$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/a3d20855-4af2-30f7-a7da-6b7c20db7ae1.roa File: a3d20855-4af2-30f7-a7da-6b7c20db7ae1.roa (raw, json) Hash identifier: uNtBpx+1WjnqhWNkCYzs7EDCrAlMMq9V1VXgUOa/6VM= Subject key identifier: B1:A7:92:8E:85:E0:72:17:39:45:BE:D2:91:D5:23:94:9B:77:35:86 Certificate issuer: /CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54 Certificate serial: 010D0C9F43285849DDF4D9ADFD4DCBE6E8505EA0 Authority key identifier: F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/a3d20855-4af2-30f7-a7da-6b7c20db7ae1.roa Signing time: Fri 16 May 2025 01:00:46 +0000 ROA not before: Fri 16 May 2025 01:00:46 +0000 ROA not after: Thu 14 Aug 2025 01:00:46 +0000 asID: 19905 IP address blocks: 208.94.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dd:f4:d9:ad:fd:4d:cb:e6:e8:50:5e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54 Validity Not Before: May 16 01:00:46 2025 GMT Not After : Aug 14 01:00:46 2025 GMT Subject: CN=65d50e8e-e4fa-4fc8-b7e5-0bfeed58ca50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:76:6e:02:5c:f1:27:65:1b:a6:23:4b:be:cd: 46:e9:2b:87:b0:5b:4c:26:2e:e7:da:d9:1d:db:30: 62:bd:77:9e:50:50:4f:d4:a1:0e:cf:ee:6b:ce:ee: 30:27:07:f9:20:5b:8e:9b:4a:8e:6d:f2:59:19:16: b3:c0:99:d1:25:b1:0e:fe:ab:6f:0e:6c:f5:7a:7c: 80:50:e3:b3:77:9f:4c:c8:94:82:64:ac:f5:04:c1: b2:39:a1:1b:5d:fe:53:b5:39:de:fc:00:bf:99:bd: d6:80:82:c8:4e:73:de:77:ec:e2:7c:85:5d:07:b1: 4c:0d:11:45:cb:28:61:c7:1b:d3:64:30:87:f8:4e: 35:bb:5f:6b:ab:71:5f:03:d2:db:d7:4f:69:18:cf: a3:4a:60:0d:d7:aa:10:13:31:1e:95:f6:d7:8d:7c: 4d:aa:71:ce:8a:28:45:b6:0d:12:34:35:66:df:2d: fd:fa:90:be:44:f3:c9:47:d0:aa:b4:cb:c7:63:b3: 8a:a9:aa:81:4e:02:23:d9:d8:ea:23:9e:c6:2e:6e: d9:e4:74:15:17:ca:e4:d0:33:b1:1e:e8:9d:aa:73: 90:ef:3a:27:6d:99:c4:0a:e7:8c:78:12:ac:29:c7: d6:9a:c1:be:0d:0a:c6:7c:44:7c:7b:ba:7a:86:52: 6c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A7:92:8E:85:E0:72:17:39:45:BE:D2:91:D5:23:94:9B:77:35:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/a3d20855-4af2-30f7-a7da-6b7c20db7ae1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl X509v3 Authority Key Identifier: keyid:F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer sbgp-ipAddrBlock: critical IPv4: 208.94.