$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6b56d666-787d-3c41-98b0-5fd8b833760e.roa File: 6b56d666-787d-3c41-98b0-5fd8b833760e.roa (raw, json) Hash identifier: kpZnt0oPKdpqoNI7dmF7gryqpkwRftfkSAxywFDBexE= Subject key identifier: 29:54:64:EE:4F:47:7D:12:09:1C:D2:8E:3C:E2:22:51:15:8A:CD:3B Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F43285848BE863246B23074CBFF450580 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6b56d666-787d-3c41-98b0-5fd8b833760e.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 11090 IP address blocks: 216.152.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:32:46:b2:30:74:cb:ff:45:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=c425ec69-dc6b-4025-b6d4-3a08074795aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8f:00:c4:d8:e6:32:d0:77:13:03:47:6a:e5: 54:f7:e8:f8:6f:75:f5:30:28:12:c5:79:98:fd:1f: fc:5a:68:10:95:63:34:50:43:55:d5:f3:5e:6b:e5: 51:a8:f5:18:14:6b:cc:bd:94:b8:7e:e5:e3:27:eb: 01:6d:54:54:9d:3d:89:39:2a:fc:e6:f3:c3:64:a3: cf:cc:aa:8b:fd:e2:2f:86:65:33:9c:2b:61:de:c3: 53:b9:c6:9b:23:41:c6:9c:62:25:a3:f5:86:6c:19: 8d:2e:ea:88:51:79:43:4b:8c:8f:22:2b:fb:5b:fc: 33:d4:c9:38:92:5c:1c:4b:cd:b4:c1:b9:aa:bd:74: d9:fc:9a:c8:63:e6:eb:ab:6c:84:3d:f7:c8:be:1e: d5:32:4e:16:52:a4:12:7d:dd:d8:7d:af:b1:b6:c4: 22:42:19:10:10:4c:8f:a9:09:c9:d6:86:f9:ff:e3: f3:25:b7:4d:41:ff:aa:ab:3f:6a:42:05:3a:4f:b6: b9:01:11:c7:6a:c3:3f:57:c4:3f:c6:31:bf:67:e9: 66:4c:cf:a3:c9:b8:14:87:66:9c:a8:da:87:33:fe: 32:12:cf:92:b7:38:9f:84:8b:0d:69:89:34:9b:82: be:92:b2:19:44:82:98:20:f5:8e:4d:bd:00:27:b7: af:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:54:64:EE:4F:47:7D:12:09:1C:D2:8E:3C:E2:22:51:15:8A:CD:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6b56d666-787d-3c41-98b0-5fd8b833760e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.152.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c6:af:b4:2c:27:20:c5:39:c2:73:e4:f7:2a:45:e7:bb:d9: 79:7b:e2:15:dd:b5:7e:25:c9:4e:f9:59:04:84:52:b5:fe:09: c2:46:93:19:b3:4c:55:f2:3c:a0:91:2b:d6:76:98:e1:c6:e0: 1c:de:9b:04:77:8d:8f:8b:25:21:9c:a4:fc:1a:d4:85:8c:4a: 16:26:e2:b1:a7:52:12:18:83:4c:ca:31:64:8e:57:6a:ab:2c: f3:aa:ee:97:bc:89:5b:7c:9b:98:df:6d:77:b3:a0:60:54:82: f4:ba:27:f2:22:2b:d6:0e:6f:bb:d9:11:d0:22:96:d7:ab:47: b8:44:50:47:e2:85:ef:f1:56:82:a3:a4:b6:9b:77:31:c1:6c: 98:0e:0c:20:18:08:21:b5:b8:86:dc:ce:b9:f6:90:52:98:4f: 8f:4b:c4:83:be:3c:d1:e0:d1:d2:b6:1d:44:13:2f:48:d8:86: 53:21:cc:96:fb:d6:be:c9:42:09:94:35:25:8b:e3:5c:33:cc: 29:ac:cb:f8:82:72:b3:70:9f:8d:7a:ae:42:5e:06:90:e2:1e: c4:07:b2:29:00:4b:2b:2a:b2:f5:72:43:44:58:46:bf:1a:9e: b0:90:e7:b2:98:39:8c:75:c5:8f:8b:74:9a:e0:46:24:a1:0a: 82:47:d0:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hjJGsjB0y/9FBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk YzQyNWVjNjktZGM2Yi00MDI1LWI2ZDQtM2EwODA3NDc5NWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjI8AxNjmMtB3EwNHauVU9+j4b3X1MCgSxXmY /R/8WmgQlWM0UENV1fNea+VRqPUYFGvMvZS4fuXjJ+sBbVRUnT2JOSr85vPDZKPP zKqL/eIvhmUznCth3sNTucabI0HGnGIlo/WGbBmNLuqIUXlDS4yPIiv7W/wz1Mk4 klwcS820wbmqvXTZ/JrIY+brq2yEPffIvh7VMk4WUqQSfd3Yfa+xtsQiQhkQEEyP qQnJ1ob5/+PzJbdNQf+qqz9qQgU6T7a5ARHHasM/V8Q/xjG/Z+lmTM+jybgUh2ac qNqHM/4yEs+StzifhIsNaYk0m4K+krIZRIKYIPWOTb0AJ7ev4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClUZO5PR30SCRzSjjziIlEVis07MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNmI1NmQ2NjYtNzg3ZC0z YzQxLTk4YjAtNWZkOGI4MzM3NjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Ji8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3Gr7QsJyDFOcJz5PcqRee72Xl74hXdtX4lyU75WQSEUrX+CcJGkxmz TFXyPKCRK9Z2mOHG4BzemwR3jY+LJSGcpPwa1IWMShYm4rGnUhIYg0zKMWSOV2qr LPOq7pe8iVt8m5jfbXezoGBUgvS6J/IiK9YOb7vZEdAilterR7hEUEfihe/xVoKj pLabdzHBbJgODCAYCCG1uIbczrn2kFKYT49LxIO+PNHg0dK2HUQTL0jYhlMhzJb7 1r7JQgmUNSWL41wzzCmsy/iCcrNwn416rkJeBpDiHsQHsikASysqsvVyQ0RYRr8a nrCQ57KYOYx1xY+LdJrgRiShCoJH0Og= -----END CERTIFICATE-----Generated at Sun Apr 6 04:44:25 2025 by rpki-client