$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/b6f11f09-e505-3534-8ce0-7ae9b244f54e.roa File: b6f11f09-e505-3534-8ce0-7ae9b244f54e.roa (raw, json) Hash identifier: Bg3hqORJGDFajAC3YONdzB4U3Nlshtsv4a0Py0hwie0= Subject key identifier: 47:1C:65:5C:03:84:EA:CB:3E:39:46:7A:29:81:53:DF:23:F9:C1:8E Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Certificate serial: 010D0C9F43285849B57A10CEFFA821A2F7E77C80 Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/b6f11f09-e505-3534-8ce0-7ae9b244f54e.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 45241 IP address blocks: 198.208.209.0/24 maxlen: 24 198.208.228.0/24 maxlen: 24 198.208.230.0/24 maxlen: 24 198.208.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:10:ce:ff:a8:21:a2:f7:e7:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=b2174169-a82e-4613-ad1e-fec3ba0722fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:81:06:b3:28:dd:13:bd:fe:9e:98:ba:8b:11: bd:ac:41:c4:c6:53:d9:7d:57:6e:cb:6a:0f:14:9d: b7:b1:77:fe:b3:ab:74:53:97:70:cd:18:14:3f:a0: 16:29:54:a7:cf:18:54:bd:6b:fd:23:e8:07:7e:22: 6d:06:5e:4c:6e:7a:53:46:ed:1e:82:9b:42:e2:c7: fb:1a:cb:79:db:ba:ab:57:db:71:d8:b9:b2:be:fb: 95:79:e7:38:01:42:ba:8b:37:71:56:75:21:1c:3e: 70:e3:c3:01:e4:82:b9:a2:14:a5:1e:32:57:2e:5d: b2:78:13:a0:17:5a:b5:5c:eb:6d:88:f6:da:76:db: 76:c8:36:e8:94:fb:a9:16:b4:83:29:73:e0:a7:e3: 19:cf:34:2e:b3:2f:ae:b2:52:02:c4:f2:27:4c:c6: 17:65:eb:df:1f:a5:7a:cf:d1:2d:9a:4e:da:c3:ca: 79:0a:f9:63:4d:41:61:3f:4b:00:45:85:80:a0:f9: bd:6f:a2:c2:16:c3:a4:d2:6e:28:f2:96:31:09:cc: 5e:d8:d9:13:1e:b8:7a:97:1a:61:7e:88:99:f4:01: 25:9f:6b:9f:cf:39:f9:86:47:ab:23:01:14:c6:ab: 7f:c6:fb:fe:80:ea:02:7b:bd:e9:dc:9e:e1:ba:64: d6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1C:65:5C:03:84:EA:CB:3E:39:46:7A:29:81:53:DF:23:F9:C1:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/b6f11f09-e505-3534-8ce0-7ae9b244f54e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl X509v3 Authority Key Identifier: keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer sbgp-ipAddrBlock: critical IPv4: 198.208.209.0/24 198.208.228.0/24 198.208.230.0/24 198.208.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:bc:78:2c:6c:16:a9:ed:bc:e7:d0:8a:46:8a:0b:49:ae:06: a8:00:49:f8:93:c1:2b:dc:5c:ef:fe:10:ab:16:fd:da:c6:21: 3a:1c:d5:49:a8:43:17:01:de:1f:69:58:5a:b9:19:bf:6a:14: 69:1f:3f:33:6b:e0:76:52:7e:94:bf:ab:01:55:4b:88:20:2b: 5b:17:3d:b2:fe:15:0e:a4:75:82:5e:6a:8a:ee:79:dc:50:9a: 71:3e:a8:71:21:4d:66:20:77:06:45:9b:04:6a:e7:39:f7:c7: 1c:8c:04:ac:21:9e:5f:18:72:ee:4d:43:ab:f1:dc:81:ce:93: ad:47:bf:f0:c9:59:e2:2e:8a:b0:d6:63:fa:74:d7:35:e0:e2: d1:75:85:4a:57:66:b9:36:2c:1a:c9:0e:20:3e:4b:35:61:ba: 1a:5e:4a:d1:9a:1d:dd:e9:18:26:11:b2:1c:d3:14:65:49:a3: 6d:84:a9:db:a6:d4:73:3d:03:66:26:e9:f5:69:8c:49:76:64: f2:1c:b5:6c:8a:f2:22:27:03:82:e8:0e:25:21:44:45:57:79: b3:ef:c1:01:17:7e:3c:0c:a9:c1:fa:d5:5a:3d:50:f0:09:37: c2:88:5d:5a:fb:1e:c9:c9:46:19:4d:7f:7a:c6:e5:0d:d8:7c: e9:a4:14:3f -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEm1ehDO/6ghovfnfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl M2U0MB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk YjIxNzQxNjktYTgyZS00NjEzLWFkMWUtZmVjM2JhMDcyMmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoEGsyjdE73+npi6ixG9rEHExlPZfVduy2oP FJ23sXf+s6t0U5dwzRgUP6AWKVSnzxhUvWv9I+gHfiJtBl5MbnpTRu0egptC4sf7 Gst527qrV9tx2LmyvvuVeec4AUK6izdxVnUhHD5w48MB5IK5ohSlHjJXLl2yeBOg F1q1XOttiPbadtt2yDbolPupFrSDKXPgp+MZzzQusy+uslICxPInTMYXZevfH6V6 z9Etmk7aw8p5CvljTUFhP0sARYWAoPm9b6LCFsOk0m4o8pYxCcxe2NkTHrh6lxph foiZ9AEln2ufzzn5hkerIwEUxqt/xvv+gOoCe73p3J7humTWVQIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFEccZVwDhOrLPjlGeimBU98j+cGOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2 N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvYjZmMTFmMDktZTUwNS0z NTM0LThjZTAtN2FlOWIyNDRmNTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0 ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj NDk1NGUzZTQuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAxtDRAwQA xtDkAwQAxtDmAwQAxtD/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGS8eCxsFqntvOfQikaKC0muBqgASfiT wSvcXO/+EKsW/drGIToc1UmoQxcB3h9pWFq5Gb9qFGkfPzNr4HZSfpS/qwFVS4gg K1sXPbL+FQ6kdYJeaoruedxQmnE+qHEhTWYgdwZFmwRq5zn3xxyMBKwhnl8Ycu5N Q6vx3IHOk61Hv/DJWeIuirDWY/p01zXg4tF1hUpXZrk2LBrJDiA+SzVhuhpeStGa Hd3pGCYRshzTFGVJo22Eqdum1HM9A2Ym6fVpjEl2ZPIctWyK8iInA4LoDiUhREVX ebPvwQEXfjwMqcH61Vo9UPAJN8KIXVr7HsnJRhlNf3rG5Q3YfOmkFD8= -----END CERTIFICATE-----Generated at Sun May 11 20:31:11 2025 by rpki-client