$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/fd5c5b02-d7bc-32a7-9a36-ea1d0cfa4470.roa File: fd5c5b02-d7bc-32a7-9a36-ea1d0cfa4470.roa (raw, json) Hash identifier: z2JTxlH1kTMnQpICAdBUlKg9NWN5bhdhuDpqPpYDVVk= Subject key identifier: 11:02:9C:E6:27:48:04:60:C2:55:08:EF:86:06:56:84:3E:8C:F8:20 Certificate issuer: /CN=f4ef9ae2-f027-4028-a705-db1e3463a382 Certificate serial: 010D0C9F432858494CC9433CA57F11554CBBADE0 Authority key identifier: 78:43:63:5F:35:F7:A5:B6:6E:39:7B:D3:62:1B:21:CC:A2:E5:92:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/fd5c5b02-d7bc-32a7-9a36-ea1d0cfa4470.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 40339 IP address blocks: 202.83.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:43:3c:a5:7f:11:55:4c:bb:ad:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4ef9ae2-f027-4028-a705-db1e3463a382 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=87ebae0b-1e57-43e9-b593-470772008fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4b:24:85:47:76:43:27:dd:19:06:25:1c:e7: 2e:d9:af:d4:45:43:67:61:14:d9:f8:db:65:18:6d: 94:b3:50:da:ae:39:47:ca:83:57:24:90:dc:c0:31: 33:e2:a5:40:06:71:88:75:c8:77:d1:2e:f0:12:16: 5c:4d:6a:ae:4b:78:1d:10:2f:64:67:0d:df:98:bc: fc:fa:72:2a:02:7e:e9:6a:9c:dd:e2:7c:f5:76:3c: fb:98:2b:21:b5:e0:05:09:ef:b1:3c:9f:76:0f:9f: ca:44:38:1f:16:db:7a:35:c9:e4:5e:58:58:9e:a7: c1:09:22:26:43:84:e3:a3:4c:9f:5d:8c:6a:79:71: 8e:d2:84:3a:94:1f:f4:81:fc:08:25:48:5f:a2:a7: 7c:6b:27:c8:d9:5d:08:c7:a6:83:f1:3a:39:35:03: 5b:dd:88:1d:9f:55:8e:ef:6b:78:a8:e5:8d:b4:19: eb:9f:2e:b3:7c:97:26:6a:85:14:01:c2:31:6e:30: ec:35:72:87:b0:6e:ee:3c:8f:2b:07:ac:f3:9f:c6: e2:20:b8:ca:07:67:f8:b2:04:55:91:45:ff:ea:9b: b4:8a:4d:dc:43:71:97:54:5d:3f:d6:43:af:62:2c: f9:26:c0:6a:8c:14:89:0b:00:7b:cd:fd:cb:40:80: 8f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:02:9C:E6:27:48:04:60:C2:55:08:EF:86:06:56:84:3E:8C:F8:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/fd5c5b02-d7bc-32a7-9a36-ea1d0cfa4470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.crl X509v3 Authority Key Identifier: keyid:78:43:63:5F:35:F7:A5:B6:6E:39:7B:D3:62:1B:21:CC:A2:E5:92:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer sbgp-ipAddrBlock: critical IPv4: 202.83.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:72:aa:a6:75:a7:8e:1f:1d:b7:8c:33:fa:d6:19:24:1f:e6: 14:a6:13:29:45:45:e3:78:96:cd:1d:58:83:66:15:1f:d0:f3: 78:6e:20:46:ad:c7:fb:88:a6:f8:01:c0:c2:4b:12:da:dc:d6: 5b:65:14:9e:d3:b3:20:e7:00:f7:29:49:c3:52:07:68:0a:6b: b6:da:8f:9b:7b:08:12:8b:34:06:30:b2:97:33:44:ef:b9:15: c9:28:78:a1:f5:53:d0:16:47:39:26:77:41:97:75:42:4c:69: 55:77:d4:76:f6:d7:13:4a:f2:15:81:17:69:c4:d6:cd:4f:df: 5d:25:ce:aa:8b:91:b4:37:f5:7f:52:93:e0:31:cb:a5:f3:6d: 77:0c:d4:32:a4:4e:33:ea:4e:57:37:6a:c8:01:8b:25:d3:9e: 7f:1d:ad:b6:e9:ff:a6:85:7f:96:0c:c3:64:d3:56:a0:f9:2e: 99:f2:d8:1d:33:fb:c5:b7:bd:1d:a3:f1:e3:96:5b:16:aa:f5: 08:c3:47:09:0f:06:3c:4e:e9:64:3b:04:7e:df:5d:22:10:05: ac:67:d1:65:8c:82:6e:50:93:c1:50:e2:48:b8:48:74:a0:a3: 59:41:15:e6:b8:ea:af:cc:57:b5:9b:50:47:aa:14:f1:2e:49: 5c:41:47:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUM8pX8RVUy7reAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRlZjlhZTItZjAyNy00MDI4LWE3MDUtZGIxZTM0NjNh MzgyMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk ODdlYmFlMGItMWU1Ny00M2U5LWI1OTMtNDcwNzcyMDA4ZmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0skhUd2QyfdGQYlHOcu2a/URUNnYRTZ+Ntl GG2Us1DarjlHyoNXJJDcwDEz4qVABnGIdch30S7wEhZcTWquS3gdEC9kZw3fmLz8 +nIqAn7papzd4nz1djz7mCshteAFCe+xPJ92D5/KRDgfFtt6NcnkXlhYnqfBCSIm Q4Tjo0yfXYxqeXGO0oQ6lB/0gfwIJUhfoqd8ayfI2V0Ix6aD8To5NQNb3Ygdn1WO 72t4qOWNtBnrny6zfJcmaoUUAcIxbjDsNXKHsG7uPI8rB6zzn8biILjKB2f4sgRV kUX/6pu0ik3cQ3GXVF0/1kOvYiz5JsBqjBSJCwB7zf3LQICPZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBECnOYnSARgwlUI74YGVoQ+jPggMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mNGVm OWFlMi1mMDI3LTQwMjgtYTcwNS1kYjFlMzQ2M2EzODIvZmQ1YzViMDItZDdiYy0z MmE3LTlhMzYtZWExZDBjZmE0NDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjRlZjlhZTItZjAyNy00MDI4LWE3 MDUtZGIxZTM0NjNhMzgyL2Y0ZWY5YWUyLWYwMjctNDAyOC1hNzA1LWRiMWUzNDYz YTM4Mi5jcmwwHwYDVR0jBBgwFoAUeENjXzX3pbZuOXvTYhshzKLlkjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mNGVmOWFlMi1mMDI3LTQwMjgtYTcwNS1kYjFl MzQ2M2EzODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDylNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRyqqZ1p44fHbeMM/rWGSQf5hSmEylFReN4ls0dWINmFR/Q83huIEat x/uIpvgBwMJLEtrc1ltlFJ7TsyDnAPcpScNSB2gKa7baj5t7CBKLNAYwspczRO+5 FckoeKH1U9AWRzkmd0GXdUJMaVV31Hb21xNK8hWBF2nE1s1P310lzqqLkbQ39X9S k+Axy6XzbXcM1DKkTjPqTlc3asgBiyXTnn8drbbp/6aFf5YMw2TTVqD5Lpny2B0z +8W3vR2j8eOWWxaq9QjDRwkPBjxO6WQ7BH7fXSIQBaxn0WWMgm5Qk8FQ4ki4SHSg o1lBFea46q/MV7WbUEeqFPEuSVxBR5w= -----END CERTIFICATE-----Generated at Sun Jun 8 18:26:43 2025 by rpki-client