$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/4138c095-a4da-331c-a10c-3621cf1b39cb.roa File: 4138c095-a4da-331c-a10c-3621cf1b39cb.roa (raw, json) Hash identifier: OBkotqyLSglsOnQ25nZCDqYsoYHqR2gu/cS1BinPfTg= Subject key identifier: 40:8A:1A:BD:E5:7D:7D:B0:5A:87:B5:16:77:27:30:12:CE:AC:82:04 Certificate issuer: /CN=a7a26b13-c295-4f0b-bec5-4645ddd1d0d9 Certificate serial: 010D0C9F432858499DBF2CB3C7CC060686130200 Authority key identifier: F2:40:A2:C2:DB:53:C9:2C:89:CF:A6:ED:89:18:13:25:11:AE:D2:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/4138c095-a4da-331c-a10c-3621cf1b39cb.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 8134 IP address blocks: 68.70.128.0/20 maxlen: 20 69.19.168.0/21 maxlen: 21 206.51.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:2c:b3:c7:cc:06:06:86:13:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7a26b13-c295-4f0b-bec5-4645ddd1d0d9 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=0985718d-03c0-49af-b39a-7fc9b168a2cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:18:6e:eb:1b:15:7f:89:c2:7b:15:4f:15:02: 76:b5:7c:d6:d5:ee:81:bc:dd:bf:9d:90:31:7d:12: 3b:bb:45:74:12:2f:f4:4d:40:9c:65:0f:52:d3:0a: c4:c2:50:92:5b:6a:fd:a7:2c:2c:8b:43:a9:0b:1e: 25:50:15:cb:27:bd:88:71:b8:f6:89:51:28:df:14: ea:4c:ed:cd:7c:5f:5c:db:c7:1e:c2:bb:73:30:c4: 12:de:d9:a0:6e:dd:ea:37:dc:b3:fe:ef:bb:d9:50: ad:26:72:58:57:48:3b:08:81:b7:5e:64:ee:a9:d0: 06:e3:f8:fe:a0:4a:cc:b2:f8:9f:27:a7:4c:9c:17: 99:6e:28:71:1a:f1:3e:57:89:59:a6:d9:a0:ad:20: 92:17:c8:e1:be:4e:aa:ab:0c:07:a1:05:c5:f2:12: e4:9b:ec:4c:e9:b5:0c:f6:f4:8c:79:01:01:d8:4e: a5:b7:e5:c3:c1:5c:2b:33:2d:fb:23:a4:1c:9f:7e: 0f:1b:cc:ed:f9:16:09:67:48:43:95:63:f3:27:c4: fc:a5:39:ad:a1:21:59:88:2e:14:08:c4:cf:ab:d7: d5:bf:70:82:97:61:39:1e:49:c8:eb:a6:a3:ca:ec: d2:e4:76:54:1d:9f:bc:59:25:b2:e1:c8:5e:f1:70: de:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8A:1A:BD:E5:7D:7D:B0:5A:87:B5:16:77:27:30:12:CE:AC:82:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/4138c095-a4da-331c-a10c-3621cf1b39cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.crl X509v3 Authority Key Identifier: keyid:F2:40:A2:C2:DB:53:C9:2C:89:CF:A6:ED:89:18:13:25:11:AE:D2:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.cer sbgp-ipAddrBlock: critical IPv4: 68.70.128.0/20 69.19.168.0/21 206.51.