$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/ef290b1f-5b52-39da-9484-acbda5333639.roa File: ef290b1f-5b52-39da-9484-acbda5333639.roa (raw, json) Hash identifier: v9Zys9/d/ZiD+eKAGFqYfRPtWOy504NpfvN//UGSpyA= Subject key identifier: 5A:5F:BD:71:0E:3B:95:5A:B8:5C:45:C6:04:F3:48:0B:7D:FE:03:E7 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F43285849ABB4A018D82FC22AD823B800 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/ef290b1f-5b52-39da-9484-acbda5333639.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 11090 IP address blocks: 64.4.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:a0:18:d8:2f:c2:2a:d8:23:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=fbe0df8f-1ca4-4a70-a490-a33852b23cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ce:da:63:55:de:c3:94:f5:85:a4:0a:f6:cf: 8e:d6:69:e1:f2:b8:08:11:a3:b2:71:0f:aa:30:39: 2c:33:4e:1d:6e:d9:7c:da:9d:92:8b:d2:12:55:c2: d7:c8:d1:28:2b:51:3d:60:b0:6d:6a:20:f2:a7:26: c7:ef:62:87:1a:4b:87:8f:2a:1f:0e:a9:5f:c8:62: 87:8f:fc:85:c1:f3:71:40:35:9b:d7:58:a0:08:6a: 75:60:3c:cb:9d:6e:61:6a:5c:f8:e9:34:56:e6:e3: 5f:e3:21:52:2d:da:cc:24:10:19:5f:77:0d:f8:12: cb:3a:9b:70:5d:23:35:e7:49:fb:d2:1f:92:aa:c1: de:2a:71:d2:56:04:b0:6c:77:43:a8:ea:97:ae:4b: e1:0f:16:fa:33:71:90:2a:a6:3e:75:64:b6:60:b1: 1c:45:43:a6:3f:fc:8c:d8:b2:3f:1b:f4:0d:54:f9: 87:c8:33:bd:c8:98:e6:65:ab:67:1f:dc:58:5c:52: 11:28:57:22:5b:6b:4b:89:15:c4:6c:5c:6d:70:73: a5:6e:c0:37:20:47:66:4d:d3:35:32:1e:d3:03:54: 98:9d:fa:ab:27:8c:79:3e:23:90:99:2d:9c:75:88: ea:52:11:90:c9:b4:42:81:74:b8:50:cf:dc:3e:aa: bc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5F:BD:71:0E:3B:95:5A:B8:5C:45:C6:04:F3:48:0B:7D:FE:03:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/ef290b1f-5b52-39da-9484-acbda5333639.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:e1:5f:b0:68:8d:5e:23:15:73:72:70:c7:23:75:b5:1a:5c: a3:2f:44:e1:5a:fc:de:0b:45:b2:a1:29:fc:d7:43:94:d3:70: b3:15:f3:b2:c6:44:59:32:f9:7c:f7:9e:08:f5:3f:73:be:b9: 3e:30:1d:5c:d3:0c:54:6b:cb:e2:f5:d5:5d:48:8c:4b:b2:48: e9:7c:19:76:78:30:92:0c:a6:85:e7:e7:00:61:e7:89:67:67: 1f:59:47:62:97:43:b2:91:65:c1:05:64:ab:ee:2d:54:8c:1b: 62:e9:6f:76:31:c3:e4:d2:60:74:41:7c:c1:a4:7b:30:55:d0: dc:1a:0b:2b:f3:6f:d4:33:5e:8a:f5:09:f1:b7:29:b6:01:25: a2:54:5b:70:65:d4:51:22:a4:16:e8:ca:64:17:c4:b4:74:7d: 31:66:4a:fd:9f:74:dd:e7:4b:59:25:6d:5c:a3:72:26:f7:f7: 6e:52:e1:53:46:ce:6b:8b:5b:d9:de:04:3b:92:2f:59:8d:d1: 55:a5:b5:d3:57:28:04:97:e0:93:44:b5:b8:db:96:7c:f3:1e: 28:40:3c:5f:6e:ab:4f:cd:57:6c:fa:4a:f0:47:15:8d:8a:78: 48:7a:4d:4a:63:32:1c:b1:31:bf:5b:e7:4e:56:a5:37:31:d2: 5c:7f:16:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKAY2C/CKtgjuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk ZmJlMGRmOGYtMWNhNC00YTcwLWE0OTAtYTMzODUyYjIzY2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc7aY1Xew5T1haQK9s+O1mnh8rgIEaOycQ+q MDksM04dbtl82p2Si9ISVcLXyNEoK1E9YLBtaiDypybH72KHGkuHjyofDqlfyGKH j/yFwfNxQDWb11igCGp1YDzLnW5halz46TRW5uNf4yFSLdrMJBAZX3cN+BLLOptw XSM150n70h+SqsHeKnHSVgSwbHdDqOqXrkvhDxb6M3GQKqY+dWS2YLEcRUOmP/yM 2LI/G/QNVPmHyDO9yJjmZatnH9xYXFIRKFciW2tLiRXEbFxtcHOlbsA3IEdmTdM1 Mh7TA1SYnfqrJ4x5PiOQmS2cdYjqUhGQybRCgXS4UM/cPqq8KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpfvXEOO5VauFxFxgTzSAt9/gPnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZWYyOTBiMWYtNWI1Mi0z OWRhLTk0ODQtYWNiZGE1MzMzNjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQATsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvhX7BojV4jFXNycMcjdbUaXKMvROFa/N4LRbKhKfzXQ5TTcLMV87LG RFky+Xz3ngj1P3O+uT4wHVzTDFRry+L11V1IjEuySOl8GXZ4MJIMpoXn5wBh54ln Zx9ZR2KXQ7KRZcEFZKvuLVSMG2Lpb3Yxw+TSYHRBfMGkezBV0NwaCyvzb9QzXor1 CfG3KbYBJaJUW3Bl1FEipBboymQXxLR0fTFmSv2fdN3nS1klbVyjcib3925S4VNG zmuLW9neBDuSL1mN0VWltdNXKASX4JNEtbjblnzzHihAPF9uq0/NV2z6SvBHFY2K eEh6TUpjMhyxMb9b505WpTcx0lx/FuA= -----END CERTIFICATE-----Generated at Fri May 9 02:58:32 2025 by rpki-client