$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/4203a888-ffda-34ce-bf72-ac4a102906e4.roa File: 4203a888-ffda-34ce-bf72-ac4a102906e4.roa (raw, json) Hash identifier: pU3e/Qx59DZ3G5khPWhs2f+LiR0fGxvQyz8BEAQOfrc= Subject key identifier: 7E:C6:45:0C:B6:8A:70:A2:3D:42:F7:5C:42:53:44:33:03:51:C9:DE Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F43285849ABB4A0443BAE5AAEAE235F00 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/4203a888-ffda-34ce-bf72-ac4a102906e4.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 11090 IP address blocks: 64.4.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:a0:44:3b:ae:5a:ae:ae:23:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=e2e21354-d0d0-4f6d-9cbd-dccc9f34d466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7b:3d:47:a0:38:31:b5:2c:25:96:40:19:eb: 33:da:c5:eb:a5:44:e9:dd:81:e8:34:25:32:09:46: 7b:19:85:eb:be:a6:a8:86:a4:17:e3:92:00:ae:1e: 66:3d:4f:18:cd:7c:97:e8:a3:e0:17:db:45:2b:90: 49:02:33:21:30:63:dd:3d:ce:23:e9:9e:c1:96:75: 5b:dc:0f:2b:d3:34:45:c6:03:2f:d3:45:f1:bf:83: fa:a7:2e:a5:83:7c:3d:c4:38:8c:94:b8:71:b5:c1: ee:c1:e3:2a:38:8c:8e:62:45:0d:08:28:e9:3a:09: 8f:07:1a:ca:07:b8:b7:91:62:d4:c4:59:8d:12:aa: 71:28:b1:75:a9:61:77:11:19:8e:e0:cd:27:fc:91: 91:31:5a:6d:1f:f2:4b:58:d9:7d:1e:0e:97:88:e5: 29:32:b2:2c:ea:24:b1:e3:b7:dd:4e:2c:46:71:0e: ba:fd:a9:9c:bc:ad:f3:d0:5e:f9:53:01:ad:ca:1b: f8:b1:bb:d9:fa:ab:58:5a:66:ba:67:6f:da:13:17: f2:34:8d:85:0f:a5:62:ac:20:62:d1:52:5a:0a:f6: 24:2a:d3:32:d0:5a:ae:2b:11:54:7c:df:5e:17:5c: bd:c1:06:ed:bb:f4:97:92:bc:0a:de:5e:7a:9e:58: 0a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C6:45:0C:B6:8A:70:A2:3D:42:F7:5C:42:53:44:33:03:51:C9:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/4203a888-ffda-34ce-bf72-ac4a102906e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:cb:bc:4b:bd:fb:4a:22:43:26:22:d0:10:bc:79:ba:01:4b: 6e:3e:ca:5a:cc:72:4c:91:b5:06:f0:55:71:20:c7:65:08:36: e8:8d:2a:e6:cc:74:f9:5e:0c:22:6f:80:75:41:1e:8c:eb:5d: dd:47:54:7e:af:22:77:f6:49:dc:d7:26:15:13:37:be:6c:fd: eb:7c:00:f1:09:4f:b9:74:45:bb:30:dc:a0:0c:7b:61:fa:3f: 3f:07:e5:29:48:19:0f:b8:05:d6:96:ed:00:c4:aa:5e:18:ee: 76:1f:9d:09:ee:f4:23:f7:3e:67:47:76:01:33:45:d1:62:38: 86:7f:b0:f3:86:00:0c:00:99:15:ff:28:b3:a9:72:50:39:0e: 67:8e:88:77:a9:4e:8f:96:45:c3:54:d2:12:e6:36:0f:0c:7c: a8:2b:7d:07:fa:1a:2d:b6:f3:af:5f:bb:da:05:74:70:20:d8: 13:5d:a7:c7:fd:1a:f0:b8:8c:93:88:bd:e2:f5:ff:85:93:22: 38:3b:16:86:6d:de:61:fd:ba:4f:00:62:16:aa:84:30:48:0e: 37:ce:9f:3d:eb:43:9b:33:06:f4:45:6a:39:64:66:95:45:98: 5a:5b:18:7a:78:98:9a:02:75:04:31:9f:ee:08:cc:af:85:0d: 42:72:c8:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKBEO65arq4jXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk ZTJlMjEzNTQtZDBkMC00ZjZkLTljYmQtZGNjYzlmMzRkNDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXs9R6A4MbUsJZZAGesz2sXrpUTp3YHoNCUy CUZ7GYXrvqaohqQX45IArh5mPU8YzXyX6KPgF9tFK5BJAjMhMGPdPc4j6Z7BlnVb 3A8r0zRFxgMv00Xxv4P6py6lg3w9xDiMlLhxtcHuweMqOIyOYkUNCCjpOgmPBxrK B7i3kWLUxFmNEqpxKLF1qWF3ERmO4M0n/JGRMVptH/JLWNl9Hg6XiOUpMrIs6iSx 47fdTixGcQ66/amcvK3z0F75UwGtyhv4sbvZ+qtYWma6Z2/aExfyNI2FD6VirCBi 0VJaCvYkKtMy0FquKxFUfN9eF1y9wQbtu/SXkrwK3l56nlgKkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7GRQy2inCiPUL3XEJTRDMDUcneMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNDIwM2E4ODgtZmZkYS0z NGNlLWJmNzItYWM0YTEwMjkwNmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQAToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXLvEu9+0oiQyYi0BC8eboBS24+ylrMckyRtQbwVXEgx2UINuiNKubM dPleDCJvgHVBHozrXd1HVH6vInf2SdzXJhUTN75s/et8APEJT7l0Rbsw3KAMe2H6 Pz8H5SlIGQ+4BdaW7QDEql4Y7nYfnQnu9CP3PmdHdgEzRdFiOIZ/sPOGAAwAmRX/ KLOpclA5DmeOiHepTo+WRcNU0hLmNg8MfKgrfQf6Gi22869fu9oFdHAg2BNdp8f9 GvC4jJOIveL1/4WTIjg7FoZt3mH9uk8AYhaqhDBIDjfOnz3rQ5szBvRFajlkZpVF mFpbGHp4mJoCdQQxn+4IzK+FDUJyyO0= -----END CERTIFICATE-----Generated at Mon May 5 09:46:54 2025 by rpki-client