$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/7942817f-a176-37e5-8911-6f29c62a1537.roa File: 7942817f-a176-37e5-8911-6f29c62a1537.roa (raw, json) Hash identifier: zR4b6lMis3azB1DyUTmlrDHJg43l8qWmMurdqmtdWJQ= Subject key identifier: 71:3C:1C:C3:1E:9A:44:2C:CB:85:AF:58:81:77:39:75:E8:BC:31:8C Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Certificate serial: 010D0C9F4328584949FE915FBA9F492F33DDA600 Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/7942817f-a176-37e5-8911-6f29c62a1537.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 393885 IP address blocks: 64.71.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:91:5f:ba:9f:49:2f:33:dd:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=4f59a0ea-f2c2-4af7-b8f9-ed1948c51a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9c:39:ae:a4:42:3e:5f:3d:66:39:ee:95:58: 49:85:a7:60:8f:b8:ef:17:68:88:b9:68:77:e3:a5: 65:38:b1:08:e3:53:17:b0:83:78:4d:0f:97:05:52: 0c:61:95:70:c3:6f:8a:5e:74:f0:f6:aa:72:ec:c9: 65:a7:eb:cd:66:3c:be:a0:2e:55:53:96:6b:f5:2d: 7e:0c:d8:42:7b:eb:55:bd:16:03:54:d5:95:3b:8b: 16:03:65:c8:bb:1c:e4:1d:dd:7e:58:91:c9:1d:25: 79:e5:1a:24:94:9a:10:a0:cd:7f:29:a2:b3:62:a2: 6c:ac:35:fb:23:33:6a:a6:64:d5:ba:75:7c:69:5d: 17:16:89:52:d0:0d:3b:cc:a6:cc:3a:e6:c6:dc:96: ac:24:0f:1e:04:8b:50:5a:ce:f8:7e:48:90:16:3e: 1d:d8:f5:2c:bb:a0:40:1c:62:a9:6f:58:8b:43:b2: cd:96:5d:57:4d:a6:96:6d:bc:79:b7:15:ea:e6:37: 37:95:22:6d:36:8c:e5:87:3d:2a:e7:41:2c:82:a2: 89:cf:66:f9:23:b5:76:69:4e:85:72:77:37:54:43: 3c:0e:44:02:e6:d0:86:76:f3:e7:f6:b0:14:68:83: b8:91:f3:27:ea:8b:b9:08:f2:3f:ef:30:44:99:77: 7c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3C:1C:C3:1E:9A:44:2C:CB:85:AF:58:81:77:39:75:E8:BC:31:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/7942817f-a176-37e5-8911-6f29c62a1537.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl X509v3 Authority Key Identifier: keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer sbgp-ipAddrBlock: critical IPv4: 64.71.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:1f:ff:d5:82:0e:61:c1:8d:9f:7a:53:f8:eb:34:7a:c2:a9: 35:aa:5b:2c:63:c0:11:4f:28:ee:cd:b5:de:60:67:12:b3:4b: 14:e3:92:7d:ed:65:b4:cc:31:c1:12:ea:d4:62:2e:92:fa:ca: d8:de:45:ed:c6:41:42:a1:9d:8d:fb:b6:92:3a:13:90:45:39: 5e:c1:ca:92:c9:06:d0:80:84:2e:69:1a:40:32:d5:45:2d:e3: b7:58:f6:b2:51:de:01:ad:8b:2b:fe:a9:21:63:e4:ea:2b:c6: 96:a6:96:d6:f1:6a:a3:3b:23:87:fc:a2:c5:a0:48:31:d2:9f: 67:2c:4e:47:e7:06:67:72:37:72:5c:93:17:fb:c9:28:e9:71: 6e:03:a8:42:0b:d5:df:a6:31:28:0e:e3:13:09:2d:21:66:cb: 57:4d:05:88:51:ed:28:8e:0b:22:b2:f0:66:7e:5d:00:11:43: c7:50:68:d0:82:98:35:40:26:f8:85:03:e1:83:c2:e5:dd:1b: 2c:52:30:d9:00:59:3d:a9:ab:36:10:5b:ce:25:b1:99:70:dd: 21:20:27:69:3b:f9:9b:02:02:f1:99:31:7a:09:fe:8c:dd:cb: 8a:dd:e3:12:2a:27:d2:43:a8:e4:54:71:b3:ab:df:8e:fb:fa: c8:ca:97:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/pFfup9JLzPdpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk NjZkMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk NGY1OWEwZWEtZjJjMi00YWY3LWI4ZjktZWQxOTQ4YzUxYThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5w5rqRCPl89ZjnulVhJhadgj7jvF2iIuWh3 46VlOLEI41MXsIN4TQ+XBVIMYZVww2+KXnTw9qpy7Mllp+vNZjy+oC5VU5Zr9S1+ DNhCe+tVvRYDVNWVO4sWA2XIuxzkHd1+WJHJHSV55RoklJoQoM1/KaKzYqJsrDX7 IzNqpmTVunV8aV0XFolS0A07zKbMOubG3JasJA8eBItQWs74fkiQFj4d2PUsu6BA HGKpb1iLQ7LNll1XTaaWbbx5txXq5jc3lSJtNozlhz0q50EsgqKJz2b5I7V2aU6F cnc3VEM8DkQC5tCGdvPn9rAUaIO4kfMn6ou5CPI/7zBEmXd8gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHE8HMMemkQsy4WvWIF3OXXovDGMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvNzk0MjgxN2YtYTE3Ni0z N2U1LTg5MTEtNmYyOWM2MmExNTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1 ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh M2UzNWQ2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQEfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcf/9WCDmHBjZ96U/jrNHrCqTWqWyxjwBFPKO7Ntd5gZxKzSxTjkn3t ZbTMMcES6tRiLpL6ytjeRe3GQUKhnY37tpI6E5BFOV7BypLJBtCAhC5pGkAy1UUt 47dY9rJR3gGtiyv+qSFj5OorxpamltbxaqM7I4f8osWgSDHSn2csTkfnBmdyN3Jc kxf7ySjpcW4DqEIL1d+mMSgO4xMJLSFmy1dNBYhR7SiOCyKy8GZ+XQARQ8dQaNCC mDVAJviFA+GDwuXdGyxSMNkAWT2pqzYQW84lsZlw3SEgJ2k7+ZsCAvGZMXoJ/ozd y4rd4xIqJ9JDqORUcbOr3477+sjKl2Y= -----END CERTIFICATE-----Generated at Mon May 5 13:46:57 2025 by rpki-client