$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/8857ea80-3604-3d1d-8785-29cac99c3497.roa File: 8857ea80-3604-3d1d-8785-29cac99c3497.roa (raw, json) Hash identifier: 7ByItf40NCAxEwgk6+SS+Gtwtci+xdwB6mGpEiI0Koo= Subject key identifier: 8E:36:0F:4B:E1:98:A1:38:FD:4A:B5:C1:CF:68:7B:D1:17:63:A0:DA Certificate issuer: /CN=4ba03064-0288-4ec4-b73f-d6ba1d639961 Certificate serial: 010D0C9F43285849A5E2AD277E63DBD2D1B6C2C0 Authority key identifier: D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/8857ea80-3604-3d1d-8785-29cac99c3497.roa Signing time: Fri 25 Apr 2025 22:58:56 +0000 ROA not before: Fri 25 Apr 2025 22:58:56 +0000 ROA not after: Thu 24 Jul 2025 22:58:56 +0000 asID: 21738 IP address blocks: 216.40.94.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a5:e2:ad:27:7e:63:db:d2:d1:b6:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ba03064-0288-4ec4-b73f-d6ba1d639961 Validity Not Before: Apr 25 22:58:56 2025 GMT Not After : Jul 24 22:58:56 2025 GMT Subject: CN=ba74ab70-2256-4b53-8506-5d8c01d85474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:be:38:2a:17:52:ab:af:77:95:e2:0d:b1:21: c3:bc:27:25:41:96:92:46:d1:97:f9:f8:6e:0b:ef: 28:b9:8a:f7:8d:0d:e8:20:79:a9:65:b9:54:1a:27: ca:13:c2:2e:57:54:27:2d:45:c9:26:4e:a4:01:c0: 3b:e3:06:af:d3:a4:bc:a1:6b:02:c4:7d:42:d0:9b: f9:96:08:fb:42:5a:84:34:dc:88:98:31:ea:e0:46: 78:a2:e2:fa:22:54:e4:1f:64:a9:9d:1f:06:98:0d: b0:2c:9d:eb:5b:e1:1c:1b:23:76:0c:88:4f:89:24: e8:69:aa:74:62:2f:ce:b1:b1:d2:63:32:16:5d:0d: c5:74:bc:16:1c:ff:a4:03:ba:f9:5a:22:74:70:f8: ec:ea:89:e7:fe:8b:2c:50:28:17:93:26:6d:b4:c9: 98:83:d3:93:6a:c6:38:d6:1c:be:3d:0f:ff:e0:b8: 43:08:2f:8e:94:83:a3:74:09:84:a3:e4:ed:b0:28: 10:2b:3f:1d:e6:5a:07:b2:fb:a1:75:c7:d2:55:6c: d8:ad:6e:1e:70:24:8b:05:cb:6d:17:57:9f:d3:4c: 5d:de:b8:c8:2f:95:0c:d7:ff:b9:7b:21:c0:27:e0: 1c:e9:b9:f6:d4:b3:c4:a7:38:1c:fd:d6:3b:71:85: 22:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:36:0F:4B:E1:98:A1:38:FD:4A:B5:C1:CF:68:7B:D1:17:63:A0:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/8857ea80-3604-3d1d-8785-29cac99c3497.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl X509v3 Authority Key Identifier: keyid:D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer sbgp-ipAddrBlock: critical IPv4: 216.40.