$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/bc11be2e-a41b-3b12-8ae1-a2a2152bc5db.roa File: bc11be2e-a41b-3b12-8ae1-a2a2152bc5db.roa (raw, json) Hash identifier: e26Dzi35e+jPL87A0Mv+t2OSaRp0dk3VBaCp716GhIQ= Subject key identifier: C1:BF:C5:B8:EF:99:45:F3:6D:E3:95:6C:F7:B0:9C:DF:5C:18:89:66 Certificate issuer: /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Certificate serial: 010D0C9F43285849244E70327B8C3AF051B064C0 Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/bc11be2e-a41b-3b12-8ae1-a2a2152bc5db.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 23158 IP address blocks: 204.154.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:70:32:7b:8c:3a:f0:51:b0:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=19b67a66-d9dd-4829-a465-94aa673f429b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:78:6c:ae:b9:88:64:a6:47:ca:62:f0:ea:7b: 25:bc:15:56:f5:92:a4:77:15:86:c8:c2:f6:0e:a8: 14:e6:b3:75:8d:29:ca:68:a0:7e:72:1c:d1:e3:8e: 0b:34:8b:12:0b:44:05:27:ac:60:ad:38:fa:7a:a0: 68:dd:c1:7a:23:d1:ea:e5:ed:01:88:50:c9:88:3e: 30:9d:0d:f9:e4:c0:e5:a7:8c:58:9d:54:cb:4c:1a: a1:e7:3f:d9:e4:2e:20:97:d4:86:e3:e5:7b:53:7a: 15:aa:b0:65:db:67:16:23:70:2b:15:5d:95:89:3a: aa:d4:5d:79:dc:66:bf:a3:de:e6:bb:5d:c7:0e:0f: 5c:39:30:00:7e:3a:b9:ff:3e:51:d0:9f:15:e7:9f: c2:44:ba:62:d9:1c:c2:34:34:14:fe:81:03:06:72: 48:64:87:a8:cd:d8:a4:78:4a:05:68:68:53:86:89: c5:cd:8a:c4:9b:d5:28:02:2c:fb:dc:eb:f2:da:a0: 8b:f6:ea:61:99:de:63:25:05:a3:44:7b:f8:4a:9c: 45:66:67:d3:09:18:72:d6:cb:45:8f:6f:0a:21:d2: e3:30:20:c6:ff:e7:98:d0:19:35:36:d0:e2:1e:97: 0e:85:ad:3e:98:8b:9e:8a:5c:b2:db:da:95:a4:25: b2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:BF:C5:B8:EF:99:45:F3:6D:E3:95:6C:F7:B0:9C:DF:5C:18:89:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/bc11be2e-a41b-3b12-8ae1-a2a2152bc5db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl X509v3 Authority Key Identifier: keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer sbgp-ipAddrBlock: critical IPv4: 204.154.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:7c:01:95:2d:05:2a:6c:57:a7:04:67:4b:a7:79:80:3c:e6: 81:5e:c6:fb:0c:80:42:34:8b:02:ac:fb:d7:8f:56:f4:b5:b9: 03:12:1c:ac:81:a2:48:20:56:1f:0c:da:24:34:db:3c:e1:0a: c2:d2:bd:04:92:d1:bc:9a:ab:a3:20:4c:11:92:eb:cb:19:8d: ff:ec:37:6a:5f:f5:13:8e:ec:7c:c7:d4:51:10:de:48:b1:03: 21:be:99:76:75:08:b6:3d:22:8f:9e:c4:2b:09:00:5a:d9:9d: 59:09:02:df:8c:1d:23:e9:a5:00:10:0c:d9:51:cf:68:a6:e1: 9b:a0:67:7d:9d:33:3e:aa:2c:8f:16:16:37:c7:4a:1f:38:ed: 4a:e8:fe:c1:6e:54:ad:8d:14:a0:69:3f:93:8a:63:67:b3:6e: 74:76:27:d3:e2:75:bc:64:2d:a2:c4:94:d2:b5:50:e5:ee:f1: bd:be:21:e1:5d:a8:a8:50:61:6a:fa:d6:c2:a7:25:ef:56:7b: 6a:14:f0:16:b4:e2:ec:17:52:27:03:e5:a7:53:b1:29:aa:66: a4:f3:e1:79:75:b5:00:ae:2c:87:8b:f8:e6:68:0f:07:d9:cd: f4:62:58:c4:11:5e:95:78:20:0d:e8:b5:04:b3:59:31:dd:94: 6d:b2:e7:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTnAye4w68FGwZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwYzVkYTgtMDhhYi00MGVkLTllMjMtZGZmNDEzZmIy ZDUyMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk MTliNjdhNjYtZDlkZC00ODI5LWE0NjUtOTRhYTY3M2Y0MjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XhsrrmIZKZHymLw6nslvBVW9ZKkdxWGyML2 DqgU5rN1jSnKaKB+chzR444LNIsSC0QFJ6xgrTj6eqBo3cF6I9Hq5e0BiFDJiD4w nQ355MDlp4xYnVTLTBqh5z/Z5C4gl9SG4+V7U3oVqrBl22cWI3ArFV2ViTqq1F15 3Ga/o97mu13HDg9cOTAAfjq5/z5R0J8V55/CRLpi2RzCNDQU/oEDBnJIZIeozdik eEoFaGhThonFzYrEm9UoAiz73Ovy2qCL9uphmd5jJQWjRHv4SpxFZmfTCRhy1stF j28KIdLjMCDG/+eY0Bk1NtDiHpcOha0+mIueilyy29qVpCWylQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMG/xbjvmUXzbeOVbPewnN9cGIlmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MDBj NWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0MTNmYjJkNTIvYmMxMWJlMmUtYTQxYi0z YjEyLThhZTEtYTJhMjE1MmJjNWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDAwYzVkYTgtMDhhYi00MGVkLTll MjMtZGZmNDEzZmIyZDUyLzQwMGM1ZGE4LTA4YWItNDBlZC05ZTIzLWRmZjQxM2Zi MmQ1Mi5jcmwwHwYDVR0jBBgwFoAUwWSSDul8/MKHpAqCHb/qIZczf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MDBjNWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0 MTNmYjJkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzJoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZ8AZUtBSpsV6cEZ0uneYA85oFexvsMgEI0iwKs+9ePVvS1uQMSHKyB okggVh8M2iQ02zzhCsLSvQSS0byaq6MgTBGS68sZjf/sN2pf9ROO7HzH1FEQ3kix AyG+mXZ1CLY9Io+exCsJAFrZnVkJAt+MHSPppQAQDNlRz2im4ZugZ32dMz6qLI8W FjfHSh847Uro/sFuVK2NFKBpP5OKY2ezbnR2J9PidbxkLaLElNK1UOXu8b2+IeFd qKhQYWr61sKnJe9We2oU8Ba04uwXUicD5adTsSmqZqTz4Xl1tQCuLIeL+OZoDwfZ zfRiWMQRXpV4IA3otQSzWTHdlG2y5+o= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:53 2025 by rpki-client