$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/d7dbe350-33a5-3258-aa70-7a64de946ef8.roa File: d7dbe350-33a5-3258-aa70-7a64de946ef8.roa (raw, json) Hash identifier: wyl4C+TNGwmJ6hVSU60Qy/3Ahw+WSEcNtPkLr9+/qjA= Subject key identifier: 12:F4:A7:EC:8D:3B:A4:73:4E:97:66:3A:77:8F:76:48:27:AD:9B:27 Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F432858497DA45DD03B66030FA66384E0 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/d7dbe350-33a5-3258-aa70-7a64de946ef8.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 40509 IP address blocks: 168.220.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:5d:d0:3b:66:03:0f:a6:63:84:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=87f341a4-f227-47bf-8336-cbd175abd67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4a:8c:72:7f:89:23:bf:d9:81:cd:43:25:8d: 99:b0:db:6f:86:4b:4a:b0:80:83:09:87:7e:49:4d: c8:69:ab:c4:1d:8b:2e:b3:04:fe:13:05:0c:11:fe: 0c:ed:ab:63:1d:6e:83:c3:4d:28:2a:73:ef:31:5d: 95:57:34:07:2c:4c:72:6e:db:f9:72:df:b9:d2:eb: e2:98:6d:8b:21:cd:c9:9b:3c:23:f1:37:e5:ec:9b: e2:b8:40:48:8c:a4:5f:b8:a2:ab:2b:97:27:0d:0b: 63:70:12:54:7a:3b:ed:f9:ce:64:cf:2e:5f:97:0e: 36:7d:be:b4:a8:84:95:eb:57:e2:1b:f3:c9:5b:81: 9a:c6:e9:8e:e2:2a:ad:a5:8f:79:01:64:8c:8a:c5: 75:d5:fc:06:54:85:35:db:87:41:5e:fd:0f:87:a5: 1f:a8:41:d3:76:5d:68:11:41:41:24:d1:25:70:cf: dd:c1:e4:00:b2:2e:0b:be:cd:95:45:7d:3b:05:6d: 8a:3e:0d:81:7e:12:4b:a4:1d:49:97:a9:9e:59:39: 7a:9a:f3:ef:eb:c3:ea:85:5b:21:7c:82:1f:13:1a: c7:67:3b:61:d8:be:85:f2:8b:91:30:cd:e2:d5:15: 7b:3d:17:5b:97:fa:3d:7e:61:ab:45:5b:57:08:b2: 9e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F4:A7:EC:8D:3B:A4:73:4E:97:66:3A:77:8F:76:48:27:AD:9B:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/d7dbe350-33a5-3258-aa70-7a64de946ef8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 168.220.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:6c:83:89:86:7e:3e:99:db:77:19:04:c8:4e:50:ee:b2:66: 24:6c:48:56:88:e9:10:fd:fe:87:65:05:7b:70:9a:c6:ce:e2: d6:40:56:b1:3b:9d:9d:77:35:aa:52:7a:69:6e:93:b5:0a:2c: c8:b0:3a:ac:a9:5e:f8:96:09:d9:c4:4d:97:f2:0e:b2:6d:63: e0:10:dd:04:89:80:2b:c2:55:51:85:4b:13:3a:c0:2e:c6:1b: 24:98:41:42:60:d9:0c:85:8d:be:2c:f4:a3:08:b7:cb:70:e4: 75:6f:ef:39:33:f6:b8:0e:ed:e0:b5:36:54:fe:0f:10:f9:fe: 38:20:3a:45:e5:98:38:85:cd:33:28:65:13:f6:b8:03:08:fb: 23:e2:76:36:42:88:57:21:f3:91:2d:0a:13:71:a6:98:a6:bd: c8:08:9f:c3:3f:f1:b1:2f:a1:4b:84:3f:5d:5c:0c:8d:86:d0: ef:c0:02:8f:0e:e6:c5:f0:76:76:28:72:24:60:1f:d7:c2:e2: 54:37:69:10:b1:ba:15:26:7b:1e:64:97:1f:24:3b:8a:86:68: 3e:7c:64:e3:15:5d:98:1f:f4:f5:12:b2:23:fa:fe:86:f4:14: 02:21:e1:86:8a:a5:2c:b6:a1:94:29:24:7a:30:d5:e8:f0:24: 96:49:b2:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pF3QO2YDD6ZjhOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk ODdmMzQxYTQtZjIyNy00N2JmLTgzMzYtY2JkMTc1YWJkNjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkqMcn+JI7/Zgc1DJY2ZsNtvhktKsICDCYd+ SU3IaavEHYsuswT+EwUMEf4M7atjHW6Dw00oKnPvMV2VVzQHLExybtv5ct+50uvi mG2LIc3Jmzwj8Tfl7JviuEBIjKRfuKKrK5cnDQtjcBJUejvt+c5kzy5flw42fb60 qISV61fiG/PJW4GaxumO4iqtpY95AWSMisV11fwGVIU124dBXv0Ph6UfqEHTdl1o EUFBJNElcM/dweQAsi4Lvs2VRX07BW2KPg2BfhJLpB1Jl6meWTl6mvPv68PqhVsh fIIfExrHZzth2L6F8ouRMM3i1RV7PRdbl/o9fmGrRVtXCLKeiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBL0p+yNO6RzTpdmOnePdkgnrZsnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvZDdkYmUzNTAtMzNhNS0z MjU4LWFhNzAtN2E2NGRlOTQ2ZWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqNxQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdsg4mGfj6Z23cZBMhOUO6yZiRsSFaI6RD9/odlBXtwmsbO4tZAVrE7 nZ13NapSemluk7UKLMiwOqypXviWCdnETZfyDrJtY+AQ3QSJgCvCVVGFSxM6wC7G GySYQUJg2QyFjb4s9KMIt8tw5HVv7zkz9rgO7eC1NlT+DxD5/jggOkXlmDiFzTMo ZRP2uAMI+yPidjZCiFch85EtChNxppimvcgIn8M/8bEvoUuEP11cDI2G0O/AAo8O 5sXwdnYociRgH9fC4lQ3aRCxuhUmex5klx8kO4qGaD58ZOMVXZgf9PUSsiP6/ob0 FAIh4YaKpSy2oZQpJHow1ejwJJZJsqs= -----END CERTIFICATE-----Generated at Mon May 12 11:39:11 2025 by rpki-client