki-client