$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b02a6d7a-d28d-3b6b-8751-feb644f7e685.roa File: b02a6d7a-d28d-3b6b-8751-feb644f7e685.roa (raw, json) Hash identifier: u3eTqi9xk5V6ChW7XOg5bIfh/vSR0HaKTzZpPXEwYKo= Subject key identifier: 2E:41:AA:A0:FE:D0:9C:53:6D:7B:E2:70:B9:13:E1:AB:9C:E5:20:9A Certificate issuer: /CN=b23daa11-4037-452a-934b-684edbefcbf9 Certificate serial: 010D0C9F43285849ABB49F726D9DDD6714B30580 Authority key identifier: FC:30:9C:C3:3C:A6:E9:C9:D4:7A:91:03:88:4D:F0:1D:00:57:60:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b02a6d7a-d28d-3b6b-8751-feb644f7e685.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 40630 IP address blocks: 204.13.88.0/22 maxlen: 24 208.94.116.0/22 maxlen: 24 2607:ff18::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:9f:72:6d:9d:dd:67:14:b3:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b23daa11-4037-452a-934b-684edbefcbf9 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=61dfc56e-c677-4158-9f22-7a927fc0400b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:90:34:0b:60:07:78:c2:9f:61:ae:67:cb:d2: 9d:5a:16:5d:17:1b:37:7d:70:02:4f:2f:69:1e:8e: 9f:b2:a6:1f:84:94:b9:06:82:31:fd:6a:4e:80:02: f2:ea:f8:97:6a:63:fa:88:5a:bb:47:f2:dd:b8:05: f3:1c:16:be:fe:e9:8e:67:ce:0a:e3:f7:27:5c:f8: ea:6f:82:7e:84:a6:e8:99:b3:29:b2:91:d2:62:2b: f3:f1:f4:cf:ee:db:70:83:60:d4:b8:1e:14:48:b7: dc:0e:f0:09:43:42:74:72:d5:64:20:43:e1:fa:d9: 0a:47:5e:f5:ae:6f:0d:fe:d4:2e:67:03:12:f0:38: b0:80:57:b5:c8:ce:2c:d0:c7:10:d4:a2:ab:43:74: 3d:f5:fc:4a:e7:3b:bb:69:28:9e:9e:70:fe:60:07: 47:00:2f:b5:7a:9f:0e:53:46:a2:90:30:ae:3a:11: 8c:68:57:3c:0c:71:57:5b:4d:45:5d:79:e8:25:e3: 68:45:8e:11:4d:8d:b5:ec:bd:11:73:ca:56:3b:10: 84:19:75:5f:79:3d:bf:ff:3b:17:bf:61:d4:87:4d: c6:a1:04:cb:a2:8b:35:8a:15:1e:7e:cf:d7:12:00: 69:6d:64:0f:68:98:18:bb:30:a7:64:51:94:d4:57: 29:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:41:AA:A0:FE:D0:9C:53:6D:7B:E2:70:B9:13:E1:AB:9C:E5:20:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b02a6d7a-d28d-3b6b-8751-feb644f7e685.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.crl X509v3 Authority Key Identifier: keyid:FC:30:9C:C3:3C:A6:E9:C9:D4:7A:91:03:88:4D:F0:1D:00:57:60:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer sbgp-ipAddrBlock: critical IPv4: 204.13.88.0/22 208.94.116.0/22 IPv6: 2607:ff18::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:cf:45:f0:d4:bb:1b:ac:b0:22:b3:69:66:7e:a8:db:96:a8: 26:9e:59:af:81:98:a7:d0:e6:a4:2f:5a:d5:bd:aa:f3:0a:04: 