$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/21f0f6ab-188b-3ff1-afc3-8d5f8e8c96e5.roa File: 21f0f6ab-188b-3ff1-afc3-8d5f8e8c96e5.roa (raw, json) Hash identifier: vt8XBkQ/g9dhiEnGxp0ZQrg2BkrEClisg7nb5aYadbo= Subject key identifier: 16:56:59:2C:FD:7D:FC:C5:B5:F8:B1:CB:9E:04:C9:56:F8:86:43:0B Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F43285848A29B523BA8CCAF6E5660F620 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/21f0f6ab-188b-3ff1-afc3-8d5f8e8c96e5.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 13768 IP address blocks: 65.39.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:52:3b:a8:cc:af:6e:56:60:f6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=5e0b4072-b60a-4c25-8c88-261184b384d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ec:2d:3b:24:e4:36:79:87:50:df:4e:b4:2c: 66:26:54:d8:06:93:ae:94:5f:62:2e:6b:8e:da:b8: 68:bc:ed:e9:d0:f0:e0:2f:f0:ab:93:31:d8:0a:b9: f0:62:1b:b4:07:2b:38:ff:0d:39:f0:7a:74:35:0d: 27:02:6b:42:b9:21:4e:e4:c6:ef:7d:7e:83:51:12: 90:a5:01:b7:88:00:27:ee:a9:77:87:2e:ce:9e:bf: dc:06:99:35:25:3b:43:2f:c9:f0:46:13:df:5d:61: 29:5f:fb:f6:d3:b1:7a:7f:b5:a4:3e:83:ca:9d:51: d9:f7:82:7b:8a:32:2f:90:ed:03:12:ea:a4:a5:f1: d6:46:cf:af:df:ef:8a:67:00:f9:31:5a:d4:86:86: 49:f0:35:1d:fb:e7:5b:53:1b:06:d7:21:a4:0d:ab: f9:63:3f:3d:16:4c:bc:f2:1b:e2:c4:ef:5e:fb:64: 7c:ad:0a:ed:ff:0e:14:87:ee:f1:8b:bf:ee:5b:ab: c3:c9:4d:49:cb:d4:a7:00:5e:ff:06:cd:cf:50:ed: dd:90:9f:51:bf:0d:df:46:65:f4:b4:28:95:02:7a: 8c:13:33:8c:94:37:e1:3f:1a:5c:ce:d3:15:a4:cf: 58:42:a2:86:ec:4a:ac:24:12:8a:49:f5:4e:63:4a: 6e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:56:59:2C:FD:7D:FC:C5:B5:F8:B1:CB:9E:04:C9:56:F8:86:43:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/21f0f6ab-188b-3ff1-afc3-8d5f8e8c96e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 65.39.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:34:78:9c:f0:a2:3b:a5:90:0d:41:61:ce:4b:ca:82:d1:79: 47:15:6c:df:8e:c4:ad:6d:7f:94:08:59:39:b2:09:ac:9b:10: 40:97:85:43:ec:a7:86:6e:de:02:18:fe:fe:8f:27:66:94:7a: 67:f9:2c:42:1b:7a:75:9d:fd:03:dd:18:c8:8d:a2:95:5d:72: a8:62:47:d3:90:c3:91:d2:c8:2c:c3:e3:6b:66:49:a0:99:57: 90:0b:f8:b9:2d:0a:8f:6f:84:54:fe:a0:52:0b:a8:4b:d0:5c: 2d:54:31:a5:c3:a7:33:c0:68:66:7a:c8:0e:26:32:9d:57:32: 19:c2:f7:b2:fa:fc:6c:5c:68:62:ae:57:eb:08:90:0c:e8:4c: eb:18:2f:bf:82:c1:f1:81:35:eb:ee:b1:03:72:fd:c9:56:57: 69:15:a2:87:ac:0d:92:fd:82:52:46:1a:1d:96:6f:cc:e7:4a: 62:7d:e5:7e:b7:5e:d8:8b:9f:7b:e1:2f:e1:a0:b4:fd:cc:df: e8:dc:6c:e3:fd:c9:cc:c5:bd:4c:80:61:a9:67:f7:75:dd:3b: d6:99:20:d2:73:17:08:19:eb:2f:af:ef:93:27:ed:cd:c3:9e: 36:0f:7a:3d:8e:c9:86:e0:f4:2d:fb:1e:cf:e0:fe:a5:d9:66: 05:be:3a:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim1I7qMyvblZg9iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk NWUwYjQwNzItYjYwYS00YzI1LThjODgtMjYxMTg0YjM4NGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+wtOyTkNnmHUN9OtCxmJlTYBpOulF9iLmuO 2rhovO3p0PDgL/CrkzHYCrnwYhu0Bys4/w058Hp0NQ0nAmtCuSFO5MbvfX6DURKQ pQG3iAAn7ql3hy7Onr/cBpk1JTtDL8nwRhPfXWEpX/v207F6f7WkPoPKnVHZ94J7 ijIvkO0DEuqkpfHWRs+v3++KZwD5MVrUhoZJ8DUd++dbUxsG1yGkDav5Yz89Fky8 8hvixO9e+2R8rQrt/w4Uh+7xi7/uW6vDyU1Jy9SnAF7/Bs3PUO3dkJ9Rvw3fRmX0 tCiVAnqMEzOMlDfhPxpcztMVpM9YQqKG7EqsJBKKSfVOY0pupQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZWWSz9ffzFtfixy54EyVb4hkMLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvMjFmMGY2YWItMTg4Yi0z ZmYxLWFmYzMtOGQ1ZjhlOGM5NmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQSfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACU0eJzwojulkA1BYc5LyoLReUcVbN+OxK1tf5QIWTmyCaybEECXhUPs p4Zu3gIY/v6PJ2aUemf5LEIbenWd/QPdGMiNopVdcqhiR9OQw5HSyCzD42tmSaCZ V5AL+LktCo9vhFT+oFILqEvQXC1UMaXDpzPAaGZ6yA4mMp1XMhnC97L6/GxcaGKu V+sIkAzoTOsYL7+CwfGBNevusQNy/clWV2kVooesDZL9glJGGh2Wb8znSmJ95X63 XtiLn3vhL+GgtP3M3+jcbOP9yczFvUyAYaln93XdO9aZINJzFwgZ6y+v75Mn7c3D njYPej2OyYbg9C37Hs/g/qXZZgW+Otg= -----END CERTIFICATE-----Generated at Fri Apr 4 16:03:55 2025 by rpki-client