$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/e821c7f2-031f-3fe4-867d-a095b5a7eb0d.roa File: e821c7f2-031f-3fe4-867d-a095b5a7eb0d.roa (raw, json) Hash identifier: W+2qik9web3B1P37xpxhkfpYuA8c16FHGZ4QU/J8ins= Subject key identifier: 8A:29:D5:A7:53:65:F6:EF:AF:6D:DE:96:A0:4F:7E:8D:97:7D:E2:54 Certificate issuer: /CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Certificate serial: 010D0C9F43285849B14A09869BDE29921B0C9AD0 Authority key identifier: DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/e821c7f2-031f-3fe4-867d-a095b5a7eb0d.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 398203 IP address blocks: 142.202.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:09:86:9b:de:29:92:1b:0c:9a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=d1dc40af-94bd-4a43-a68b-8e8fea5e4e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cb:5a:7c:41:de:da:5e:7e:fa:44:d7:e8:b6: 26:c0:0a:55:46:41:d1:39:81:ba:e8:06:e6:e5:d5: 1e:5d:19:70:55:2c:ab:a6:b5:bc:1d:09:f2:33:fa: 95:5c:d6:03:bc:c1:93:03:0b:89:04:7f:35:ca:78: 6f:f7:20:61:52:c5:bc:01:28:33:3c:84:03:62:cf: f5:73:3f:60:26:e0:39:70:78:9b:37:4d:80:2e:d7: d7:ca:63:cb:dc:10:7d:10:ee:30:6f:ad:3e:f0:34: b2:b3:f2:8b:61:32:46:80:13:1e:9c:4f:c6:e3:63: 90:e8:02:90:ae:df:08:bd:b2:1a:08:f6:79:2f:78: 08:53:77:ff:35:ed:df:f2:cd:43:5c:16:ea:a6:8b: 56:2a:b6:18:8d:70:16:6b:87:fa:bf:b2:48:7a:b5: fd:e9:8b:3e:58:19:a2:fb:47:59:11:de:69:5a:ea: fc:f1:20:a8:e4:40:5d:d1:7b:bd:b2:8e:16:06:09: 79:36:d3:31:05:14:04:2f:f5:72:1e:fb:08:e0:1e: 52:d1:1b:b5:d3:59:8c:28:89:75:96:89:4b:1a:b7: 83:ff:c9:96:e4:ab:c8:cf:16:37:1e:27:e0:92:fa: f9:63:67:3b:44:03:e8:13:6a:be:e3:62:84:92:76: d1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:29:D5:A7:53:65:F6:EF:AF:6D:DE:96:A0:4F:7E:8D:97:7D:E2:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/e821c7f2-031f-3fe4-867d-a095b5a7eb0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl X509v3 Authority Key Identifier: keyid:DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer sbgp-ipAddrBlock: critical IPv4: 142.202.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:9b:0e:0d:9f:e3:8f:64:8e:7d:e4:11:79:a1:9e:c0:d2:40: 65:94:e1:06:db:0f:ee:fb:c2:10:43:12:a2:41:3e:d7:f7:8d: 96:ac:29:45:ca:86:ab:71:24:1c:c0:f3:c4:a5:38:a8:f5:32: 1c:e5:20:2d:91:65:94:f9:f0:f9:f4:b4:f5:ed:c9:c5:68:42: 19:ed:a1:88:03:67:2e:b1:25:af:b8:3e:c1:70:11:1b:f9:c5: 65:3a:01:be:62:07:78:f5:a7:f9:9e:7b:ac:d5:ef:fe:15:25: b2:01:6d:0b:50:b1:8d:40:c6:cf:1b:f7:fa:66:e2:29:b0:70: 7c:5d:5f:e8:6b:91:0f:75:26:41:2f:8d:a4:42:9d:b3:92:96: df:dc:e1:b8:bd:e0:b6:d3:c7:5b:6a:ab:96:78:c8:a0:c3:5a: e1:0b:73:67:8c:21:1a:8b:f6:ad:c8:cf:53:93:91:b4:3b:4f: 57:13:fe:ee:3a:d8:b4:b3:56:a4:2f:49:d1:b8:04:c1:c2:73: 34:45:16:91:af:5f:be:16:60:7b:da:e3:46:81:ba:5a:1b:88: 41:15:de:22:dc:63:06:50:8d:bf:59:d2:96:f5:75:81:34:0f: 4b:c8:7d:2c:94:53:9c:e3:a8:07:93:2c:99:99:c2:00:93:54: 27:72:8e:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSgmGm94pkhsMmtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2YTRlYzMtYTNiNS00ZDcyLWJlZTItZjU4YzNjZGUw MWExMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZDFkYzQwYWYtOTRiZC00YTQzLWE2OGItOGU4ZmVhNWU0ZTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzctafEHe2l5++kTX6LYmwApVRkHROYG66Abm 5dUeXRlwVSyrprW8HQnyM/qVXNYDvMGTAwuJBH81ynhv9yBhUsW8ASgzPIQDYs/1 cz9gJuA5cHibN02ALtfXymPL3BB9EO4wb60+8DSys/KLYTJGgBMenE/G42OQ6AKQ rt8IvbIaCPZ5L3gIU3f/Ne3f8s1DXBbqpotWKrYYjXAWa4f6v7JIerX96Ys+WBmi +0dZEd5pWur88SCo5EBd0Xu9so4WBgl5NtMxBRQEL/VyHvsI4B5S0Ru101mMKIl1 lolLGreD/8mW5KvIzxY3Hifgkvr5Y2c7RAPoE2q+42KEknbRPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIop1adTZfbvr23elqBPfo2XfeJUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iODZh NGVjMy1hM2I1LTRkNzItYmVlMi1mNThjM2NkZTAxYTEvZTgyMWM3ZjItMDMxZi0z ZmU0LTg2N2QtYTA5NWI1YTdlYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjg2YTRlYzMtYTNiNS00ZDcyLWJl ZTItZjU4YzNjZGUwMWExL2I4NmE0ZWMzLWEzYjUtNGQ3Mi1iZWUyLWY1OGMzY2Rl MDFhMS5jcmwwHwYDVR0jBBgwFoAU3fYJlReLt0punKrfsGmFOCZwCxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iODZhNGVjMy1hM2I1LTRkNzItYmVlMi1mNThj M2NkZTAxYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjsqkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIObDg2f449kjn3kEXmhnsDSQGWU4QbbD+77whBDEqJBPtf3jZasKUXK hqtxJBzA88SlOKj1MhzlIC2RZZT58Pn0tPXtycVoQhntoYgDZy6xJa+4PsFwERv5 xWU6Ab5iB3j1p/mee6zV7/4VJbIBbQtQsY1Axs8b9/pm4imwcHxdX+hrkQ91JkEv jaRCnbOSlt/c4bi94LbTx1tqq5Z4yKDDWuELc2eMIRqL9q3Iz1OTkbQ7T1cT/u46 2LSzVqQvSdG4BMHCczRFFpGvX74WYHva40aBulobiEEV3iLcYwZQjb9Z0pb1dYE0 D0vIfSyUU5zjqAeTLJmZwgCTVCdyjiM= -----END CERTIFICATE-----Generated at Mon May 5 13:37:51 2025 by rpki-client