$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/1b734f6a-de21-3d44-9503-5bc9ecbf1c09.roa File: 1b734f6a-de21-3d44-9503-5bc9ecbf1c09.roa (raw, json) Hash identifier: 2HJ8MRUOSrLWUgnibtrhZuZXLR/5tAGh03c/+9MXKiw= Subject key identifier: 16:5B:E9:64:62:F8:EC:F2:A0:4C:16:04:AB:C4:C3:53:60:F4:F9:91 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F432858499F249E2B4BFFC72ED0AE7200 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/1b734f6a-de21-3d44-9503-5bc9ecbf1c09.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 198949 IP address blocks: 67.218.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:9e:2b:4b:ff:c7:2e:d0:ae:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=1eaab5d8-b7d1-425e-beef-2ee9654a3c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:71:11:30:1c:c5:ea:ef:cb:6c:1a:a3:a2:c5: b4:09:23:76:c3:62:07:2d:b2:b4:17:2d:63:ab:e1: 0a:1c:8e:07:80:36:34:61:76:51:81:7d:d9:ed:0b: a9:16:08:a8:ba:d1:80:7f:2e:35:5b:fe:05:ea:48: 7c:b2:ee:16:bc:90:1f:d0:df:59:61:57:42:60:4f: e3:7e:d5:f2:15:a1:86:6f:38:b6:3a:37:0f:88:7e: 28:40:a7:44:23:18:ed:97:50:dc:ae:59:4b:6e:4f: 4f:e7:fe:d4:5c:bb:23:55:18:4b:fe:05:28:13:44: 8e:19:b0:e5:76:7c:d0:fa:3a:bd:95:b6:62:ff:e3: 63:17:6c:e9:1e:cf:8f:89:d3:5e:d1:b7:d4:e6:5b: d5:93:08:7b:a1:8d:27:11:7c:00:d5:8d:b7:30:af: f6:6a:ba:d9:4f:73:db:97:e8:f3:bb:ba:7e:96:36: 42:72:0a:90:8b:27:7e:aa:bb:a0:1e:21:61:7b:55: 2b:41:d2:c1:f2:6d:13:22:f0:16:41:df:13:07:93: e7:ed:df:14:c6:6f:40:6b:e9:bf:2c:ce:38:aa:72: 7b:44:f4:18:6c:ef:7b:26:7f:b5:63:d3:97:cf:5c: 62:ba:7c:ca:51:8d:a9:20:ec:0b:f9:d6:6b:88:73: 61:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:5B:E9:64:62:F8:EC:F2:A0:4C:16:04:AB:C4:C3:53:60:F4:F9:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/1b734f6a-de21-3d44-9503-5bc9ecbf1c09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 67.218.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:6e:26:df:ee:28:e7:83:ed:99:61:3c:3c:57:6e:d6:6a:41: 6c:17:e5:58:88:62:24:05:b6:32:e9:99:0b:80:77:6e:c2:50: 84:09:e1:6b:fd:c4:f4:6f:e4:56:25:0f:f1:09:f6:c7:99:15: 6a:47:9a:8e:d7:5c:25:84:e7:20:15:3f:af:c6:86:f1:0e:fd: 68:87:f8:e4:0e:b6:8d:19:9a:1d:fb:30:7a:31:4f:74:df:d0: a6:ee:53:c0:cc:3f:19:b7:4c:b8:ec:0d:3a:7e:86:e9:d1:77: 1b:3f:38:e6:11:02:14:a2:d8:14:35:4b:cb:11:eb:15:fc:4d: af:39:0d:01:dc:91:25:e8:fb:d9:a8:9d:4e:0f:6a:e7:2a:83: 9e:d4:de:32:a3:72:37:48:06:19:85:ea:f8:38:25:11:30:4c: 3d:cb:27:b9:3d:c9:2c:bf:e0:bb:98:24:04:be:a1:c0:0a:27: ec:b3:d9:98:80:ad:91:9b:e7:f5:13:92:2d:0f:de:82:d9:aa: 19:78:fe:a4:7b:98:6a:48:16:b7:7c:13:99:34:41:03:e8:33: 20:b0:7d:53:69:a5:d9:a0:f7:1a:d2:86:f3:31:dc:76:0b:71: 4b:24:a0:95:ad:a4:ae:69:a1:c0:e7:13:46:f3:7b:cb:56:dd: d5:39:39:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJJ4rS//HLtCucgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MWVhYWI1ZDgtYjdkMS00MjVlLWJlZWYtMmVlOTY1NGEzYzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXERMBzF6u/LbBqjosW0CSN2w2IHLbK0Fy1j q+EKHI4HgDY0YXZRgX3Z7QupFgioutGAfy41W/4F6kh8su4WvJAf0N9ZYVdCYE/j ftXyFaGGbzi2OjcPiH4oQKdEIxjtl1DcrllLbk9P5/7UXLsjVRhL/gUoE0SOGbDl dnzQ+jq9lbZi/+NjF2zpHs+PidNe0bfU5lvVkwh7oY0nEXwA1Y23MK/2arrZT3Pb l+jzu7p+ljZCcgqQiyd+qrugHiFhe1UrQdLB8m0TIvAWQd8TB5Pn7d8Uxm9Aa+m/ LM44qnJ7RPQYbO97Jn+1Y9OXz1xiunzKUY2pIOwL+dZriHNhOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZb6WRi+OzyoEwWBKvEw1Ng9PmRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvMWI3MzRmNmEtZGUyMS0z ZDQ0LTk1MDMtNWJjOWVjYmYxYzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9pQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhuJt/uKOeD7ZlhPDxXbtZqQWwX5ViIYiQFtjLpmQuAd27CUIQJ4Wv9 xPRv5FYlD/EJ9seZFWpHmo7XXCWE5yAVP6/GhvEO/WiH+OQOto0Zmh37MHoxT3Tf 0KbuU8DMPxm3TLjsDTp+hunRdxs/OOYRAhSi2BQ1S8sR6xX8Ta85DQHckSXo+9mo nU4Paucqg57U3jKjcjdIBhmF6vg4JREwTD3LJ7k9ySy/4LuYJAS+ocAKJ+yz2ZiA rZGb5/UTki0P3oLZqhl4/qR7mGpIFrd8E5k0QQPoMyCwfVNppdmg9xrShvMx3HYL cUskoJWtpK5pocDnE0bze8tW3dU5OfE= -----END CERTIFICATE-----Generated at Tue May 6 11:00:03 2025 by rpki-client