$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6bd9f993-8e74-3da9-bc33-33e37883e4a0.roa File: 6bd9f993-8e74-3da9-bc33-33e37883e4a0.roa (raw, json) Hash identifier: hUNuS+ozJMuo/W3Dv8WTC8QAeV/o8tSn/6DOkRwaV9w= Subject key identifier: 33:B5:28:49:51:22:0A:8C:8B:F8:1F:20:38:9E:81:8D:CF:7C:64:26 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F43285849ABB4A886F03FC02B91287700 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6bd9f993-8e74-3da9-bc33-33e37883e4a0.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 11090 IP address blocks: 216.137.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:a8:86:f0:3f:c0:2b:91:28:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=6b88c147-ad4f-44dd-a759-cbb54a5223b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bb:d9:3c:10:9d:ce:57:5a:30:e9:84:2a:ef: 33:de:cb:5c:6f:aa:b2:7f:5b:1a:61:eb:37:3b:d4: eb:63:da:2d:0b:78:d0:6c:d1:2f:02:61:34:ea:ba: f7:79:80:a0:12:67:2a:a4:c1:ec:a6:01:b4:ab:29: 5b:14:ae:4c:6b:66:de:ec:19:01:22:49:2c:9c:cc: 51:93:e4:50:76:29:28:26:61:5b:80:48:df:ff:12: 2c:11:1b:73:93:ac:9f:84:d7:6d:ec:0f:91:09:84: 7a:71:28:bf:65:55:de:fe:cf:7f:3b:66:cd:51:21: 20:b0:c5:1a:d3:57:46:2b:7a:9f:80:c9:0f:dd:da: d1:84:1d:70:02:90:f1:7a:d1:29:32:3c:17:6f:84: 7a:77:8d:ba:dd:6f:ec:86:b0:c6:b3:67:c1:84:b4: b5:e0:4f:c0:ba:7a:cf:f2:65:24:9a:de:ee:e8:27: fb:9f:d6:49:b1:7b:3f:ab:76:ba:8c:e1:81:22:53: 5c:1e:67:77:4d:e0:9f:f8:a3:19:6b:96:c9:d2:31: 80:4b:32:07:47:04:b9:b6:bb:8f:01:5f:28:58:ea: ef:02:8f:81:51:ee:ee:b0:40:d3:76:c4:56:1c:62: 28:f5:3c:35:01:7a:bb:86:46:45:be:71:55:27:38: fe:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B5:28:49:51:22:0A:8C:8B:F8:1F:20:38:9E:81:8D:CF:7C:64:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6bd9f993-8e74-3da9-bc33-33e37883e4a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.137.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:5d:41:37:d3:b1:b9:51:e2:5a:0b:6f:0d:98:50:09:dc:51: 76:d6:5b:a1:5d:e8:6b:d5:c4:b1:e0:3c:f0:41:46:e7:09:c2: f3:fc:a1:04:12:a0:d2:d4:8f:27:e2:6c:d2:d9:10:f8:6b:ac: c9:b6:8e:7d:fc:3a:01:e3:30:9f:27:3b:2c:93:38:10:72:38: 85:0e:e4:9b:57:5d:2b:53:a6:9e:55:bf:3a:1f:a3:df:71:4d: dd:96:77:0a:a5:93:1b:16:8d:02:b5:4b:a1:bd:91:04:ab:95: 6e:6b:70:a4:fc:34:5a:84:97:5a:8c:92:d2:b4:cf:30:78:a6: b3:8d:db:f3:e2:23:d9:49:f9:bd:8a:db:b0:12:07:1b:02:92: 73:5b:31:46:b0:2f:f0:57:5e:5b:3b:c6:7e:e1:e2:a2:53:ce: 4a:f0:4b:db:78:c7:09:55:6a:7b:10:f7:77:30:cb:70:4c:26: 74:a6:c0:c2:69:5e:cf:00:5d:9a:73:a4:9f:95:ba:fe:30:28: a7:aa:7a:43:3b:01:89:68:f5:22:d3:9c:33:63:c8:dc:f6:d4: 69:bd:09:5d:0b:cb:62:ab:4b:54:5d:ec:0a:a6:27:43:de:80: d7:c8:29:a8:65:fb:23:61:1f:09:51:97:7e:da:6c:ec:12:69: 38:a5:c8:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKiG8D/AK5EodwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk NmI4OGMxNDctYWQ0Zi00NGRkLWE3NTktY2JiNTRhNTIyM2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrvZPBCdzldaMOmEKu8z3stcb6qyf1saYes3 O9TrY9otC3jQbNEvAmE06rr3eYCgEmcqpMHspgG0qylbFK5Ma2be7BkBIkksnMxR k+RQdikoJmFbgEjf/xIsERtzk6yfhNdt7A+RCYR6cSi/ZVXe/s9/O2bNUSEgsMUa 01dGK3qfgMkP3drRhB1wApDxetEpMjwXb4R6d4263W/shrDGs2fBhLS14E/AunrP 8mUkmt7u6Cf7n9ZJsXs/q3a6jOGBIlNcHmd3TeCf+KMZa5bJ0jGASzIHRwS5truP AV8oWOrvAo+BUe7usEDTdsRWHGIo9Tw1AXq7hkZFvnFVJzj+cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDO1KElRIgqMi/gfIDiegY3PfGQmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNmJkOWY5OTMtOGU3NC0z ZGE5LWJjMzMtMzNlMzc4ODNlNGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2InkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1dQTfTsblR4loLbw2YUAncUXbWW6Fd6GvVxLHgPPBBRucJwvP8oQQS oNLUjyfibNLZEPhrrMm2jn38OgHjMJ8nOyyTOBByOIUO5JtXXStTpp5Vvzofo99x Td2WdwqlkxsWjQK1S6G9kQSrlW5rcKT8NFqEl1qMktK0zzB4prON2/PiI9lJ+b2K 27ASBxsCknNbMUawL/BXXls7xn7h4qJTzkrwS9t4xwlVansQ93cwy3BMJnSmwMJp Xs8AXZpzpJ+Vuv4wKKeqekM7AYlo9SLTnDNjyNz21Gm9CV0Ly2KrS1Rd7AqmJ0Pe gNfIKahl+yNhHwlRl37abOwSaTilyBk= -----END CERTIFICATE-----Generated at Mon May 5 08:43:13 2025 by rpki-client