$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/22be48d5-f877-34f2-a9e9-e415ed6320a6.roa File: 22be48d5-f877-34f2-a9e9-e415ed6320a6.roa (raw, json) Hash identifier: 2Xnf2UMNATbn4iIISdl7ZU7WjgW6G8+0sG2MFFlJq7w= Subject key identifier: BE:D6:10:52:9F:E1:CB:FF:D6:3B:E4:F9:57:13:D9:C6:66:E1:C4:B7 Certificate issuer: /CN=d8d99f8b-a85a-41e9-89b4-612c6b9c10a8 Certificate serial: 010D0C9F432858493ED3D55B381B4B2FE7ABDA40 Authority key identifier: 0B:72:93:6A:9C:83:B5:E3:6C:B7:76:E3:59:21:8A:61:87:56:CE:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/22be48d5-f877-34f2-a9e9-e415ed6320a6.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 400764 IP address blocks: 204.11.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:d5:5b:38:1b:4b:2f:e7:ab:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8d99f8b-a85a-41e9-89b4-612c6b9c10a8 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=ca84e148-fab5-4cca-b693-befbcd00bb4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:40:69:84:e1:a6:1b:82:38:9f:23:e4:d9:2b: 32:7f:2e:2a:fb:2d:3c:7a:8e:8a:d9:8b:09:a2:55: b2:db:7d:f9:76:29:9a:52:3b:5a:66:6a:49:2d:32: 65:25:57:3e:1e:3b:43:8b:07:3c:49:dd:83:e8:5a: c0:c9:d5:93:2e:98:08:65:7f:b2:84:94:9a:96:6c: 58:a0:0d:f9:ae:d2:11:54:fb:59:3b:d3:e7:a6:9d: ae:ce:ec:04:da:a7:9e:2d:dc:bf:03:12:46:ce:c9: 9c:c9:d7:e4:79:9d:96:a9:41:54:9c:30:a3:90:ad: 74:a4:50:39:6d:df:0a:dd:8c:d9:7c:3f:72:c3:35: d2:83:21:0f:fa:80:3b:9a:05:39:87:ed:61:e6:59: c1:fd:15:7e:49:c8:27:60:63:1e:01:11:4c:3a:4e: eb:68:90:94:b7:6e:f5:71:22:1d:80:2f:96:12:97: 12:b8:ad:be:09:4a:74:58:e1:e3:f8:fb:07:71:18: 41:b9:a7:d0:99:20:4f:98:01:93:e2:a8:85:c6:cd: 13:bb:47:4b:a1:a5:73:1c:79:83:77:3c:00:45:4d: bf:ab:6e:76:f0:29:db:60:b7:44:c3:5f:51:98:c9: a3:52:92:73:9f:4b:e2:31:93:56:35:26:15:54:3b: 08:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D6:10:52:9F:E1:CB:FF:D6:3B:E4:F9:57:13:D9:C6:66:E1:C4:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/22be48d5-f877-34f2-a9e9-e415ed6320a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.crl X509v3 Authority Key Identifier: keyid:0B:72:93:6A:9C:83:B5:E3:6C:B7:76:E3:59:21:8A:61:87:56:CE:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.cer sbgp-ipAddrBlock: critical IPv4: 204.11.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:c2:ce:d7:ae:ea:36:50:8d:fa:1b:ca:7d:02:81:15:d2:49: 97:66:43:ad:b7:50:d7:0b:03:bb:1c:a4:94:12:d1:24:f7:21: 75:92:c9:bb:7f:94:7a:b4:15:d4:99:07:1f:f1:46:4b:33:0a: c3:24:91:3b:e9:ed:d9:0e:67:b3:a9:fc:99:71:db:67:d5:d7: 33:c4:4d:24:3f:95:12:be:60:44:05:8d:cb:51:9f:64:a3:f4: 01:c0:7d:a5:25:f7:07:d8:88:65:0f:ba:91:c4:05:89:2d:a4: 65:c8:99:43:27:8a:57:37:23:87:f3:c7:62:94:9a:a8:30:ba: 87:14:75:db:66:7e:c0:2d:1d:4b:08:6a:f9:a5:2f:a1:42:58: 6a:88:17:f6:04:dc:75:a2:83:b4:03:cc:d6:f8:c6:73:2d:43: b6:2a:57:05:04:21:59:82:57:4f:49:e9:1b:7a:63:ec:c8:04: 43:fa:a4:7b:b1:bd:5c:b6:60:88:63:b3:db:64:ce:2e:8b:cc: 29:dc:5f:15:af:39:e9:2a:a4:90:d3:8e:70:e9:85:55:46:e1: f1:a4:c1:b0:27:02:25:e0:15:97:91:5e:1f:74:65:84:e4:07: 3e:3b:00:98:ab:8f:01:4a:35:a3:fd:57:34:4d:9b:52:6c:34: 42:5a:9c:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+09VbOBtLL+er2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhkOTlmOGItYTg1YS00MWU5LTg5YjQtNjEyYzZiOWMx MGE4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk Y2E4NGUxNDgtZmFiNS00Y2NhLWI2OTMtYmVmYmNkMDBiYjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UBphOGmG4I4nyPk2Ssyfy4q+y08eo6K2YsJ olWy2335dimaUjtaZmpJLTJlJVc+HjtDiwc8Sd2D6FrAydWTLpgIZX+yhJSalmxY oA35rtIRVPtZO9Pnpp2uzuwE2qeeLdy/AxJGzsmcydfkeZ2WqUFUnDCjkK10pFA5 bd8K3YzZfD9ywzXSgyEP+oA7mgU5h+1h5lnB/RV+ScgnYGMeARFMOk7raJCUt271 cSIdgC+WEpcSuK2+CUp0WOHj+PsHcRhBuafQmSBPmAGT4qiFxs0Tu0dLoaVzHHmD dzwARU2/q2528CnbYLdEw19RmMmjUpJzn0viMZNWNSYVVDsIhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7WEFKf4cv/1jvk+VcT2cZm4cS3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kOGQ5 OWY4Yi1hODVhLTQxZTktODliNC02MTJjNmI5YzEwYTgvMjJiZTQ4ZDUtZjg3Ny0z NGYyLWE5ZTktZTQxNWVkNjMyMGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDhkOTlmOGItYTg1YS00MWU5LTg5 YjQtNjEyYzZiOWMxMGE4L2Q4ZDk5ZjhiLWE4NWEtNDFlOS04OWI0LTYxMmM2Yjlj MTBhOC5jcmwwHwYDVR0jBBgwFoAUC3KTapyDteNst3bjWSGKYYdWzuYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kOGQ5OWY4Yi1hODVhLTQxZTktODliNC02MTJj NmI5YzEwYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzAsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnCzteu6jZQjfobyn0CgRXSSZdmQ623UNcLA7scpJQS0ST3IXWSybt/ lHq0FdSZBx/xRkszCsMkkTvp7dkOZ7Op/Jlx22fV1zPETSQ/lRK+YEQFjctRn2Sj 9AHAfaUl9wfYiGUPupHEBYktpGXImUMnilc3I4fzx2KUmqgwuocUddtmfsAtHUsI avmlL6FCWGqIF/YE3HWig7QDzNb4xnMtQ7YqVwUEIVmCV09J6Rt6Y+zIBEP6pHux vVy2YIhjs9tkzi6LzCncXxWvOekqpJDTjnDphVVG4fGkwbAnAiXgFZeRXh90ZYTk Bz47AJirjwFKNaP9VzRNm1JsNEJanKI= -----END CERTIFICATE-----Generated at Mon May 5 14:20:14 2025 by rpki-client