$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/ed5d61e3-46f0-3c34-8be9-3ffce8ad8c0e.roa File: ed5d61e3-46f0-3c34-8be9-3ffce8ad8c0e.roa (raw, json) Hash identifier: IXr2rwcRl0PX7fTzVxu39KEwnu4gTYn+6ppSKDRlccM= Subject key identifier: 83:27:23:EF:D8:62:B6:15:D2:1A:01:EA:02:24:F0:A1:97:09:B8:52 Certificate issuer: /CN=644bdcac-05fd-4dd5-adbd-9dbd2fb295c4 Certificate serial: 010D0C9F432858497DA473ADF869A85D83BE6280 Authority key identifier: 60:17:08:15:3B:F0:7A:BA:18:96:C4:50:13:84:C4:35:25:52:F0:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/ed5d61e3-46f0-3c34-8be9-3ffce8ad8c0e.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 40910 IP address blocks: 198.205.16.0/20 maxlen: 20 198.205.24.0/21 maxlen: 21 199.119.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:73:ad:f8:69:a8:5d:83:be:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644bdcac-05fd-4dd5-adbd-9dbd2fb295c4 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=c4443d7b-e46b-47a3-aae7-664092409a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:15:6e:7f:5b:44:3e:20:3b:fb:d0:48:52:30: 4a:8a:49:17:e4:ad:10:26:cc:fe:82:9f:38:be:e3: 42:1a:a5:e9:1a:c9:6e:13:db:38:56:b2:e4:32:d9: ca:2e:c5:72:89:6e:53:cc:b6:9f:30:4c:e1:04:48: cd:4c:00:b6:50:8f:57:25:f0:3c:65:06:fb:ef:f1: 98:d6:cc:af:a4:0d:bd:18:d5:20:15:b3:74:6a:ed: 1c:91:49:e8:dd:73:55:06:9e:45:aa:e7:f4:2b:17: c7:38:fd:f4:90:c6:fe:fa:c0:29:ce:03:ee:f8:b5: 67:fe:44:b7:42:80:d4:62:68:35:93:f7:61:a4:56: 3d:b3:bf:0f:07:f4:0e:0a:9b:e8:9a:8b:0c:4c:34: 36:34:68:b6:cf:ec:19:f4:d2:0f:79:3c:eb:c9:f0: b0:d8:d3:47:e1:24:07:d3:88:bb:8e:ee:44:97:17: b5:db:9c:53:fc:d8:07:db:10:a6:24:06:ec:10:35: 0c:dc:cd:58:d3:d3:cd:6e:fa:dd:cf:93:6e:fd:93: 9f:74:79:21:c3:58:95:37:ad:86:a9:65:04:f3:0a: b3:a7:96:46:cb:61:1c:38:36:26:4a:88:dc:0c:23: ea:34:be:7a:7a:d1:41:6a:fa:7a:21:0b:e3:ee:c6: d9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:27:23:EF:D8:62:B6:15:D2:1A:01:EA:02:24:F0:A1:97:09:B8:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/ed5d61e3-46f0-3c34-8be9-3ffce8ad8c0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.crl X509v3 Authority Key Identifier: keyid:60:17:08:15:3B:F0:7A:BA:18:96:C4:50:13:84:C4:35:25:52:F0:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.cer sbgp-ipAddrBlock: critical IPv4: 198.205.16.0/20 199.119.