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:16:32:e9:e0:2e:18:8d:32:a6:02:ac:dc:62:9d:22:87:21: 34:1b:b3:cb:e5:c1:98:3c:19:b7:8e:2c:3b:1b:14:23:8c:9d: c5:ae:89:d7:15:a6:2a:ab:4a:ad:32:77:a4:6a:79:54:1f:9d: 3b:27:cc:a9:7b:06:3c:32:52:3b:78:08:65:02:d6:cb:46:22: 42:86:06:7c:13:bf:a9:02:e9:84:10:d9:e5:a1:32:dd:76:09: 14:b1:cd:03:7b:1f:a9:9a:ac:6b:4f:81:0b:d5:74:48:00:fc: ee:65:91:c1:dd:64:3e:f7:37:8f:75:51:65:2f:ef:1b:81:15: f5:a4:58:a8:cd:db:42:81:7c:03:70:e6:7a:e6:71:91:3a:59: 5f:f6:bb:30:50:39:67:a8:2d:77:2c:5a:f2:ca:fe:7c:26:5b: 5e:3f:af:09:ac:28:cd:92:14:69:cd:77:42:aa:fe:53:81:14: c9:71:25:ca:30:01:c2:2e:a7:22:a2:80:f2:82:65:d0:69:31: 9c:c9:ad:1b:e8:49:00:4e:0b:72:48:7a:1a:7e:9a:b5:56:84: e7:e2:47:86:ef:4e:bc:26:2f:8a:fa:d5:01:01:81:d8:fb:1e: ad:12:cb:89:3b:32:79:63:74:d1:39:38:b9:41:3b:1b:93:87: f6:ff:4e:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnd9Nmt/U3L5uhQXqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRmNmViZDctMGNjZC00YzA2LTgwYTAtNDVmZDc2MDc3 ZjU0MB4XDTI1MDUxNjAxMDA0NloXDTI1MDgxNDAxMDA0NlowLzEtMCsGA1UEAxMk NjVkNTBlOGUtZTRmYS00ZmM4LWI3ZTUtMGJmZWVkNThjYTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonZuAlzxJ2UbpiNLvs1G6SuHsFtMJi7n2tkd 2zBivXeeUFBP1KEOz+5rzu4wJwf5IFuOm0qObfJZGRazwJnRJbEO/qtvDmz1enyA UOOzd59MyJSCZKz1BMGyOaEbXf5TtTne/AC/mb3WgILITnPed+zifIVdB7FMDRFF yyhhxxvTZDCH+E41u19rq3FfA9Lb109pGM+jSmAN16oQEzEelfbXjXxNqnHOiihF tg0SNDVm3y39+pC+RPPJR9CqtMvHY7OKqaqBTgIj2djqI57GLm7Z5HQVF8rk0DOx HuidqnOQ7zonbZnECueMeBKsKcfWmsG+DQrGfER8e7p6hlJsYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGnko6F4HIXOUW+0pHVI5SbdzWGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGY2 ZWJkNy0wY2NkLTRjMDYtODBhMC00NWZkNzYwNzdmNTQvYTNkMjA4NTUtNGFmMi0z MGY3LWE3ZGEtNmI3YzIwZGI3YWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRmNmViZDctMGNjZC00YzA2LTgw YTAtNDVmZDc2MDc3ZjU0LzVkZjZlYmQ3LTBjY2QtNGMwNi04MGEwLTQ1ZmQ3NjA3 N2Y1NC5jcmwwHwYDVR0jBBgwFoAU+ZXymTKY5kpAyLxIzydJ7K1e/qcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGY2ZWJkNy0wY2NkLTRjMDYtODBhMC00NWZk NzYwNzdmNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0F6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALkWMungLhiNMqYCrNxinSKHITQbs8vlwZg8GbeOLDsbFCOMncWuidcV piqrSq0yd6RqeVQfnTsnzKl7BjwyUjt4CGUC1stGIkKGBnwTv6kC6YQQ2eWhMt12 CRSxzQN7H6marGtPgQvVdEgA/O5lkcHdZD73N491UWUv7xuBFfWkWKjN20KBfANw 5nrmcZE6WV/2uzBQOWeoLXcsWvLK/nwmW14/rwmsKM2SFGnNd0Kq/lOBFMlxJcow AcIupyKigPKCZdBpMZzJrRvoSQBOC3JIehp+mrVWhOfiR4bvTrwmL4r61QEBgdj7 Hq0Sy4k7MnljdNE5OLlBOxuTh/b/Tvs= -----END CERTIFICATE-----Generated at Thu Jun 5 18:22:01 2025 by rpki-client