$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/4126b35e-744f-350d-a1ea-822611f74736.roa File: 4126b35e-744f-350d-a1ea-822611f74736.roa (raw, json) Hash identifier: UPg0BqLySFTtw6WyoZBlGOojgX+zSG1EJ6u5T1XVUSs= Subject key identifier: A2:48:A9:FA:9E:98:A9:76:84:A2:0D:9D:2F:42:27:59:DC:0D:07:5A Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F43285849ABB4A8689AEFFF1B08E15A80 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/4126b35e-744f-350d-a1ea-822611f74736.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 11090 IP address blocks: 216.137.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:a8:68:9a:ef:ff:1b:08:e1:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=2ba3b680-e62e-45f1-acbf-a609f4c33fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1d:84:fd:2c:c3:9c:f0:cf:c5:c8:ec:35:94: 09:ce:26:24:14:d8:e9:24:fe:86:5c:65:39:32:1e: 3b:47:ac:8e:2a:a1:ef:a0:7e:ad:76:3a:3c:b0:fa: 68:6e:1a:df:5e:d0:81:38:9f:80:67:72:83:63:c6: eb:6e:52:7d:c9:17:f3:09:63:14:77:03:ac:ce:b8: 5e:d1:9f:bf:b2:e0:c3:54:76:db:9c:5b:28:d4:06: 84:6b:25:aa:ec:a2:14:dc:6b:10:ad:4c:8d:25:95: ab:a1:cc:c2:2c:8e:ab:8a:32:d0:3b:c7:8a:56:02: 89:cb:68:6e:fb:8d:4a:d0:1d:b2:ac:39:04:58:f2: 1e:ba:c9:63:e1:26:6d:1c:3b:9f:09:60:0f:b9:fe: 1e:bc:7e:04:ff:1d:19:dc:25:59:31:5a:c0:f4:ef: f4:db:3b:7a:94:77:40:f7:a5:60:83:5a:d0:d5:cc: 23:c1:1b:4d:f3:a8:2f:a2:80:5e:92:02:a7:c6:53: 15:a6:98:01:fb:ce:76:52:4c:0c:a5:b0:b9:e8:fd: da:c3:7a:39:1e:7b:b1:91:ae:00:d8:90:15:41:c7: 9b:fe:40:5c:82:b7:61:ba:67:fd:53:5c:3d:2c:48: 12:a6:f4:ee:c3:ff:0b:e7:dc:64:bf:93:36:fd:06: d9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:48:A9:FA:9E:98:A9:76:84:A2:0D:9D:2F:42:27:59:DC:0D:07:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/4126b35e-744f-350d-a1ea-822611f74736.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.137.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:1a:a2:4b:dc:16:2d:7c:46:27:65:1e:50:ab:d7:d2:4d:9d: ea:b7:5d:1a:28:cd:6d:ef:52:6a:16:53:89:50:86:4c:23:65: e8:cc:db:f6:9d:18:17:61:79:22:75:5d:57:75:be:43:8b:3d: f8:87:02:11:6d:bb:aa:d3:25:7d:7c:d9:0e:47:ae:67:b4:f6: 99:a8:58:e1:a9:2e:10:4b:a6:4d:0c:7e:90:6b:b1:e7:34:5a: af:a1:13:e1:d2:49:60:93:0e:c7:db:52:7e:3e:4f:ef:c5:1d: 90:f4:2b:57:a4:18:64:7f:e3:5e:22:12:75:04:38:df:14:39: b1:c9:92:bd:d4:d7:73:29:92:c5:4a:df:0b:4a:07:0c:23:1f: 7b:5b:cc:6e:34:6d:1e:8a:01:ba:af:60:f7:e5:c8:4d:c0:03: 54:14:5d:1f:76:7f:58:15:10:c5:f2:86:a6:dd:ed:3f:ce:b5: 5c:23:6f:b3:e9:e1:1c:c8:95:e7:86:b5:36:ab:4c:c8:5c:49: 07:9a:3d:3d:31:28:42:99:3b:84:77:7b:c1:27:0a:d2:9a:c7: bc:19:15:14:d6:21:40:98:0d:26:62:1f:b6:64:1c:9d:4a:37: ac:ca:92:9f:aa:4b:e2:db:af:83:4c:9c:1d:9a:40:21:f3:67: c8:92:d4:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKhomu//GwjhWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk MmJhM2I2ODAtZTYyZS00NWYxLWFjYmYtYTYwOWY0YzMzZmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB2E/SzDnPDPxcjsNZQJziYkFNjpJP6GXGU5 Mh47R6yOKqHvoH6tdjo8sPpobhrfXtCBOJ+AZ3KDY8brblJ9yRfzCWMUdwOszrhe 0Z+/suDDVHbbnFso1AaEayWq7KIU3GsQrUyNJZWroczCLI6rijLQO8eKVgKJy2hu +41K0B2yrDkEWPIeuslj4SZtHDufCWAPuf4evH4E/x0Z3CVZMVrA9O/02zt6lHdA 96Vgg1rQ1cwjwRtN86gvooBekgKnxlMVppgB+852UkwMpbC56P3aw3o5Hnuxka4A 2JAVQceb/kBcgrdhumf9U1w9LEgSpvTuw/8L59xkv5M2/QbZfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJIqfqemKl2hKINnS9CJ1ncDQdaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNDEyNmIzNWUtNzQ0Zi0z NTBkLWExZWEtODIyNjExZjc0NzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2InwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwaokvcFi18RidlHlCr19JNneq3XRoozW3vUmoWU4lQhkwjZejM2/ad GBdheSJ1XVd1vkOLPfiHAhFtu6rTJX182Q5Hrme09pmoWOGpLhBLpk0MfpBrsec0 Wq+hE+HSSWCTDsfbUn4+T+/FHZD0K1ekGGR/414iEnUEON8UObHJkr3U13MpksVK 3wtKBwwjH3tbzG40bR6KAbqvYPflyE3AA1QUXR92f1gVEMXyhqbd7T/OtVwjb7Pp 4RzIleeGtTarTMhcSQeaPT0xKEKZO4R3e8EnCtKax7wZFRTWIUCYDSZiH7ZkHJ1K N6zKkp+qS+Lbr4NMnB2aQCHzZ8iS1JI= -----END CERTIFICATE-----Generated at Wed May 7 18:57:14 2025 by rpki-client