$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/41bc3a8a-9b23-36e5-acd8-0f8fa5113f7a.roa File: 41bc3a8a-9b23-36e5-acd8-0f8fa5113f7a.roa (raw, json) Hash identifier: 6r05Fdd7IidibmKeES6gq87Y3AsYoVQeSyneAV200bI= Subject key identifier: 1F:AE:0F:FB:E4:0B:1E:10:66:F6:7D:4C:1A:2B:CE:F5:0D:5A:28:39 Certificate issuer: /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Certificate serial: 010D0C9F43285849B0AB386C44CA9C60F0A7D2E0 Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/41bc3a8a-9b23-36e5-acd8-0f8fa5113f7a.roa Signing time: Tue 29 Apr 2025 19:41:05 +0000 ROA not before: Tue 29 Apr 2025 19:41:05 +0000 ROA not after: Mon 28 Jul 2025 19:41:05 +0000 asID: 22709 IP address blocks: 64.70.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b0:ab:38:6c:44:ca:9c:60:f0:a7:d2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Validity Not Before: Apr 29 19:41:05 2025 GMT Not After : Jul 28 19:41:05 2025 GMT Subject: CN=a5e7a9f2-b6b5-4e75-b2ab-ea9283e6049e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d6:3b:42:f3:02:dc:4c:04:3b:31:4c:ba:20: 57:78:e7:64:d6:5b:1a:71:5e:f1:ca:49:cb:a6:17: a6:9c:ac:01:0d:84:8b:96:0d:f2:ab:64:b8:ac:a3: a9:ac:2f:f5:de:61:be:8a:d2:bd:5d:f1:16:e5:37: a1:21:67:88:b6:52:89:b7:d8:74:d5:73:cf:b9:e2: 32:44:ce:21:34:c9:c6:38:ef:08:b2:4f:75:16:1a: 88:e4:52:5d:83:bf:b8:91:20:6d:e7:ca:39:44:7c: a0:55:48:d8:a6:df:e3:c2:79:b3:2e:40:8e:6a:48: 30:d4:2b:ea:76:c6:15:d3:ad:72:8c:5c:21:71:81: 8e:b2:4e:ef:c7:b0:90:14:d9:8f:81:8d:72:f8:0e: 8d:4b:ca:42:fb:e7:58:41:81:31:dc:52:ca:8b:b2: fe:d1:27:8f:49:42:14:ee:35:39:90:67:22:1b:d1: 30:ae:0b:4e:0b:49:1f:41:4e:fd:82:4d:3c:f4:77: 28:46:eb:2a:1d:8b:ad:aa:d8:a8:3b:31:dd:be:48: da:7f:5a:15:7a:8b:02:a7:e4:88:14:c8:79:03:09: 96:24:a8:9d:34:d2:23:ef:c5:07:78:c2:71:5e:c0: 89:23:74:fb:8f:17:2b:36:b6:91:a7:ea:38:5e:5f: 21:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AE:0F:FB:E4:0B:1E:10:66:F6:7D:4C:1A:2B:CE:F5:0D:5A:28:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/41bc3a8a-9b23-36e5-acd8-0f8fa5113f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl X509v3 Authority Key Identifier: keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer sbgp-ipAddrBlock: critical IPv4: 64.70.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:86:ec:4a:df:6b:15:eb:5f:0d:73:46:22:3c:6f:49:86:92: ff:51:86:a1:6e:9a:fe:f1:3d:f7:ea:d2:58:96:f4:0a:0c:5d: 2c:84:f6:cb:e2:e1:21:63:10:55:7b:32:63:d9:5f:72:d9:1f: cb:d1:eb:e4:2d:6e:7e:13:47:93:60:1c:6b:0b:8b:88:20:be: 38:51:14:e7:ff:09:5f:6b:16:d9:79:78:5f:77:a3:df:0d:13: 88:bc:04:2d:5f:82:60:e1:fe:78:b7:86:80:ab:e5:dd:f7:1c: a6:73:19:00:4a:17:6d:4b:c2:17:9e:f6:43:db:0f:49:f2:df: 04:34:db:6d:90:e9:aa:63:44:db:4e:9d:b0:23:f2:ca:4e:d5: 5c:40:4c:e9:01:84:6e:e2:10:f9:43:ea:27:91:f1:df:1c:d8: aa:b1:51:62:e3:3d:8b:2d:28:5a:4c:84:6e:53:47:e1:96:66: c3:1f:72:20:1b:7f:b3:52:cb:b2:f1:34:fd:fe:74:3e:47:46: 91:f5:bf:0a:8d:82:14:f2:7a:00:b8:f1:d6:da:c9:e3:12:d9: 47:84:87:b0:7c:bc:bd:29:c5:b9:23:d5:e5:32:f6:06:08:07: 44:e5:5c:15:14:a3:11:4e:8b:d9:66:ed:02:12:57:02:b2:53: 71:f7:52:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmwqzhsRMqcYPCn0uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2MDMtZjJkMDljZmI1 ZmE3MB4XDTI1MDQyOTE5NDEwNVoXDTI1MDcyODE5NDEwNVowLzEtMCsGA1UEAxMk YTVlN2E5ZjItYjZiNS00ZTc1LWIyYWItZWE5MjgzZTYwNDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdY7QvMC3EwEOzFMuiBXeOdk1lsacV7xyknL phemnKwBDYSLlg3yq2S4rKOprC/13mG+itK9XfEW5TehIWeItlKJt9h01XPPueIy RM4hNMnGOO8Isk91FhqI5FJdg7+4kSBt58o5RHygVUjYpt/jwnmzLkCOakgw1Cvq dsYV061yjFwhcYGOsk7vx7CQFNmPgY1y+A6NS8pC++dYQYEx3FLKi7L+0SePSUIU 7jU5kGciG9EwrgtOC0kfQU79gk089HcoRusqHYutqtioOzHdvkjaf1oVeosCp+SI FMh5AwmWJKidNNIj78UHeMJxXsCJI3T7jxcrNraRp+o4Xl8hTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+uD/vkCx4QZvZ9TBorzvUNWig5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5 YTRjMC1iODhiLTRjZjUtODYwMy1mMmQwOWNmYjVmYTcvNDFiYzNhOGEtOWIyMy0z NmU1LWFjZDgtMGY4ZmE1MTEzZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2 MDMtZjJkMDljZmI1ZmE3L2EzZTlhNGMwLWI4OGItNGNmNS04NjAzLWYyZDA5Y2Zi NWZhNy5jcmwwHwYDVR0jBBgwFoAU8HKPkEcdsCoGHpgpE5pGA72MWJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5YTRjMC1iODhiLTRjZjUtODYwMy1mMmQw OWNmYjVmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQEaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOG7ErfaxXrXw1zRiI8b0mGkv9RhqFumv7xPffq0liW9AoMXSyE9svi 4SFjEFV7MmPZX3LZH8vR6+Qtbn4TR5NgHGsLi4ggvjhRFOf/CV9rFtl5eF93o98N E4i8BC1fgmDh/ni3hoCr5d33HKZzGQBKF21Lwhee9kPbD0ny3wQ0222Q6apjRNtO nbAj8spO1VxATOkBhG7iEPlD6ieR8d8c2KqxUWLjPYstKFpMhG5TR+GWZsMfciAb f7NSy7LxNP3+dD5HRpH1vwqNghTyegC48dbayeMS2UeEh7B8vL0pxbkj1eUy9gYI B0TlXBUUoxFOi9lm7QISVwKyU3H3Uio= -----END CERTIFICATE-----Generated at Tue May 6 11:01:12 2025 by rpki-client