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:54:f9:71:26:12:5b:0c:3b:92:86:77:67:4b:d1:d3:10:60: 3d:19:54:6e:07:7b:00:d3:77:8c:a5:d3:c4:fa:5e:2c:26:c3: 83:4f:21:91:ea:cf:9f:cd:21:5c:e7:02:ba:e3:30:42:8b:38: 75:e7:f3:2e:03:37:98:6b:f7:fb:3b:90:7f:86:a1:1d:1d:70: 6a:83:fc:39:c1:1d:f3:2c:87:68:7d:de:92:26:4d:42:da:dd: 32:d1:9d:f0:a7:7b:2b:07:be:6d:ff:ca:4d:4b:c4:ef:a5:20: 2d:13:c5:15:54:1c:a8:80:24:6e:7b:a6:91:68:82:d3:3f:ea: 78:49:e2:db:33:da:5f:d8:b9:34:84:ad:6a:2f:f3:c3:ba:9b: 55:1e:5e:bb:4a:73:16:23:d3:97:26:7a:13:85:e8:b0:fc:6f: 2f:c4:e7:b2:40:76:f6:1a:86:51:c7:e6:41:34:c5:7d:07:4a: 1b:02:99:1d:eb:18:e4:c3:22:04:0f:0b:95:3d:9d:25:c0:4a: 4b:2a:b7:0c:db:41:b9:fc:0f:78:93:e2:9b:cc:8d:13:a0:fb: 82:3b:e5:7e:cd:64:cc:96:b5:bd:dc:fc:19:4d:2c:c6:b4:63: 13:e2:2d:7e:07:9c:d9:8e:5e:97:be:c4:f2:9c:3a:c1:ac:37: 59:ca:58:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEml4q0nfmPb0tG2wsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJhMDMwNjQtMDI4OC00ZWM0LWI3M2YtZDZiYTFkNjM5 OTYxMB4XDTI1MDQyNTIyNTg1NloXDTI1MDcyNDIyNTg1NlowLzEtMCsGA1UEAxMk YmE3NGFiNzAtMjI1Ni00YjUzLTg1MDYtNWQ4YzAxZDg1NDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL44KhdSq693leINsSHDvCclQZaSRtGX+fhu C+8ouYr3jQ3oIHmpZblUGifKE8IuV1QnLUXJJk6kAcA74wav06S8oWsCxH1C0Jv5 lgj7QlqENNyImDHq4EZ4ouL6IlTkH2SpnR8GmA2wLJ3rW+EcGyN2DIhPiSToaap0 Yi/OsbHSYzIWXQ3FdLwWHP+kA7r5WiJ0cPjs6onn/ossUCgXkyZttMmYg9OTasY4 1hy+PQ//4LhDCC+OlIOjdAmEo+TtsCgQKz8d5loHsvuhdcfSVWzYrW4ecCSLBctt F1ef00xd3rjIL5UM1/+5eyHAJ+Ac6bn21LPEpzgc/dY7cYUiYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI42D0vhmKE4/Uq1wc9oe9EXY6DaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YmEw MzA2NC0wMjg4LTRlYzQtYjczZi1kNmJhMWQ2Mzk5NjEvODg1N2VhODAtMzYwNC0z ZDFkLTg3ODUtMjljYWM5OWMzNDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGJhMDMwNjQtMDI4OC00ZWM0LWI3 M2YtZDZiYTFkNjM5OTYxLzRiYTAzMDY0LTAyODgtNGVjNC1iNzNmLWQ2YmExZDYz OTk2MS5jcmwwHwYDVR0jBBgwFoAU1bCh9ujIDJsNuG89eCAve3nUrdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YmEwMzA2NC0wMjg4LTRlYzQtYjczZi1kNmJh MWQ2Mzk5NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2CheMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERU+XEmElsMO5KGd2dL0dMQYD0ZVG4HewDTd4yl08T6Xiwmw4NPIZHq z5/NIVznArrjMEKLOHXn8y4DN5hr9/s7kH+GoR0dcGqD/DnBHfMsh2h93pImTULa 3TLRnfCneysHvm3/yk1LxO+lIC0TxRVUHKiAJG57ppFogtM/6nhJ4tsz2l/YuTSE rWov88O6m1UeXrtKcxYj05cmehOF6LD8by/E57JAdvYahlHH5kE0xX0HShsCmR3r GOTDIgQPC5U9nSXASksqtwzbQbn8D3iT4pvMjROg+4I75X7NZMyWtb3c/BlNLMa0 YxPiLX4HnNmOXpe+xPKcOsGsN1nKWC8= -----END CERTIFICATE-----Generated at Fri May 9 06:19:47 2025 by rpki-client