99:a5:41:fa:8e:4b:a6:14:c3:5a:07:3a:72:f2:8b:84:74:38: 1a:ba:4d:95:de:c2:06:dc:eb:28:d7:7b:93:35:62:fa:be:62: 98:74:b9:eb:7d:83:c7:e6:2f:0f:25:c2:22:88:b6:18:a3:f1: be:8d:87:1d:e2:00:3a:7b:1d:04:10:3f:1c:ad:f7:ae:18:b7: d4:2d:71:50:4f:07:8d:34:44:3f:26:e1:12:3a:21:09:f1:b4: 55:0f:f5:26:ad:44:bc:16:75:12:09:fb:20:50:18:44:79:6c: 89:35:8e:2b:ab:67:93:4c:1d:26:da:42:24:08:04:9a:a5:ad: 21:e0:d8:e7:b2:7e:e9:8c:8d:21:9e:e4:aa:a3:e8:4d:a2:09: 93:60:b0:23:94:6a:e6:99:ed:3c:59:8a:ae:db:54:3e:2e:70: f6:9a:19:7b:6a:58:87:74:ff:c4:39:fb:30:d5:4b:3a:b8:0b: fc:5f:5f:02:99:14:c4:5d:4c:0d:cf:19:32:7c:5d:cd:c3:a9: 97:2a:1d:65:04:5e:bb:c6:27:0a:94:bb:3b:51:28:97:7f:d7: b5:b4:75:2a -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEmrtJ9ybZ3dZxSzBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjIzZGFhMTEtNDAzNy00NTJhLTkzNGItNjg0ZWRiZWZj YmY5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk NjFkZmM1NmUtYzY3Ny00MTU4LTlmMjItN2E5MjdmYzA0MDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJA0C2AHeMKfYa5ny9KdWhZdFxs3fXACTy9p Ho6fsqYfhJS5BoIx/WpOgALy6viXamP6iFq7R/LduAXzHBa+/umOZ84K4/cnXPjq b4J+hKbombMpspHSYivz8fTP7ttwg2DUuB4USLfcDvAJQ0J0ctVkIEPh+tkKR171 rm8N/tQuZwMS8DiwgFe1yM4s0McQ1KKrQ3Q99fxK5zu7aSiennD+YAdHAC+1ep8O U0aikDCuOhGMaFc8DHFXW01FXXnoJeNoRY4RTY217L0Rc8pWOxCEGXVfeT2//zsX v2HUh03GoQTLoos1ihUefs/XEgBpbWQPaJgYuzCnZFGU1FcpjQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFC5BqqD+0JxTbXvicLkT4auc5SCaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMjNk YWExMS00MDM3LTQ1MmEtOTM0Yi02ODRlZGJlZmNiZjkvYjAyYTZkN2EtZDI4ZC0z YjZiLTg3NTEtZmViNjQ0ZjdlNjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjIzZGFhMTEtNDAzNy00NTJhLTkz NGItNjg0ZWRiZWZjYmY5L2IyM2RhYTExLTQwMzctNDUyYS05MzRiLTY4NGVkYmVm Y2JmOS5jcmwwHwYDVR0jBBgwFoAU/DCcwzym6cnUepEDiE3wHQBXYFUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMjNkYWExMS00MDM3LTQ1MmEtOTM0Yi02ODRl ZGJlZmNiZjkuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCzA1YAwQC 0F50MA0EAgACMAcDBQAmB/8YMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH3PRfDUuxussCKzaWZ+qNuWqCae Wa+BmKfQ5qQvWtW9qvMKBJmlQfqOS6YUw1oHOnLyi4R0OBq6TZXewgbc6yjXe5M1 Yvq+Yph0uet9g8fmLw8lwiKIthij8b6Nhx3iADp7HQQQPxyt964Yt9QtcVBPB400 RD8m4RI6IQnxtFUP9SatRLwWdRIJ+yBQGER5bIk1jiurZ5NMHSbaQiQIBJqlrSHg 2OeyfumMjSGe5Kqj6E2iCZNgsCOUauaZ7TxZiq7bVD4ucPaaGXtqWId0/8Q5+zDV Szq4C/xfXwKZFMRdTA3PGTJ8Xc3DqZcqHWUEXrvGJwqUuztRKJd/17W0dSo= -----END CERTIFICATE-----Generated at Mon May 5 15:09:17 2025 by rpki-client