$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/5651ab28-e4f9-3e7d-be4b-1d5a95bb0bef.roa File: 5651ab28-e4f9-3e7d-be4b-1d5a95bb0bef.roa (raw, json) Hash identifier: roq222r7M6/0A8o7JqCmEv2wjJvS7IIBN08JzHpZiUI= Subject key identifier: 09:04:57:84:A0:B9:13:CE:4B:A9:84:EB:B9:99:50:49:38:CC:6F:5E Certificate issuer: /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Certificate serial: 010D0C9F4328584975755E0C8F1D0E237F9FA380 Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/5651ab28-e4f9-3e7d-be4b-1d5a95bb0bef.roa Signing time: Tue 08 Apr 2025 14:39:53 +0000 ROA not before: Tue 08 Apr 2025 14:39:53 +0000 ROA not after: Mon 07 Jul 2025 14:39:53 +0000 asID: 21782 IP address blocks: 68.66.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:75:5e:0c:8f:1d:0e:23:7f:9f:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Validity Not Before: Apr 8 14:39:53 2025 GMT Not After : Jul 7 14:39:53 2025 GMT Subject: CN=0f41467a-6bee-4765-bffe-feaf861390b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:11:2e:d0:13:c5:21:70:cd:83:28:89:41:cb: 4c:08:11:c6:71:75:c6:11:d8:e8:90:3d:f9:0b:90: 99:88:ed:36:df:fa:a7:94:41:68:e1:69:3c:03:45: 73:fd:3c:33:93:b3:6c:51:bb:eb:a4:c7:68:cc:82: 80:f7:c5:eb:ba:cb:dd:5b:86:82:40:13:73:80:fd: 42:7f:7c:61:4c:e2:03:84:fc:f0:9d:bb:f2:c0:35: 69:e6:de:d7:08:cf:60:e9:cb:74:28:80:1a:4e:ad: 79:e3:15:d4:84:c7:46:e6:5b:1d:5b:9a:16:27:0c: b9:3f:7a:e9:d5:19:fb:52:af:af:10:e4:2b:56:09: cf:17:51:f3:e7:8b:ba:b0:97:22:62:cb:01:1f:37: 4f:d5:c1:be:19:ad:5e:18:4e:25:db:77:51:29:a1: 56:b7:04:20:0c:92:71:5c:ee:3d:b1:d0:77:9f:79: f5:42:aa:7d:68:94:6e:26:f6:57:a6:49:96:2a:b8: d0:57:ce:27:ca:07:cd:a4:2a:e2:5f:3e:8d:27:53: 72:55:17:f6:ee:53:aa:e5:8c:98:19:e2:3e:01:bb: d0:be:e7:c1:e7:8b:ff:d3:b4:49:02:25:78:36:27: 49:76:f4:8c:38:2f:de:12:67:9a:ab:10:d0:ab:ac: 62:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:04:57:84:A0:B9:13:CE:4B:A9:84:EB:B9:99:50:49:38:CC:6F:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/5651ab28-e4f9-3e7d-be4b-1d5a95bb0bef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl X509v3 Authority Key Identifier: keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer sbgp-ipAddrBlock: critical IPv4: 68.66.