$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/1529c059-7633-3836-940a-f5b311f13fd2.roa File: 1529c059-7633-3836-940a-f5b311f13fd2.roa (raw, json) Hash identifier: c8DaFH2vxklehL7pUMASfkM3zeMeE/U5o+JXJqwzMgw= Subject key identifier: 0B:64:8A:32:26:38:FB:9F:13:B0:BD:FF:38:08:AB:2D:DE:60:03:BE Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Certificate serial: 010D0C9F4328584949FE9133408737026D42E7C0 Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/1529c059-7633-3836-940a-f5b311f13fd2.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 393885 IP address blocks: 64.71.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:91:33:40:87:37:02:6d:42:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=1a72daf4-06c0-43b2-a44b-ab52fa23ee06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b3:ef:c7:6e:b4:28:f0:05:fe:38:13:6b:bb: b0:35:88:0c:04:08:62:87:fb:67:b0:9c:c1:57:69: 79:d5:8d:91:3a:fd:7e:06:10:9a:c7:bb:e8:81:82: d9:31:6c:ce:01:8a:b3:08:13:10:10:35:c4:e7:69: e4:e6:21:0b:7e:c4:7d:a8:04:cf:46:21:17:da:2e: 3d:76:32:5e:6e:23:6f:18:81:eb:77:35:2d:f6:29: 27:41:2f:d9:fa:7e:d0:8d:80:cb:17:ca:be:df:77: 1f:dd:ee:6b:80:42:61:ae:2c:b1:ed:6f:9e:04:77: 21:c6:b8:7f:f6:b7:21:fa:60:bb:89:46:76:b5:67: 1b:a8:35:4a:cf:1d:67:6d:fc:75:01:a1:4f:5f:27: 1f:6d:40:56:38:6f:33:c3:4c:41:23:54:05:cb:d1: a9:26:6c:c5:1c:f7:bc:b2:87:6d:2e:73:d8:f1:97: 9b:85:81:bb:2f:83:eb:57:74:78:d8:bc:74:d9:8b: 34:39:b6:18:c0:5b:d4:db:13:2f:64:fe:7f:3b:b2: 1f:5b:13:19:92:ca:df:c0:b2:3b:d6:3a:55:6c:d8: 63:f1:c9:d7:18:ac:d3:04:15:46:b3:72:42:49:80: 79:d4:6f:19:73:ba:30:96:c1:7a:80:8b:f0:3c:69: 49:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:64:8A:32:26:38:FB:9F:13:B0:BD:FF:38:08:AB:2D:DE:60:03:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/1529c059-7633-3836-940a-f5b311f13fd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl X509v3 Authority Key Identifier: keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer sbgp-ipAddrBlock: critical IPv4: 64.71.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:c5:ba:98:c5:0d:c6:e4:93:df:d3:3b:1b:ba:9c:c3:32:65: 34:88:28:51:c5:a2:43:65:05:ba:8b:2f:c4:8b:b2:1b:58:84: 2d:95:26:63:78:fd:ac:ee:83:bf:de:ea:f9:bd:6f:5b:0d:85: fa:fb:b3:ef:ab:51:f1:67:e8:7c:77:fe:3f:a6:b0:db:66:a2: d9:5a:03:0b:d6:b8:a6:87:dc:32:0f:f5:85:74:6d:a6:93:47: 9a:b7:4e:10:3e:5c:14:94:89:64:7d:d4:2c:f1:fd:82:ef:c9: 4d:44:c7:ac:32:f5:4c:a6:10:0c:e9:45:f8:e9:a9:c3:9b:57: 14:23:9a:31:89:80:19:4e:2e:a7:6d:f0:17:c8:88:64:35:ab: e0:12:63:80:cb:48:d9:3b:a4:62:21:49:0d:5c:30:d4:35:17: d7:8b:6d:26:a9:48:04:de:a3:5a:dc:2d:18:fb:e9:b2:d0:5a: e5:f3:eb:b4:8f:b4:d3:48:d9:b1:a8:9d:21:ba:c7:54:2f:84: c4:d9:2d:73:80:63:88:aa:71:9b:30:aa:f9:46:a7:88:12:60: b7:0e:34:8d:a7:3d:c5:26:d4:a6:8b:e5:ad:1e:41:76:7d:9d: 41:af:a6:48:0a:55:b7:ee:db:c3:a2:ac:1e:0e:11:ff:4c:b3: be:1a:54:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/pEzQIc3Am1C58AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk NjZkMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk MWE3MmRhZjQtMDZjMC00M2IyLWE0NGItYWI1MmZhMjNlZTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7Pvx260KPAF/jgTa7uwNYgMBAhih/tnsJzB V2l51Y2ROv1+BhCax7vogYLZMWzOAYqzCBMQEDXE52nk5iELfsR9qATPRiEX2i49 djJebiNvGIHrdzUt9iknQS/Z+n7QjYDLF8q+33cf3e5rgEJhriyx7W+eBHchxrh/ 9rch+mC7iUZ2tWcbqDVKzx1nbfx1AaFPXycfbUBWOG8zw0xBI1QFy9GpJmzFHPe8 sodtLnPY8ZebhYG7L4PrV3R42Lx02Ys0ObYYwFvU2xMvZP5/O7IfWxMZksrfwLI7 1jpVbNhj8cnXGKzTBBVGs3JCSYB51G8Zc7owlsF6gIvwPGlJDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtkijImOPufE7C9/zgIqy3eYAO+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvMTUyOWMwNTktNzYzMy0z ODM2LTk0MGEtZjViMzExZjEzZmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1 ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh M2UzNWQ2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQEfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjFupjFDcbkk9/TOxu6nMMyZTSIKFHFokNlBbqLL8SLshtYhC2VJmN4 /azug7/e6vm9b1sNhfr7s++rUfFn6Hx3/j+msNtmotlaAwvWuKaH3DIP9YV0baaT R5q3ThA+XBSUiWR91Czx/YLvyU1Ex6wy9UymEAzpRfjpqcObVxQjmjGJgBlOLqdt 8BfIiGQ1q+ASY4DLSNk7pGIhSQ1cMNQ1F9eLbSapSATeo1rcLRj76bLQWuXz67SP tNNI2bGonSG6x1QvhMTZLXOAY4iqcZswqvlGp4gSYLcONI2nPcUm1KaL5a0eQXZ9 nUGvpkgKVbfu28OirB4OEf9Ms74aVB0= -----END CERTIFICATE-----Generated at Mon May 5 20:32:33 2025 by rpki-client