$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/e4ff1bfa-87ff-397c-b887-0a8f8dafdc76.roa File: e4ff1bfa-87ff-397c-b887-0a8f8dafdc76.roa (raw, json) Hash identifier: raj6yAeIEawf3vRcnjkhBAs5nxmwivjEA1RXpA4k0tg= Subject key identifier: 35:51:D5:7E:0D:2A:F6:92:49:E5:C3:49:E7:F9:02:0E:C5:CB:19:CA Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F43285848CC7B9555F851D8DC5E6450A0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/e4ff1bfa-87ff-397c-b887-0a8f8dafdc76.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 11090 IP address blocks: 64.4.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:95:55:f8:51:d8:dc:5e:64:50:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=c95e0d1d-cf46-4d55-9d8c-e232b1c632ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7b:19:7a:58:99:e3:cd:47:af:d8:fd:bb:e0: ca:f3:5d:70:23:a0:fb:2e:6b:c6:ae:30:8a:7e:94: 85:47:3e:a7:1b:1e:13:58:04:d4:ca:f7:d9:df:1a: ed:00:e1:f8:69:d3:fa:e0:15:a5:56:ed:d0:47:3d: c4:c0:a8:a4:24:9c:0e:52:3c:f5:d6:51:5a:00:02: 0e:63:a7:56:e4:e1:0a:d8:3e:45:ca:1c:c3:f3:6c: 4a:ab:a5:56:0f:d7:16:20:83:d9:8b:5d:dd:5b:74: 00:09:84:ef:18:04:43:f9:fd:f5:72:c8:01:42:0a: d3:da:80:1f:b9:dd:eb:a4:2c:e3:f8:1c:12:a9:54: 11:90:e0:d4:88:c5:59:f8:76:b5:6e:31:fe:3e:98: a5:2e:5d:0c:33:51:ae:27:f8:bd:87:b4:85:ad:4c: aa:fa:df:ed:ec:58:7a:bd:f0:40:96:5f:58:fc:fc: 20:97:49:b5:81:52:7c:d6:87:27:f9:3a:04:4d:24: 3f:8c:9d:8c:ac:1e:a3:3c:e5:e7:8e:a6:e9:52:40: 8b:09:1e:87:d4:b0:d2:32:77:09:ef:c8:d1:80:17: 53:ea:bb:b7:00:9d:2c:c5:51:84:fd:13:cb:23:c7: f4:2c:80:8b:66:da:ea:32:2d:88:51:3c:77:0c:84: c1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:51:D5:7E:0D:2A:F6:92:49:E5:C3:49:E7:F9:02:0E:C5:CB:19:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/e4ff1bfa-87ff-397c-b887-0a8f8dafdc76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:b9:1e:01:c7:ff:51:fb:d2:f3:2c:32:41:64:9f:30:8a:65: 7e:35:a5:96:10:e1:d5:45:ca:0f:4e:63:87:c0:49:98:48:f0: 02:7e:b3:20:24:fe:3b:ea:8b:68:26:0c:9a:fd:ec:66:22:25: d3:1b:38:a2:06:f8:70:a9:8f:d3:8a:26:f0:b5:2a:8e:ed:10: b7:8d:29:65:f2:03:0f:b4:73:03:c1:c1:13:4c:2b:78:b4:8d: 9b:88:d4:0e:74:10:55:6c:82:9c:69:09:fa:72:2d:a0:ec:46: 90:4d:4f:9f:da:21:c9:7a:01:9a:69:82:e6:a5:d9:bd:46:13: 53:4c:56:22:ec:f0:a9:05:74:08:17:9a:68:51:14:e0:fb:08: 6f:62:c2:9c:b6:67:30:20:1f:c5:ef:a3:c6:ba:ba:43:e4:11: 6e:46:ee:d6:55:8b:0c:42:75:c3:76:1c:3a:80:66:6a:cb:d1: 0b:56:dd:cc:3f:21:91:f4:e7:90:0e:f9:75:32:14:a5:06:cb: 47:2d:e6:a4:50:58:6c:e0:36:c3:07:64:b0:c8:3c:4f:a5:0e: 05:3a:6a:94:a5:ba:26:96:43:cb:42:42:cf:98:08:4b:2d:1d: 58:91:76:fd:c1:81:77:fa:e7:02:f6:e3:cc:45:0f:24:c2:67: 53:78:8b:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe5VV+FHY3F5kUKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk Yzk1ZTBkMWQtY2Y0Ni00ZDU1LTlkOGMtZTIzMmIxYzYzMmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13sZeliZ481Hr9j9u+DK811wI6D7LmvGrjCK fpSFRz6nGx4TWATUyvfZ3xrtAOH4adP64BWlVu3QRz3EwKikJJwOUjz11lFaAAIO Y6dW5OEK2D5FyhzD82xKq6VWD9cWIIPZi13dW3QACYTvGARD+f31csgBQgrT2oAf ud3rpCzj+BwSqVQRkODUiMVZ+Ha1bjH+PpilLl0MM1GuJ/i9h7SFrUyq+t/t7Fh6 vfBAll9Y/Pwgl0m1gVJ81ocn+ToETSQ/jJ2MrB6jPOXnjqbpUkCLCR6H1LDSMncJ 78jRgBdT6ru3AJ0sxVGE/RPLI8f0LICLZtrqMi2IUTx3DITBewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVR1X4NKvaSSeXDSef5Ag7FyxnKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZTRmZjFiZmEtODdmZi0z OTdjLWI4ODctMGE4ZjhkYWZkYzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQATkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGK5HgHH/1H70vMsMkFknzCKZX41pZYQ4dVFyg9OY4fASZhI8AJ+syAk /jvqi2gmDJr97GYiJdMbOKIG+HCpj9OKJvC1Ko7tELeNKWXyAw+0cwPBwRNMK3i0 jZuI1A50EFVsgpxpCfpyLaDsRpBNT5/aIcl6AZppgual2b1GE1NMViLs8KkFdAgX mmhRFOD7CG9iwpy2ZzAgH8Xvo8a6ukPkEW5G7tZViwxCdcN2HDqAZmrL0QtW3cw/ IZH055AO+XUyFKUGy0ct5qRQWGzgNsMHZLDIPE+lDgU6apSluiaWQ8tCQs+YCEst HViRdv3BgXf65wL248xFDyTCZ1N4i6U= -----END CERTIFICATE-----Generated at Sun Apr 6 04:34:57 2025 by rpki-client