$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/6d392fb4-8a7d-38b4-8efa-97939fa91b8d.roa File: 6d392fb4-8a7d-38b4-8efa-97939fa91b8d.roa (raw, json) Hash identifier: dSGoNUjO6bZWTzw0e/itt1wHk9YbZZKAiOTMajKTQrQ= Subject key identifier: 17:22:3F:7E:6A:C1:8F:4A:0B:A1:51:EF:39:B9:9C:45:08:EA:4C:7C Certificate issuer: /CN=45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d Certificate serial: 010D0C9F4328584917DC3AB5A1549424BF1B8400 Authority key identifier: 64:73:F4:FE:C0:A9:D9:3A:6F:E6:79:B0:3C:F7:87:18:87:79:11:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/6d392fb4-8a7d-38b4-8efa-97939fa91b8d.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 40100 IP address blocks: 208.68.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:3a:b5:a1:54:94:24:bf:1b:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=8ef6729f-043c-4525-a9ac-3ff71b6d156b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:14:13:1e:89:e4:02:90:11:7c:84:00:87:c0: 61:c4:f4:9e:74:1e:4f:46:cd:31:7b:7a:57:7f:60: 54:b1:4c:80:1b:82:ae:8d:83:0a:02:26:39:a8:93: c1:d1:55:94:15:ef:50:4c:99:72:7e:ca:b7:7d:a3: b6:19:7d:cc:04:11:19:0c:3f:1d:e0:83:11:aa:ee: cf:f7:96:74:50:60:51:03:77:79:1b:a2:56:f0:ba: 57:ba:bc:9d:cf:f0:5b:af:19:c4:10:89:a9:37:66: 3c:1f:74:71:6d:7f:d1:dd:15:de:d5:ea:84:49:97: 63:8e:d9:5b:40:ac:c8:aa:5e:10:6e:db:d8:05:71: 12:5a:53:30:bb:61:25:25:7c:1c:41:a6:f0:9e:9f: 41:bd:0c:76:fb:1b:30:42:70:ef:3a:ac:c6:9b:75: a4:85:f5:47:5d:49:8d:8d:c4:3e:c1:53:e3:ee:13: cc:74:5e:ce:25:40:42:da:6e:9b:e7:d7:89:98:f6: 47:81:8c:30:ed:c1:a5:58:b1:27:2c:c4:b6:81:ac: 73:5c:c1:2d:09:4e:e9:c5:04:af:d3:48:82:1f:cc: 25:8f:6e:19:8a:a0:68:f3:76:49:a4:89:54:30:35: 76:12:cc:bd:80:68:f0:3d:f1:d5:5b:b7:e1:9e:c5: 64:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:22:3F:7E:6A:C1:8F:4A:0B:A1:51:EF:39:B9:9C:45:08:EA:4C:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/6d392fb4-8a7d-38b4-8efa-97939fa91b8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.crl X509v3 Authority Key Identifier: keyid:64:73:F4:FE:C0:A9:D9:3A:6F:E6:79:B0:3C:F7:87:18:87:79:11:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer sbgp-ipAddrBlock: critical IPv4: 208.68.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:27:cb:65:4e:ba:f2:7c:bc:db:a4:05:fa:22:4e:68:9f:73: 61:b3:9e:e4:ec:b6:1b:e5:5d:e3:2e:5d:30:aa:d6:f2:5e:8e: de:97:eb:fe:16:e1:3b:14:fa:1b:6d:bb:d4:79:cd:d3:ef:7a: ba:ed:92:ee:8e:39:00:58:b2:b1:1d:16:36:5f:07:42:a6:54: 0a:b4:eb:6f:27:b4:52:b4:64:53:c6:95:2d:de:0f:62:26:81: e1:9c:7e:2a:b6:fd:4b:f5:ec:c7:88:9f:52:88:7d:05:4f:0f: 0b:43:65:64:d5:f0:e0:42:fd:72:7f:c5:fe:ad:2c:4a:5b:b6: de:e3:4c:66:de:e3:a7:22:1f:d1:2f:eb:b5:78:1e:89:5e:b7: 6e:be:ab:93:13:ce:d6:9f:d4:6a:6e:86:c3:d4:4d:3a:cd:26: 80:3f:63:26:f2:93:79:48:71:30:4f:a0:df:89:86:7d:53:28: a2:e8:cd:3b:b5:83:c0:8a:f1:25:b7:6b:05:8c:b0:ee:76:40: d9:be:c8:87:47:0e:a0:bc:75:1b:6a:2f:1a:c3:cd:18:5c:e7: d3:41:a2:ed:7a:1e:78:cb:b8:78:f5:6a:2d:9c:0f:02:5f:c4: 5b:4f:45:94:b0:b0:5c:5b:e3:46:82:36:e3:5e:01:f2:63:59: 4e:f5:96:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3Dq1oVSUJL8bhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVhNGVmNjctM2VkMC00ZGU5LWFmYWItYWIxZWI0ZGMz YjBkMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk OGVmNjcyOWYtMDQzYy00NTI1LWE5YWMtM2ZmNzFiNmQxNTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxQTHonkApARfIQAh8BhxPSedB5PRs0xe3pX f2BUsUyAG4KujYMKAiY5qJPB0VWUFe9QTJlyfsq3faO2GX3MBBEZDD8d4IMRqu7P 95Z0UGBRA3d5G6JW8LpXurydz/BbrxnEEImpN2Y8H3RxbX/R3RXe1eqESZdjjtlb QKzIql4QbtvYBXESWlMwu2ElJXwcQabwnp9BvQx2+xswQnDvOqzGm3WkhfVHXUmN jcQ+wVPj7hPMdF7OJUBC2m6b59eJmPZHgYww7cGlWLEnLMS2gaxzXMEtCU7pxQSv 00iCH8wlj24ZiqBo83ZJpIlUMDV2Esy9gGjwPfHVW7fhnsVkZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBciP35qwY9KC6FR7zm5nEUI6kx8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80NWE0 ZWY2Ny0zZWQwLTRkZTktYWZhYi1hYjFlYjRkYzNiMGQvNmQzOTJmYjQtOGE3ZC0z OGI0LThlZmEtOTc5MzlmYTkxYjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDVhNGVmNjctM2VkMC00ZGU5LWFm YWItYWIxZWI0ZGMzYjBkLzQ1YTRlZjY3LTNlZDAtNGRlOS1hZmFiLWFiMWViNGRj M2IwZC5jcmwwHwYDVR0jBBgwFoAUZHP0/sCp2Tpv5nmwPPeHGId5EX0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80NWE0ZWY2Ny0zZWQwLTRkZTktYWZhYi1hYjFl YjRkYzNiMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEny2VOuvJ8vNukBfoiTmifc2GznuTsthvlXeMuXTCq1vJejt6X6/4W 4TsU+httu9R5zdPverrtku6OOQBYsrEdFjZfB0KmVAq0628ntFK0ZFPGlS3eD2Im geGcfiq2/Uv17MeIn1KIfQVPDwtDZWTV8OBC/XJ/xf6tLEpbtt7jTGbe46ciH9Ev 67V4Holet26+q5MTztaf1GpuhsPUTTrNJoA/Yybyk3lIcTBPoN+Jhn1TKKLozTu1 g8CK8SW3awWMsO52QNm+yIdHDqC8dRtqLxrDzRhc59NBou16HnjLuHj1ai2cDwJf xFtPRZSwsFxb40aCNuNeAfJjWU71lis= -----END CERTIFICATE-----Generated at Sat Apr 12 10:12:20 2025 by rpki-client