$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/7dae22f8-939a-3a54-b81c-8890233bc71a.roa File: 7dae22f8-939a-3a54-b81c-8890233bc71a.roa (raw, json) Hash identifier: mxdQX7Y619irzFGa/cUMI2xlhFeHtx9Od/Lt9rFaBxE= Subject key identifier: 97:58:50:3D:4E:4C:FF:03:EB:A5:4F:EE:C0:EE:E0:60:52:83:8E:05 Certificate issuer: /CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Certificate serial: 010D0C9F4328584940394828CD0BCCE4D9D24673 Authority key identifier: 0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/7dae22f8-939a-3a54-b81c-8890233bc71a.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 30691 IP address blocks: 65.111.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:48:28:cd:0b:cc:e4:d9:d2:46:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=305f49a4-537f-4c97-8af0-c28d456551af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cf:c4:bb:aa:e4:37:c5:a3:27:a4:0b:32:a3: f1:37:19:2f:01:e8:ca:a7:07:48:7d:78:83:4f:85: 1e:3a:d7:ec:86:42:da:55:ff:d1:1f:81:e5:bb:89: 57:81:9a:2e:fd:57:9a:bf:03:e3:dc:39:23:85:4a: 9f:63:d1:ec:62:14:6e:ec:d5:f4:33:61:d9:74:9d: a5:0b:9a:ff:f2:6e:07:c1:ee:a5:90:fa:38:01:fb: d1:3d:0f:d4:8f:70:ea:ef:95:bd:58:48:e4:a6:3d: c3:1d:cb:6b:45:f9:a5:fc:51:a3:81:63:19:7d:d4: 1e:12:76:4c:59:0b:ea:de:f9:6c:9e:52:ef:95:6b: 1a:2e:c5:28:84:8f:c6:3a:b3:dd:27:b9:b1:91:27: 3d:83:6a:c4:37:79:f6:d8:16:5f:b6:3e:95:b4:72: 7b:66:3e:7a:88:16:87:3e:47:5d:99:e9:d2:26:e5: 63:5e:85:4b:16:96:64:cc:d6:5f:20:db:fb:77:41: 03:73:c7:6f:29:45:d5:67:f6:85:77:20:c3:19:6a: 9b:0d:cd:10:e8:33:c7:9b:da:35:b8:94:f9:0c:d6: 7d:ea:29:dd:91:f0:1b:6a:98:9a:55:56:d0:db:8d: 69:25:10:c6:e8:17:d4:dd:0a:82:9b:c9:25:39:1e: 7d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:58:50:3D:4E:4C:FF:03:EB:A5:4F:EE:C0:EE:E0:60:52:83:8E:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/7dae22f8-939a-3a54-b81c-8890233bc71a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl X509v3 Authority Key Identifier: keyid:0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer sbgp-ipAddrBlock: critical IPv4: 65.111.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:e6:b3:9d:3f:5c:7f:7f:fd:79:b0:5f:47:c4:47:0d:ac:c4: 93:c5:fc:69:09:ca:fb:47:34:f8:cc:11:aa:36:d1:40:cf:70: a4:c7:fe:e5:9a:05:18:ea:b0:99:21:04:3b:d6:ec:b3:0c:de: b3:21:05:cc:dc:51:dd:fe:a2:17:bb:09:8c:5c:f9:f7:eb:20: 8d:f5:66:fe:c4:54:c4:76:bb:a3:b5:7f:52:74:d4:7b:8e:f0: 76:76:9e:44:17:33:ca:3f:c7:c0:8a:40:fb:76:d2:71:62:88: 92:82:5f:d7:b2:39:d9:93:94:3f:53:e2:e3:56:ad:96:e9:8d: d8:5c:54:39:bd:e6:69:01:21:6f:65:57:90:b7:22:14:4a:f7: ae:7f:11:c7:e4:73:54:f7:ee:eb:65:1c:e2:3e:37:f1:58:02: 49:db:a1:12:f2:27:9d:35:24:a0:37:b6:99:58:71:a6:b8:92: f6:24:08:79:9b:fc:f5:31:25:1c:09:74:e4:7f:b5:c1:aa:ab: 2e:ee:4c:68:28:6a:fd:57:86:95:43:7d:b8:fa:31:0b:cc:bd: df:56:1a:84:a1:4d:1b:95:56:29:6f:db:46:bb:dd:db:ef:d8: 9b:48:a9:99:1d:92:ba:86:15:23:1a:07:92:75:cd:73:db:ee: 56:94:2e:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOUgozQvM5NnSRnMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YyZDM3OGQtMjBlMS00YjVmLTg1YjktZThjNGNiYTVk NWQ3MB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk MzA1ZjQ5YTQtNTM3Zi00Yzk3LThhZjAtYzI4ZDQ1NjU1MWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis/Eu6rkN8WjJ6QLMqPxNxkvAejKpwdIfXiD T4UeOtfshkLaVf/RH4Hlu4lXgZou/VeavwPj3DkjhUqfY9HsYhRu7NX0M2HZdJ2l C5r/8m4Hwe6lkPo4AfvRPQ/Uj3Dq75W9WEjkpj3DHctrRfml/FGjgWMZfdQeEnZM WQvq3vlsnlLvlWsaLsUohI/GOrPdJ7mxkSc9g2rEN3n22BZftj6VtHJ7Zj56iBaH PkddmenSJuVjXoVLFpZkzNZfINv7d0EDc8dvKUXVZ/aFdyDDGWqbDc0Q6DPHm9o1 uJT5DNZ96indkfAbapiaVVbQ241pJRDG6BfU3QqCm8klOR59lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdYUD1OTP8D66VP7sDu4GBSg44FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZjJk Mzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0Y2JhNWQ1ZDcvN2RhZTIyZjgtOTM5YS0z YTU0LWI4MWMtODg5MDIzM2JjNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2YyZDM3OGQtMjBlMS00YjVmLTg1 YjktZThjNGNiYTVkNWQ3LzNmMmQzNzhkLTIwZTEtNGI1Zi04NWI5LWU4YzRjYmE1 ZDVkNy5jcmwwHwYDVR0jBBgwFoAUCqqSCDMPCs7IDjlpf+GFY9FJSlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZjJkMzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0 Y2JhNWQ1ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQW/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/ms50/XH9//XmwX0fERw2sxJPF/GkJyvtHNPjMEao20UDPcKTH/uWa BRjqsJkhBDvW7LMM3rMhBczcUd3+ohe7CYxc+ffrII31Zv7EVMR2u6O1f1J01HuO 8HZ2nkQXM8o/x8CKQPt20nFiiJKCX9eyOdmTlD9T4uNWrZbpjdhcVDm95mkBIW9l V5C3IhRK965/Ecfkc1T37utlHOI+N/FYAknboRLyJ501JKA3tplYcaa4kvYkCHmb /PUxJRwJdOR/tcGqqy7uTGgoav1XhpVDfbj6MQvMvd9WGoShTRuVVilv20a73dvv 2JtIqZkdkrqGFSMaB5J1zXPb7laULhM= -----END CERTIFICATE-----Generated at Wed Apr 9 01:02:42 2025 by rpki-client