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:06:7c:62:ea:21:cb:a7:fd:75:3b:18:30:78:13:3a:49:ff: fd:38:c2:56:8e:16:97:ff:e4:9a:2d:7c:0a:a9:66:15:83:17: b2:b2:9d:d6:c8:0f:4e:e2:66:e9:b8:e6:63:93:4c:0c:33:a6: 89:da:cc:3b:8f:cf:9f:67:f2:42:e6:ed:07:ec:e7:7c:92:ce: f3:f2:ef:12:66:a4:59:f5:54:32:e4:eb:8b:99:7f:d4:40:54: b4:e9:49:24:db:a7:a8:ce:6e:a8:6c:b1:cf:72:42:4c:a4:bf: b5:00:6f:8b:67:a8:2f:99:0b:8f:09:7f:27:7c:8a:22:b1:7a: 93:b5:e6:4f:c1:c9:ab:9f:49:8c:eb:a7:1e:ee:f1:fa:77:08: f3:dc:57:45:27:e3:87:9f:ff:7d:d7:94:0c:df:5b:1a:60:f4: 1c:1b:67:ec:5b:8a:86:3f:ee:9b:fb:f4:74:f8:34:bc:33:87: 92:2a:c5:87:5e:b3:34:59:94:ea:49:e0:8d:38:34:d8:62:9e: 22:cc:a3:1d:ef:fc:0a:40:a5:c7:4e:db:e4:93:11:d0:18:d8: 19:4d:9e:e9:85:cd:ec:5b:75:c7:21:48:09:b3:a8:bb:11:1f: a7:d6:e7:cf:62:28:c3:b2:d6:b7:8e:0c:97:98:73:c0:a4:ae: 00:23:f6:31 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEl9pHOt+GmoXYO+YoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ0YmRjYWMtMDVmZC00ZGQ1LWFkYmQtOWRiZDJmYjI5 NWM0MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk YzQ0NDNkN2ItZTQ2Yi00N2EzLWFhZTctNjY0MDkyNDA5YTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxVuf1tEPiA7+9BIUjBKikkX5K0QJsz+gp84 vuNCGqXpGsluE9s4VrLkMtnKLsVyiW5TzLafMEzhBEjNTAC2UI9XJfA8ZQb77/GY 1syvpA29GNUgFbN0au0ckUno3XNVBp5Fquf0KxfHOP30kMb++sApzgPu+LVn/kS3 QoDUYmg1k/dhpFY9s78PB/QOCpvomosMTDQ2NGi2z+wZ9NIPeTzryfCw2NNH4SQH 04i7ju5Elxe125xT/NgH2xCmJAbsEDUM3M1Y09PNbvrdz5Nu/ZOfdHkhw1iVN62G qWUE8wqzp5ZGy2EcODYmSojcDCPqNL56etFBavp6IQvj7sbZewIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIMnI+/YYrYV0hoB6gIk8KGXCbhSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDRi ZGNhYy0wNWZkLTRkZDUtYWRiZC05ZGJkMmZiMjk1YzQvZWQ1ZDYxZTMtNDZmMC0z YzM0LThiZTktM2ZmY2U4YWQ4YzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ0YmRjYWMtMDVmZC00ZGQ1LWFk YmQtOWRiZDJmYjI5NWM0LzY0NGJkY2FjLTA1ZmQtNGRkNS1hZGJkLTlkYmQyZmIy OTVjNC5jcmwwHwYDVR0jBBgwFoAUYBcIFTvweroYlsRQE4TENSVS8BUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDRiZGNhYy0wNWZkLTRkZDUtYWRiZC05ZGJk MmZiMjk1YzQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQExs0QAwQA x3cZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHUGfGLqIcun/XU7GDB4EzpJ//04wlaOFpf/5JotfAqpZhWD F7KyndbID07iZum45mOTTAwzponazDuPz59n8kLm7Qfs53ySzvPy7xJmpFn1VDLk 64uZf9RAVLTpSSTbp6jObqhssc9yQkykv7UAb4tnqC+ZC48Jfyd8iiKxepO15k/B yaufSYzrpx7u8fp3CPPcV0Un44ef/33XlAzfWxpg9BwbZ+xbioY/7pv79HT4NLwz h5IqxYdeszRZlOpJ4I04NNhiniLMox3v/ApApcdO2+STEdAY2BlNnumFzexbdcch SAmzqLsRH6fW589iKMOy1reODJeYc8CkrgAj9jE= -----END CERTIFICATE-----Generated at Sun Apr 20 17:44:41 2025 by rpki-client