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:e2:bc:01:9a:25:ae:b7:c9:6c:dd:a7:a2:c8:d5:13:4d:8a: cc:24:d7:7e:aa:39:d6:96:0d:8e:4e:65:14:fa:5d:c9:7b:4b: 59:84:33:28:db:47:78:ef:0e:d4:5b:44:49:56:71:09:40:4e: 38:66:35:d8:b6:35:9e:84:1c:19:dd:f9:bc:b5:d0:2f:27:81: 66:16:3c:f4:85:d5:cb:79:7a:03:01:e5:46:0e:59:eb:a9:5a: f2:54:9c:22:11:c0:5e:da:b4:46:e4:b1:db:c8:78:ce:8a:d5: 96:7c:07:de:17:39:00:c8:96:79:50:62:94:9c:f0:32:aa:d0: 96:1e:31:6b:4e:e0:e3:b5:a6:d9:31:1d:13:35:54:67:2d:09: b1:0a:d4:0e:12:ea:ee:d1:d3:7a:d2:0a:9a:59:77:97:26:65: 27:8d:8b:00:b7:64:53:be:b7:a6:e9:16:50:bb:0b:17:97:b2: 71:b7:e9:1b:ec:af:84:15:dd:27:e0:17:30:d0:2d:48:31:f7: 01:0c:16:20:ef:6f:6f:3b:d1:c6:a1:34:ac:44:c9:3b:eb:01: ec:e2:99:78:c8:31:3f:34:31:a3:7d:02:6c:4e:54:7b:e8:a6: 5a:c4:78:2f:7b:12:7f:66:f9:e2:ab:80:6f:d2:ca:d6:44:ba: 6d:43:cb:99 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEmdvyyzx8wGBoYTAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdhMjZiMTMtYzI5NS00ZjBiLWJlYzUtNDY0NWRkZDFk MGQ5MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MDk4NTcxOGQtMDNjMC00OWFmLWIzOWEtN2ZjOWIxNjhhMmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRhu6xsVf4nCexVPFQJ2tXzW1e6BvN2/nZAx fRI7u0V0Ei/0TUCcZQ9S0wrEwlCSW2r9pywsi0OpCx4lUBXLJ72Icbj2iVEo3xTq TO3NfF9c28cewrtzMMQS3tmgbt3qN9yz/u+72VCtJnJYV0g7CIG3XmTuqdAG4/j+ oErMsvifJ6dMnBeZbihxGvE+V4lZptmgrSCSF8jhvk6qqwwHoQXF8hLkm+xM6bUM 9vSMeQEB2E6lt+XDwVwrMy37I6Qcn34PG8zt+RYJZ0hDlWPzJ8T8pTmtoSFZiC4U CMTPq9fVv3CCl2E5HknI66ajyuzS5HZUHZ+8WSWy4che8XDeoQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFECKGr3lfX2wWoe1FncnMBLOrIIEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hN2Ey NmIxMy1jMjk1LTRmMGItYmVjNS00NjQ1ZGRkMWQwZDkvNDEzOGMwOTUtYTRkYS0z MzFjLWExMGMtMzYyMWNmMWIzOWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTdhMjZiMTMtYzI5NS00ZjBiLWJl YzUtNDY0NWRkZDFkMGQ5L2E3YTI2YjEzLWMyOTUtNGYwYi1iZWM1LTQ2NDVkZGQx ZDBkOS5jcmwwHwYDVR0jBBgwFoAU8kCiwttTySyJz6btiRgTJRGu0l0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hN2EyNmIxMy1jMjk1LTRmMGItYmVjNS00NjQ1 ZGRkMWQwZDkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEREaAAwQD RROoAwQEzjNwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHvivAGaJa63yWzdp6LI1RNNiswk136qOdaWDY5O ZRT6Xcl7S1mEMyjbR3jvDtRbRElWcQlATjhmNdi2NZ6EHBnd+by10C8ngWYWPPSF 1ct5egMB5UYOWeupWvJUnCIRwF7atEbksdvIeM6K1ZZ8B94XOQDIlnlQYpSc8DKq 0JYeMWtO4OO1ptkxHRM1VGctCbEK1A4S6u7R03rSCppZd5cmZSeNiwC3ZFO+t6bp FlC7CxeXsnG36Rvsr4QV3SfgFzDQLUgx9wEMFiDvb2870cahNKxEyTvrAezimXjI MT80MaN9AmxOVHvoplrEeC97En9m+eKrgG/SytZEum1Dy5k= -----END CERTIFICATE-----Generated at Wed May 7 15:44:18 2025 by rpki-client