$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3cf41fcb-a985-3473-9e69-d92e3e7ac8c5.roa File: 3cf41fcb-a985-3473-9e69-d92e3e7ac8c5.roa (raw, json) Hash identifier: N42cS5QPv4cSixcvOymxHY6w7l9T0k1XwK+zEsJyETk= Subject key identifier: 03:5B:3B:F1:D7:F8:AC:A1:CA:C8:B0:5A:FB:AC:B7:ED:C0:63:4A:CF Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F43285849ABB4A0A0E5F6E73D83525380 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3cf41fcb-a985-3473-9e69-d92e3e7ac8c5.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 11090 IP address blocks: 64.4.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:a0:a0:e5:f6:e7:3d:83:52:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=6eec7b87-7531-4262-be86-c2ae091f7810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1c:a4:c8:ce:07:0b:a6:16:9c:ae:f8:c6:a5: 7b:ef:12:6a:b0:ee:12:3f:9d:7b:de:16:3f:1b:3b: f3:22:6a:ad:1f:ef:7a:57:d4:c1:f7:6e:7a:70:cf: 78:16:5e:48:01:23:da:ae:05:44:e1:cd:f3:d5:cd: b8:da:36:1f:87:b7:e7:86:c5:86:c0:ca:6c:76:81: 55:75:23:9f:41:56:4f:30:68:94:5f:33:4e:1c:9b: 84:14:22:7a:21:54:f0:ff:6a:56:ca:81:cf:76:77: 42:c8:e7:a0:82:16:9d:59:56:e3:45:fc:1c:59:7e: 23:ad:35:47:68:e4:86:52:c0:c7:bb:89:8b:2a:72: 05:47:a3:47:a7:ab:34:24:f2:d8:5a:4c:b0:a5:45: 9a:e2:fc:71:d7:31:19:b3:87:5e:de:61:33:f3:6a: 4c:aa:2c:e9:b9:00:12:70:0e:15:9a:bf:76:bf:2f: 60:e5:e5:8d:da:4c:a5:07:d4:7b:cd:4c:05:3b:26: 70:b1:30:d9:d0:d0:18:bb:6e:1e:7d:90:85:f5:1e: c8:d0:1d:c0:95:91:00:16:e6:72:68:b9:fa:95:c5: 97:65:c3:91:af:f9:01:5b:47:10:f8:bc:3e:f8:ef: 91:13:ca:a3:9e:3a:22:75:4d:3a:27:43:ce:6f:74: f2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5B:3B:F1:D7:F8:AC:A1:CA:C8:B0:5A:FB:AC:B7:ED:C0:63:4A:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3cf41fcb-a985-3473-9e69-d92e3e7ac8c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:19:27:d4:82:f3:66:77:b7:2f:60:65:1a:55:9a:3d:73:48: 13:e4:30:c5:68:31:36:1e:a8:d6:ee:0f:3a:25:0e:6b:dd:0b: 27:16:c1:f8:f9:e6:fa:66:7e:73:10:be:31:e9:05:bc:2f:78: 0c:06:1e:2f:ec:5c:05:1f:1b:1b:30:fe:03:48:c7:b1:d1:43: 0a:54:8f:7f:a1:f0:0d:6c:cc:b6:80:d9:e1:2c:10:74:d4:da: af:31:2a:af:36:a7:f5:56:7f:e5:50:d8:21:72:e1:38:57:3a: 1c:fb:be:fb:1c:74:71:d3:26:b4:64:e6:c0:d0:7a:21:1c:e0: a8:d7:43:d5:9d:35:99:fd:62:63:7b:9d:c1:82:a2:04:40:68: 3b:23:4e:49:17:b9:e7:db:ce:9e:a5:4e:e8:82:e9:e9:9b:e8: 03:cc:e7:cb:52:a4:d0:c3:7a:e4:fb:a0:a3:95:74:4a:46:56: 7d:59:7b:25:6a:4c:b0:d0:bf:8f:b4:e4:10:fa:24:c3:7e:8a: 0e:43:61:9d:b3:b7:a8:a2:50:56:d3:75:ec:6b:ea:db:48:e3: 26:0f:b2:03:59:69:d1:d5:3a:fe:fc:eb:a1:43:3a:02:1d:5e: 20:d9:49:cc:33:10:89:dd:81:80:a1:d3:41:c5:40:39:8a:e7: ae:58:07:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKCg5fbnPYNSU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk NmVlYzdiODctNzUzMS00MjYyLWJlODYtYzJhZTA5MWY3ODEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBykyM4HC6YWnK74xqV77xJqsO4SP5173hY/ GzvzImqtH+96V9TB9256cM94Fl5IASPargVE4c3z1c242jYfh7fnhsWGwMpsdoFV dSOfQVZPMGiUXzNOHJuEFCJ6IVTw/2pWyoHPdndCyOegghadWVbjRfwcWX4jrTVH aOSGUsDHu4mLKnIFR6NHp6s0JPLYWkywpUWa4vxx1zEZs4de3mEz82pMqizpuQAS cA4Vmr92vy9g5eWN2kylB9R7zUwFOyZwsTDZ0NAYu24efZCF9R7I0B3AlZEAFuZy aLn6lcWXZcORr/kBW0cQ+Lw++O+RE8qjnjoidU06J0POb3Ty2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANbO/HX+KyhysiwWvust+3AY0rPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvM2NmNDFmY2ItYTk4NS0z NDczLTllNjktZDkyZTNlN2FjOGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQATgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALMZJ9SC82Z3ty9gZRpVmj1zSBPkMMVoMTYeqNbuDzolDmvdCycWwfj5 5vpmfnMQvjHpBbwveAwGHi/sXAUfGxsw/gNIx7HRQwpUj3+h8A1szLaA2eEsEHTU 2q8xKq82p/VWf+VQ2CFy4ThXOhz7vvscdHHTJrRk5sDQeiEc4KjXQ9WdNZn9YmN7 ncGCogRAaDsjTkkXuefbzp6lTuiC6emb6APM58tSpNDDeuT7oKOVdEpGVn1ZeyVq TLDQv4+05BD6JMN+ig5DYZ2zt6iiUFbTdexr6ttI4yYPsgNZadHVOv7866FDOgId XiDZScwzEIndgYCh00HFQDmK565YB+k= -----END CERTIFICATE-----Generated at Mon May 5 17:21:35 2025 by rpki-client