$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/e4ff1bfa-87ff-397c-b887-0a8f8dafdc76.roa File: e4ff1bfa-87ff-397c-b887-0a8f8dafdc76.roa (raw, json) Hash identifier: hj9GXZHGD9XOAllV56IbBMWg3BRhjgtugAFFXtW7QLw= Subject key identifier: 31:B0:F7:50:0D:5A:E7:47:4D:EC:CE:0D:E1:72:6B:4B:86:C4:EF:05 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F43285849ABB4A0701BA188198E2ED640 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/e4ff1bfa-87ff-397c-b887-0a8f8dafdc76.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 11090 IP address blocks: 64.4.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:a0:70:1b:a1:88:19:8e:2e:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=7cf2efd4-78cf-4769-a064-de2cd0c9bb3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d8:69:b8:83:7d:84:2c:88:d7:89:82:a8:0a: f0:67:e4:26:95:e2:33:ae:27:11:bf:66:6d:63:b8: 56:a1:47:05:61:0c:52:3d:0d:99:3a:fb:c4:d5:a0: 24:17:32:f8:23:ed:57:fb:0d:b6:59:32:c4:5d:4d: ee:50:c8:ed:85:46:09:ec:09:74:86:97:7f:4d:04: 8b:bf:f0:63:f4:d9:40:74:54:15:2b:97:28:7c:c4: d2:84:9d:e1:b4:5c:2e:d8:32:45:2a:7c:3e:79:37: 47:61:4a:8e:5e:75:82:13:12:35:8d:7f:e7:c3:19: a2:b1:84:f5:df:6d:96:77:07:d7:ca:a6:b9:bd:46: 01:1c:8b:18:46:ad:ba:8d:07:97:43:03:1e:2e:75: 03:e1:80:22:27:48:52:a9:9a:30:00:64:94:7a:bf: 7c:e0:00:6b:b2:92:d5:29:1a:62:a0:5d:5b:06:da: 16:09:e3:5e:dd:bf:85:fa:89:a5:ce:3d:8e:4f:80: 2f:4a:f3:ef:22:7f:3b:ba:f9:ab:8d:dc:76:7b:70: a6:ad:c4:70:ce:5d:d2:82:b4:c4:86:97:79:46:91: e9:b9:f2:ed:b4:b9:ea:1e:36:c7:d0:f7:4e:ac:2c: 17:c3:fb:76:62:9b:cb:26:a8:93:5e:cc:ba:cf:08: e0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B0:F7:50:0D:5A:E7:47:4D:EC:CE:0D:E1:72:6B:4B:86:C4:EF:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/e4ff1bfa-87ff-397c-b887-0a8f8dafdc76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:6a:af:ea:d1:aa:a6:20:5b:9d:51:e2:08:2b:5c:62:6d:75: a3:8c:6e:5a:09:3b:63:94:1d:d7:1a:1b:67:ce:a3:d1:bb:2f: 65:31:74:d0:1d:15:51:54:53:8b:f5:4e:39:f3:31:87:d1:c3: 08:9a:d4:45:c8:a2:9e:3b:68:76:a6:46:8d:b3:7b:7c:39:e5: b9:81:39:a3:88:60:5d:8d:87:91:9c:3b:44:37:7a:3f:7c:2b: 20:4b:59:24:20:11:90:8d:86:94:a1:26:d6:eb:6a:3b:f7:cf: 6e:60:84:9c:15:9e:21:2b:ed:fb:5c:50:03:7c:20:f1:c4:5f: d6:91:b9:02:52:8e:bf:0b:5c:6f:cb:fa:4e:b6:0a:46:25:21: 48:c0:2c:fa:ea:86:63:03:4c:26:85:e2:b1:a7:47:55:e7:ce: d2:0a:83:2e:b5:d8:7f:4c:66:8e:60:62:9b:cc:1e:8c:a0:51: b3:90:2f:bc:f6:cc:d5:4c:bf:2f:c6:52:ac:f4:a7:dd:5f:7c: 6a:af:a3:12:89:76:dd:72:53:93:1f:5b:2d:86:74:6e:d6:65: 8f:67:d2:45:fd:be:62:d5:0d:07:9c:12:c8:c3:af:d6:49:c6: 93:a3:83:5d:09:26:64:01:82:a9:62:dc:ea:e5:62:7e:4e:02: fa:9d:22:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKBwG6GIGY4u1kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk N2NmMmVmZDQtNzhjZi00NzY5LWEwNjQtZGUyY2QwYzliYjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9hpuIN9hCyI14mCqArwZ+QmleIzricRv2Zt Y7hWoUcFYQxSPQ2ZOvvE1aAkFzL4I+1X+w22WTLEXU3uUMjthUYJ7Al0hpd/TQSL v/Bj9NlAdFQVK5cofMTShJ3htFwu2DJFKnw+eTdHYUqOXnWCExI1jX/nwxmisYT1 322WdwfXyqa5vUYBHIsYRq26jQeXQwMeLnUD4YAiJ0hSqZowAGSUer984ABrspLV KRpioF1bBtoWCeNe3b+F+omlzj2OT4AvSvPvIn87uvmrjdx2e3CmrcRwzl3SgrTE hpd5RpHpufLttLnqHjbH0PdOrCwXw/t2YpvLJqiTXsy6zwjgqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGw91ANWudHTezODeFya0uGxO8FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZTRmZjFiZmEtODdmZi0z OTdjLWI4ODctMGE4ZjhkYWZkYzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQATkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdqr+rRqqYgW51R4ggrXGJtdaOMbloJO2OUHdcaG2fOo9G7L2UxdNAd FVFUU4v1TjnzMYfRwwia1EXIop47aHamRo2ze3w55bmBOaOIYF2Nh5GcO0Q3ej98 KyBLWSQgEZCNhpShJtbrajv3z25ghJwVniEr7ftcUAN8IPHEX9aRuQJSjr8LXG/L +k62CkYlIUjALPrqhmMDTCaF4rGnR1XnztIKgy612H9MZo5gYpvMHoygUbOQL7z2 zNVMvy/GUqz0p91ffGqvoxKJdt1yU5MfWy2GdG7WZY9n0kX9vmLVDQecEsjDr9ZJ xpOjg10JJmQBgqli3OrlYn5OAvqdIos= -----END CERTIFICATE-----Generated at Thu May 8 15:50:48 2025 by rpki-client