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:7d:92:f2:a1:b7:83:23:b7:94:d0:31:88:1c:ed:96:c3:62: cc:aa:c7:4f:cd:fb:a2:3a:00:66:41:a2:79:78:2e:99:4c:d5: e1:11:95:08:43:2a:d0:27:20:61:64:6a:72:89:d2:b2:62:ca: d9:3a:54:3a:52:a3:70:dc:aa:95:9b:dc:41:a0:f2:9e:92:17: df:9a:81:08:1a:10:8c:4d:55:81:de:f2:1d:6a:b0:5e:aa:bc: 61:63:6e:7f:36:21:e7:b5:02:2e:9c:a8:d8:ad:3e:6b:a3:a6: 3d:19:40:53:b9:27:70:94:e2:10:61:cc:af:d4:81:a3:8a:b8: b4:d2:32:d7:e9:4b:28:50:6e:9a:9c:54:f1:36:90:ff:c6:cc: bc:b2:f8:22:b9:df:dd:4e:e1:43:fb:a1:f6:1e:6e:85:63:7f: 00:cb:13:d8:c7:b2:f4:fb:bf:52:fa:02:c1:f2:56:c8:93:3e: 59:b0:40:15:cd:08:db:58:e7:66:c7:98:35:ed:12:48:87:4e: 15:6a:d0:29:7b:b8:21:3f:3f:57:c6:ac:24:06:41:ed:58:97: 64:c9:77:f5:9b:45:79:e1:83:76:3a:e3:9e:b0:db:06:b5:d1: a7:58:b8:96:f4:f5:88:38:95:77:d1:36:42:c8:37:dd:91:8f: 87:c2:e9:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1dV4Mjx0OI3+fo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM3ZGJjZDUtZDZiYi00YTg5LTk4YWUtZTI1NTBlYTNl OTNhMB4XDTI1MDQwODE0Mzk1M1oXDTI1MDcwNzE0Mzk1M1owLzEtMCsGA1UEAxMk MGY0MTQ2N2EtNmJlZS00NzY1LWJmZmUtZmVhZjg2MTM5MGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hEu0BPFIXDNgyiJQctMCBHGcXXGEdjokD35 C5CZiO023/qnlEFo4Wk8A0Vz/Twzk7NsUbvrpMdozIKA98XrusvdW4aCQBNzgP1C f3xhTOIDhPzwnbvywDVp5t7XCM9g6ct0KIAaTq154xXUhMdG5lsdW5oWJwy5P3rp 1Rn7Uq+vEOQrVgnPF1Hz54u6sJciYssBHzdP1cG+Ga1eGE4l23dRKaFWtwQgDJJx XO49sdB3n3n1Qqp9aJRuJvZXpkmWKrjQV84nygfNpCriXz6NJ1NyVRf27lOq5YyY GeI+AbvQvufB54v/07RJAiV4NidJdvSMOC/eEmeaqxDQq6xiBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkEV4SguRPOS6mE67mZUEk4zG9eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Yzdk YmNkNS1kNmJiLTRhODktOThhZS1lMjU1MGVhM2U5M2EvNTY1MWFiMjgtZTRmOS0z ZTdkLWJlNGItMWQ1YTk1YmIwYmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM3ZGJjZDUtZDZiYi00YTg5LTk4 YWUtZTI1NTBlYTNlOTNhLzhjN2RiY2Q1LWQ2YmItNGE4OS05OGFlLWUyNTUwZWEz ZTkzYS5jcmwwHwYDVR0jBBgwFoAUAzePKejZd54MxR716MslpAwKWwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YzdkYmNkNS1kNmJiLTRhODktOThhZS1lMjU1 MGVhM2U5M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDREJYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFF9kvKht4Mjt5TQMYgc7ZbDYsyqx0/N+6I6AGZBonl4LplM1eERlQhD KtAnIGFkanKJ0rJiytk6VDpSo3DcqpWb3EGg8p6SF9+agQgaEIxNVYHe8h1qsF6q vGFjbn82Iee1Ai6cqNitPmujpj0ZQFO5J3CU4hBhzK/UgaOKuLTSMtfpSyhQbpqc VPE2kP/GzLyy+CK5391O4UP7ofYeboVjfwDLE9jHsvT7v1L6AsHyVsiTPlmwQBXN CNtY52bHmDXtEkiHThVq0Cl7uCE/P1fGrCQGQe1Yl2TJd/WbRXnhg3Y6456w2wa1 0adYuJb09Yg4lXfRNkLIN92Rj4fC6RE= -----END CERTIFICATE-----Generated at Thu May 8 16:34:17 2025 by rpki-client